You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@guacamole.apache.org by Eby Mani <eb...@yahoo.com.INVALID> on 2024/09/16 10:26:53 UTC

weird Windows RDP issue

Guacamole 1.5.1
Native Install.
Ubuntu 22.04 LTS.
Guacamole not integrated with AD/LDAP.



I have weird Windows RDP issue with some servers and can’t figure out what exactly is the problem.

We can’t connect to some of the Windows servers (W2016 and W2019) without configuring username, password, domain values in guacamole connections. When these parameters are not configured, we get “The remote desktop server is currently unreachable” (screenshots attached).

When configuring RDP,  we leave "username, password, domain, security mode" empty and "Disable authentication" “un-selected” and "Ignore server certificate" “selected”. (screenshots attached)

- From Guacamole server, problematic server ip/port is reachable thru ping and telnet
- From other local Windows and Linux systems can ping/telnet/RDP to these servers.
- When connecting thru RDP to other W2016/W2019 servers, Windows login page is displayed and users login to the servers with their AD credentials.

I don’t have a clue on what settings need to be enabled on these Windows servers. Not sure if NLA is the issue or something else. Anyone have/had this issue ?. And what was done to resolve the issue ?.

Thanks in Advance,

catalina.out log when connecting to W2019 without username, password, domain values configured.

*********************************************
[2024-09-15 16:57:10] [info] 16:57:10.049 [http-nio-8080-exec-3] INFO  o.a.g.tunnel.TunnelRequestService - User "eby.mani" connected to connection "34".
[2024-09-15 16:57:29] [info] Exception in thread "Thread-535" java.lang.IllegalStateException: Message will not be sent because the WebSocket session has been closed
[2024-09-15 16:57:29] [info] #011at org.apache.tomcat.websocket.WsRemoteEndpointImplBase.writeMessagePart(WsRemoteEndpointImplBase.java:442)
[2024-09-15 16:57:29] [info] #011at org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendMessageBlock(WsRemoteEndpointImplBase.java:314)
[2024-09-1516:57:29] [info] #011at org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendMessageBlock(WsRemoteEndpointImplBase.java:254)
[2024-09-15 16:57:29] [info] #011at org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendString(WsRemoteEndpointImplBase.java:195)
[2024-09-15 16:57:29] [info] #011at org.apache.tomcat.websocket.WsRemoteEndpointBasic.sendText(WsRemoteEndpointBasic.java:37)
[2024-09-15 16:57:29] [info] #011at org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint.sendInstruction(GuacamoleWebSocketTunnelEndpoint.java:152)
[2024-09-15 16:57:29] [info] #011at org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint.access$200(GuacamoleWebSocketTunnelEndpoint.java:53)
[2024-09-15 16:57:29] [info] #011at org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint$2.run(GuacamoleWebSocketTunnelEndpoint.java:253)
[2024-09-15 16:57:29] [info] 16:57:29.258 [http-nio-8080-exec-7] INFO  o.a.g.tunnel.TunnelRequestService - User "eby.mani" disconnected from connection "34". Duration: 19209 milliseconds
*********************************************

Re: [EXTERNAL] Re: weird Windows RDP issue

Posted by "Zhou.Zeng" <Zh...@target.com.INVALID>.
Hey Eby, I had experienced a similar phenomenon before. The solution I found was to enter your credentials within 5 seconds once you are prompted in scenario #1. If I am not quick enough, the login would fail even when you enter the right credentials. Let me know if this works for you.

Zhou

From: Eby Mani <eb...@yahoo.com.INVALID>
Date: Tuesday, September 17, 2024 at 2:17 AM
To: user@guacamole.apache.org <us...@guacamole.apache.org>
Subject: [EXTERNAL] Re: weird Windows RDP issue
Here are the guacd logs for the weird bits.

1, W2019 Server -01 - username, password, domain NOT configured. - Result = unable to connect.
2, W2019 Server -02 - username, password, domain NOT configured. - Result = CONNECTED.
3, W2019 Server -01 - username, password, domain configured. - Result = CONNECTED.

If not specifying security mode is the issue, then it should not connect at all.

/var/log/syslog | grep guacd

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++
1, W2019 Server -01 - username, password, domain NOT configured. - Result = unable to connect.
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Sep 17 12:17:05 guacd[1789206]: Creating new client for protocol "rdp"
Sep 17 12:17:05 guacd[1789206]: guacd[1789206]: INFO:#011Creating new client for protocol "rdp"
Sep 17 12:17:05 guacd[1789206]: guacd[1789206]: INFO:#011Connection ID is "$758b9706-7db7-4f93-a2d4-1de8f3b84768"
Sep 17 12:17:05 guacd[1789206]: Connection ID is "$758b9706-7db7-4f93-a2d4-1de8f3b84768"
Sep 17 12:17:05 guacd[1838937]: No security mode specified. Defaulting to security mode negotiation with server.
Sep 17 12:17:05 guacd[1838937]: guacd[1838937]: INFO:#011No security mode specified. Defaulting to security mode negotiation with server.
Sep 17 12:17:05 guacd[1838937]: guacd[1838937]: INFO:#011Resize method: display-update
Sep 17 12:17:05 guacd[1838937]: guacd[1838937]: INFO:#011No clipboard line-ending normalization specified. Defaulting to preserving the format of all line endings.
Sep 17 12:17:05 guacd[1838937]: guacd[1838937]: INFO:#011User "@30499e40-9321-4df3-aa56-bf858773d8a1" joined connection "$758b9706-7db7-4f93-a2d4-1de8f3b84768" (1 users now present)
Sep 17 12:17:05 guacd[1838937]: Resize method: display-update
Sep 17 12:17:05 guacd[1838937]: No clipboard line-ending normalization specified. Defaulting to preserving the format of all line endings.
Sep 17 12:17:05 guacd[1838937]: User "@30499e40-9321-4df3-aa56-bf858773d8a1" joined connection "$758b9706-7db7-4f93-a2d4-1de8f3b84768" (1 users now present)
Sep 17 12:17:05 guacd[1838937]: Loading keymap "base"
Sep 17 12:17:05 guacd[1838937]: Loading keymap "en-us-qwerty"
Sep 17 12:17:05 guacd[1838937]: guacd[1838937]: INFO:#011Loading keymap "base"
Sep 17 12:17:05 guacd[1838937]: guacd[1838937]: INFO:#011Loading keymap "en-us-qwerty"
Sep 17 12:17:05 guacd[1838937]: RDP server closed/refused connection: Server refused connection (wrong security type?)
Sep 17 12:17:05 guacd[1838937]: guacd[1838937]: INFO:#011RDP server closed/refused connection: Server refused connection (wrong security type?)
Sep 17 12:17:05 guacd[1838937]: User "@30499e40-9321-4df3-aa56-bf858773d8a1" disconnected (0 users remain)
Sep 17 12:17:05 guacd[1838937]: guacd[1838937]: INFO:#011User "@30499e40-9321-4df3-aa56-bf858773d8a1" disconnected (0 users remain)
Sep 17 12:17:05 guacd[1838937]: guacd[1838937]: INFO:#011Last user of connection "$758b9706-7db7-4f93-a2d4-1de8f3b84768" disconnected
Sep 17 12:17:05 guacd[1838937]: Last user of connection "$758b9706-7db7-4f93-a2d4-1de8f3b84768" disconnected
Sep 17 12:17:05 guacd[1789206]: Connection "$758b9706-7db7-4f93-a2d4-1de8f3b84768" removed.
Sep 17 12:17:05 guacd[1789206]: guacd[1789206]: INFO:#011Connection "$758b9706-7db7-4f93-a2d4-1de8f3b84768" removed.
Sep 17 12:17:20 guacd[1789206]: Creating new client for protocol "rdp"
Sep 17 12:17:20 guacd[1789206]: guacd[1789206]: INFO:#011Creating new client for protocol "rdp"
Sep 17 12:17:20 guacd[1789206]: guacd[1789206]: INFO:#011Connection ID is "$c00713d5-3976-4322-ab7f-6151edf38be1"
Sep 17 12:17:20 guacd[1789206]: Connection ID is "$c00713d5-3976-4322-ab7f-6151edf38be1"
Sep 17 12:17:20 guacd[1838967]: No security mode specified. Defaulting to security mode negotiation with server.
Sep 17 12:17:20 guacd[1838967]: guacd[1838967]: INFO:#011No security mode specified. Defaulting to security mode negotiation with server.
Sep 17 12:17:20 guacd[1838967]: guacd[1838967]: INFO:#011Resize method: display-update
Sep 17 12:17:20 guacd[1838967]: guacd[1838967]: INFO:#011No clipboard line-ending normalization specified. Defaulting to preserving the format of all line endings.
Sep 17 12:17:20 guacd[1838967]: guacd[1838967]: INFO:#011User "@c99a88b6-8438-485b-af30-81a90a1c52b7" joined connection "$c00713d5-3976-4322-ab7f-6151edf38be1" (1 users now present)
Sep 17 12:17:20 guacd[1838967]: Resize method: display-update
Sep 17 12:17:20 guacd[1838967]: No clipboard line-ending normalization specified. Defaulting to preserving the format of all line endings.
Sep 17 12:17:20 guacd[1838967]: User "@c99a88b6-8438-485b-af30-81a90a1c52b7" joined connection "$c00713d5-3976-4322-ab7f-6151edf38be1" (1 users now present)
Sep 17 12:17:20 guacd[1838967]: Loading keymap "base"
Sep 17 12:17:20 guacd[1838967]: guacd[1838967]: INFO:#011Loading keymap "base"
Sep 17 12:17:20 guacd[1838967]: guacd[1838967]: INFO:#011Loading keymap "en-us-qwerty"
Sep 17 12:17:20 guacd[1838967]: Loading keymap "en-us-qwerty"
Sep 17 12:17:20 guacd[1838967]: RDP server closed/refused connection: Server refused connection (wrong security type?)
Sep 17 12:17:20 guacd[1838967]: guacd[1838967]: INFO:#011RDP server closed/refused connection: Server refused connection (wrong security type?)
Sep 17 12:17:20 guacd[1838967]: User "@c99a88b6-8438-485b-af30-81a90a1c52b7" disconnected (0 users remain)
Sep 17 12:17:20 guacd[1838967]: guacd[1838967]: INFO:#011User "@c99a88b6-8438-485b-af30-81a90a1c52b7" disconnected (0 users remain)
Sep 17 12:17:20 guacd[1838967]: Last user of connection "$c00713d5-3976-4322-ab7f-6151edf38be1" disconnected
Sep 17 12:17:20 guacd[1838967]: guacd[1838967]: INFO:#011Last user of connection "$c00713d5-3976-4322-ab7f-6151edf38be1" disconnected
Sep 17 12:17:20 guacd[1789206]: Connection "$c00713d5-3976-4322-ab7f-6151edf38be1" removed.
Sep 17 12:17:20 guacd[1789206]: guacd[1789206]: INFO:#011Connection "$c00713d5-3976-4322-ab7f-6151edf38be1" removed.
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++
2, W2019 Server -02 - username, password, domain NOT configured. - Result = CONNECTED.
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Sep 17 12:27:39 guacd[1789206]: Creating new client for protocol "rdp"
Sep 17 12:27:39 guacd[1789206]: guacd[1789206]: INFO:#011Creating new client for protocol "rdp"
Sep 17 12:27:39 guacd[1789206]: guacd[1789206]: INFO:#011Connection ID is "$c4d5b879-7357-427b-ab7d-3fe454abbea2"
Sep 17 12:27:39 guacd[1789206]: Connection ID is "$c4d5b879-7357-427b-ab7d-3fe454abbea2"
Sep 17 12:27:39 guacd[1839209]: No security mode specified. Defaulting to security mode negotiation with server.
Sep 17 12:27:39 guacd[1839209]: guacd[1839209]: INFO:#011No security mode specified. Defaulting to security mode negotiation with server.
Sep 17 12:27:39 guacd[1839209]: guacd[1839209]: INFO:#011Resize method: display-update
Sep 17 12:27:39 guacd[1839209]: guacd[1839209]: INFO:#011No clipboard line-ending normalization specified. Defaulting to preserving the format of all line endings.
Sep 17 12:27:39 guacd[1839209]: guacd[1839209]: INFO:#011User "@5941f66c-a6d6-473e-ad87-dbcbaca3fd68" joined connection "$c4d5b879-7357-427b-ab7d-3fe454abbea2" (1 users now present)
Sep 17 12:27:39 guacd[1839209]: Resize method: display-update
Sep 17 12:27:39 guacd[1839209]: No clipboard line-ending normalization specified. Defaulting to preserving the format of all line endings.
Sep 17 12:27:39 guacd[1839209]: User "@5941f66c-a6d6-473e-ad87-dbcbaca3fd68" joined connection "$c4d5b879-7357-427b-ab7d-3fe454abbea2" (1 users now present)
Sep 17 12:27:39 guacd[1839209]: Loading keymap "base"
Sep 17 12:27:39 guacd[1839209]: guacd[1839209]: INFO:#011Loading keymap "base"
Sep 17 12:27:39 guacd[1839209]: guacd[1839209]: INFO:#011Loading keymap "en-us-qwerty"
Sep 17 12:27:39 guacd[1839209]: Loading keymap "en-us-qwerty"
Sep 17 12:27:41 guacd[1839209]: Connected to RDPDR 1.13 as client 0x0004
Sep 17 12:27:41 guacd[1839209]: guacd[1839209]: INFO:#011Connected to RDPDR 1.13 as client 0x0004
Sep 17 12:28:05 guacd[1839209]: User "@5941f66c-a6d6-473e-ad87-dbcbaca3fd68" disconnected (0 users remain)
Sep 17 12:28:05 guacd[1839209]: guacd[1839209]: INFO:#011User "@5941f66c-a6d6-473e-ad87-dbcbaca3fd68" disconnected (0 users remain)
Sep 17 12:28:05 guacd[1839209]: guacd[1839209]: INFO:#011Last user of connection "$c4d5b879-7357-427b-ab7d-3fe454abbea2" disconnected
Sep 17 12:28:05 guacd[1839209]: Last user of connection "$c4d5b879-7357-427b-ab7d-3fe454abbea2" disconnected
Sep 17 12:28:05 guacd[1839209]: Internal RDP client disconnected
Sep 17 12:28:05 guacd[1839209]: guacd[1839209]: INFO:#011Internal RDP client disconnected
Sep 17 12:28:05 guacd[1789206]: Connection "$c4d5b879-7357-427b-ab7d-3fe454abbea2" removed.
Sep 17 12:28:05 guacd[1789206]: guacd[1789206]: INFO:#011Connection "$c4d5b879-7357-427b-ab7d-3fe454abbea2" removed.
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++
3, W2019 Server -01 - username, password, domain configured. - Result = CONNECTED.
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Sep 17 12:37:41 guacd[1789206]: Creating new client for protocol "rdp"
Sep 17 12:37:41 guacd[1789206]: guacd[1789206]: INFO:#011Creating new client for protocol "rdp"
Sep 17 12:37:41 guacd[1789206]: guacd[1789206]: INFO:#011Connection ID is "$b99b21e5-99f0-4821-9ecc-33eb4a6505ed"
Sep 17 12:37:41 guacd[1789206]: Connection ID is "$b99b21e5-99f0-4821-9ecc-33eb4a6505ed"
Sep 17 12:37:41 guacd[1839329]: No security mode specified. Defaulting to security mode negotiation with server.
Sep 17 12:37:41 guacd[1839329]: guacd[1839329]: INFO:#011No security mode specified. Defaulting to security mode negotiation with server.
Sep 17 12:37:41 guacd[1839329]: guacd[1839329]: INFO:#011Resize method: display-update
Sep 17 12:37:41 guacd[1839329]: guacd[1839329]: INFO:#011No clipboard line-ending normalization specified. Defaulting to preserving the format of all line endings.
Sep 17 12:37:41 guacd[1839329]: guacd[1839329]: INFO:#011User "@f6592164-60bf-4245-acce-22aeae86763e" joined connection "$b99b21e5-99f0-4821-9ecc-33eb4a6505ed" (1 users now present)
Sep 17 12:37:41 guacd[1839329]: Resize method: display-update
Sep 17 12:37:41 guacd[1839329]: No clipboard line-ending normalization specified. Defaulting to preserving the format of all line endings.
Sep 17 12:37:41 guacd[1839329]: User "@f6592164-60bf-4245-acce-22aeae86763e" joined connection "$b99b21e5-99f0-4821-9ecc-33eb4a6505ed" (1 users now present)
Sep 17 12:37:41 guacd[1839329]: Loading keymap "base"
Sep 17 12:37:41 guacd[1839329]: guacd[1839329]: INFO:#011Loading keymap "base"
Sep 17 12:37:41 guacd[1839329]: guacd[1839329]: INFO:#011Loading keymap "en-us-qwerty"
Sep 17 12:37:41 guacd[1839329]: Loading keymap "en-us-qwerty"
Sep 17 12:37:45 guacd[1839329]: Connected to RDPDR 1.13 as client 0x0007
Sep 17 12:37:45 guacd[1839329]: guacd[1839329]: INFO:#011Connected to RDPDR 1.13 as client 0x0007
Sep 17 12:37:47 guacd[1839329]: Connected to RDPDR 1.13 as client 0x0004
Sep 17 12:37:47 guacd[1839329]: guacd[1839329]: INFO:#011Connected to RDPDR 1.13 as client 0x0004
Sep 17 12:37:47 guacd[1839329]: RDPDR user logged on
Sep 17 12:37:47 guacd[1839329]: guacd[1839329]: INFO:#011RDPDR user logged on
Sep 17 12:38:17 guacd[1839329]: User "@f6592164-60bf-4245-acce-22aeae86763e" disconnected (0 users remain)
Sep 17 12:38:17 guacd[1839329]: guacd[1839329]: INFO:#011User "@f6592164-60bf-4245-acce-22aeae86763e" disconnected (0 users remain)
Sep 17 12:38:17 guacd[1839329]: guacd[1839329]: INFO:#011Last user of connection "$b99b21e5-99f0-4821-9ecc-33eb4a6505ed" disconnected
Sep 17 12:38:17 guacd[1839329]: Last user of connection "$b99b21e5-99f0-4821-9ecc-33eb4a6505ed" disconnected
Sep 17 12:38:17 guacd[1839329]: Internal RDP client disconnected
Sep 17 12:38:17 guacd[1839329]: guacd[1839329]: INFO:#011Internal RDP client disconnected
Sep 17 12:38:17 guacd[1789206]: Connection "$b99b21e5-99f0-4821-9ecc-33eb4a6505ed" removed.
Sep 17 12:38:17 guacd[1789206]: guacd[1789206]: INFO:#011Connection "$b99b21e5-99f0-4821-9ecc-33eb4a6505ed" removed.
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Thanks.


On Monday 16 September, 2024 at 04:58:12 pm IST, Nick Couchman <vn...@apache.org> wrote:


These are just the logs from Tomcat - the logs that you actually need to look at for this particular failure are the ones that contain guacd logs, which will usually be where your syslog facility points (journalctl, /var/log/messages, etc.).

-Nick

Re: weird Windows RDP issue

Posted by Eby Mani <eb...@yahoo.com.INVALID>.
 Here are the guacd logs for the weird bits.

1, W2019 Server -01 - username, password, domain NOT configured. - Result = unable to connect.
2, W2019 Server -02 - username, password, domain NOT configured. - Result = CONNECTED.
3, W2019 Server -01 - username, password, domain configured. - Result = CONNECTED.

If not specifying security mode is the issue, then it should not connect at all.

/var/log/syslog | grep guacd

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++
1, W2019 Server -01 - username, password, domain NOT configured. - Result = unable to connect.
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Sep 17 12:17:05 guacd[1789206]: Creating new client for protocol "rdp"
Sep 17 12:17:05 guacd[1789206]: guacd[1789206]: INFO:#011Creating new client for protocol "rdp"
Sep 17 12:17:05 guacd[1789206]: guacd[1789206]: INFO:#011Connection ID is "$758b9706-7db7-4f93-a2d4-1de8f3b84768"
Sep 17 12:17:05 guacd[1789206]: Connection ID is "$758b9706-7db7-4f93-a2d4-1de8f3b84768"
Sep 17 12:17:05 guacd[1838937]: No security mode specified. Defaulting to security mode negotiation with server.
Sep 17 12:17:05 guacd[1838937]: guacd[1838937]: INFO:#011No security mode specified. Defaulting to security mode negotiation with server.
Sep 17 12:17:05 guacd[1838937]: guacd[1838937]: INFO:#011Resize method: display-update
Sep 17 12:17:05 guacd[1838937]: guacd[1838937]: INFO:#011No clipboard line-ending normalization specified. Defaulting to preserving the format of all line endings.
Sep 17 12:17:05 guacd[1838937]: guacd[1838937]: INFO:#011User "@30499e40-9321-4df3-aa56-bf858773d8a1" joined connection "$758b9706-7db7-4f93-a2d4-1de8f3b84768" (1 users now present)
Sep 17 12:17:05 guacd[1838937]: Resize method: display-update
Sep 17 12:17:05 guacd[1838937]: No clipboard line-ending normalization specified. Defaulting to preserving the format of all line endings.
Sep 17 12:17:05 guacd[1838937]: User "@30499e40-9321-4df3-aa56-bf858773d8a1" joined connection "$758b9706-7db7-4f93-a2d4-1de8f3b84768" (1 users now present)
Sep 17 12:17:05 guacd[1838937]: Loading keymap "base"
Sep 17 12:17:05 guacd[1838937]: Loading keymap "en-us-qwerty"
Sep 17 12:17:05 guacd[1838937]: guacd[1838937]: INFO:#011Loading keymap "base"
Sep 17 12:17:05 guacd[1838937]: guacd[1838937]: INFO:#011Loading keymap "en-us-qwerty"
Sep 17 12:17:05 guacd[1838937]: RDP server closed/refused connection: Server refused connection (wrong security type?)
Sep 17 12:17:05 guacd[1838937]: guacd[1838937]: INFO:#011RDP server closed/refused connection: Server refused connection (wrong security type?)
Sep 17 12:17:05 guacd[1838937]: User "@30499e40-9321-4df3-aa56-bf858773d8a1" disconnected (0 users remain)
Sep 17 12:17:05 guacd[1838937]: guacd[1838937]: INFO:#011User "@30499e40-9321-4df3-aa56-bf858773d8a1" disconnected (0 users remain)
Sep 17 12:17:05 guacd[1838937]: guacd[1838937]: INFO:#011Last user of connection "$758b9706-7db7-4f93-a2d4-1de8f3b84768" disconnected
Sep 17 12:17:05 guacd[1838937]: Last user of connection "$758b9706-7db7-4f93-a2d4-1de8f3b84768" disconnected
Sep 17 12:17:05 guacd[1789206]: Connection "$758b9706-7db7-4f93-a2d4-1de8f3b84768" removed.
Sep 17 12:17:05 guacd[1789206]: guacd[1789206]: INFO:#011Connection "$758b9706-7db7-4f93-a2d4-1de8f3b84768" removed.
Sep 17 12:17:20 guacd[1789206]: Creating new client for protocol "rdp"
Sep 17 12:17:20 guacd[1789206]: guacd[1789206]: INFO:#011Creating new client for protocol "rdp"
Sep 17 12:17:20 guacd[1789206]: guacd[1789206]: INFO:#011Connection ID is "$c00713d5-3976-4322-ab7f-6151edf38be1"
Sep 17 12:17:20 guacd[1789206]: Connection ID is "$c00713d5-3976-4322-ab7f-6151edf38be1"
Sep 17 12:17:20 guacd[1838967]: No security mode specified. Defaulting to security mode negotiation with server.
Sep 17 12:17:20 guacd[1838967]: guacd[1838967]: INFO:#011No security mode specified. Defaulting to security mode negotiation with server.
Sep 17 12:17:20 guacd[1838967]: guacd[1838967]: INFO:#011Resize method: display-update
Sep 17 12:17:20 guacd[1838967]: guacd[1838967]: INFO:#011No clipboard line-ending normalization specified. Defaulting to preserving the format of all line endings.
Sep 17 12:17:20 guacd[1838967]: guacd[1838967]: INFO:#011User "@c99a88b6-8438-485b-af30-81a90a1c52b7" joined connection "$c00713d5-3976-4322-ab7f-6151edf38be1" (1 users now present)
Sep 17 12:17:20 guacd[1838967]: Resize method: display-update
Sep 17 12:17:20 guacd[1838967]: No clipboard line-ending normalization specified. Defaulting to preserving the format of all line endings.
Sep 17 12:17:20 guacd[1838967]: User "@c99a88b6-8438-485b-af30-81a90a1c52b7" joined connection "$c00713d5-3976-4322-ab7f-6151edf38be1" (1 users now present)
Sep 17 12:17:20 guacd[1838967]: Loading keymap "base"
Sep 17 12:17:20 guacd[1838967]: guacd[1838967]: INFO:#011Loading keymap "base"
Sep 17 12:17:20 guacd[1838967]: guacd[1838967]: INFO:#011Loading keymap "en-us-qwerty"
Sep 17 12:17:20 guacd[1838967]: Loading keymap "en-us-qwerty"
Sep 17 12:17:20 guacd[1838967]: RDP server closed/refused connection: Server refused connection (wrong security type?)
Sep 17 12:17:20 guacd[1838967]: guacd[1838967]: INFO:#011RDP server closed/refused connection: Server refused connection (wrong security type?)
Sep 17 12:17:20 guacd[1838967]: User "@c99a88b6-8438-485b-af30-81a90a1c52b7" disconnected (0 users remain)
Sep 17 12:17:20 guacd[1838967]: guacd[1838967]: INFO:#011User "@c99a88b6-8438-485b-af30-81a90a1c52b7" disconnected (0 users remain)
Sep 17 12:17:20 guacd[1838967]: Last user of connection "$c00713d5-3976-4322-ab7f-6151edf38be1" disconnected
Sep 17 12:17:20 guacd[1838967]: guacd[1838967]: INFO:#011Last user of connection "$c00713d5-3976-4322-ab7f-6151edf38be1" disconnected
Sep 17 12:17:20 guacd[1789206]: Connection "$c00713d5-3976-4322-ab7f-6151edf38be1" removed.
Sep 17 12:17:20 guacd[1789206]: guacd[1789206]: INFO:#011Connection "$c00713d5-3976-4322-ab7f-6151edf38be1" removed.
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++
2, W2019 Server -02 - username, password, domain NOT configured. - Result = CONNECTED.
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Sep 17 12:27:39 guacd[1789206]: Creating new client for protocol "rdp"
Sep 17 12:27:39 guacd[1789206]: guacd[1789206]: INFO:#011Creating new client for protocol "rdp"
Sep 17 12:27:39 guacd[1789206]: guacd[1789206]: INFO:#011Connection ID is "$c4d5b879-7357-427b-ab7d-3fe454abbea2"
Sep 17 12:27:39 guacd[1789206]: Connection ID is "$c4d5b879-7357-427b-ab7d-3fe454abbea2"
Sep 17 12:27:39 guacd[1839209]: No security mode specified. Defaulting to security mode negotiation with server.
Sep 17 12:27:39 guacd[1839209]: guacd[1839209]: INFO:#011No security mode specified. Defaulting to security mode negotiation with server.
Sep 17 12:27:39 guacd[1839209]: guacd[1839209]: INFO:#011Resize method: display-update
Sep 17 12:27:39 guacd[1839209]: guacd[1839209]: INFO:#011No clipboard line-ending normalization specified. Defaulting to preserving the format of all line endings.
Sep 17 12:27:39 guacd[1839209]: guacd[1839209]: INFO:#011User "@5941f66c-a6d6-473e-ad87-dbcbaca3fd68" joined connection "$c4d5b879-7357-427b-ab7d-3fe454abbea2" (1 users now present)
Sep 17 12:27:39 guacd[1839209]: Resize method: display-update
Sep 17 12:27:39 guacd[1839209]: No clipboard line-ending normalization specified. Defaulting to preserving the format of all line endings.
Sep 17 12:27:39 guacd[1839209]: User "@5941f66c-a6d6-473e-ad87-dbcbaca3fd68" joined connection "$c4d5b879-7357-427b-ab7d-3fe454abbea2" (1 users now present)
Sep 17 12:27:39 guacd[1839209]: Loading keymap "base"
Sep 17 12:27:39 guacd[1839209]: guacd[1839209]: INFO:#011Loading keymap "base"
Sep 17 12:27:39 guacd[1839209]: guacd[1839209]: INFO:#011Loading keymap "en-us-qwerty"
Sep 17 12:27:39 guacd[1839209]: Loading keymap "en-us-qwerty"
Sep 17 12:27:41 guacd[1839209]: Connected to RDPDR 1.13 as client 0x0004
Sep 17 12:27:41 guacd[1839209]: guacd[1839209]: INFO:#011Connected to RDPDR 1.13 as client 0x0004
Sep 17 12:28:05 guacd[1839209]: User "@5941f66c-a6d6-473e-ad87-dbcbaca3fd68" disconnected (0 users remain)
Sep 17 12:28:05 guacd[1839209]: guacd[1839209]: INFO:#011User "@5941f66c-a6d6-473e-ad87-dbcbaca3fd68" disconnected (0 users remain)
Sep 17 12:28:05 guacd[1839209]: guacd[1839209]: INFO:#011Last user of connection "$c4d5b879-7357-427b-ab7d-3fe454abbea2" disconnected
Sep 17 12:28:05 guacd[1839209]: Last user of connection "$c4d5b879-7357-427b-ab7d-3fe454abbea2" disconnected
Sep 17 12:28:05 guacd[1839209]: Internal RDP client disconnected
Sep 17 12:28:05 guacd[1839209]: guacd[1839209]: INFO:#011Internal RDP client disconnected
Sep 17 12:28:05 guacd[1789206]: Connection "$c4d5b879-7357-427b-ab7d-3fe454abbea2" removed.
Sep 17 12:28:05 guacd[1789206]: guacd[1789206]: INFO:#011Connection "$c4d5b879-7357-427b-ab7d-3fe454abbea2" removed.
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++
3, W2019 Server -01 - username, password, domain configured. - Result = CONNECTED.
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Sep 17 12:37:41 guacd[1789206]: Creating new client for protocol "rdp"
Sep 17 12:37:41 guacd[1789206]: guacd[1789206]: INFO:#011Creating new client for protocol "rdp"
Sep 17 12:37:41 guacd[1789206]: guacd[1789206]: INFO:#011Connection ID is "$b99b21e5-99f0-4821-9ecc-33eb4a6505ed"
Sep 17 12:37:41 guacd[1789206]: Connection ID is "$b99b21e5-99f0-4821-9ecc-33eb4a6505ed"
Sep 17 12:37:41 guacd[1839329]: No security mode specified. Defaulting to security mode negotiation with server.
Sep 17 12:37:41 guacd[1839329]: guacd[1839329]: INFO:#011No security mode specified. Defaulting to security mode negotiation with server.
Sep 17 12:37:41 guacd[1839329]: guacd[1839329]: INFO:#011Resize method: display-update
Sep 17 12:37:41 guacd[1839329]: guacd[1839329]: INFO:#011No clipboard line-ending normalization specified. Defaulting to preserving the format of all line endings.
Sep 17 12:37:41 guacd[1839329]: guacd[1839329]: INFO:#011User "@f6592164-60bf-4245-acce-22aeae86763e" joined connection "$b99b21e5-99f0-4821-9ecc-33eb4a6505ed" (1 users now present)
Sep 17 12:37:41 guacd[1839329]: Resize method: display-update
Sep 17 12:37:41 guacd[1839329]: No clipboard line-ending normalization specified. Defaulting to preserving the format of all line endings.
Sep 17 12:37:41 guacd[1839329]: User "@f6592164-60bf-4245-acce-22aeae86763e" joined connection "$b99b21e5-99f0-4821-9ecc-33eb4a6505ed" (1 users now present)
Sep 17 12:37:41 guacd[1839329]: Loading keymap "base"
Sep 17 12:37:41 guacd[1839329]: guacd[1839329]: INFO:#011Loading keymap "base"
Sep 17 12:37:41 guacd[1839329]: guacd[1839329]: INFO:#011Loading keymap "en-us-qwerty"
Sep 17 12:37:41 guacd[1839329]: Loading keymap "en-us-qwerty"
Sep 17 12:37:45 guacd[1839329]: Connected to RDPDR 1.13 as client 0x0007
Sep 17 12:37:45 guacd[1839329]: guacd[1839329]: INFO:#011Connected to RDPDR 1.13 as client 0x0007
Sep 17 12:37:47 guacd[1839329]: Connected to RDPDR 1.13 as client 0x0004
Sep 17 12:37:47 guacd[1839329]: guacd[1839329]: INFO:#011Connected to RDPDR 1.13 as client 0x0004
Sep 17 12:37:47 guacd[1839329]: RDPDR user logged on
Sep 17 12:37:47 guacd[1839329]: guacd[1839329]: INFO:#011RDPDR user logged on
Sep 17 12:38:17 guacd[1839329]: User "@f6592164-60bf-4245-acce-22aeae86763e" disconnected (0 users remain)
Sep 17 12:38:17 guacd[1839329]: guacd[1839329]: INFO:#011User "@f6592164-60bf-4245-acce-22aeae86763e" disconnected (0 users remain)
Sep 17 12:38:17 guacd[1839329]: guacd[1839329]: INFO:#011Last user of connection "$b99b21e5-99f0-4821-9ecc-33eb4a6505ed" disconnected
Sep 17 12:38:17 guacd[1839329]: Last user of connection "$b99b21e5-99f0-4821-9ecc-33eb4a6505ed" disconnected
Sep 17 12:38:17 guacd[1839329]: Internal RDP client disconnected
Sep 17 12:38:17 guacd[1839329]: guacd[1839329]: INFO:#011Internal RDP client disconnected
Sep 17 12:38:17 guacd[1789206]: Connection "$b99b21e5-99f0-4821-9ecc-33eb4a6505ed" removed.
Sep 17 12:38:17 guacd[1789206]: guacd[1789206]: INFO:#011Connection "$b99b21e5-99f0-4821-9ecc-33eb4a6505ed" removed.
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Thanks.


On Monday 16 September, 2024 at 04:58:12 pm IST, Nick Couchman <vn...@apache.org> wrote:


These are just the logs from Tomcat - the logs that you actually need to look at for this particular failure are the ones that contain guacd logs, which will usually be where your syslog facility points (journalctl, /var/log/messages, etc.).

-Nick

  

Re: weird Windows RDP issue

Posted by Nick Couchman <vn...@apache.org>.
On Mon, Sep 16, 2024 at 6:27 AM Eby Mani <eb...@yahoo.com.invalid> wrote:

> Guacamole 1.5.1
> Native Install.
> Ubuntu 22.04 LTS.
> Guacamole not integrated with AD/LDAP.
>
>
>
>
> I have weird Windows RDP issue with some servers and can’t figure out what exactly is the problem.
>
>
> We can’t connect to some of the Windows servers (W2016 and W2019) without configuring username, password, domain values in guacamole connections. When these parameters are not configured, we get “The remote desktop server is currently unreachable” (screenshots attached).
>
>
> When configuring RDP,  we leave "username, password, domain, security mode" empty and "Disable authentication" “un-selected” and "Ignore server certificate" “selected”. (screenshots attached)
>
>
I don't think you want to check the "Disable authentication" box - this is
going to be particularly problematic if your servers use NLA (the default
on most modern versions of Windows, including 2016 and 2019), which
requires authentication as part of the connection process.

>
>
> catalina.out log when connecting to W2019 without
> username, password, domain values configured.
>
> *********************************************
> [2024-09-15 16:57:10] [info] 16:57:10.049 [http-nio-8080-exec-3] INFO
> o.a.g.tunnel.TunnelRequestService - User "eby.mani" connected to connection
> "34".
> [2024-09-15 16:57:29] [info] Exception in thread "Thread-535"
> java.lang.IllegalStateException: Message will not be sent because the
> WebSocket session has been closed
> [2024-09-15 16:57:29] [info] #011at
> org.apache.tomcat.websocket.WsRemoteEndpointImplBase.writeMessagePart(WsRemoteEndpointImplBase.java:442)
> [2024-09-15 16:57:29] [info] #011at
> org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendMessageBlock(WsRemoteEndpointImplBase.java:314)
> [2024-09-1516:57:29] [info] #011at
> org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendMessageBlock(WsRemoteEndpointImplBase.java:254)
> [2024-09-15 16:57:29] [info] #011at
> org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendString(WsRemoteEndpointImplBase.java:195)
> [2024-09-15 16:57:29] [info] #011at
> org.apache.tomcat.websocket.WsRemoteEndpointBasic.sendText(WsRemoteEndpointBasic.java:37)
> [2024-09-15 16:57:29] [info] #011at
> org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint.sendInstruction(GuacamoleWebSocketTunnelEndpoint.java:152)
> [2024-09-15 16:57:29] [info] #011at
> org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint.access$200(GuacamoleWebSocketTunnelEndpoint.java:53)
> [2024-09-15 16:57:29] [info] #011at
> org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint$2.run(GuacamoleWebSocketTunnelEndpoint.java:253)
> [2024-09-15 16:57:29] [info] 16:57:29.258 [http-nio-8080-exec-7] INFO
> o.a.g.tunnel.TunnelRequestService - User "eby.mani" disconnected from
> connection "34". Duration: 19209 milliseconds
> *********************************************
>

These are just the logs from Tomcat - the logs that you actually need to
look at for this particular failure are the ones that contain guacd logs,
which will usually be where your syslog facility points (journalctl,
/var/log/messages, etc.).

-Nick