We have a client that set up an RDP connection to a Windows 2022 Server in their lab. I believe that they have "Security Mode" set to Any, and /var/log/messages is showing the following:
Nov 13 11:21:15 armt guacd[2214]: Creating new client for protocol "rdp" Nov 13 11:21:15 armt guacd[2214]: Connection ID is "$4c5b7d7e-6924-4a1d-8647-daa8a15b1b4a" Nov 13 11:21:15 armt guacd[3812948]: Security mode: Negotiate (ANY) Nov 13 11:21:15 armt guacd[3812948]: Resize method: none Nov 13 11:21:15 armt guacd[3812948]: No clipboard line-ending normalization specified. Defaulting to preserving the format of all line endings. Nov 13 11:21:15 armt server[1672]: 11:21:15.152 [http-nio-8080-exec-8] INFO o.a.g.tunnel.TunnelRequestService - User "harry.devine" connected to connection "2". Nov 13 11:21:15 armt server[1672]: 11:21:15.152 [http-nio-8080-exec-8] INFO o.a.g.t.h.RestrictedGuacamoleHTTPTunnelServlet - Using HTTP tunnel (not WebSocket). Performance may be sub-optimal. Nov 13 11:21:15 armt guacd[3812948]: User "@e74c518f-67eb-4ace-82c1-59f5f2c38e73" joined connection "$4c5b7d7e-6924-4a1d-8647-daa8a15b1b4a" (1 users now present) Nov 13 11:21:15 armt guacd[3812948]: Loading keymap "base" Nov 13 11:21:15 armt guacd[3812948]: Loading keymap "en-us-qwerty" Nov 13 11:21:15 armt guacd[3812948]: FIPS mode is enabled. Excluding NLA security mode from security negotiation (see: https://github.com/FreeRDP/FreeRDP/issues/3412). Nov 13 11:21:15 armt guacd[3812948]: RDP server closed/refused connection: Server refused connection (wrong security type?) Nov 13 11:21:15 armt guacd[3812948]: User "@e74c518f-67eb-4ace-82c1-59f5f2c38e73" disconnected (0 users remain) Nov 13 11:21:15 armt guacd[3812948]: Last user of connection "$4c5b7d7e-6924-4a1d-8647-daa8a15b1b4a" disconnected Nov 13 11:21:15 armt guacd[2214]: Connection "$4c5b7d7e-6924-4a1d-8647-daa8a15b1b4a" removed. Nov 13 11:21:15 armt server[1672]: 11:21:15.555 [http-nio-8080-exec-1] INFO o.a.g.tunnel.TunnelRequestService - User "harry.devine" disconnected from connection "2". Duration: 403 milliseconds I'm not sure what version of Guacamole we have since we have SAML configured, and it goes right in using our smart cards, and the version isn't available anywhere that I can see. I'm pretty sure it's a variant of 1.5 however. Thanks for any ideas! Harry [cid:[email protected]] Harry Devine Secure-OSE System Administrator Red Hat Certified System Administrator (RHCSA) Office: (609) 485-4218 Personal Cell: (609) 276-0555 FAA Cell: (609) 612-7274 Home Office/Telework: (609) 547-3579 Email : [email protected] William J Hughes Technical Center Building 300 3rd Floor Column L20 Atlantic City, NJ 08405
