I'm trying to test xRDP as a replacement for VNC, as our servers are RHEL 9.8 with FIPS 140-3 enabled, and FIPS will not allow VNC connections due to the insecure DES algorithm being used. So I have xRDP running on a system in my environment and I have port 3389 open on it. On my Guac system, I set up an RDP connection with RDP Encryption set. When I try to open the connection, it times out after 15 seconds with the following in /var/log/messages:
Jun 2 08:34:04 test-access guacd[23664]: Creating new client for protocol "rdp" Jun 2 08:34:04 test-access guacd[23664]: Connection ID is "$3e422953-4230-4445-ada9-e056013b791d" Jun 2 08:34:04 test-access server[23599]: 08:34:04.276 [http-nio-8080-exec-5] INFO o.a.g.tunnel.TunnelRequestService - User "guacadmin" connected to connection "4". Jun 2 08:34:04 test-access server[23599]: 08:34:04.276 [http-nio-8080-exec-5] INFO o.a.g.t.h.RestrictedGuacamoleHTTPTunnelServlet - Using HTTP tunnel (not WebSocket). Performance may be sub-optimal. Jun 2 08:34:19 test-access server[23599]: 08:34:19.297 [http-nio-8080-exec-3] INFO o.a.g.tunnel.TunnelRequestService - User "guacadmin" disconnected from connection "4". Duration: 15021 milliseconds Jun 2 08:34:19 test-access server[23599]: 08:34:19.299 [http-nio-8080-exec-3] ERROR o.a.g.s.GuacamoleHTTPTunnelServlet - HTTP tunnel request failed: Connection to guacd timed out. Jun 2 08:34:19 test-access server[23599]: 08:34:19.304 [http-nio-8080-exec-7] WARN o.a.g.s.GuacamoleHTTPTunnelServlet - HTTP tunnel request rejected: No such tunnel. Jun 2 08:34:19 test-access server[23599]: 08:34:19.787 [http-nio-8080-exec-9] WARN o.a.g.s.GuacamoleHTTPTunnelServlet - HTTP tunnel request rejected: No such tunnel. Any ideas on what I could be missing to make this work? Thanks, Harry [Image] Harry Devine Secure-OSE System Administrator U.S. Department of Transportation FAA/AJM-2432 (609) 485-4218 (Office) (609) 612-7274 (FAA Cell) [email protected]<mailto:[email protected]> William J Hughes Technical Center Building 300 3rd Floor Column L20 Atlantic City NJ 08405
