Confirmed bug is present in noble but not in jammy. Hence, marking jammy
as invalid.

I confirmed by setting up a noble and jammy Vitrual Box VM that had
Remmina installed. I setup a profile with credentials to RDP into an
Rasperry Pi on my local network and checked if I got a prompt when
trying to connect to the Pi.

** Changed in: remmina (Ubuntu Jammy)
       Status: Incomplete => Invalid

** Description changed:

+ [ Impact ]
+ 
+ Remmina 1.4.35 prompts for RDP credentials even they are saved. It shows the 
credentials disalog prefilled with the username and password. 
+ The expected behavior for Remmina is to proceed with the connection without 
prompting user for their credentials.
+ Users generally use connection profiles with saved credentials to make the 
tool more convenient to use.
+ However, this bug requires a redundant click before establishing connection. 
+ The additional prompt with filled credentials may also confuse users that the 
connection failed due to incorrect credentials resulting in a prompt for 
updated credentials.
+ 
+ Upstream issue: https://gitlab.com/Remmina/Remmina/-/issues/3111
+ Merge request: https://gitlab.com/Remmina/Remmina/-/merge_requests/2592/diffs
+ 
+ The patch short-circuits the part of the authentication flow where the
+ credentials are requested from the user, if they are already available.
+ The patch is simple and small in size. Overall, seems like a safe change
+ to SRU.
+ 
+ 
+ [ Test Plan ]
+ 
+ * Setup a new connection profile by clicking on the "+" on the top left 
corner after starting Remmina.
+ * Fill server address, username and password. Make sure protocol selected is 
RDP.
+ * Save the profile.
+ * Attempt connection by double clicking on the saved profile or clicking 
connect from the right-click context menu on the profile.
+ * Remmina should not produce a prompt with filled Username and Password 
fields, and instead should directly establish an RDP session with the server.
+ 
+ 
+ [ Where problems could occur ]
+ 
+ * Remmina may fail to authenticate RDP sessions using saved profiles with 
correct credentials due to an unexpected regression from the patch. The test 
plan will catch this regression.
+ * Another unlikely regression is that other config values in the profile are 
not correctly propagated when establishing a RDP session. A fuzzy test around 
setting some config values when creating the profile and ensuring a RDP session 
using that profile behaves as expected should cover this.
+ 
+ 
+ [Original Report]
+ 
  Remmina 1.4.35 prompts for RDP credentials even when they are saved. It
  shows the credentials dialog prefilled with the username and password.
  
  This behavior is observed only when using RDP or TLS security protocol
  negotiation. NLA is not affected.
  
  The expected behavior for Remmina is to proceed with the connection
  without prompting user for their credentials.
  
  This issue was fixed upstream in version 1.4.36
  
  Patch for this fix is attached.
  
  Upstream issue: https://gitlab.com/Remmina/Remmina/-/issues/3111
  Merge request: https://gitlab.com/Remmina/Remmina/-/merge_requests/2592/diffs

** Description changed:

  [ Impact ]
  
- Remmina 1.4.35 prompts for RDP credentials even they are saved. It shows the 
credentials disalog prefilled with the username and password. 
+ Remmina 1.4.35 prompts for RDP credentials even they are saved. It shows the 
credentials dialog prefilled with the username and password.
  The expected behavior for Remmina is to proceed with the connection without 
prompting user for their credentials.
  Users generally use connection profiles with saved credentials to make the 
tool more convenient to use.
- However, this bug requires a redundant click before establishing connection. 
+ However, this bug requires a redundant click before establishing connection.
  The additional prompt with filled credentials may also confuse users that the 
connection failed due to incorrect credentials resulting in a prompt for 
updated credentials.
  
  Upstream issue: https://gitlab.com/Remmina/Remmina/-/issues/3111
  Merge request: https://gitlab.com/Remmina/Remmina/-/merge_requests/2592/diffs
  
  The patch short-circuits the part of the authentication flow where the
  credentials are requested from the user, if they are already available.
  The patch is simple and small in size. Overall, seems like a safe change
  to SRU.
  
- 
  [ Test Plan ]
  
  * Setup a new connection profile by clicking on the "+" on the top left 
corner after starting Remmina.
  * Fill server address, username and password. Make sure protocol selected is 
RDP.
  * Save the profile.
  * Attempt connection by double clicking on the saved profile or clicking 
connect from the right-click context menu on the profile.
  * Remmina should not produce a prompt with filled Username and Password 
fields, and instead should directly establish an RDP session with the server.
  
- 
  [ Where problems could occur ]
  
  * Remmina may fail to authenticate RDP sessions using saved profiles with 
correct credentials due to an unexpected regression from the patch. The test 
plan will catch this regression.
- * Another unlikely regression is that other config values in the profile are 
not correctly propagated when establishing a RDP session. A fuzzy test around 
setting some config values when creating the profile and ensuring a RDP session 
using that profile behaves as expected should cover this.
- 
+ * Another unlikely regression is that other config values in the profile are 
not correctly propagated when establishing an RDP session. A fuzzy test around 
setting some config values when creating the profile and ensuring an RDP 
session using that profile behaves as expected should cover this.
  
  [Original Report]
  
  Remmina 1.4.35 prompts for RDP credentials even when they are saved. It
  shows the credentials dialog prefilled with the username and password.
  
  This behavior is observed only when using RDP or TLS security protocol
  negotiation. NLA is not affected.
  
  The expected behavior for Remmina is to proceed with the connection
  without prompting user for their credentials.
  
  This issue was fixed upstream in version 1.4.36
  
  Patch for this fix is attached.
  
  Upstream issue: https://gitlab.com/Remmina/Remmina/-/issues/3111
  Merge request: https://gitlab.com/Remmina/Remmina/-/merge_requests/2592/diffs

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2111952

Title:
  Remmina prompts for RDP credentials even when they are saved

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/remmina/+bug/2111952/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to