https://bugs.kde.org/show_bug.cgi?id=501477
Bug ID: 501477
Summary: NTML_MESSAGE_HEADER Invalid Signature - SEC_E_INVALID
TOKEN
Classification: Plasma
Product: KRdp
Version: 6.3.3
Platform: Other
OS: Linux
Status: REPORTED
Severity: normal
Priority: NOR
Component: general
Assignee: unassigned-b...@kde.org
Reporter: ashleysom...@gmail.com
CC: ahiems...@heimr.nl
Target Milestone: ---
I got provisioned a new Windows 11 laptop from my new workplace.
I'm trying to use the built-in "Remote Desktop Connection" software to connect
to KRDP on my KDE Neon Desktop
Using latest release KRDP v6.3.3 on Up-to-date KDE-Neon, and windows laptop
with latest Windows 11 updates.
After entering the IP address and username into the connection window, plasma
xdg-desktop-portal-kde asks me to share my screen. I click "OK".
Then I am asked to enter the password. I enter the correct password, windows
shows an authentication error.
Here is the output from krdpserver cli:
----
org.kde.krdp: Initializing Freedesktop Portal Session
org.kde.krdp: Session setup completed, start processing...
[16:08:59:857] [296889:302985] [INFO][com.freerdp.core.connection] - Client
Security: NLA:0 TLS:0 RDP:1
[16:08:59:857] [296889:302985] [INFO][com.freerdp.core.connection] - Server
Security: NLA:1 TLS:0 RDP:0
[16:08:59:857] [296889:302985] [WARN][com.freerdp.core.connection] - server
supports only NLA Security
[16:08:59:857] [296889:302985] [ERROR][com.freerdp.core.connection] - Protocol
security negotiation failure
[16:08:59:860] [296889:302985] [ERROR][com.freerdp.core.peer] -
peer_recv_callback: CONNECTION_STATE_INITIAL - rdp_server_accept_nego() fail
[16:08:59:860] [296889:302985] [ERROR][com.freerdp.core.transport] -
transport_check_fds: transport->ReceiveCallback() - -1
org.kde.krdp: Unable to check file descriptor
org.kde.krdp: Closing session
org.kde.krdp: Closing Freedesktop Portal Session
org.kde.krdp: Initializing Freedesktop Portal Session
org.kde.krdp: Session setup completed, start processing...
[16:10:38:453] [296889:304164] [INFO][com.freerdp.core.connection] - Client
Security: NLA:1 TLS:1 RDP:0
[16:10:38:453] [296889:304164] [INFO][com.freerdp.core.connection] - Server
Security: NLA:1 TLS:0 RDP:0
[16:10:38:453] [296889:304164] [INFO][com.freerdp.core.connection] - Negotiated
Security: NLA:1 TLS:0 RDP:0
org.kde.krdp: Started Freedesktop Portal session
libva info: VA-API version 1.20.0
libva info: Trying to open /usr/lib/x86_64-linux-gnu/dri/iHD_drv_video.so
libva info: Found init function __vaDriverInit_1_20
libva info: va_openDriver() returns 0
kpipewire_vaapi_logging: VAAPI: entrypoint 6 of profile 14 is not supported by
the device "/dev/dri/renderD128"
kpipewire_vaapi_logging: VAAPI: entrypoint 8 of profile 14 is not supported by
the device "/dev/dri/renderD128"
libva info: VA-API version 1.20.0
libva info: Trying to open /usr/lib/x86_64-linux-gnu/dri/iHD_drv_video.so
libva info: Found init function __vaDriverInit_1_20
libva info: va_openDriver() returns 0
libva info: VA-API version 1.20.0
libva info: Trying to open /usr/lib/x86_64-linux-gnu/dri/iHD_drv_video.so
libva info: Found init function __vaDriverInit_1_20
libva info: va_openDriver() returns 0
libva info: VA-API version 1.20.0
libva info: Trying to open /usr/lib/x86_64-linux-gnu/dri/iHD_drv_video.so
libva info: Found init function __vaDriverInit_1_20
libva info: va_openDriver() returns 0
kpipewire_vaapi_logging: VAAPI: entrypoint 6 of profile 14 is not supported by
the device "/dev/dri/renderD128"
kpipewire_vaapi_logging: VAAPI: entrypoint 8 of profile 14 is not supported by
the device "/dev/dri/renderD128"
libva info: VA-API version 1.20.0
libva info: Trying to open /usr/lib/x86_64-linux-gnu/dri/iHD_drv_video.so
libva info: Found init function __vaDriverInit_1_20
libva info: va_openDriver() returns 0
libva info: VA-API version 1.20.0
libva info: Trying to open /usr/lib/x86_64-linux-gnu/dri/iHD_drv_video.so
libva info: Found init function __vaDriverInit_1_20
libva info: va_openDriver() returns 0
[16:10:56:380] [296889:304164] [ERROR][com.winpr.sspi.NTLM] -
NTLM_MESSAGE_HEADER Invalid signature, got `z+, expected NTLMSSP
[16:10:56:380] [296889:304164] [WARN][com.winpr.negotiate] -
AcceptSecurityContext status SEC_E_INVALID_TOKEN [0x80090308]
[16:10:56:380] [296889:304164] [WARN][com.winpr.sspi] - AcceptSecurityContext
status SEC_E_INVALID_TOKEN [0x80090308]
[16:10:56:380] [296889:304164] [ERROR][com.freerdp.core.nla] -
AcceptSecurityContext status SEC_E_INVALID_TOKEN [0x80090308]
[16:10:56:380] [296889:304164] [ERROR][com.freerdp.core.transport] - client
authentication failure
[16:10:56:380] [296889:304164] [ERROR][com.freerdp.core.peer] -
peer_recv_callback: CONNECTION_STATE_INITIAL - rdp_server_accept_nego() fail
[16:10:56:380] [296889:304164] [ERROR][com.freerdp.core.transport] -
transport_check_fds: transport->ReceiveCallback() - -1
org.kde.krdp: Unable to check file descriptor
org.kde.krdp: Closing session
org.kde.krdp: Closing Freedesktop Portal Session
---
I believe the key issue is this line:
"NTLM_MESSAGE_HEADER Invalid signature, got `z+, expected NTLMSSP"
Whatever kind of NTLM the Windows client is using seems to be not compatible
with KRDP.
--
You are receiving this mail because:
You are watching all bug changes.
