FreeRDP Master - Git Revision 24aa71e6cb547c02fbdf724258c3e3c0932ef0b9

All cmake Options: sudo cmake -DCMAKE_INSTALL_PREFIX=/opt/freerdp -DWITH_JPEG=ON -DWITH_THIRD_PARTY=ON -DBUILTIN_CHANNELS=OFF -DWITH_CUPS=ON -DWITH_PULSE=ON -DWITH_PCSC=ON -DWITH_CHANNELS=ON -DCHANNEL_SERIAL=ON \ -DCHANNEL_SMARTCARD=ON -DWITH_CLIENT_INTERFACE=ON -DWITH_XINERAMA=ON -DWITH_XEXT=ON -DWITH_XV=ON -DWITH_XI=ON -DWITH_XRENDER=ON -DWITH_SSE2=ON -DCHANNEL_PRINTER=ON -DCHANNEL_PRINTER_CLIENT=ON
-DCHANNEL_RDPDR=ON -DCHANNEL_DRIVE=ON -DCHANNEL_CLIPRDR=ON -DCHANNEL_URBDRC_CLIENT=ON -DCHANNEL_SMARTCARD_CLIENT=ON -DCHANNEL_URBDRC=ON -DWITH_WAYLAND=OFF -DWITH_FFMPEG=ON -DWITH_X11=ON
-DWITH_OPENH264=ON -DWITH_GSM=ON -DWITH_GSTREAMER_0_10=ON

Connection server -> Windows Server 2012 R2 Standard 64-Bit Client system -> Linux ubuntu-trusty-32 3.13.x

Command Line: /usr/bin/xfreerdp /u:"$USER" /p:"$PASS" /v:"$SERVER" /d:"$DOMAIN" /gdi:hw /f /multimon /bpp:24 /kbd:0x0404 +async-input +async-update +sec-rdp +sec-tls -sec-nla /rfx +grab-keyboard /smartcard +compression /network:lan +clipboard /cert-ignore

[12:02:57:719] [24952:24953] [WARN][com.freerdp.core.client] - Skipping, channel already loaded
[12:02:57:754] [24952:24953] [ERROR][com.winpr.timezone] - Unable to find a match for unix timezone: Etc/UTC
[19:31:42:196] [24952:24953] [ERROR][com.freerdp.core.fastpath] - FASTPATH_UPDATETYPE_SURFCMDS - update_recv_surfcmds() - -1
[19:31:42:206] [24952:24953] [ERROR][com.freerdp.core.fastpath] - fastpath_recv_update_data: fastpath_recv_update() - -1
[19:31:42:206] [24952:24953] [ERROR][com.freerdp.core.fastpath] - fastpath_recv_update_data() fail
[19:31:42:206] [24952:24953] [ERROR][com.freerdp.core.transport] - transport_check_fds: transport->ReceiveCallback() - -1
[19:31:42:206] [24952:24953] [ERROR][com.freerdp.core] - freerdp_check_fds() failed - 0
[19:31:42:207] [24952:24953] [ERROR][com.freerdp.client.x11] - Failed to check FreeRDP file descriptor
[19:31:42:212] [24952:25033] [WARN][com.freerdp.channels.smartcard.client] - IRP failure: SCardGetStatusChangeW (0x000900A4), status: SCARD_E_CANCELLED (0x80100002)
[19:31:42:212] [24952:25035] [WARN][com.freerdp.channels.smartcard.client] - IRP failure: SCardGetStatusChangeW (0x000900A4), status: SCARD_E_CANCELLED (0x80100002)
[19:31:42:212] [24952:24972] [ERROR][com.freerdp.channels.rdpdr.client] - VirtualChannelWrite failed with CHANNEL_RC_NOT_CONNECTED [00000004]
[19:31:42:212] [24952:24972] [ERROR][com.freerdp.channels.smartcard.client] - smartcard_complete_irp failed with error 4!
[19:31:42:215] [24952:24952] [ERROR][com.winpr.sync.mutex] - pthread_mutex_destroy failed with Device or resource busy [16]

What I have done is very simple -> Connect to the server with a smartcard reader connected and a smartcard inserted (did not intent to use it) -> Start Chrome and play cat videos for hours on youtube. It was just a test to see if it crashes in a longterm test. (7h 30min as it seems). There seem to be some errors in here but I guess the main problem is the fastpath error. I did try to use +compression /compression-level:1 or /max-fast-path-size:99999 but neither of them worked.

Edit 04.10.2016: Just tested with the current nightly build. Still not working.

Hi,

I was following issue #6777 because it looked like there maybe could be a solution for my problem. I have tested everything again with the 2.0.0rc4 build, because the Snejpro succeeded with that one. I also tried the latest master of the nightly build and just now #6792 without any luck The program still says smartcard inserted; false.

I've got the program here for you to test with. Maybe in that way you could assert why the program is not detecting the card? https://we.tl/t-yLKRTS0SZr

I also created a new log with the #6792 version: log_freerdp(3).txt

And the build config:

here you can find the log (dll's) c:\temp\zorgidlog\

Within a freerdp session I get an SCARD_E_UNKNOWN error and smartcard is not usable in terminal session. On client side with pcsc_scan (as same user) all seems ok and smartcard is detected and read. The terminal server is W2012R2, client is Arch Linux with current versions of smartcard-drivers and tools installed:

ccid 1.4.23-1
opensc 0.16.0-1
pcsc-perl 1.4.14-2
pcsc-tools 1.4.26-1
pcsclite 1.8.16-1

$> xfreerdp /multimon /smartcard /f +aero +clipboard /v:192.168.1.10 /u:stefanie /d:KK
[17:34:58:011] [2230:2231] [INFO][com.freerdp.client.common.cmdline] - loading channel rdpdr
[17:34:58:011] [2230:2231] [INFO][com.freerdp.client.common.cmdline] - loading channel rdpsnd
[17:34:58:011] [2230:2231] [INFO][com.freerdp.client.common.cmdline] - loading channel cliprdr
Password: 
[17:35:02:293] [2230:2231] [WARN][com.freerdp.client.x11] - XInput extension not available.
[17:35:03:339] [2230:2231] [ERROR][com.freerdp.client.x11] - Error loading X Fixes extension
[17:35:03:366] [2230:2235] [INFO][com.freerdp.channels.rdpdr.client] - Loading device service smartcard (static)
[17:35:03:508] [2230:2235] [INFO][com.freerdp.channels.rdpdr.client] - registered device #1: SCARD (type=32 id=1)
[17:35:03:914] [2230:2235] [INFO][com.freerdp.channels.rdpdr.client] - registered device #1: SCARD (type=32 id=1)
[17:35:03:931] [2230:2235] [INFO][com.freerdp.channels.rdpdr.client] - registered device #1: SCARD (type=32 id=1)
[17:35:04:418] [2230:2267] [WARN][com.freerdp.channels.smartcard.client] - IRP failure: SCardGetStatusChangeA (0x000900A0), status: SCARD_E_UNKNOWN (0xC0000017)
[17:35:04:418] [2230:2267] [WARN][com.freerdp.channels.smartcard.client] - IRP failure: SCardGetStatusChangeA (0x000900A0), ntstatus: 0xC0000017
[17:35:11:604] [2230:2231] [INFO][com.freerdp.core] - ERRINFO_RPC_INITIATED_DISCONNECT_BY_USER (0x0000000B):The disconnection was initiated by an administrative tool on the server running in the user's session.
[17:35:11:742] [2230:2230] [ERROR][com.winpr.sync.mutex] - pthread_mutex_destroy failed with Das Gerät oder die Ressource ist belegt [16]
$> 

Also if the specific smartcard is defined (as below) the same error happens.

/smartcard:"KOBIL Systems Smart Token (NE155019978) 00 00"

pcsc_scan output:

$> pcsc_scan 
PC/SC device scanner
V 1.4.26 (c) 2001-2011, Ludovic Rousseau <[email protected]>
Compiled with PC/SC lite version: 1.8.16
Using reader plug'n play mechanism
Scanning present readers...
0: KOBIL Systems Smart Token (NE155019978) 00 00

Sat Jul  2 17:35:36 2016
Reader 0: KOBIL Systems Smart Token (NE155019978) 00 00
  Card state: Card inserted, 
  ATR: 3B BF 96 00 81 31 FE 5D 00 64 04 11 04 0F 31 C0 73 F7 01 D0 00 90 00 74

ATR: 3B BF 96 00 81 31 FE 5D 00 64 04 11 04 0F 31 C0 73 F7 01 D0 00 90 00 74
+ TS = 3B --> Direct Convention
+ T0 = BF, Y(1): 1011, K: 15 (historical bytes)
  TA(1) = 96 --> Fi=512, Di=32, 16 cycles/ETU
250000 bits/s at 4 MHz, fMax for Fi = 5 MHz => 312500 bits/s
  TB(1) = 00 --> VPP is not electrically connected
  TD(1) = 81 --> Y(i+1) = 1000, Protocol T = 1 

Is this a pure client-side issue or means SCARD_E_UNKNOWN that the smartcard was rejected by the server? Is there a possibility to debug this issue more in-depth?

Thanks and regards Nazdravi

Reported via IRC from @Raven24 for a HID device (Olympus Dictation footpedal)

Log: https://pastebin.com/JMpfAkcP Some debugging done: https://pastebin.com/GHrnmqzx

Problem seems to be that the TS_URB_BULK_OR_INTERRUPT_TRANSFER returns invalid data.

This is the pull request you've all been waiting for: a complete overhaul of smart card support in FreeRDP, and yes, it's getting pretty good.

Here's a (quite summarized) list of things I did:

• Add new libwinpr-smartcard module which exposes a proper WinSCard implementation and wraps under the hood either the original WinSCard API on Windows or pcsc-lite on non-Windows.
• Removed (yes, removed!) the link-time dependency on pcsc-lite. libwinpr-smartcard simply loads libpcsclite.so dynamically on Linux, the PCSC framework library on OS X, and winscard.dll on Windows.
• Implemented many of the WinSCard APIs which are not implemented by pcsc-lite, especially all the unicode functions.
• New heavily hardened NDR encoding and decoding functions have been written for all the RDP smartcard data structures. For some reason Microsoft thought it was a great idea to use NDR for those, which is the same nightmare involved in MSRPC for TS Gateway.
• Added tons of strict checks and debug warnings on the first unexpected byte in those NDR data structures so we can very quickly see when it goes wrong and what goes wrong.
• Refactored all smartcard code to use proper definitions and WinSCard API from libwinpr-smartcard, which means no more custom definitions and #ifdef WITH_PCSC everywhere.
• Restructured smartcard channel code to use more common functions and strict error checking.
• Implemented proper unicode and ascii equivalents of smartcard channel calls along with equivalent WinSCard APIs.

For testing, I have been using the Athena Starter Kit, which comes with an Athena V3C USB reader and an IDProtect Key. The code is exactly the same on Windows, Linux and Mac OS X. I confirm it works fine with more than one readers connected at the same time. mythos and ntwerdochlib on IRC have also been testing as I have been working on this with positive results so far.

While I did port the code to Mac OS X, I may need some help with testing as there is apparently a problem with driver support and mavericks for my Athena smartcard readers.

• Deprecate old conversion functions (too error prone)
• Use ICU for linux, JNI for android and NSString for apple systems
• Add new, simpler functions that use proper size_t as arguments
• Add stream helper function
• Add settings helper function
• Based on #8338

This PR give users the possibility to authenticate, with login and password, via MIT/Heimdal Kerberos rather than NTLM. If Kerberos credentials can't be acquired we fall back on NTLM.

Note also that currently, the server side for Kerberos have not been implemented yet. Work to do.

I have found that xfreerdp crashes in the middle of my session (more quickly when it is inactive even for less than the Windows session timeout, less quickly when I'm actively using it, and seemingly not at all when it's minimized) when I connect to a 2008 R2 server ONLY via a gateway. The version I have is a recent pull, 2.0.0-dev4 (b216520d5) but I have seen this with a few previous versions as well. When I don't use the gateway, it does not crash. Windows clients connecting through the gateway don't have this issue.

My command to connect is: xfreerdp /v:myserver /cert-ignore /f /d:'mydomain' /g:'mygateway'

Log of connect and disconnect is attached. freerdpcrash3.txt

portion of changes to make libfreerdp and channels addins more friendly to external resource management (external thread pools, event libraries)

this changes introducing DisableThreads option in rdpSetting structure.

currently this setting turning off threads in rfx and yuv codecs.

also implemented DisableThreads option support for cliprdr channel addin for client (currently used in our project) which demonstrates how to use this new option.

Hello. I updated to FreeRDP 2.3.0 on x86_64 Arch Linux today. I use RDP to run connect to Accuro, an electronic medical record software which can be run as a remote application, as well as a Windows 10 virtual desktop. Since the update to 2.3.0, there is intense lag, whereby I will click and have to wait 3-5 seconds to see any kind of update on the screen. Downgrading to 2.2.0 solves the issue immediately. Thanks!

I'm using the latest master version (c27600528). When I try to connect to the latest Windows10 Insider Preview (17101), I get: [08:44:28:330] [7640:7641] [ERROR][com.freerdp.core] - freerdp_set_last_error ERRCONNECT_PASSWORD_CERTAINLY_EXPIRED [0x0002000F] [08:44:28:330] [7640:7641] [ERROR][com.freerdp.core.transport] - BIO_read returned an error: error:14094438:SSL routines:ssl3_read_bytes:tlsv1 alert internal error

It does not matter if I use the hostname or the IP address.

cmdline: xfreerdp /u: /f /v:windows10hw

I did a statically linked debug build for this: xfreerdp /buildconfig This is FreeRDP version 2.0.0-dev2 (c27600528) Build configuration: BUILD_TESTING=OFF BUILTIN_CHANNELS=ON HAVE_AIO_H=1 HAVE_EXECINFO_H=1 HAVE_FCNTL_H=1 HAVE_INTTYPES_H=1 HAVE_JOURNALD_H=TRUE HAVE_MATH_C99_LONG_DOUBLE=1 HAVE_POLL_H=1 HAVE_PTHREAD_MUTEX_TIMEDLOCK=ON HAVE_PTHREAD_MUTEX_TIMEDLOCK_LIB=1 HAVE_PTHREAD_MUTEX_TIMEDLOCK_SYMBOL= HAVE_SYSLOG_H=1 HAVE_SYS_EVENTFD_H=1 HAVE_SYS_FILIO_H= HAVE_SYS_MODEM_H= HAVE_SYS_SELECT_H=1 HAVE_SYS_SOCKIO_H= HAVE_SYS_STRTIO_H= HAVE_SYS_TIMERFD_H=1 HAVE_TM_GMTOFF=1 HAVE_UNISTD_H=1 HAVE_XI_TOUCH_CLASS=1 WITH_ALSA=ON WITH_CCACHE=ON WITH_CHANNELS=ON WITH_CLIENT=ON WITH_CLIENT_AVAILABLE=1 WITH_CLIENT_CHANNELS=ON WITH_CLIENT_CHANNELS_AVAILABLE=1 WITH_CLIENT_COMMON=ON WITH_CLIENT_INTERFACE=OFF WITH_CUPS=OFF WITH_DEBUG_ALL=ON WITH_DEBUG_CAPABILITIES=ON WITH_DEBUG_CERTIFICATE=ON WITH_DEBUG_CHANNELS=ON WITH_DEBUG_CLIPRDR=ON WITH_DEBUG_DVC=ON WITH_DEBUG_KBD=ON WITH_DEBUG_LICENSE=ON WITH_DEBUG_MUTEX=ON WITH_DEBUG_NEGO=ON WITH_DEBUG_NLA=ON WITH_DEBUG_NTLM=ON WITH_DEBUG_RAIL=ON WITH_DEBUG_RDP=ON WITH_DEBUG_RDPDR=ON WITH_DEBUG_RDPEI=ON WITH_DEBUG_REDIR=ON WITH_DEBUG_RFX=ON WITH_DEBUG_RINGBUFFER=ON WITH_DEBUG_SCARD=ON WITH_DEBUG_SND=ON WITH_DEBUG_SVC=ON WITH_DEBUG_SYMBOLS=OFF WITH_DEBUG_THREADS=ON WITH_DEBUG_TIMEZONE=ON WITH_DEBUG_TRANSPORT=ON WITH_DEBUG_TSG=ON WITH_DEBUG_TSMF=ON WITH_DEBUG_WND=ON WITH_DEBUG_X11=ON WITH_DEBUG_X11_CLIPRDR=ON WITH_DEBUG_X11_LOCAL_MOVESIZE=ON WITH_DEBUG_XV=ON WITH_DIRECTFB=OFF WITH_EVENTFD_READ_WRITE=1 WITH_FFMPEG=ON WITH_GFX_H264=ON WITH_GPROF=OFF WITH_GSM=OFF WITH_GSSAPI=OFF WITH_GSTREAMER_0_10=OFF WITH_GSTREAMER_1_0=ON WITH_ICU=OFF WITH_IPP=OFF WITH_JPEG=OFF WITH_LIBRARY_VERSIONING=ON WITH_LIBSYSTEMD=ON WITH_MACAUDIO=OFF WITH_MACAUDIO=OFF WITH_MACAUDIO_AVAILABLE=0 WITH_MANPAGES=ON WITH_MBEDTLS=OFF WITH_OPENH264=OFF WITH_OPENSLES=OFF WITH_OPENSSL=ON WITH_OSS=ON WITH_PCSC=OFF WITH_PROFILER=OFF WITH_PULSE=OFF WITH_SAMPLE=OFF WITH_SANITIZE_ADDRESS=OFF WITH_SANITIZE_ADDRESS_AVAILABLE=1 WITH_SANITIZE_LEAK=OFF WITH_SANITIZE_LEAK_AVAILABLE=1 WITH_SERVER=OFF WITH_SERVER_INTERFACE=ON WITH_SMARTCARD_INSPECT=OFF WITH_SSE2=ON WITH_THIRD_PARTY=OFF WITH_VALGRIND_MEMCHECK=OFF WITH_VALGRIND_MEMCHECK_AVAILABLE=1 WITH_WAYLAND=OFF WITH_X11=ON WITH_X264=OFF WITH_XCURSOR=ON WITH_XEXT=ON WITH_XFIXES=ON WITH_XI=ON WITH_XINERAMA=ON WITH_XKBFILE=ON WITH_XRANDR=ON WITH_XRENDER=ON WITH_XSHM=ON WITH_XV=ON WITH_ZLIB=ON Build type: Debug CFLAGS: -march=i686 -Wall -Wno-unused-result -Wno-unused-but-set-variable -Wno-deprecated-declarations -fvisibility=hidden -Wimplicit-function-declaration -Wredundant-decls -g Compiler: GNU, 7.3.0 Target architecture: x86

The whole output: [08:44:21:537] [7640:7641] [INFO][com.freerdp.client.common.cmdline] - loading channelEx cliprdr [08:44:21:540] [7640:7641] [INFO][com.freerdp.client.x11] - Property 505 does not exist Password: [08:44:28:310] [7640:7641] [INFO][com.winpr.sspi.NTLM] - VERSION ={ [08:44:28:310] [7640:7641] [INFO][com.winpr.sspi.NTLM] - ProductMajorVersion: 6 [08:44:28:310] [7640:7641] [INFO][com.winpr.sspi.NTLM] - ProductMinorVersion: 1 [08:44:28:310] [7640:7641] [INFO][com.winpr.sspi.NTLM] - ProductBuild: 7601 [08:44:28:310] [7640:7641] [INFO][com.winpr.sspi.NTLM] - Reserved: 0x000000 [08:44:28:310] [7640:7641] [INFO][com.winpr.sspi.NTLM] - NTLMRevisionCurrent: 0x0F [08:44:28:316] [7640:7641] [INFO][com.winpr.sspi.NTLM] - negotiateFlags "0xE28A8235" [08:44:28:316] [7640:7641] [INFO][com.winpr.sspi.NTLM] - NTLMSSP_NEGOTIATE_56 (0), [08:44:28:316] [7640:7641] [INFO][com.winpr.sspi.NTLM] - NTLMSSP_NEGOTIATE_KEY_EXCH (1), [08:44:28:317] [7640:7641] [INFO][com.winpr.sspi.NTLM] - NTLMSSP_NEGOTIATE_128 (2), [08:44:28:317] [7640:7641] [INFO][com.winpr.sspi.NTLM] - NTLMSSP_NEGOTIATE_VERSION (6), [08:44:28:317] [7640:7641] [INFO][com.winpr.sspi.NTLM] - NTLMSSP_NEGOTIATE_TARGET_INFO (8), [08:44:28:317] [7640:7641] [INFO][com.winpr.sspi.NTLM] - NTLMSSP_NEGOTIATE_EXTENDED_SESSION_SECURITY (12), [08:44:28:317] [7640:7641] [INFO][com.winpr.sspi.NTLM] - NTLMSSP_TARGET_TYPE_SERVER (14), [08:44:28:318] [7640:7641] [INFO][com.winpr.sspi.NTLM] - NTLMSSP_NEGOTIATE_ALWAYS_SIGN (16), [08:44:28:318] [7640:7641] [INFO][com.winpr.sspi.NTLM] - NTLMSSP_NEGOTIATE_NTLM (22), [08:44:28:318] [7640:7641] [INFO][com.winpr.sspi.NTLM] - NTLMSSP_NEGOTIATE_SEAL (26), [08:44:28:318] [7640:7641] [INFO][com.winpr.sspi.NTLM] - NTLMSSP_NEGOTIATE_SIGN (27), [08:44:28:318] [7640:7641] [INFO][com.winpr.sspi.NTLM] - NTLMSSP_REQUEST_TARGET (29), [08:44:28:319] [7640:7641] [INFO][com.winpr.sspi.NTLM] - NTLMSSP_NEGOTIATE_UNICODE (31), [08:44:28:319] [7640:7641] [INFO][com.winpr.sspi.NTLM] - VERSION ={ [08:44:28:319] [7640:7641] [INFO][com.winpr.sspi.NTLM] - ProductMajorVersion: 10 [08:44:28:319] [7640:7641] [INFO][com.winpr.sspi.NTLM] - ProductMinorVersion: 0 [08:44:28:319] [7640:7641] [INFO][com.winpr.sspi.NTLM] - ProductBuild: 17101 [08:44:28:319] [7640:7641] [INFO][com.winpr.sspi.NTLM] - Reserved: 0x000000 [08:44:28:319] [7640:7641] [INFO][com.winpr.sspi.NTLM] - NTLMRevisionCurrent: 0x0F [08:44:28:319] [7640:7641] [INFO][com.winpr.sspi.NTLM] - AV_PAIRs = [08:44:28:319] [7640:7641] [INFO][com.winpr.sspi.NTLM] - MsvAvNbDomainName AvId: 2 AvLen: 22 [08:44:28:320] [7640:7641] [INFO][com.winpr.sspi.NTLM] - 0000 57 00 49 00 4e 00 44 00 4f 00 57 00 53 00 31 00 W.I.N.D.O.W.S.1. [08:44:28:320] [7640:7641] [INFO][com.winpr.sspi.NTLM] - 0010 30 00 48 00 57 00 0.H.W. [08:44:28:320] [7640:7641] [INFO][com.winpr.sspi.NTLM] - MsvAvNbComputerName AvId: 1 AvLen: 22 [08:44:28:320] [7640:7641] [INFO][com.winpr.sspi.NTLM] - 0000 57 00 49 00 4e 00 44 00 4f 00 57 00 53 00 31 00 W.I.N.D.O.W.S.1. [08:44:28:320] [7640:7641] [INFO][com.winpr.sspi.NTLM] - 0010 30 00 48 00 57 00 0.H.W. [08:44:28:320] [7640:7641] [INFO][com.winpr.sspi.NTLM] - MsvAvDnsDomainName AvId: 4 AvLen: 22 [08:44:28:320] [7640:7641] [INFO][com.winpr.sspi.NTLM] - 0000 77 00 69 00 6e 00 64 00 6f 00 77 00 73 00 31 00 w.i.n.d.o.w.s.1. [08:44:28:320] [7640:7641] [INFO][com.winpr.sspi.NTLM] - 0010 30 00 68 00 77 00 0.h.w. [08:44:28:320] [7640:7641] [INFO][com.winpr.sspi.NTLM] - MsvAvDnsComputerName AvId: 3 AvLen: 22 [08:44:28:320] [7640:7641] [INFO][com.winpr.sspi.NTLM] - 0000 77 00 69 00 6e 00 64 00 6f 00 77 00 73 00 31 00 w.i.n.d.o.w.s.1. [08:44:28:321] [7640:7641] [INFO][com.winpr.sspi.NTLM] - 0010 30 00 68 00 77 00 0.h.w. [08:44:28:321] [7640:7641] [INFO][com.winpr.sspi.NTLM] - MsvAvTimestamp AvId: 7 AvLen: 8 [08:44:28:321] [7640:7641] [INFO][com.winpr.sspi.NTLM] - 0000 db 2a 40 4e 8c a8 d3 01 .@N.... [08:44:28:322] [7640:7641] [INFO][com.winpr.sspi.NTLM] - negotiateFlags "0xE288A235" [08:44:28:323] [7640:7641] [INFO][com.winpr.sspi.NTLM] - NTLMSSP_NEGOTIATE_56 (0), [08:44:28:323] [7640:7641] [INFO][com.winpr.sspi.NTLM] - NTLMSSP_NEGOTIATE_KEY_EXCH (1), [08:44:28:323] [7640:7641] [INFO][com.winpr.sspi.NTLM] - NTLMSSP_NEGOTIATE_128 (2), [08:44:28:323] [7640:7641] [INFO][com.winpr.sspi.NTLM] - NTLMSSP_NEGOTIATE_VERSION (6), [08:44:28:323] [7640:7641] [INFO][com.winpr.sspi.NTLM] - NTLMSSP_NEGOTIATE_TARGET_INFO (8), [08:44:28:323] [7640:7641] [INFO][com.winpr.sspi.NTLM] - NTLMSSP_NEGOTIATE_EXTENDED_SESSION_SECURITY (12), [08:44:28:323] [7640:7641] [INFO][com.winpr.sspi.NTLM] - NTLMSSP_NEGOTIATE_ALWAYS_SIGN (16), [08:44:28:323] [7640:7641] [INFO][com.winpr.sspi.NTLM] - NTLMSSP_NEGOTIATE_WORKSTATION_SUPPLIED (18), [08:44:28:323] [7640:7641] [INFO][com.winpr.sspi.NTLM] - NTLMSSP_NEGOTIATE_NTLM (22), [08:44:28:323] [7640:7641] [INFO][com.winpr.sspi.NTLM] - NTLMSSP_NEGOTIATE_SEAL (26), [08:44:28:323] [7640:7641] [INFO][com.winpr.sspi.NTLM] - NTLMSSP_NEGOTIATE_SIGN (27), [08:44:28:323] [7640:7641] [INFO][com.winpr.sspi.NTLM] - NTLMSSP_REQUEST_TARGET (29), [08:44:28:324] [7640:7641] [INFO][com.winpr.sspi.NTLM] - NTLMSSP_NEGOTIATE_UNICODE (31), [08:44:28:324] [7640:7641] [INFO][com.winpr.sspi.NTLM] - VERSION ={ [08:44:28:324] [7640:7641] [INFO][com.winpr.sspi.NTLM] - ProductMajorVersion: 6 [08:44:28:324] [7640:7641] [INFO][com.winpr.sspi.NTLM] - ProductMinorVersion: 1 [08:44:28:324] [7640:7641] [INFO][com.winpr.sspi.NTLM] - ProductBuild: 7601 [08:44:28:324] [7640:7641] [INFO][com.winpr.sspi.NTLM] - Reserved: 0x000000 [08:44:28:324] [7640:7641] [INFO][com.winpr.sspi.NTLM] - NTLMRevisionCurrent: 0x0F [08:44:28:324] [7640:7641] [INFO][com.winpr.sspi.NTLM] - AV_PAIRs = [08:44:28:324] [7640:7641] [INFO][com.winpr.sspi.NTLM] - MsvAvNbDomainName AvId: 2 AvLen: 22 [08:44:28:324] [7640:7641] [INFO][com.winpr.sspi.NTLM] - 0000 57 00 49 00 4e 00 44 00 4f 00 57 00 53 00 31 00 W.I.N.D.O.W.S.1. [08:44:28:324] [7640:7641] [INFO][com.winpr.sspi.NTLM] - 0010 30 00 48 00 57 00 0.H.W. [08:44:28:325] [7640:7641] [INFO][com.winpr.sspi.NTLM] - MsvAvNbComputerName AvId: 1 AvLen: 22 [08:44:28:325] [7640:7641] [INFO][com.winpr.sspi.NTLM] - 0000 57 00 49 00 4e 00 44 00 4f 00 57 00 53 00 31 00 W.I.N.D.O.W.S.1. [08:44:28:325] [7640:7641] [INFO][com.winpr.sspi.NTLM] - 0010 30 00 48 00 57 00 0.H.W. [08:44:28:325] [7640:7641] [INFO][com.winpr.sspi.NTLM] - MsvAvDnsDomainName AvId: 4 AvLen: 22 [08:44:28:325] [7640:7641] [INFO][com.winpr.sspi.NTLM] - 0000 77 00 69 00 6e 00 64 00 6f 00 77 00 73 00 31 00 w.i.n.d.o.w.s.1. [08:44:28:325] [7640:7641] [INFO][com.winpr.sspi.NTLM] - 0010 30 00 68 00 77 00 0.h.w. [08:44:28:325] [7640:7641] [INFO][com.winpr.sspi.NTLM] - MsvAvDnsComputerName AvId: 3 AvLen: 22 [08:44:28:325] [7640:7641] [INFO][com.winpr.sspi.NTLM] - 0000 77 00 69 00 6e 00 64 00 6f 00 77 00 73 00 31 00 w.i.n.d.o.w.s.1. [08:44:28:325] [7640:7641] [INFO][com.winpr.sspi.NTLM] - 0010 30 00 68 00 77 00 0.h.w. [08:44:28:325] [7640:7641] [INFO][com.winpr.sspi.NTLM] - MsvAvTimestamp AvId: 7 AvLen: 8 [08:44:28:326] [7640:7641] [INFO][com.winpr.sspi.NTLM] - 0000 db 2a 40 4e 8c a8 d3 01 .@N.... [08:44:28:326] [7640:7641] [INFO][com.winpr.sspi.NTLM] - MsvAvFlags AvId: 6 AvLen: 4 [08:44:28:326] [7640:7641] [INFO][com.winpr.sspi.NTLM] - 0000 02 00 00 00 .... [08:44:28:326] [7640:7641] [INFO][com.winpr.sspi.NTLM] - MsvChannelBindings AvId: 10 AvLen: 16 [08:44:28:326] [7640:7641] [INFO][com.winpr.sspi.NTLM] - 0000 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [08:44:28:326] [7640:7641] [INFO][com.winpr.sspi.NTLM] - MsvAvTargetName AvId: 9 AvLen: 38 [08:44:28:326] [7640:7641] [INFO][com.winpr.sspi.NTLM] - 0000 54 00 45 00 52 00 4d 00 53 00 52 00 56 00 2f 00 T.E.R.M.S.R.V./. [08:44:28:326] [7640:7641] [INFO][com.winpr.sspi.NTLM] - 0010 77 00 69 00 6e 00 64 00 6f 00 77 00 73 00 31 00 w.i.n.d.o.w.s.1. [08:44:28:326] [7640:7641] [INFO][com.winpr.sspi.NTLM] - 0020 30 00 68 00 77 00 0.h.w. [08:44:28:330] [7640:7641] [ERROR][com.freerdp.core] - freerdp_set_last_error ERRCONNECT_PASSWORD_CERTAINLY_EXPIRED [0x0002000F] [08:44:28:330] [7640:7641] [ERROR][com.freerdp.core.transport] - BIO_read returned an error: error:14094438:SSL routines:ssl3_read_bytes:tlsv1 alert internal error

Any ideas, what to do or how to investigate this further? ATM I'm not sure, if I should blame freerdp or Microsoft.

This pr adds a simple SDL2 based client. The idea is to unify all our platform dependent implementations so we only have a single client to maintain for all platforms (or at least have one) that way we would have something feature equivalent on all supported environments and not the state we currently have (every platform has very different features/bugs)

What already works:

• Single window session
• mouse input
• keyboard input
• touch input
• dynamic resolution (window mode)

What is still to be done:

• AuthOnly support
• fullscreen
• dynamic display add/remove/resize
• keyboard capture
• hotkeys (capture input, toggle fullscreen, ...)
• multimon
• RAILS

hi I searched for issues related to num lock, but it seems that num lock is not synchronized。 It's not my problem.

I use the laptop Linux to access the desktop computer Windows 10 (22H2), and then disconnect the link. After entering Windows, the num lock on the keyboard is always dark. After pressing this key, the "a/" character will be output.

If it is in the Windows lock screen interface, it is used normally.

If you use the 108 keyboard to connect to a laptop, and then remote to Windows, you can use the keys normally.

If the indicator light is on, disconnect the link. The indicator light is always on when you enter Windows, and the output is "aa///" when you press it.

In general, after using FreeRDP access. The numlock does not work properly after I enter Windows. It is always on or off.

windows version : Windows 10 (22H2) 19045.2364 freeRDDP version : 2.8.0 run shell : xfreerdp /v:ip /u:user/ p:password /f +fonts +window-drag +drives +menu-anims +aero /bpp:32 /monitors:1 +glyph-cache +clipboard /network:auto /gdi:hw /audio-mode:0 /sound

版本：freerdp-2.9.0 场景：MacFreeRDP客户端远程连接window server2019，连接成功不稳定，鼠标拖拽窗口（例:文件资源管理窗口）来回拖动弹窗报错：(a) Decryption using Standard RDP Security mechanisms (section 5.3.6) failed. (b) Session key creation using Standard RDP Security mechanisms (section 5.3.5) failed. 疑点：远程主机是window10没有这种问题，只要远程主机是window server就会出现这样问题，在远程操作鼠标拖拽窗口来回多次拖动就会立马弹窗报错。

命令行日志： MacOS % ./MacFreeRDP /u:desktop /p:xxxx /v:192.168.1.241 /port:3389 2022-12-29 09:58:01.941 MacFreeRDP[26302:99379] void * _Nullable NSMapGet(NSMapTable * _Nonnull, const void * _Nullable): map table argument is NULL [09:58:02:131] [26302:056bc000] [WARN][com.freerdp.core.nego] - Error: SSL_NOT_ALLOWED_BY_SERVER [09:58:02:143] [26302:056bc000] [WARN][com.freerdp.core.nego] - Error: SSL_NOT_ALLOWED_BY_SERVER [09:58:03:389] [26302:056bc000] [INFO][com.freerdp.gdi] - Local framebuffer format PIXEL_FORMAT_BGRX32 [09:58:03:389] [26302:056bc000] [INFO][com.freerdp.gdi] - Remote framebuffer format PIXEL_FORMAT_BGRA32 [09:58:03:448] [26302:056bc000] [INFO][com.freerdp.channels.rdpsnd.client] - [static] Loaded fake backend for rdpsnd [09:58:03:448] [26302:056bc000] [INFO][com.freerdp.channels.drdynvc.client] - Loading Dynamic Virtual Channel rdpgfx 2022-12-29 09:58:03.592 MacFreeRDP[26302:99423] ConnectionResult event result:0 [09:58:04:870] [26302:056bc000] [INFO][com.freerdp.client.mac] - Logon Error Info SESSION_ID [LOGON_MSG_SESSION_CONTINUE] [09:58:08:656] [26302:056bc000] [INFO][com.freerdp.core] - ERRINFO_DECRYPT_FAILED (0x00001192):(a) Decryption using Standard RDP Security mechanisms (section 5.3.6) failed. (b) Session key creation using Standard RDP Security mechanisms (section 5.3.5) failed. [09:58:08:656] [26302:056bc000] [ERROR][com.freerdp.core] - rdp_set_error_info:freerdp_set_last_error_ex ERRINFO_DECRYPT_FAILED [0x00011192] 2022-12-29 09:58:08.800 MacFreeRDP[26302:99423] ErrorInfo event code:4498 2022-12-29 09:58:08.800 MacFreeRDP[26302:99379] void * _Nullable NSMapGet(NSMapTable * _Nonnull, const void * _Nullable): map table argument is NULL [09:58:09:948] [26302:056bc000] [ERROR][com.freerdp.core.transport] - BIO_read returned a system error 54: Connection reset by peer [09:58:09:948] [26302:056bc000] [ERROR][com.freerdp.client.mac] - freerdp_check_event_handles failed 2022-12-29 09:58:34.495 MacFreeRDP[26302:99379] Stopping... 2022-12-29 09:58:34.495 MacFreeRDP[26302:99379] Stopped.

Starting with commit 3d77496fbb3447432af899d48f0b594f712075f9, when the wlfreerdp client is connected to Windows 10 (from within gnome-shell 43.2), every screen update causes the display to flash/switch between what appears to be two different display buffers ("current" and "a few moments ago"). For example, if I open the Start menu on the remote host, with every mouse movement the display flashes between the menu being open and it being still closed (or open with some chunks missing).

This is a new issue in FreeRDP git; it doesn't happen with wlfreerdp 2.8.x or 2.9.x. (But on the other hand, it's exactly the same commit that fixes the memory leak I reported in #8399...)

Build options (mostly copied from Arch's packaging):

cmake_options=(
	#-DCMAKE_INSTALL_PREFIX=/usr
	-DCMAKE_INSTALL_PREFIX="$dir"
	-DCMAKE_INSTALL_LIBDIR=lib
	-DWITH_MBEDTLS=OFF
	-DWITH_PULSE=ON
	-DWITH_CUPS=ON
	-DWITH_PCSC=ON
	-DWITH_JPEG=ON
	-DWITH_GSM=ON
	-DWITH_LAME=ON
	-DWITH_FAAD2=ON
	-DWITH_FAAC=ON
	-DWITH_SOXR=ON
	-DWITH_SERVER=OFF
	-DWITH_CHANNELS=ON
	-DWITH_CLIENT_CHANNELS=ON
	-DWITH_SERVER_CHANNELS=ON
	-DCHANNEL_URBDRC_CLIENT=ON
	-DWITH_KRB5=ON
	-DGSS_FLAVOUR=MIT
)

Screencast from 2022-12-20 09-11-11.webm

Hello !

im trying to compile freerdp.

cmake v 3.9

[ 35%] Built target winpr
[ 35%] Built target winpr-tools
[ 36%] Built target winpr-makecert
[ 36%] Built target winpr-hash
[ 36%] Building C object libfreerdp/CMakeFiles/freerdp.dir/crypto/crypto.c.o
/install/FreeRDP/libfreerdp/crypto/crypto.c: In function ‘crypto_cert_get_signature_alg’:
/install/FreeRDP/libfreerdp/crypto/crypto.c:1214:8: error: ‘NID_shake128’ undeclared (first use in this function)
   case NID_shake128:
        ^~~~~~~~~~~~
/install/FreeRDP/libfreerdp/crypto/crypto.c:1214:8: note: each undeclared identifier is reported only once for each function it appears in
/install/FreeRDP/libfreerdp/crypto/crypto.c:1216:8: error: ‘NID_shake256’ undeclared (first use in this function)
   case NID_shake256:
        ^~~~~~~~~~~~
libfreerdp/CMakeFiles/freerdp.dir/build.make:1142: recipe for target 'libfreerdp/CMakeFiles/freerdp.dir/crypto/crypto.c.o' failed
make[2]: *** [libfreerdp/CMakeFiles/freerdp.dir/crypto/crypto.c.o] Error 1
CMakeFiles/Makefile2:1110: recipe for target 'libfreerdp/CMakeFiles/freerdp.dir/all' failed
make[1]: *** [libfreerdp/CMakeFiles/freerdp.dir/all] Error 2
Makefile:151: recipe for target 'all' failed
make: *** [all] Error 2

Any idea ?

Thanks for your help !