xrdp server on mga9 - connection problem

[nexus]

Hello,

When I try to connect to a remote computer (mga9 and xrdp) using rdp the connection is dropped. The problem occurs on a normal user and root. After checking the log file:
~/.xorgxrdp.10.log
i see the problem is with:

[ 2274.593] (EE) systemd-logind: failed to take device /dev/dri/card0: Operation not permitted

.

What I did:
- install xrdp
- configure file: /etc/xrdp/xrdp.ini

...
security_layer=rdp
...
crypt_level=none
...
[Xorg]
name=Xorg
lib=libxup.so
username=ask
password=ask
ip=127.0.0.1
port=-1
code=20
...

- configure file: /etc/xrdp/sesman.ini

...
param=xorg.conf
...

I think the problem is with xorg.conf but i dont know what i need do to prepare this file to work with xrdp. Has anyone successfully set up an xrdp server on mga9/mga8?

[doktor5000]

Hi there, what graphics card and driver do you use on that box where xrdp is running? Also what client do you use on the other side?
Can you post some more from the log, that message should only be a warning and not a fatal error, see https://github.com/neutrinolabs/xrdp/issues/2588 - the user would need to be in the video group to access that device without the error, but that's not what prevents xrdp from starting.


There are also some similar reports to your issue, although with different causes:
https://github.com/neutrinolabs/xrdp/issues/2165
https://ubuntuforums.org/showthread.php?t=2442265

[isadora]

graphics card: Intel AldervLake-UP3 GT2 (UHD raphics)
driver: Intel Kernel Mode setting (Xorg modesetting)
/var/log/xrdp.log:

Code: Select all

[20230804-06:44:43] [INFO ] starting xrdp with pid 8605
[20230804-06:44:43] [INFO ] address [0.0.0.0] port [3389] mode 1
[20230804-06:44:43] [INFO ] listening to port 3389 on 0.0.0.0
[20230804-06:44:43] [INFO ] xrdp_listen_pp done
[20230804-06:46:06] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:192.168.43.152 port 38718
[20230804-06:46:06] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20230804-06:46:06] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20230804-06:46:06] [INFO ] Security protocol: configured [RDP], requested [SSL|HYBRID|RDP], selected [RDP]
[20230804-06:46:06] [INFO ] Connected client computer name: localhost
[20230804-06:46:06] [WARN ] Client and server do not both support the same encryption.
[20230804-06:46:06] [INFO ] xrdp_load_keyboard_layout: Keyboard information sent by the RDP client, keyboard_type:[0x00], keyboard_subtype:[0x00], keylayout:[0x00000415]
[20230804-06:46:06] [INFO ] xrdp_load_keyboard_layout: model [] variant [] layout [pl] options []
[20230804-06:46:06] [INFO ] Non-TLS connection established from ::ffff:192.168.43.152 port 38718: with security level : none
[20230804-06:46:06] [INFO ] xrdp_caps_process_pointer: client supports new(color) cursor
[20230804-06:46:06] [INFO ] xrdp_process_offscreen_bmpcache: support level 1 cache size 7864320 MB cache entries 100
[20230804-06:46:06] [WARN ] Received unknown [MS-RDPBCGR] TS_SHAREDATAHEADER pduType2 43 (ignoring)
[20230804-06:46:06] [WARN ] Dynamic Virtual Channel named 'drdynvc' not found, channel not initialized
[20230804-06:46:06] [INFO ] Loading keymap file /etc/xrdp/km-00000415.ini
[20230804-06:46:06] [WARN ] local keymap file for 0x00000415 found and doesn't match built in keymap, using local keymap file
[20230804-06:46:15] [INFO ] connecting to sesman on 127.0.0.1:3350
[20230804-06:46:15] [INFO ] xrdp_wm_log_msg: sesman connect ok
[20230804-06:46:15] [INFO ] sesman connect ok
[20230804-06:46:15] [INFO ] sending login info to session manager. Please wait...
[20230804-06:46:15] [INFO ] xrdp_wm_log_msg: login successful for user jm on display 10
[20230804-06:46:15] [INFO ] login successful for user jm on display 10
[20230804-06:46:15] [INFO ] loaded module 'libxup.so' ok, interface size 10296, version 4
[20230804-06:46:15] [INFO ] started connecting
[20230804-06:46:15] [INFO ] lib_mod_connect: connecting via UNIX socket
[20230804-06:49:45] [INFO ] connection problem, giving up
[20230804-06:49:45] [INFO ] some problem
[20230804-06:49:45] [ERROR] xrdp_wm_log_msg: Error connecting to user session
[20230804-06:49:45] [INFO ] Error connecting to user session

/var/log/xrdp-sesman.log:

Code: Select all

[20230804-06:44:43] [INFO ] starting xrdp-sesman with pid 8604
[20230804-06:46:15] [INFO ] Socket 12: AF_INET6 connection received from ::1 port 53382
[20230804-06:46:15] [INFO ] Terminal Server Users group is disabled, allowing authentication
[20230804-06:46:15] [INFO ] ++ created session (access granted): username jm, ip ::ffff:192.168.43.152:38718 - socket: 12
[20230804-06:46:15] [INFO ] starting Xorg session...
[20230804-06:46:15] [INFO ] Starting session: session_pid 8894, display :10.0, width 1366, height 768, bpp 24, client ip ::ffff:192.168.43.152:38718 - socket: 12, user name jm
[20230804-06:46:15] [INFO ] [session start] (display 10): calling auth_start_session from pid 8894
[20230804-06:46:15] [ERROR] sesman_data_in: scp_process_msg failed
[20230804-06:46:15] [ERROR] sesman_main_loop: trans_check_wait_objs failed, removing trans
[20230804-06:46:15] [INFO ] Starting X server on display 10: /usr/libexec/Xorg :10 -auth .Xauthority -config xorg.conf -noreset -nolisten tcp -logfile .xorgxrdp.%s.log 
[20230804-06:46:25] [WARN ] Timed out waiting for X server on display 10 to startup
[20230804-06:46:25] [INFO ] Session started successfully for user jm on display 10
[20230804-06:46:25] [INFO ] Session in progress on display 10, waiting until the window manager (pid 8897) exits to end the session
[20230804-06:46:25] [INFO ] Starting the xrdp channel server for display 10
[20230804-06:46:25] [WARN ] Timed out waiting for X server on display 10 to startup
[20230804-06:46:25] [ERROR] There is no X server active on display 10
[20230804-06:46:25] [ERROR] A fatal error has occurred attempting to start the window manager on display 10, aborting connection
[20230804-06:46:25] [WARN ] Window manager (pid 8897, display 10) exited quickly (0 secs). This could indicate a window manager config problem
[20230804-06:46:25] [INFO ] Calling auth_stop_session and auth_end from pid 8894
[20230804-06:46:25] [INFO ] Terminating X server (pid 8898) on display 10
[20230804-06:46:25] [INFO ] Terminating the xrdp channel server (pid 8913) on display 10
[20230804-06:46:25] [INFO ] X server on display 10 (pid 8898) returned exit code 1 and signal number 0
[20230804-06:46:25] [INFO ] xrdp channel server for display 10 (pid 8913) exit code 0 and signal number 0
[20230804-06:46:25] [INFO ] cleanup_sockets:
[20230804-06:46:25] [INFO ] Process 8894 has exited
[20230804-06:46:25] [INFO ] ++ terminated session:  username jm, display :10.0, session_pid 8894, ip ::ffff:192.168.43.152:38718 - socket: 12

~/.xorgxrdp.10.log:

Code: Select all

[  1764.588]
X.Org X Server 1.21.1.8
X Protocol Version 11, Revision 0
[  1764.588] Current Operating System: Linux localhost 6.4.7-desktop-3.mga9 #1 SMP PREEMPT_DYNAMIC Sun Jul 30 08:58:25 UTC 2023 x86_64
[  1764.588] Kernel command line: BOOT_IMAGE=/boot/vmlinuz-6.4.7-desktop-3.mga9 root=UUID=171feab5-330c-4ef1-a687-290690ee35d5 ro splash quiet noiswmd resume=UUID=33b945ce-a6d3-4cc9-bf19-81cce409496c audit=0
[  1764.588] Build ID: x11-server 21.1.8-7.mga9
[  1764.588] Current version of pixman: 0.42.2
[  1764.588]    Before reporting problems, check https://bugs.mageia.org
   to make sure that you have the latest version.
[  1764.588] Markers: (--) probed, (**) from config file, (==) default setting,
   (++) from command line, (!!) notice, (II) informational,
   (WW) warning, (EE) error, (NI) not implemented, (??) unknown.
[  1764.588] (++) Log file: ".xorgxrdp.10.log", Time: Fri Aug  4 06:46:15 2023
[  1764.588] (++) Using config file: "/etc/X11/xorg.conf"
[  1764.588] (==) Using config directory: "/etc/X11/xorg.conf.d"
[  1764.588] (==) Using system config directory "/usr/share/X11/xorg.conf.d"
[  1764.588] (==) ServerLayout "layout1"
[  1764.588] (**) |-->Screen "screen1" (0)
[  1764.588] (**) |   |-->Monitor "monitor1"
[  1764.588] (**) |   |-->Device "device1"
[  1764.588] (**) Option "DontZap" "False"
[  1764.588] (**) Option "AllowMouseOpenFail"
[  1764.588] (==) Automatically adding devices
[  1764.588] (==) Automatically enabling devices
[  1764.588] (==) Automatically adding GPU devices
[  1764.588] (==) Automatically binding GPU devices
[  1764.588] (==) Max clients allowed: 512, resource mask: 0xfffff
[  1764.588] (==) FontPath set to:
   catalogue:/etc/X11/fontpath.d,
   built-ins
[  1764.588] (**) ModulePath set to "/usr/lib64/xorg/extra-modules,/usr/lib64/xorg/modules,/usr/lib/xorg/extra-modules,/usr/lib/xorg/modules"
[  1764.588] (II) The server relies on udev to provide the list of input devices.
   If no devices become available, reconfigure udev or disable AutoAddDevices.
[  1764.588] (II) Loader magic: 0x631e20
[  1764.588] (II) Module ABI versions:
[  1764.588]    X.Org ANSI C Emulation: 0.4
[  1764.588]    X.Org Video Driver: 25.2
[  1764.588]    X.Org XInput driver : 24.4
[  1764.588]    X.Org Server Extension : 10.0
[  1764.590] (II) systemd-logind: took control of session /org/freedesktop/login1/session/c3
[  1764.591] (II) xfree86: Adding drm device (/dev/dri/card0)
[  1764.591] (II) Platform probe for /sys/devices/pci0000:00/0000:00:02.0/drm/card0
[  1764.591] (EE) systemd-logind: failed to take device /dev/dri/card0: Operation not permitted
[  1764.595] (--) PCI:*(0@0:2:0) 8086:4628:1028:0b06 rev 12, Mem @ 0x6054000000/16777216, 0x4000000000/268435456, I/O @ 0x00003000/64, BIOS @ 0x????????/131072
[  1764.595] (II) Open ACPI successful (/var/run/acpid.socket)
[  1764.595] (II) "glx" will be loaded by default.
[  1764.595] (II) LoadModule: "v4l"
[  1764.595] (II) Loading /usr/lib64/xorg/modules/drivers/v4l_drv.so
[  1764.595] (II) Module v4l: vendor="X.Org Foundation"
[  1764.595]    compiled for 1.21.1.7, module version = 0.1.1
[  1764.595]    ABI class: X.Org Video Driver, version 25.2
[  1764.595] (II) LoadModule: "glx"
[  1764.595] (II) Loading /usr/lib64/xorg/modules/extensions/libglx.so
[  1764.596] (II) Module glx: vendor="X.Org Foundation"
[  1764.596]    compiled for 1.21.1.8, module version = 1.0.0
[  1764.596]    ABI class: X.Org Server Extension, version 10.0
[  1764.596] (II) LoadModule: "modesetting"
[  1764.596] (II) Loading /usr/lib64/xorg/modules/drivers/modesetting_drv.so
[  1764.596] (II) Module modesetting: vendor="X.Org Foundation"
[  1764.596]    compiled for 1.21.1.8, module version = 1.21.1
[  1764.596]    Module class: X.Org Video Driver
[  1764.596]    ABI class: X.Org Video Driver, version 25.2
[  1764.596] (II) v4l driver for Video4Linux overlay mode (V4L2)
[  1764.596] (II) modesetting: Driver for Modesetting Kernel Drivers: kms
[  1764.596] (EE)
Fatal server error:
[  1764.596] (EE) parse_vt_settings: Cannot open /dev/tty0 (Permission denied)
[  1764.596] (EE)
[  1764.597] (EE)
Please consult the Mageia support
    at https://bugs.mageia.org
 for help.
[  1764.597] (EE) Please also check the log file at ".xorgxrdp.10.log" for additional information.
[  1764.597] (EE)
[  1764.597] (WW) xf86CloseConsole: KDSETMODE failed: Bad file descriptor
[  1764.597] (WW) xf86CloseConsole: VT_GETMODE failed: Bad file descriptor
[  1764.597] (EE) Server terminated with error (1). Closing log file.


client rdp: remmina (mga5)

I added the user to the video group, but without success.
I dont have ~/.xinitrc. Do I have to create it by hand?

[doktor5000]

The user you're trying to login as (jm) - is that user already logged in on the mga9 system locally, or is there no session at all for that user ?

[nexus]

Unfortunately regardless of whether the user (jm) is logged in or not the effect is the same.

[doktor5000]

Hi there, I tested xrdp on a default mga9/cauldron install. No need to change any configuration, just systemctl start xrdp and I was able to connect successfully.
Although this only worked for a newly created user, there might be some issues with my existing user as /home is from an older installation.

So you may want to change /etc/xrdp/xrdp.ini back to the default, and maybe try with a newer client - mga5 is end of life for over 6 years ...

[nexus]

Thank you for your answer,

I:
- back to original config files (xrdp.ini and sesman.ini),
- add new user (test-rdp),
- start service (systemctl start xrdp)
- turn off firewall,
- try to connect from native windows 10 remote desktop
and
without success:(.
Can you show yours xrdp.ini and sesman.ini files and test connection from windows 10 remote desktop client?

[doktor5000]

Can you show yours xrdp.ini and sesman.ini files and test connection from windows 10 remote desktop client?

Hi there, this is exactly what I tested. And xrdp.ini and sesman.ini are the default configs from the cauldron/mga9 package.

[nexus]

Could you check the connection from windows 10 remote desktop client to xrdp server on mga9 to let me know that configuration works?

[doktor5000]

Well, I did test that already and it works fine:

Can you show yours xrdp.ini and sesman.ini files and test connection from windows 10 remote desktop client?

Hi there, this is exactly what I tested. And xrdp.ini and sesman.ini are the default configs from the cauldron/mga9 package.

[isadora]

OK, I will try to find a reason why it does not work in my case.