Public bug reported: [ Impact ]
When smartcard logon is active, the RDP plugin sources FreeRDP_Password from the ordinary "password" field. A PIN stored in the dedicated "smartcard_pin" field is never sent to the card middleware. If the user only sets a PIN and not a password (standard for smartcard users), the empty password is transmitted as the PIN, not allowing the user to login. On hardware keys (ie Yubikeys), this counts to the PIN retry limit. [ Test Plan ] Requirements: - Windows instance with RDP enabled and a smartcard added for login. - Ubuntu instance with Remmina installed. To Test: - Put in your Windows server's name into the "Server" field, the Windows user's username into the "Username" field, and the AD domain into the "Domain" field (if applicable). Do not enter a password. - Check the radio button labeled "Use a smartcard for logon" and enter your PIN in the "Smartcard PIN" field. - Click "Save and Connect", the initial connection attempt will fail, and a dialog box will pop up asking for a smartcard PIN. Putting the PIN in here will work. [ Where problems could occur ] This patch copies the smartcards PIN into the password field before login when the "smartcard-logon" dialog box is checked and the PIN exists. In the event that the user needs both a PIN and a password to connect to the remote, this will overwrite the password field, causing a login failure. [ Other Info ] Upstream commit: https://gitlab.com/Remmina/Remmina/-/commit/1f43541c30ece6ebaffda8ab5452ae4eacbfeb5e There are two workarounds: 1) After the smartcard login fails the default login path, a dedicated popup asks for the users PIN. Putting the PIN in here works, because it follows a different code path. 2) Putting the PIN in the password field works, but is unintuitive. ** Affects: remmina Importance: Undecided Status: New ** Affects: remmina (Ubuntu) Importance: Undecided Status: New ** Affects: remmina (Ubuntu Noble) Importance: Undecided Status: New ** Affects: remmina (Ubuntu Resolute) Importance: Undecided Status: New ** Affects: remmina (Ubuntu Stonking) Importance: Undecided Status: New ** Also affects: remmina Importance: Undecided Status: New ** Changed in: freerdp3 (Ubuntu) Status: New => Invalid ** Changed in: freerdp3 (Ubuntu) Assignee: Jacob Hanks (quanchobi) => (unassigned) ** Changed in: remmina Status: New => Confirmed ** Also affects: remmina (Ubuntu) Importance: Undecided Status: New ** Also affects: remmina (Ubuntu Resolute) Importance: Undecided Status: New ** Also affects: freerdp3 (Ubuntu Resolute) Importance: Undecided Status: New ** Also affects: remmina (Ubuntu Stonking) Importance: Undecided Status: New ** Also affects: freerdp3 (Ubuntu Stonking) Importance: Undecided Status: Invalid ** Also affects: remmina (Ubuntu Noble) Importance: Undecided Status: New ** Also affects: freerdp3 (Ubuntu Noble) Importance: Undecided Status: New ** No longer affects: remmina ** No longer affects: freerdp3 (Ubuntu) ** No longer affects: freerdp3 (Ubuntu Noble) ** No longer affects: freerdp3 (Ubuntu Resolute) ** No longer affects: freerdp3 (Ubuntu Stonking) ** Also affects: remmina Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2163414 Title: [SRU] RDP smartcard logon does not work To manage notifications about this bug go to: https://bugs.launchpad.net/remmina/+bug/2163414/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
