Guacamole/freerdp2 issue

[Horváth Csaba]

Hi,

I was using Guacamole with VNC until i switched on my main computer to
Debian+Gnome (testing), which provides excellent RDP connection. The
RDP is working from Windows, and other Debian computers, but not from
Guacamole. Guacamole is running on my home server, and i also
installed a Debian test VM for Guacamole testing. These are a Trixie
and a Bookworm installations. On te home server Guacd is installed
from repo.

So the problem is, that if i try to connect to any Gnome RDP machine
(i have 3 of them) then i got disconnected. The security is set to
NLA, certificates ignored. I got asked for the credentials, and the
the connection stops. This happens with the guacd compiled from source
and installed from .deb package. The Guacamole can connect to SSH,
VNC, and to my Windows VM's via RDP. So Guacamole side is OK.

Did some research, and found that in the logs the problem is visible :
Graphics Pipeline issue. (See logs at the end)
"** (gnome-remote-desktop-daemon:3505237): WARNING **: 21:28:50.436:
[RDP] Client did not advertise support for the Graphics Pipeline,
closing connection"

I suspect a Freerdp2 issue. I tried to connect to the main computer
from a spare one, which is also running Debian Trixie, but with
Gnome-connections, and this is working. I also can connect to my main
one from Windows via RDP. Only not working connection is from
Guacamole to any gnome-rdp-server instance (so my 3 physical computer
with Debian, and Gnome :D ).

Can someone please help to determine where i need to report this, or
does anyone know a solution? I already have asked this on Guacamole
mail list and on the Gnome issue tracker, but nobody knows the
solution. (https://gitlab.gnome.org/GNOME/gnome-remote-desktop/-/issues/183)

Thanks for any help :)

Cs.




Logs :
On the remote side (the gnome-rdp-server machine) :
[21:28:49:059] [3505237:3505454] [INFO][com.freerdp.core.connection] -
Client Security: NLA:1 TLS:1 RDP:0
[21:28:49:059] [3505237:3505454] [INFO][com.freerdp.core.connection] -
Server Security: NLA:1 TLS:0 RDP:0
[21:28:49:059] [3505237:3505454] [INFO][com.freerdp.core.connection] -
Negotiated Security: NLA:1 TLS:0 RDP:0
[21:28:49:079] [3505237:3505454] [WARN][com.winpr.negotiate] -
AcceptSecurityContext status SEC_I_CONTINUE_NEEDED [0x00090312]
[21:28:49:180] [3505237:3505454] [WARN][com.winpr.negotiate] -
AcceptSecurityContext status SEC_I_COMPLETE_NEEDED [0x00090313]
[21:28:49:281] [3505237:3505454] [INFO][com.freerdp.core.connection] -
Accepted client: Guacamole RDP
[21:28:49:281] [3505237:3505454] [INFO][com.freerdp.core.connection] -
Accepted channels:
[21:28:49:281] [3505237:3505454] [INFO][com.freerdp.core.connection] - cliprdr
[21:28:49:281] [3505237:3505454] [INFO][com.freerdp.core.connection] - rdpdr
[21:28:49:281] [3505237:3505454] [INFO][com.freerdp.core.connection] - rdpsnd
[21:28:49:281] [3505237:3505454] [INFO][com.freerdp.core.gcc] - Active
rdp encryption level: NONE
[21:28:49:281] [3505237:3505454] [INFO][com.freerdp.core.gcc] -
Selected rdp encryption method: NONE

** (gnome-remote-desktop-daemon:3505237): WARNING **: 21:28:50.436:
[RDP] Client did not advertise support for the Graphics Pipeline,
closing connection
[21:28:50:086] [3505237:3505454] [ERROR][com.freerdp.core.transport] -
transport_check_fds: transport->ReceiveCallback() - -1


On the guacd side (the home server, where the Guacamole is running) :
guacd[42304]: INFO: Guacamole proxy daemon (guacd) version 1.5.4 started
guacd[42304]: INFO: Listening on host 127.0.0.1, port 4822
guacd[42304]: INFO: Creating new client for protocol "rdp"
guacd[42304]: INFO: Connection ID is "$aad7cb82-9521-49eb-8ca1-596d26a3c61a"
guacd[42306]: INFO: Security mode: NLA
guacd[42306]: INFO: Resize method: none
guacd[42306]: INFO: No clipboard line-ending normalization specified.
Defaulting to preserving the format of all line endings.
guacd[42306]: INFO: User "@f7065a55-b9e4-4056-92ef-f1491c59d9d9"
joined connection "$aad7cb82-9521-49eb-8ca1-596d26a3c61a" (1 users now
present)
guacd[42306]: INFO: Loading keymap "base"
guacd[42306]: INFO: Loading keymap "en-us-qwerty"
guacd[42306]: INFO: RDP server closed/refused connection: Server
refused connection (wrong security type?)
guacd[42306]: INFO: User "@f7065a55-b9e4-4056-92ef-f1491c59d9d9"
disconnected (0 users remain)
guacd[42306]: INFO: Last user of connection
"$aad7cb82-9521-49eb-8ca1-596d26a3c61a" disconnected
guacd[42304]: INFO: Connection "$aad7cb82-9521-49eb-8ca1-596d26a3c61a" removed.



Freerdp2 packages installed on my home server, which i normally use as
remote gateway :
libfreerdp-client2-2/stable,now 2.10.0+dfsg1-1 amd64
libfreerdp-server2-2/stable,now 2.10.0+dfsg1-1 amd64
libfreerdp2-2/stable,now 2.10.0+dfsg1-1 amd64



Freerdp2 packages installed on my main computer which i want to connect to
via Guacamole :
libfreerdp-client2-2/testing,testing,now 2.11.2+dfsg1-1+b1 amd64
libfreerdp-server2-2/testing,testing,now 2.11.2+dfsg1-1+b1 amd64
libfreerdp2-2/testing,testing,now 2.11.2+dfsg1-1+b1 amd64