You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@guacamole.apache.org by "Barnhart, Steven" <ba...@osu.edu.INVALID> on 2025/06/26 16:50:34 UTC

Unable to connect to machine via RDP with 1.6.0

This is a strange one as I don’t (and just tested again to confirm) this issue with with at least 1.6.0-RC1, but 1.6.0 I get a logon failed almost immediately connecting to most machines, with only this in the log message for guacd:

guacd[1]: INFO: Listening on host 0.0.0.0, port 4822
guacd[1]: INFO: Creating new client for protocol "rdp"
guacd[1]: INFO: Connection ID is "$60ff642d-8ce1-43ae-9f29-9261ed548a72"
guacd[8]: WARNING:      FreeRDP initialization may fail: The current user's home directory ("/") is not writable, but FreeRDP generally requires a writable home directory for storage of configuration files and certificates.
guacd[8]: INFO: Security mode: NLA
guacd[8]: INFO: Resize method: display-update
guacd[8]: INFO: No clipboard line-ending normalization specified. Defaulting to preserving the format of all line endings.
guacd[8]: INFO: User "@05542bab-dfc3-4eaa-be24-92634dfb73b7" joined connection "$60ff642d-8ce1-43ae-9f29-9261ed548a72" (1 users now present)
guacd[8]: INFO: Local system reports 2 processor(s) are available.
guacd[8]: INFO: Graphical updates will be encoded using 2 worker thread(s).
guacd[8]: INFO: Loading keymap "base"
guacd[8]: INFO: Loading keymap "en-us-qwerty"
guacd[8]: INFO: RDP server closed/refused connection: Security negotiation failed (wrong security type?)
guacd[8]: INFO: User "@05542bab-dfc3-4eaa-be24-92634dfb73b7" disconnected (0 users remain)
guacd[8]: INFO: Last user of connection "$60ff642d-8ce1-43ae-9f29-9261ed548a72" disconnected
guacd[1]: INFO: Connection "$60ff642d-8ce1-43ae-9f29-9261ed548a72" removed.

Also of note, even clearing my credentials does the same thing and no prompt for credentials happens (but DOES in 1.6.0-RC1).

This is a containerized/docker environment.

Steven T. Barnhart
Solutions Engineer
The Ohio State University
OTDI Research Technology and Infrastructure
(614) 688-1013 Office

Re: Unable to connect to machine via RDP with 1.6.0

Posted by Nick Couchman <vn...@apache.org>.
On Thu, Jun 26, 2025 at 5:09 PM Barnhart, Steven
<ba...@osu.edu.invalid> wrote:

> Got a little further – I built guacd back with freerdp 3 and everything
> works again. I assume it must be some setting or everyone’s RDP would be
> broken, right?
>
>
>
> --Steve
>
>
>
> *From: *Barnhart, Steven <ba...@osu.edu.INVALID>
> *Date: *Thursday, June 26, 2025 at 12:52 PM
> *To: *'user@guacamole.apache.org' <us...@guacamole.apache.org>
> *Subject: *Unable to connect to machine via RDP with 1.6.0
>
> This is a strange one as I don’t (and just tested again to confirm) this
> issue with with at least 1. 6. 0-RC1, but 1. 6. 0 I get a logon failed
> almost immediately connecting to most machines, with only this in the log
> message for guacd: guacd[1]:
>
> This is a strange one as I don’t (and just tested again to confirm) this
> issue with with at least 1.6.0-RC1, but 1.6.0 I get a logon failed almost
> immediately connecting to most machines, with only this in the log message
> for guacd:
>
>
>
> guacd[1]: INFO: Listening on host 0.0.0.0, port 4822
>
> guacd[1]: INFO: Creating new client for protocol "rdp"
>
> guacd[1]: INFO: Connection ID is "$60ff642d-8ce1-43ae-9f29-9261ed548a72"
>
> guacd[8]: WARNING:      FreeRDP initialization may fail: The current
> user's home directory ("/") is not writable, but FreeRDP generally requires
> a writable home directory for storage of configuration files and
> certificates.
>

I think you may be running the guacd instances under different accounts,
and the one you happen to be using 1.6.0 under does not have write access
to the home directory (/, which makes sense - only root would have that).
Maybe try a user account that has a real home directory and can write to it?

-Nick

>

Re: Unable to connect to machine via RDP with 1.6.0 / multi-monitor feature

Posted by Nick Couchman <vn...@apache.org>.
On Fri, Jun 27, 2025 at 1:37 AM Tobias Feller | OPC <tf...@opc.de> wrote:

> Hi,
>
> i also had some problems to run 1.6.0 (with multimonitor-support) it with
> freerdp2
>
>  guacd[26991]: DEBUG:        error creating directory
> '/usr/sbin/.config/freerdp'
>
> ... and some more in that folder after created manual.
>
> guacd[28078]: DEBUG:        guac_rdp_fs_open: open() failed: Permission
> denied
>
> chown demon:root /usr/sbin/.config/freerdp -R
>
> helped. but i still get the following error
>
> guacd[28291]: WARNING:        FreeRDP initialization may fail: The current
> user's home directory ("/usr/sbin") is not writable, but FreeRDP generally
> requires a writable home directory for storage of configuration files and
> certificates.
>
> didn't want to change the permissions of /usr/sbin... ;-)
>
> found this ...
>
> https://lists.apache.org/thread/ngq66h5c4z307mt6sdj2sd306vqh6ymz
>
> after changed the systemd-service user back to "guacd" it works. Didn't
> had this issue on 1.6.0-RC1
>
> @Nick: i have tried to reinstall after cleanup via --prefix in
> "/opt/guac/" but than when i try to connect to rdp the logs say there is no
> support for rdp. on "configure" it was reported a supported protocol. Don't
> know it was because of the path.
>
> But with install con default path Guacanole is working an i can connect to
> my hosts.
>

Sounds like you are likely hitting library path issues on Linux. It can
take a while to work these all out once they crop up because it usually
involves extra entries in either /etc/ld.so.conf or LD_LIBRARY_PATH, and if
the builds are not done with everything already cleaned up, the problem can
just perpetuate. Anyway, if using the default paths works for you, that's
great.


>
> Multimonitor support:
>
> In settings i see the new option (max monitor). Resize Method: "Display
> Update" is set.
>
> but i don't see the "Add Monitor" in the left flyout-menu. Is this only
> shown if my local system has more than 1 monitor, didn't think so - any
> hints on this?
>
> Why is the button missing?
>
You may need to clear the browser cache and refresh the UI to see this show
up after building/installing from that particular git branch.

-Nick

>

Re: Unable to connect to machine via RDP with 1.6.0 / multi-monitor feature

Posted by Tobias Feller | OPC <tf...@opc.de>.
Hi,

i also had some problems to run 1.6.0 (with multimonitor-support) it 
with freerdp2

  guacd[26991]: DEBUG:        error creating directory 
'/usr/sbin/.config/freerdp'

... and some more in that folder after created manual.

guacd[28078]: DEBUG:        guac_rdp_fs_open: open() failed: Permission 
denied

chown demon:root /usr/sbin/.config/freerdp -R

helped. but i still get the following error

guacd[28291]: WARNING:        FreeRDP initialization may fail: The 
current user's home directory ("/usr/sbin") is not writable, but FreeRDP 
generally requires a writable home directory for storage of 
configuration files and certificates.

didn't want to change the permissions of /usr/sbin... ;-)

found this ...

https://lists.apache.org/thread/ngq66h5c4z307mt6sdj2sd306vqh6ymz

after changed the systemd-service user back to "guacd" it works. Didn't 
had this issue on 1.6.0-RC1

@Nick: i have tried to reinstall after cleanup via --prefix in 
"/opt/guac/" but than when i try to connect to rdp the logs say there is 
no support for rdp. on "configure" it was reported a supported protocol. 
Don't know it was because of the path.

But with install con default path Guacanole is working an i can connect 
to my hosts.

Multimonitor support:

In settings i see the new option (max monitor). Resize Method: "Display 
Update" is set.

but i don't see the "Add Monitor" in the left flyout-menu. Is this only 
shown if my local system has more than 1 monitor, didn't think so - any 
hints on this?

Why is the button missing?

For build i did like described:

in guacamole-client

git clonehttps://github.com/apache/guacamole-client
cd guacamole-client
git fetch origin pull/1061/head:test/GUACAMOLE-288
git checkout test/GUACAMOLE-288git fetch origin pull/560/head:GUACAMOLE-288

and for server:

git clonehttps://github.com/apache/guacamole-server 
<https://github.com/apache/guacamole-client>
cd guacamole-server
git fetch origin pull/560/head:test/GUACAMOLE-288
git checkout test/GUACAMOLE-288

... default build/install process for gucamole server.

did i miss something?

... i think so ....

deleted the complete "guacamole-server". cloned again... and build with 
the before *missing *"autoreconf -fi"

Now i have the button :-) and it is working.

but i also see the artifacts like described in

https://github.com/apache/guacamole-client/pull/1061#issuecomment-3004941488

so i also will keeping an ear to the ground....

Thanks for this nice feature.

regards,

Tobias

Am 26.06.2025 um 23:08 schrieb Barnhart, Steven:
>
> Got a little further – I built guacd back with freerdp 3 and 
> everything works again. I assume it must be some setting or everyone’s 
> RDP would be broken, right?
>
> --Steve
>
> *From: *Barnhart, Steven <ba...@osu.edu.INVALID>
> *Date: *Thursday, June 26, 2025 at 12:52 PM
> *To: *'user@guacamole.apache.org' <us...@guacamole.apache.org>
> *Subject: *Unable to connect to machine via RDP with 1.6.0
>
> This is a strange one as I don’t (and just tested again to confirm) 
> this issue with with at least 1. 6. 0-RC1, but 1. 6. 0 I get a logon 
> failed almost immediately connecting to most machines, with only this 
> in the log message for guacd: guacd[1]: 
>
> This is a strange one as I don’t (and just tested again to confirm) 
> this issue with with at least 1.6.0-RC1, but 1.6.0 I get a logon 
> failed almost immediately connecting to most machines, with only this 
> in the log message for guacd:
>
> guacd[1]: INFO: Listening on host 0.0.0.0, port 4822
>
> guacd[1]: INFO: Creating new client for protocol "rdp"
>
> guacd[1]: INFO: Connection ID is "$60ff642d-8ce1-43ae-9f29-9261ed548a72"
>
> guacd[8]: WARNING:      FreeRDP initialization may fail: The current 
> user's home directory ("/") is not writable, but FreeRDP generally 
> requires a writable home directory for storage of configuration files 
> and certificates.
>
> guacd[8]: INFO: Security mode: NLA
>
> guacd[8]: INFO: Resize method: display-update
>
> guacd[8]: INFO: No clipboard line-ending normalization specified. 
> Defaulting to preserving the format of all line endings.
>
> guacd[8]: INFO: User "@05542bab-dfc3-4eaa-be24-92634dfb73b7" joined 
> connection "$60ff642d-8ce1-43ae-9f29-9261ed548a72" (1 users now present)
>
> guacd[8]: INFO: Local system reports 2 processor(s) are available.
>
> guacd[8]: INFO: Graphical updates will be encoded using 2 worker 
> thread(s).
>
> guacd[8]: INFO: Loading keymap "base"
>
> guacd[8]: INFO: Loading keymap "en-us-qwerty"
>
> guacd[8]: INFO: RDP server closed/refused connection: Security 
> negotiation failed (wrong security type?)
>
> guacd[8]: INFO: User "@05542bab-dfc3-4eaa-be24-92634dfb73b7" 
> disconnected (0 users remain)
>
> guacd[8]: INFO: Last user of connection 
> "$60ff642d-8ce1-43ae-9f29-9261ed548a72" disconnected
>
> guacd[1]: INFO: Connection "$60ff642d-8ce1-43ae-9f29-9261ed548a72" 
> removed.
>
> Also of note, even clearing my credentials does the same thing and no 
> prompt for credentials happens (but DOES in 1.6.0-RC1).
>
> This is a containerized/docker environment.
>
> *Steven T. Barnhart*
>
> Solutions Engineer
> *The Ohio State University*
> OTDI Research Technology and Infrastructure
> (614) 688-1013 Office
>

Re: Unable to connect to machine via RDP with 1.6.0

Posted by "Barnhart, Steven" <ba...@osu.edu.INVALID>.
Got a little further – I built guacd back with freerdp 3 and everything works again. I assume it must be some setting or everyone’s RDP would be broken, right?

--Steve

From: Barnhart, Steven <ba...@osu.edu.INVALID>
Date: Thursday, June 26, 2025 at 12:52 PM
To: 'user@guacamole.apache.org' <us...@guacamole.apache.org>
Subject: Unable to connect to machine via RDP with 1.6.0
This is a strange one as I don’t (and just tested again to confirm) this issue with with at least 1. 6. 0-RC1, but 1. 6. 0 I get a logon failed almost immediately connecting to most machines, with only this in the log message for guacd: guacd[1]: 

This is a strange one as I don’t (and just tested again to confirm) this issue with with at least 1.6.0-RC1, but 1.6.0 I get a logon failed almost immediately connecting to most machines, with only this in the log message for guacd:

guacd[1]: INFO: Listening on host 0.0.0.0, port 4822
guacd[1]: INFO: Creating new client for protocol "rdp"
guacd[1]: INFO: Connection ID is "$60ff642d-8ce1-43ae-9f29-9261ed548a72"
guacd[8]: WARNING:      FreeRDP initialization may fail: The current user's home directory ("/") is not writable, but FreeRDP generally requires a writable home directory for storage of configuration files and certificates.
guacd[8]: INFO: Security mode: NLA
guacd[8]: INFO: Resize method: display-update
guacd[8]: INFO: No clipboard line-ending normalization specified. Defaulting to preserving the format of all line endings.
guacd[8]: INFO: User "@05542bab-dfc3-4eaa-be24-92634dfb73b7" joined connection "$60ff642d-8ce1-43ae-9f29-9261ed548a72" (1 users now present)
guacd[8]: INFO: Local system reports 2 processor(s) are available.
guacd[8]: INFO: Graphical updates will be encoded using 2 worker thread(s).
guacd[8]: INFO: Loading keymap "base"
guacd[8]: INFO: Loading keymap "en-us-qwerty"
guacd[8]: INFO: RDP server closed/refused connection: Security negotiation failed (wrong security type?)
guacd[8]: INFO: User "@05542bab-dfc3-4eaa-be24-92634dfb73b7" disconnected (0 users remain)
guacd[8]: INFO: Last user of connection "$60ff642d-8ce1-43ae-9f29-9261ed548a72" disconnected
guacd[1]: INFO: Connection "$60ff642d-8ce1-43ae-9f29-9261ed548a72" removed.

Also of note, even clearing my credentials does the same thing and no prompt for credentials happens (but DOES in 1.6.0-RC1).

This is a containerized/docker environment.

Steven T. Barnhart
Solutions Engineer
The Ohio State University
OTDI Research Technology and Infrastructure
(614) 688-1013 Office