XRDP se déconnecte

Support Debian
#1

Bonjour,

j’ai deux machines physiques:

  • Une avec nvidia et xfce (1)
  • Une avec radeon et lxqt (2)

La (1) fonctionne bien, sans aucun soucis. Mais après installation de XRDP, impossible de me connecter. A la connexion RDP , j’ai bien la mire de log et apres login/mdp, ca se deconnecte (sans avoir eu accès au bureau.
la (2) fonctionne parfaitement.
Le fichier de conf sur les deux est celui fourni en standard par le package sans modifications.

les deux configurations sont les mêmes.
les logs sur celle qui ne marche pas:

Aug 22 12:17:03 monserveur xrdp[3757]: (3757)(140619522975552)[INFO ] Socket 12: AF_INET6 connection received from ::ffff:IP_monclient port 18644
Aug 22 12:17:03 monserveur xrdp[3757]: (3757)(140619522975552)[DEBUG] Closed socket 12 (AF_INET6 ::ffff:IP_monserveur port 3389)
Aug 22 12:17:03 monserveur xrdp[3787]: (3787)(140619522975552)[DEBUG] Closed socket 11 (AF_INET6 :: port 3389)
Aug 22 12:17:03 monserveur xrdp[3787]: (3787)(140619522975552)[INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
Aug 22 12:17:03 monserveur xrdp[3787]: (3787)(140619522975552)[INFO ] Using default X.509 key file: /etc/xrdp/key.pem
Aug 22 12:17:03 monserveur xrdp[3787]: (3787)(140619522975552)[ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied
Aug 22 12:17:03 monserveur xrdp[3787]: (3787)(140619522975552)[DEBUG] TLSv1.3 enabled
Aug 22 12:17:03 monserveur xrdp[3787]: (3787)(140619522975552)[DEBUG] TLSv1.2 enabled
Aug 22 12:17:03 monserveur xrdp[3787]: (3787)(140619522975552)[DEBUG] Security layer: requested 0, selected 0
Aug 22 12:17:03 monserveur xrdp[3787]: (3787)(140619522975552)[INFO ] connected client computer name: monuser
Aug 22 12:17:03 monserveur xrdp[3787]: (3787)(140619522975552)[INFO ] adding channel item name rdpdr chan_id 1004 flags 0x80800000
Aug 22 12:17:03 monserveur xrdp[3787]: (3787)(140619522975552)[INFO ] adding channel item name rdpsnd chan_id 1005 flags 0xc0000000
Aug 22 12:17:03 monserveur xrdp[3787]: (3787)(140619522975552)[INFO ] adding channel item name cliprdr chan_id 1006 flags 0xc0a00000
Aug 22 12:17:03 monserveur xrdp[3787]: (3787)(140619522975552)[INFO ] adding channel item name drdynvc chan_id 1007 flags 0xc0800000
Aug 22 12:17:03 monserveur xrdp[3787]: (3787)(140619522975552)[INFO ] Non-TLS connection established from ::ffff:IP_monclient port 18644: encrypted with standard RDP security
Aug 22 12:17:03 monserveur xrdp[3787]: (3787)(140619522975552)[DEBUG] xrdp_00000ecb_wm_login_mode_event_00000001
Aug 22 12:17:03 monserveur xrdp[3787]: (3787)(140619522975552)[INFO ] Loading keymap file /etc/xrdp/km-0000040c.ini
Aug 22 12:17:03 monserveur xrdp[3787]: (3787)(140619522975552)[WARN ] local keymap file for 0x0000040c found and doesn't match built in keymap, using local keymap file
Aug 22 12:17:08 monserveur xrdp[3787]: (3787)(140619522975552)[DEBUG] xrdp_wm_log_msg: connecting to sesman ip 127.0.0.1 port 3350
Aug 22 12:17:08 monserveur xrdp-sesman[3747]: (3747)(140065012127296)[INFO ] A connection received from ::1 port 47156
Aug 22 12:17:09 monserveur xrdp[3787]: (3787)(140619522975552)[INFO ] xrdp_wm_log_msg: sesman connect ok
Aug 22 12:17:09 monserveur xrdp[3787]: (3787)(140619522975552)[DEBUG] xrdp_wm_log_msg: sending login info to session manager, please wait...
Aug 22 12:17:09 monserveur xrdp[3787]: (3787)(140619522975552)[DEBUG] return value from xrdp_mm_connect 0
Aug 22 12:17:09 monserveur xrdp-sesman[3747]: (3747)(140065012127296)[INFO ] ++ created session (access granted): username monuser, ip ::ffff:IP_monclient:18644 - socket: 12
Aug 22 12:17:09 monserveur xrdp-sesman[3747]: (3747)(140065012127296)[INFO ] starting Xorg session...
Aug 22 12:17:09 monserveur xrdp-sesman[3747]: (3747)(140065012127296)[DEBUG] Closed socket 9 (AF_INET6 :: port 5910)
Aug 22 12:17:09 monserveur xrdp-sesman[3747]: (3747)(140065012127296)[DEBUG] Closed socket 9 (AF_INET6 :: port 6010)
Aug 22 12:17:09 monserveur xrdp-sesman[3747]: (3747)(140065012127296)[DEBUG] Closed socket 9 (AF_INET6 :: port 6210)
Aug 22 12:17:09 monserveur xrdp[3787]: (3787)(140619522975552)[INFO ] xrdp_wm_log_msg: login successful for display 10
Aug 22 12:17:09 monserveur xrdp-sesman[3788]: (3788)(140065012127296)[INFO ] calling auth_start_session from pid 3788
Aug 22 12:17:09 monserveur xrdp-sesman[3747]: (3747)(140065012127296)[DEBUG] Closed socket 8 (AF_INET6 ::1 port 3350)
Aug 22 12:17:09 monserveur xrdp[3787]: (3787)(140619522975552)[DEBUG] xrdp_wm_log_msg: started connecting
Aug 22 12:17:09 monserveur systemd[1]: Started Session c7 of user monuser.
Aug 22 12:17:09 monserveur xrdp-sesman[3788]: (3788)(140065012127296)[DEBUG] Closed socket 7 (AF_INET6 ::1 port 3350)
Aug 22 12:17:09 monserveur xrdp-sesman[3788]: (3788)(140065012127296)[DEBUG] Closed socket 8 (AF_INET6 ::1 port 3350)
Aug 22 12:17:09 monserveur xrdp-sesman[3790]: (3790)(140065012127296)[INFO ] /usr/lib/xorg/Xorg :10 -auth .Xauthority -config xrdp/xorg.conf -noreset -nolisten tcp -logfile .xorgxrdp.%s.log
Aug 22 12:17:09 monserveur xrdp[3787]: (3787)(140619522975552)[INFO ] lib_mod_log_peer: xrdp_pid=3787 connected to X11rdp_pid=3790 X11rdp_uid=1000 X11rdp_gid=1000 client_ip=::ffff:IP_monclient client_port=18644
Aug 22 12:17:09 monserveur xrdp-sesman[3788]: (3788)(140065012127296)[CORE ] waiting for window manager (pid 3789) to exit
Aug 22 12:17:09 monserveur xrdp[3787]: (3787)(140619522975552)[DEBUG] xrdp_wm_log_msg: connected ok
Aug 22 12:17:09 monserveur xrdp-sesman[3788]: (3788)(140065012127296)[CORE ] window manager (pid 3789) did exit, cleaning up session
Aug 22 12:17:10 monserveur xrdp-sesman[3788]: (3788)(140065012127296)[INFO ] calling auth_stop_session and auth_end from pid 3788
Aug 22 12:17:10 monserveur xrdp-sesman[3788]: (3788)(140065012127296)[DEBUG] cleanup_sockets:
Aug 22 12:17:10 monserveur xrdp[3787]: (3787)(140619522975552)[DEBUG] xrdp_mm_connect_chansrv: chansrv connect successful
Aug 22 12:17:10 monserveur xrdp-sesman[3788]: (3788)(140065012127296)[DEBUG] cleanup_sockets: deleting /run/xrdp/sockdir/xrdp_chansrv_socket_10
Aug 22 12:17:10 monserveur xrdp[3787]: (3787)(140619522975552)[DEBUG] Closed socket 16 (AF_INET6 ::1 port 47156)
Aug 22 12:17:10 monserveur xrdp-sesman[3788]: (3788)(140065012127296)[DEBUG] cleanup_sockets: failed to delete /run/xrdp/sockdir/xrdp_chansrv_socket_10
Aug 22 12:17:10 monserveur xrdp[3787]: (3787)(140619522975552)[DEBUG] Closed socket 12 (AF_INET6 ::ffff:IP_monserveur port 3389)
Aug 22 12:17:10 monserveur systemd[3360]: home-monuser-thinclient_drives.mount: Succeeded.
Aug 22 12:17:10 monserveur systemd[1770]: home-monuser-thinclient_drives.mount: Succeeded.
Aug 22 12:17:10 monserveur systemd[1]: home-monuser-thinclient_drives.mount: Succeeded.
Aug 22 12:17:10 monserveur xrdp-sesman[3788]: (3788)(140065012127296)[DEBUG] cleanup_sockets: deleting /run/xrdp/sockdir/xrdpapi_10
Aug 22 12:17:10 monserveur xrdp[3787]: (3787)(140619522975552)[DEBUG] xrdp_mm_module_cleanup
Aug 22 12:17:10 monserveur systemd[1]: session-c7.scope: Succeeded.
Aug 22 12:17:10 monserveur xrdp-sesman[3747]: (3747)(140065012127296)[INFO ] ++ terminated session:  username monuser, display :10.0, session_pid 3788, ip ::ffff:IP_monclient:18644 - socket: 12
Aug 22 12:17:10 monserveur xrdp[3787]: (3787)(140619522975552)[DEBUG] Closed socket 17 (AF_UNIX)
Aug 22 12:17:10 monserveur xrdp[3787]: (3787)(140619522975552)[DEBUG] Closed socket 18 (AF_UNIX)

pas de blocage des connexion par le pare-feu j’ai vérifié (de toute façon je n’aurais pas la mire si c’était le cas.

#2

Bonjour

Je penses que ton problème viens du fait que ton utilisateur est pas membre du groupe appartenant à la clé SSH. (ssl-cert)

Vérifie le groupe de la clé:

ls -la /etc/xrdp/key.pem

Puis tape

id <tonuser>

Si le groupe de la clé est pas présent sur ton utilisateur il faut ajouter le groupe à ton utilisateur.

Message Erreur

[ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied

adduser <monuser> ssl-cert ;

Désoler pour le détérrage.

#3

salut @dexter74
pas de souci pour le déterrage.
L’information est intéressante.
J’avais finalement résolu mon problème en refaisant complètement l’installation, mais elle est moins sécurisée off course.

je vais regarder ça au regard de ta réponse :slight_smile: merci.