Hi all,
I'm having trouble connecting to a Windows Server 2019 RDS server at one of our
clients. We've gone through all the logging we could find on the customer's RDS
server but we didn't find any clear reason.
First I was using freerdp 2.2.0 on Ubuntu 20.04.3. I've attached the freerdp
buildconfig in a txt file. When setting guacd to debug logging I see
ERRCONNECT_SECURITY_NEGO_CONNECT_FAILED [0x0002000C].
When I run xfreedrp with a trace log it shows:
[11:54:52:654] [38080:38082] [DEBUG][com.winpr.sspi] - InitSecurityInterfaceExA
[11:54:52:654] [38080:38082] [TRACE][com.freerdp.core.gateway.ntlm] -
InitializeSecurityContext status SEC_I_CONTINUE_NEEDED [0x00090312]
[11:54:52:671] [38080:38082] [TRACE][com.freerdp.core.gateway.ntlm] -
InitializeSecurityContext status SEC_I_COMPLETE_NEEDED [0x00090313]
[11:54:52:690] [38080:38082] [ERROR][com.freerdp.core.gateway.http] -
http_response_recv: Retries exceeded
[11:54:52:691] [38080:38082] [ERROR][com.freerdp.core.nego] - Protocol Security
Negotiation Failure
[11:54:52:691] [38080:38082] [ERROR][com.freerdp.core] -
rdp_client_connect:freerdp_set_last_error_ex
ERRCONNECT_SECURITY_NEGO_CONNECT_FAILED [0x0002000C]
[11:54:52:691] [38080:38082] [ERROR][com.freerdp.core.connection] - Error:
protocol security negotiation or connection failure
This issue seems very much the same as the one r-barnett reported here:
#5937<https://github.com/FreeRDP/FreeRDP/issues/5937>.
I tried adding credentials using /u /d and /p but that doesn't make a
difference. I also tried /gt:rpc but that ends up in an error because of a 302
redirect, exactly like reported here:
#4014<https://github.com/FreeRDP/FreeRDP/issues/4014>.
After installing freerdp 2.7.0, the xfreerdp trace logs changed but
unfortunately still ends up in the same error:
[13:45:19:825] [6696:6697] [DEBUG][com.winpr.sspi] - InitSecurityInterfaceExA
[13:45:19:825] [6696:6697] [DEBUG][com.winpr.sspi.NTLM] - change state from
NTLM_STATE_INITIAL to NTLM_STATE_INITIAL
[13:45:19:825] [6696:6697] [DEBUG][com.winpr.sspi.NTLM] - change state from
NTLM_STATE_INITIAL to NTLM_STATE_NEGOTIATE
[13:45:19:825] [6696:6697] [DEBUG][com.winpr.sspi.NTLM] - Write flags
[0xe20882b7]
NTLMSSP_NEGOTIATE_UNICODE|NTLMSSP_NEGOTIATE_OEM|NTLMSSP_REQUEST_TARGET|NTLMSSP_NEGOTIATE_SIGN|NTLMSSP_NEGOTIATE_SEAL|NTLMSSP_NEGOTIATE_LM_KEY|NTLMSSP_NEGOTIATE_NTLM|NTLMSSP_NEGOTIATE_ALWAYS_SIGN|NTLMSSP_NEGOTIATE_EXTENDED_SESSION_SECURITY|NTLMSSP_NEGOTIATE_VERSION|NTLMSSP_NEGOTIATE_128|NTLMSSP_NEGOTIATE_KEY_EXCH
[13:45:19:825] [6696:6697] [DEBUG][com.winpr.sspi.NTLM] - change state from
NTLM_STATE_NEGOTIATE to NTLM_STATE_CHALLENGE
[13:45:19:825] [6696:6697] [TRACE][com.freerdp.core.gateway.ntlm] -
InitializeSecurityContext status SEC_I_CONTINUE_NEEDED [0x00090312]
[13:45:19:841] [6696:6697] [DEBUG][com.winpr.sspi.NTLM] - Read flags
[0xe2898235]
NTLMSSP_NEGOTIATE_UNICODE|NTLMSSP_REQUEST_TARGET|NTLMSSP_NEGOTIATE_SIGN|NTLMSSP_NEGOTIATE_SEAL|NTLMSSP_NEGOTIATE_NTLM|NTLMSSP_NEGOTIATE_ALWAYS_SIGN|NTLMSSP_TARGET_TYPE_DOMAIN|NTLMSSP_NEGOTIATE_EXTENDED_SESSION_SECURITY|NTLMSSP_NEGOTIATE_TARGET_INFO|NTLMSSP_NEGOTIATE_VERSION|NTLMSSP_NEGOTIATE_128|NTLMSSP_NEGOTIATE_KEY_EXCH
[13:45:19:841] [6696:6697] [DEBUG][com.winpr.sspi.NTLM] - change state from
NTLM_STATE_CHALLENGE to NTLM_STATE_AUTHENTICATE
[13:45:19:841] [6696:6697] [DEBUG][com.winpr.sspi.NTLM] - Write flags
[0xe288b235]
NTLMSSP_NEGOTIATE_UNICODE|NTLMSSP_REQUEST_TARGET|NTLMSSP_NEGOTIATE_SIGN|NTLMSSP_NEGOTIATE_SEAL|NTLMSSP_NEGOTIATE_NTLM|NTLMSSP_NEGOTIATE_DOMAIN_SUPPLIED|NTLMSSP_NEGOTIATE_WORKSTATION_SUPPLIED|NTLMSSP_NEGOTIATE_ALWAYS_SIGN|NTLMSSP_NEGOTIATE_EXTENDED_SESSION_SECURITY|NTLMSSP_NEGOTIATE_TARGET_INFO|NTLMSSP_NEGOTIATE_VERSION|NTLMSSP_NEGOTIATE_128|NTLMSSP_NEGOTIATE_KEY_EXCH
[13:45:19:841] [6696:6697] [DEBUG][com.winpr.sspi.NTLM] - change state from
NTLM_STATE_AUTHENTICATE to NTLM_STATE_FINAL
[13:45:19:841] [6696:6697] [TRACE][com.freerdp.core.gateway.ntlm] -
InitializeSecurityContext status SEC_E_OK [0x00000000]
[13:45:19:853] [6696:6697] [ERROR][com.freerdp.core.gateway.http] -
http_response_recv: Retries exceeded
[13:45:19:853] [6696:6697] [ERROR][com.freerdp.core.nego] - Protocol Security
Negotiation Failure
[13:45:19:853] [6696:6697] [ERROR][com.freerdp.core] -
rdp_client_connect:freerdp_set_last_error_ex
ERRCONNECT_SECURITY_NEGO_CONNECT_FAILED [0x0002000C]
[13:45:19:853] [6696:6697] [ERROR][com.freerdp.core.connection] - Error:
protocol security negotiation or connection failure
Can anyone provide any insight or maybe something to test? I've also posted
this on the Discussions page of the FreeRDP github.
Best regards,
Willem van de Mheen
[11:54:42:712] [38080:38080] [DEBUG][com.freerdp.client.common] - This is Build
configuration:
BUILD_TESTING=OFF
BUILTIN_CHANNELS=ON
HAVE_AIO_H=1
HAVE_EXECINFO_H=1
HAVE_FCNTL_H=1
HAVE_GETLOGIN_R=1
HAVE_INTTYPES_H=1
HAVE_JOURNALD_H=TRUE
HAVE_MATH_C99_LONG_DOUBLE=1
HAVE_POLL_H=1
HAVE_PTHREAD_MUTEX_TIMEDLOCK=ON
HAVE_PTHREAD_MUTEX_TIMEDLOCK_LIB=1
HAVE_PTHREAD_MUTEX_TIMEDLOCK_SYMBOL=
HAVE_SYSLOG_H=1
HAVE_SYS_EVENTFD_H=1
HAVE_SYS_FILIO_H=
HAVE_SYS_MODEM_H=
HAVE_SYS_SELECT_H=1
HAVE_SYS_SOCKIO_H=
HAVE_SYS_STRTIO_H=
HAVE_SYS_TIMERFD_H=1
HAVE_TM_GMTOFF=1
HAVE_UNISTD_H=1
HAVE_XI_TOUCH_CLASS=1
WITH_ALSA=ON
WITH_CAIRO=OFF
WITH_CCACHE=ON
WITH_CHANNELS=ON
WITH_CLANG_FORMAT=ON
WITH_CLIENT=ON
WITH_CLIENT_AVAILABLE=1
WITH_CLIENT_CHANNELS=ON
WITH_CLIENT_CHANNELS_AVAILABLE=1
WITH_CLIENT_COMMON=ON
WITH_CLIENT_INTERFACE=OFF
WITH_CUPS=on
WITH_DEBUG_ALL=OFF
WITH_DEBUG_CAPABILITIES=OFF
WITH_DEBUG_CERTIFICATE=OFF
WITH_DEBUG_CHANNELS=OFF
WITH_DEBUG_CLIPRDR=OFF
WITH_DEBUG_DVC=OFF
WITH_DEBUG_KBD=OFF
WITH_DEBUG_LICENSE=OFF
WITH_DEBUG_MUTEX=OFF
WITH_DEBUG_NEGO=OFF
WITH_DEBUG_NLA=OFF
WITH_DEBUG_NTLM=OFF
WITH_DEBUG_RAIL=OFF
WITH_DEBUG_RDP=OFF
WITH_DEBUG_RDPDR=OFF
WITH_DEBUG_RDPEI=OFF
WITH_DEBUG_RDPGFX=OFF
WITH_DEBUG_REDIR=OFF
WITH_DEBUG_RFX=OFF
WITH_DEBUG_RINGBUFFER=OFF
WITH_DEBUG_SCARD=OFF
WITH_DEBUG_SND=OFF
WITH_DEBUG_SVC=OFF
WITH_DEBUG_SYMBOLS=OFF
WITH_DEBUG_THREADS=OFF
WITH_DEBUG_TIMEZONE=OFF
WITH_DEBUG_TRANSPORT=OFF
WITH_DEBUG_TSG=OFF
WITH_DEBUG_TSMF=OFF
WITH_DEBUG_TSMF=OFF
WITH_DEBUG_TSMF_AVAILABLE=0
WITH_DEBUG_URBDRC=OFF
WITH_DEBUG_WND=OFF
WITH_DEBUG_X11=OFF
WITH_DEBUG_X11_CLIPRDR=OFF
WITH_DEBUG_X11_LOCAL_MOVESIZE=OFF
WITH_DEBUG_XV=OFF
WITH_DSP_EXPERIMENTAL=OFF
WITH_DSP_FFMPEG=OFF
WITH_EVENTFD_READ_WRITE=1
WITH_FAAC=OFF
WITH_FAAD2=OFF
WITH_FFMPEG=TRUE
WITH_FFMPEG=TRUE
WITH_GFX_H264=ON
WITH_GPROF=OFF
WITH_GSM=OFF
WITH_GSSAPI=OFF
WITH_ICU=OFF
WITH_IPP=OFF
WITH_JPEG=OFF
WITH_LAME=OFF
WITH_LIBRARY_VERSIONING=ON
WITH_LIBSYSTEMD=ON
WITH_MACAUDIO=OFF
WITH_MACAUDIO=OFF
WITH_MACAUDIO_AVAILABLE=0
WITH_MANPAGES=ON
WITH_MBEDTLS=OFF
WITH_OPENCL=OFF
WITH_OPENH264=OFF
WITH_OPENSLES=OFF
WITH_OPENSSL=ON
WITH_OSS=ON
WITH_PCSC=OFF
WITH_PROFILER=OFF
WITH_PULSE=on
WITH_SAMPLE=OFF
WITH_SANITIZE_ADDRESS=OFF
WITH_SANITIZE_ADDRESS_AVAILABLE=1
WITH_SANITIZE_MEMORY=OFF
WITH_SANITIZE_MEMORY_AVAILABLE=1
WITH_SANITIZE_THREAD=OFF
WITH_SANITIZE_THREAD_AVAILABLE=1
WITH_SERVER=OFF
WITH_SERVER_INTERFACE=ON
WITH_SMARTCARD_INSPECT=OFF
WITH_SOXR=OFF
WITH_SSE2=ON
WITH_SWSCALE=OFF
WITH_THIRD_PARTY=OFF
WITH_VAAPI=OFF
WITH_VALGRIND_MEMCHECK=OFF
WITH_VALGRIND_MEMCHECK_AVAILABLE=1
WITH_WAYLAND=off
WITH_WINPR_TOOLS=ON
WITH_X11=ON
WITH_X264=OFF
WITH_XCURSOR=ON
WITH_XEXT=ON
WITH_XFIXES=ON
WITH_XI=ON
WITH_XINERAMA=ON
WITH_XKBFILE=ON
WITH_XRANDR=ON
WITH_XRENDER=ON
WITH_XSHM=ON
WITH_XV=ON
WITH_ZLIB=ON
Build type: Debug
CFLAGS: -fPIC -Wall -Wno-unused-result
-Wno-unused-but-set-variable -Wno-deprecated-declarations -fvisibility=hidden
-Wimplicit-function-declaration -Wredundant-decls -g -fno-omit-frame-pointer
-DWINPR_DLL
Compiler: GNU, 9.3.0
Target architecture: x64
[11:54:42:713] [38080:38082] [INFO][com.freerdp.core] -
freerdp_connect:freerdp_set_last_error_ex resetting error state
[11:54:42:713] [38080:38082] [INFO][com.freerdp.client.common.cmdline] -
loading channelEx rdpdr
[11:54:42:713] [38080:38082] [INFO][com.freerdp.client.common.cmdline] -
loading channelEx rdpsnd
[11:54:42:713] [38080:38082] [DEBUG][com.freerdp.channels.cliprdr.client] -
VirtualChannelEntryEx
[11:54:42:713] [38080:38082] [INFO][com.freerdp.client.common.cmdline] -
loading channelEx cliprdr
[11:54:42:713] [38080:38082] [DEBUG][com.freerdp.channels.rail.client] -
VirtualChannelEntryEx
[11:54:42:713] [38080:38082] [INFO][com.freerdp.client.common.cmdline] -
loading channelEx rail
[11:54:42:713] [38080:38082] [DEBUG][com.freerdp.channels.drdynvc.client] -
VirtualChannelEntryEx
[11:54:42:713] [38080:38082] [INFO][com.freerdp.client.common.cmdline] -
loading channelEx drdynvc
[11:54:42:730] [38080:38082] [DEBUG][com.freerdp.primitives] - primitives
benchmark result:
[11:54:43:948] [38080:38082] [DEBUG][com.freerdp.primitives] - * generic= 6
[11:54:43:141] [38080:38082] [DEBUG][com.freerdp.primitives] - * optimized= 7
[11:54:43:141] [38080:38082] [INFO][com.freerdp.primitives] - primitives
autodetect, using optimized
[11:54:43:144] [38080:38082] [DEBUG][com.freerdp.core.nego] - Enabling security
layer negotiation: TRUE
[11:54:43:144] [38080:38082] [DEBUG][com.freerdp.core.nego] - Enabling
restricted admin mode: FALSE
[11:54:43:144] [38080:38082] [DEBUG][com.freerdp.core.nego] - Enabling RDP
security: TRUE
[11:54:43:144] [38080:38082] [DEBUG][com.freerdp.core.nego] - Enabling TLS
security: TRUE
[11:54:43:144] [38080:38082] [DEBUG][com.freerdp.core.nego] - Enabling NLA
security: TRUE
[11:54:43:144] [38080:38082] [DEBUG][com.freerdp.core.nego] - Enabling NLA
extended security: FALSE
[11:54:43:144] [38080:38082] [DEBUG][com.freerdp.core.nego] - state:
NEGO_STATE_NLA
[11:54:43:144] [38080:38082] [DEBUG][com.freerdp.core.nego] - Attempting NLA
security
[11:54:43:172] [38080:38082] [INFO][com.freerdp.core] -
freerdp_tcp_connect:freerdp_set_last_error_ex resetting error state
[11:54:43:172] [38080:38082] [DEBUG][com.freerdp.core] - connecting to peer
x.x.x.x
GatewayPassword:
[11:54:52:654] [38080:38082] [DEBUG][com.winpr.sspi] - InitSecurityInterfaceExA
[11:54:52:654] [38080:38082] [TRACE][com.freerdp.core.gateway.ntlm] -
InitializeSecurityContext status SEC_I_CONTINUE_NEEDED [0x00090312]
[11:54:52:671] [38080:38082] [TRACE][com.freerdp.core.gateway.ntlm] -
InitializeSecurityContext status SEC_I_COMPLETE_NEEDED [0x00090313]
[11:54:52:690] [38080:38082] [ERROR][com.freerdp.core.gateway.http] -
http_response_recv: Retries exceeded
[11:54:52:691] [38080:38082] [ERROR][com.freerdp.core.nego] - Protocol Security
Negotiation Failure
[11:54:52:691] [38080:38082] [ERROR][com.freerdp.core] -
rdp_client_connect:freerdp_set_last_error_ex
ERRCONNECT_SECURITY_NEGO_CONNECT_FAILED [0x0002000C]
[11:54:52:691] [38080:38082] [ERROR][com.freerdp.core.connection] - Error:
protocol security negotiation or connection failure
[13:45:13:663] [6696:6696] [DEBUG][com.freerdp.client.common] - This is Build
configuration:
BUILD_TESTING=OFF
BUILTIN_CHANNELS=ON
HAVE_AIO_H=1
HAVE_EXECINFO_H=1
HAVE_FCNTL_H=1
HAVE_GETLOGIN_R=1
HAVE_GETPWUID_R=1
HAVE_INTTYPES_H=1
HAVE_JOURNALD_H=TRUE
HAVE_MATH_C99_LONG_DOUBLE=1
HAVE_POLL_H=1
HAVE_PTHREAD_MUTEX_TIMEDLOCK=ON
HAVE_PTHREAD_MUTEX_TIMEDLOCK_LIB=1
HAVE_PTHREAD_MUTEX_TIMEDLOCK_SYMBOL=
HAVE_SYSLOG_H=1
HAVE_SYS_EVENTFD_H=1
HAVE_SYS_FILIO_H= HAVE_SYS_MODEM_H=
HAVE_SYS_SELECT_H=1
HAVE_SYS_SOCKIO_H= HAVE_SYS_STRTIO_H=
HAVE_SYS_TIMERFD_H=1
HAVE_TM_GMTOFF=1
HAVE_UNISTD_H=1
HAVE_XI_TOUCH_CLASS=1
WITH_ALSA=ON
WITH_CAIRO=OFF
WITH_CCACHE=ON
WITH_CHANNELS=ON
WITH_CLANG_FORMAT=ON
WITH_CLIENT=ON
WITH_CLIENT_AVAILABLE=1
WITH_CLIENT_CHANNELS=ON
WITH_CLIENT_CHANNELS_AVAILABLE=1
WITH_CLIENT_COMMON=ON
WITH_CLIENT_INTERFACE=OFF
WITH_CUPS=on
WITH_DEBUG_ALL=OFF
WITH_DEBUG_CAPABILITIES=OFF
WITH_DEBUG_CERTIFICATE=OFF
WITH_DEBUG_CHANNELS=OFF
WITH_DEBUG_CLIPRDR=OFF
WITH_DEBUG_DVC=OFF
WITH_DEBUG_KBD=OFF
WITH_DEBUG_LICENSE=OFF
WITH_DEBUG_MUTEX=OFF
WITH_DEBUG_NEGO=OFF
WITH_DEBUG_NLA=OFF
WITH_DEBUG_NTLM=OFF
WITH_DEBUG_RAIL=OFF
WITH_DEBUG_RDP=OFF
WITH_DEBUG_RDPDR=OFF
WITH_DEBUG_RDPEI=OFF
WITH_DEBUG_RDPGFX=OFF
WITH_DEBUG_REDIR=OFF
WITH_DEBUG_RFX=OFF
WITH_DEBUG_RINGBUFFER=OFF
WITH_DEBUG_SCARD=OFF
WITH_DEBUG_SND=OFF
WITH_DEBUG_SVC=OFF
WITH_DEBUG_SYMBOLS=OFF
WITH_DEBUG_THREADS=OFF
WITH_DEBUG_TIMEZONE=OFF
WITH_DEBUG_TRANSPORT=OFF
WITH_DEBUG_TSG=OFF
WITH_DEBUG_TSMF=OFF
WITH_DEBUG_TSMF=OFF
WITH_DEBUG_TSMF_AVAILABLE=0
WITH_DEBUG_URBDRC=OFF
WITH_DEBUG_WND=OFF
WITH_DEBUG_X11=OFF
WITH_DEBUG_X11_CLIPRDR=OFF
WITH_DEBUG_X11_LOCAL_MOVESIZE=OFF
WITH_DEBUG_XV=OFF
WITH_DSP_EXPERIMENTAL=OFF
WITH_DSP_FFMPEG=OFF
WITH_EVENTFD_READ_WRITE=1
WITH_FAAC=OFF
WITH_FAAD2=OFF
WITH_FFMPEG=TRUE
WITH_FFMPEG=TRUE
WITH_GFX_H264=ON
WITH_GPROF=OFF
WITH_GSM=OFF
WITH_GSSAPI=OFF
WITH_ICU=OFF
WITH_IPP=OFF
WITH_JPEG=OFF
WITH_LAME=OFF
WITH_LIBRARY_VERSIONING=ON
WITH_LIBSYSTEMD=ON
WITH_MACAUDIO=OFF
WITH_MACAUDIO=OFF
WITH_MACAUDIO_AVAILABLE=0
WITH_MANPAGES=ON
WITH_MBEDTLS=OFF
WITH_OPENCL=OFF
WITH_OPENH264=OFF
WITH_OPENSLES=OFF
WITH_OPENSSL=ON
WITH_OSS=ON
WITH_PCSC=OFF
WITH_PROFILER=OFF
WITH_PULSE=on
WITH_SAMPLE=OFF
WITH_SANITIZE_ADDRESS=OFF
WITH_SANITIZE_ADDRESS_AVAILABLE=1
WITH_SANITIZE_MEMORY=OFF
WITH_SANITIZE_MEMORY_AVAILABLE=1
WITH_SANITIZE_THREAD=OFF
WITH_SANITIZE_THREAD_AVAILABLE=1
WITH_SERVER=OFF
WITH_SERVER_INTERFACE=ON
WITH_SMARTCARD_INSPECT=OFF
WITH_SOXR=OFF
WITH_SSE2=ON
WITH_SWSCALE=OFF
WITH_THIRD_PARTY=OFF
WITH_VAAPI=OFF
WITH_VALGRIND_MEMCHECK=OFF
WITH_VALGRIND_MEMCHECK_AVAILABLE=1
WITH_VERBOSE_WINPR_ASSERT=ON
WITH_WAYLAND=off
WITH_WINPR_TOOLS=ON
WITH_X11=ON
WITH_XCURSOR=ON
WITH_XEXT=ON
WITH_XFIXES=ON
WITH_XI=ON
WITH_XINERAMA=ON
WITH_XKBFILE=ON
WITH_XRANDR=ON
WITH_XRENDER=ON
WITH_XSHM=ON
WITH_XV=ON
WITH_ZLIB=ON
Build type: Debug
CFLAGS: -fPIC -Wall -Wno-unused-result
-Wno-unused-but-set-variable -Wno-deprecated-declarations -fvisibility=hidden
-Wimplicit-function-declaration -Wredundant-decls -g -fno-omit-frame-pointer
-DWINPR_DLL
Compiler: GNU, 9.4.0
Target architecture: x64
[13:45:13:663] [6696:6697] [DEBUG][com.freerdp.core] -
freerdp_connect:freerdp_set_last_error_ex resetting error state
[13:45:13:663] [6696:6697] [DEBUG][com.freerdp.client.common.cmdline] - loading
channelEx rdpdr
[13:45:13:663] [6696:6697] [DEBUG][com.freerdp.client.common.cmdline] - loading
channelEx rdpsnd
[13:45:13:663] [6696:6697] [DEBUG][com.freerdp.channels.cliprdr.client] -
VirtualChannelEntryEx
[13:45:13:663] [6696:6697] [DEBUG][com.freerdp.client.common.cmdline] - loading
channelEx cliprdr
[13:45:13:663] [6696:6697] [DEBUG][com.freerdp.channels.rail.client] -
VirtualChannelEntryEx
[13:45:13:663] [6696:6697] [DEBUG][com.freerdp.client.common.cmdline] - loading
channelEx rail
[13:45:13:663] [6696:6697] [DEBUG][com.freerdp.channels.drdynvc.client] -
VirtualChannelEntryEx
[13:45:13:663] [6696:6697] [DEBUG][com.freerdp.client.common.cmdline] - loading
channelEx drdynvc
[13:45:13:668] [6696:6697] [DEBUG][com.freerdp.primitives] - primitives
benchmark result:
[13:45:13:845] [6696:6697] [DEBUG][com.freerdp.primitives] - * generic= 7
[13:45:14:022] [6696:6697] [DEBUG][com.freerdp.primitives] - * optimized= 10
[13:45:14:022] [6696:6697] [DEBUG][com.freerdp.primitives] - primitives
autodetect, using optimized
[13:45:14:023] [6696:6697] [DEBUG][com.freerdp.core.nego] - Enabling security
layer negotiation: TRUE
[13:45:14:023] [6696:6697] [DEBUG][com.freerdp.core.nego] - Enabling restricted
admin mode: FALSE
[13:45:14:023] [6696:6697] [DEBUG][com.freerdp.core.nego] - Enabling RDP
security: TRUE
[13:45:14:023] [6696:6697] [DEBUG][com.freerdp.core.nego] - Enabling TLS
security: TRUE
[13:45:14:023] [6696:6697] [DEBUG][com.freerdp.core.nego] - Enabling NLA
security: TRUE
[13:45:14:023] [6696:6697] [DEBUG][com.freerdp.core.nego] - Enabling NLA
extended security: FALSE
[13:45:14:023] [6696:6697] [DEBUG][com.freerdp.core.nego] - state:
NEGO_STATE_NLA
[13:45:14:023] [6696:6697] [DEBUG][com.freerdp.core.nego] - Attempting NLA
security
[13:45:14:039] [6696:6697] [DEBUG][com.freerdp.core] -
freerdp_tcp_connect:freerdp_set_last_error_ex resetting error state
[13:45:14:039] [6696:6697] [DEBUG][com.freerdp.core] - connecting to peer
x.x.x.x
GatewayPassword:
[13:45:19:825] [6696:6697] [DEBUG][com.winpr.sspi] - InitSecurityInterfaceExA
[13:45:19:825] [6696:6697] [DEBUG][com.winpr.sspi.NTLM] - change state from
NTLM_STATE_INITIAL to NTLM_STATE_INITIAL
[13:45:19:825] [6696:6697] [DEBUG][com.winpr.sspi.NTLM] - change state from
NTLM_STATE_INITIAL to NTLM_STATE_NEGOTIATE
[13:45:19:825] [6696:6697] [DEBUG][com.winpr.sspi.NTLM] - Write flags
[0xe20882b7]
NTLMSSP_NEGOTIATE_UNICODE|NTLMSSP_NEGOTIATE_OEM|NTLMSSP_REQUEST_TARGET|NTLMSSP_NEGOTIATE_SIGN|NTLMSSP_NEGOTIATE_SEAL|NTLMSSP_NEGOTIATE_LM_KEY|NTLMSSP_NEGOTIATE_NTLM|NTLMSSP_NEGOTIATE_ALWAYS_SIGN|NTLMSSP_NEGOTIATE_EXTENDED_SESSION_SECURITY|NTLMSSP_NEGOTIATE_VERSION|NTLMSSP_NEGOTIATE_128|NTLMSSP_NEGOTIATE_KEY_EXCH
[13:45:19:825] [6696:6697] [DEBUG][com.winpr.sspi.NTLM] - change state from
NTLM_STATE_NEGOTIATE to NTLM_STATE_CHALLENGE
[13:45:19:825] [6696:6697] [TRACE][com.freerdp.core.gateway.ntlm] -
InitializeSecurityContext status SEC_I_CONTINUE_NEEDED [0x00090312]
[13:45:19:841] [6696:6697] [DEBUG][com.winpr.sspi.NTLM] - Read flags
[0xe2898235]
NTLMSSP_NEGOTIATE_UNICODE|NTLMSSP_REQUEST_TARGET|NTLMSSP_NEGOTIATE_SIGN|NTLMSSP_NEGOTIATE_SEAL|NTLMSSP_NEGOTIATE_NTLM|NTLMSSP_NEGOTIATE_ALWAYS_SIGN|NTLMSSP_TARGET_TYPE_DOMAIN|NTLMSSP_NEGOTIATE_EXTENDED_SESSION_SECURITY|NTLMSSP_NEGOTIATE_TARGET_INFO|NTLMSSP_NEGOTIATE_VERSION|NTLMSSP_NEGOTIATE_128|NTLMSSP_NEGOTIATE_KEY_EXCH
[13:45:19:841] [6696:6697] [DEBUG][com.winpr.sspi.NTLM] - change state from
NTLM_STATE_CHALLENGE to NTLM_STATE_AUTHENTICATE
[13:45:19:841] [6696:6697] [DEBUG][com.winpr.sspi.NTLM] - Write flags
[0xe288b235]
NTLMSSP_NEGOTIATE_UNICODE|NTLMSSP_REQUEST_TARGET|NTLMSSP_NEGOTIATE_SIGN|NTLMSSP_NEGOTIATE_SEAL|NTLMSSP_NEGOTIATE_NTLM|NTLMSSP_NEGOTIATE_DOMAIN_SUPPLIED|NTLMSSP_NEGOTIATE_WORKSTATION_SUPPLIED|NTLMSSP_NEGOTIATE_ALWAYS_SIGN|NTLMSSP_NEGOTIATE_EXTENDED_SESSION_SECURITY|NTLMSSP_NEGOTIATE_TARGET_INFO|NTLMSSP_NEGOTIATE_VERSION|NTLMSSP_NEGOTIATE_128|NTLMSSP_NEGOTIATE_KEY_EXCH
[13:45:19:841] [6696:6697] [DEBUG][com.winpr.sspi.NTLM] - change state from
NTLM_STATE_AUTHENTICATE to NTLM_STATE_FINAL
[13:45:19:841] [6696:6697] [TRACE][com.freerdp.core.gateway.ntlm] -
InitializeSecurityContext status SEC_E_OK [0x00000000]
[13:45:19:853] [6696:6697] [ERROR][com.freerdp.core.gateway.http] -
http_response_recv: Retries exceeded
[13:45:19:853] [6696:6697] [ERROR][com.freerdp.core.nego] - Protocol Security
Negotiation Failure
[13:45:19:853] [6696:6697] [ERROR][com.freerdp.core] -
rdp_client_connect:freerdp_set_last_error_ex
ERRCONNECT_SECURITY_NEGO_CONNECT_FAILED [0x0002000C]
[13:45:19:853] [6696:6697] [ERROR][com.freerdp.core.connection] - Error:
protocol security negotiation or connection failure
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]