Xrdp: login failed for display 0 windows 10 to Centos 7.3

Created on 19 Jul 2017 · 7Comments · Source: neutrinolabs/xrdp

My Centos is 7.3 and Windows system is 10 ； install xrdp according xrdp README. But get flowing error on the left top and black screem

connection sesman ip 127.0.01 port 3350
sesman connect ok
sending login info to session manager，please waiting ...
login failed for display 0

Source

zilongo

Most helpful comment

I get similar results to this on minimal systems that aren't set to boot into a GUI (but to have X11 and window managers installed). It seems like this correlates with startx not working.

I've fixed it by creating a .xsession file.

For example (assuming gnome desktop):

echo gnome-session > ~/.xsession
chmod +x ~/.xsession

evanlinde on 3 Aug 2017

👍4

All 7 comments

Same here. Logs show:
For Xorg connection using xrdp:
Last lines /var/log/xrdp.log:

[20170717-19:31:17] [INFO ] starting xrdp with pid 11942
[20170717-19:31:17] [INFO ] listening to port 3389 on 0.0.0.0
[20170717-19:31:23] [INFO ] Socket 12: AF_INET connection received from 10.160.2.12 port 36646
[20170717-19:31:23] [DEBUG] Closed socket 12 (AF_INET 10.169.18.123:3389)
[20170717-19:31:23] [DEBUG] Closed socket 11 (AF_INET 0.0.0.0:3389)
[20170717-19:31:23] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20170717-19:31:23] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20170717-19:31:23] [DEBUG] TLSv1.2 enabled
[20170717-19:31:23] [DEBUG] TLSv1.1 enabled
[20170717-19:31:23] [DEBUG] TLSv1 enabled
[20170717-19:31:23] [DEBUG] Security layer: requested 11, selected 1
[20170717-19:31:23] [DEBUG] Closed socket 12 (AF_INET 10.169.18.123:3389)
[20170717-19:31:23] [ERROR] Listening socket is in wrong state, terminating listener
[20170717-19:31:23] [CORE ] shutting down log subsystem...
[20170717-19:31:23] [INFO ] Socket 12: AF_INET connection received from 10.160.2.12 port 36647
[20170717-19:31:23] [DEBUG] Closed socket 12 (AF_INET 10.169.18.123:3389)
[20170717-19:31:23] [DEBUG] Closed socket 11 (AF_INET 0.0.0.0:3389)
[20170717-19:31:23] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20170717-19:31:23] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20170717-19:31:23] [DEBUG] TLSv1.2 enabled
[20170717-19:31:23] [DEBUG] TLSv1.1 enabled
[20170717-19:31:23] [DEBUG] TLSv1 enabled
[20170717-19:31:23] [DEBUG] Security layer: requested 11, selected 1
[20170717-19:31:23] [INFO ] connected client computer name: NC403-MUC
[20170717-19:31:23] [INFO ] TLS connection established from 10.160.2.12 port 36647: TLSv1.2 with cipher AES256-GCM-SHA384
[20170717-19:31:23] [DEBUG] xrdp_00002ea8_wm_login_mode_event_00000001
[20170717-19:31:23] [INFO ] Loading keymap file /etc/xrdp/km-00000407.ini
[20170717-19:31:23] [WARN ] local keymap file for 0x00000407 found and doesn't match built in keymap, using local keymap file
[20170717-19:31:33] [DEBUG] xrdp_wm_log_msg: connecting to sesman ip 127.0.0.1 port 3350
[20170717-19:31:34] [INFO ] xrdp_wm_log_msg: sesman connect ok
[20170717-19:31:34] [DEBUG] xrdp_wm_log_msg: sending login info to session manager, please wait...
[20170717-19:31:34] [DEBUG] return value from xrdp_mm_connect 0
[20170717-19:31:34] [INFO ] xrdp_wm_log_msg: login successful for display 13
[20170717-19:31:34] [DEBUG] xrdp_wm_log_msg: started connecting
[20170717-19:31:38] [DEBUG] Closed socket 19 (AF_UNIX)
[20170717-19:31:41] [DEBUG] Closed socket 19 (AF_UNIX)
[20170717-19:31:45] [DEBUG] Closed socket 19 (AF_UNIX)
[20170717-19:31:48] [DEBUG] Closed socket 19 (AF_UNIX)
[20170717-19:31:52] [DEBUG] Closed socket 19 (AF_UNIX)
[20170717-19:31:55] [DEBUG] Closed socket 19 (AF_UNIX)
[20170717-19:31:59] [DEBUG] Closed socket 19 (AF_UNIX)
[20170717-19:32:02] [DEBUG] Closed socket 19 (AF_UNIX)
[20170717-19:32:06] [DEBUG] Closed socket 19 (AF_UNIX)
[20170717-19:32:09] [DEBUG] Closed socket 19 (AF_UNIX)
[20170717-19:32:13] [DEBUG] Closed socket 19 (AF_UNIX)
[20170717-19:32:16] [DEBUG] Closed socket 19 (AF_UNIX)
[20170717-19:32:20] [DEBUG] Closed socket 19 (AF_UNIX)
[20170717-19:32:23] [DEBUG] Closed socket 19 (AF_UNIX)
[20170717-19:32:27] [DEBUG] Closed socket 19 (AF_UNIX)
[20170717-19:32:30] [DEBUG] Closed socket 19 (AF_UNIX)
[20170717-19:32:34] [DEBUG] Closed socket 19 (AF_UNIX)
[20170717-19:32:37] [DEBUG] Closed socket 19 (AF_UNIX)
[20170717-19:32:41] [DEBUG] Closed socket 19 (AF_UNIX)
[20170717-19:32:44] [DEBUG] Closed socket 19 (AF_UNIX)
[20170717-19:32:48] [DEBUG] Closed socket 19 (AF_UNIX)
[20170717-19:32:51] [DEBUG] Closed socket 19 (AF_UNIX)
[20170717-19:32:55] [DEBUG] Closed socket 19 (AF_UNIX)
[20170717-19:32:58] [DEBUG] Closed socket 19 (AF_UNIX)
[20170717-19:33:02] [DEBUG] Closed socket 19 (AF_UNIX)
[20170717-19:33:05] [DEBUG] Closed socket 19 (AF_UNIX)
[20170717-19:33:09] [DEBUG] Closed socket 19 (AF_UNIX)
[20170717-19:33:12] [DEBUG] Closed socket 19 (AF_UNIX)
[20170717-19:33:16] [DEBUG] Closed socket 19 (AF_UNIX)
[20170717-19:33:19] [DEBUG] Closed socket 19 (AF_UNIX)
[20170717-19:33:23] [DEBUG] Closed socket 19 (AF_UNIX)
[20170717-19:33:26] [DEBUG] Closed socket 19 (AF_UNIX)
[20170717-19:33:30] [DEBUG] Closed socket 19 (AF_UNIX)
[20170717-19:33:33] [DEBUG] Closed socket 19 (AF_UNIX)
[20170717-19:33:37] [DEBUG] Closed socket 19 (AF_UNIX)
[20170717-19:33:40] [DEBUG] Closed socket 19 (AF_UNIX)
[20170717-19:33:44] [DEBUG] Closed socket 19 (AF_UNIX)
[20170717-19:33:47] [DEBUG] Closed socket 19 (AF_UNIX)
[20170717-19:33:51] [DEBUG] Closed socket 19 (AF_UNIX)
[20170717-19:33:54] [DEBUG] Closed socket 19 (AF_UNIX)
[20170717-19:33:58] [DEBUG] Closed socket 19 (AF_UNIX)
[20170717-19:34:01] [DEBUG] Closed socket 19 (AF_UNIX)
[20170717-19:34:05] [DEBUG] Closed socket 19 (AF_UNIX)
[20170717-19:34:08] [DEBUG] Closed socket 19 (AF_UNIX)
[20170717-19:34:12] [DEBUG] Closed socket 19 (AF_UNIX)
[20170717-19:34:15] [DEBUG] Closed socket 19 (AF_UNIX)
[20170717-19:34:19] [DEBUG] Closed socket 19 (AF_UNIX)
[20170717-19:34:22] [DEBUG] Closed socket 19 (AF_UNIX)
[20170717-19:34:26] [DEBUG] Closed socket 19 (AF_UNIX)
[20170717-19:34:29] [DEBUG] Closed socket 19 (AF_UNIX)
[20170717-19:34:33] [DEBUG] Closed socket 19 (AF_UNIX)
[20170717-19:34:36] [DEBUG] Closed socket 19 (AF_UNIX)
[20170717-19:34:40] [DEBUG] Closed socket 19 (AF_UNIX)
[20170717-19:34:43] [DEBUG] Closed socket 19 (AF_UNIX)
[20170717-19:34:47] [DEBUG] Closed socket 19 (AF_UNIX)
[20170717-19:34:50] [DEBUG] Closed socket 19 (AF_UNIX)
[20170717-19:34:54] [DEBUG] Closed socket 19 (AF_UNIX)
[20170717-19:34:57] [DEBUG] Closed socket 19 (AF_UNIX)
[20170717-19:35:01] [DEBUG] Closed socket 19 (AF_UNIX)
[20170717-19:35:04] [DEBUG] xrdp_wm_log_msg: connection problem, giving up
[20170717-19:35:04] [DEBUG] Closed socket 19 (AF_UNIX)
[20170717-19:35:04] [DEBUG] xrdp_wm_log_msg: some problem
[20170717-19:35:04] [DEBUG] xrdp_mm_module_cleanup
[20170717-19:35:04] [DEBUG] Closed socket 18 (AF_INET 127.0.0.1:39552)
[20170717-19:35:09] [DEBUG] Closed socket 12 (AF_INET 10.169.18.123:3389)
[20170717-19:35:09] [DEBUG] xrdp_mm_module_cleanup
[20170717-19:35:09] [ERROR] Listening socket is in wrong state, terminating listener
[20170717-19:35:09] [CORE ] shutting down log subsystem...

/var/log/xrdp-sesman.log:

[20170717-19:31:17] [DEBUG] libscp initialized
[20170717-19:31:17] [INFO ] starting xrdp-sesman with pid 11941
[20170717-19:31:17] [INFO ] listening to port 3350 on 127.0.0.1
[20170717-19:31:33] [INFO ] A connection received from 127.0.0.1 port 39552
[20170717-19:31:34] [INFO ] ++ created session (access granted): username root, ip 10.160.2.12:36647 - socket: 12
[20170717-19:31:34] [INFO ] starting Xorg session...
[20170717-19:31:34] [DEBUG] Closed socket 11 (AF_INET 0.0.0.0:5910)
[20170717-19:31:34] [DEBUG] Closed socket 11 (AF_INET 0.0.0.0:0)
[20170717-19:31:34] [DEBUG] Closed socket 11 (AF_INET 0.0.0.0:5911)
[20170717-19:31:34] [DEBUG] Closed socket 11 (AF_INET 0.0.0.0:6011)
[20170717-19:31:34] [DEBUG] Closed socket 11 (AF_INET 0.0.0.0:6211)
[20170717-19:31:34] [DEBUG] Closed socket 11 (AF_INET 0.0.0.0:5912)
[20170717-19:31:34] [DEBUG] Closed socket 11 (AF_INET 0.0.0.0:6012)
[20170717-19:31:34] [DEBUG] Closed socket 11 (AF_INET 0.0.0.0:6212)
[20170717-19:31:34] [DEBUG] Closed socket 11 (AF_INET 0.0.0.0:5913)
[20170717-19:31:34] [DEBUG] Closed socket 11 (AF_INET 0.0.0.0:6013)
[20170717-19:31:34] [DEBUG] Closed socket 11 (AF_INET 0.0.0.0:6213)
[20170717-19:31:34] [DEBUG] Closed socket 10 (AF_INET 127.0.0.1:3350)
[20170717-19:31:34] [DEBUG] Closed socket 9 (AF_INET 127.0.0.1:3350)
[20170717-19:31:34] [DEBUG] Closed socket 10 (AF_INET 127.0.0.1:3350)
[20170717-19:31:34] [INFO ] setpriv --no-new-privs Xorg :13 -auth .Xauthority -config xrdp/xorg.conf -noreset -nolisten tcp -logfile .xorgxrdp.%s.log
[20170717-19:31:34] [CORE ] waiting for window manager (pid 11950) to exit
[20170717-19:31:34] [CORE ] window manager (pid 11950) did exit, cleaning up session
[20170717-19:31:34] [INFO ] ++ terminated session:  username root, display :13.0, session_pid 11949, ip 10.160.2.12:36647 - socket: 12

For Xvnc connection:
/var/log/xrdp.log:

[20170717-19:38:54] [INFO ] starting xrdp with pid 12035
[20170717-19:38:54] [INFO ] listening to port 3389 on 0.0.0.0
[20170717-19:39:02] [INFO ] Socket 12: AF_INET connection received from 10.160.2.12 port 37181
[20170717-19:39:02] [DEBUG] Closed socket 12 (AF_INET 10.169.18.123:3389)
[20170717-19:39:02] [DEBUG] Closed socket 11 (AF_INET 0.0.0.0:3389)
[20170717-19:39:02] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20170717-19:39:02] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20170717-19:39:02] [DEBUG] TLSv1.2 enabled
[20170717-19:39:02] [DEBUG] TLSv1.1 enabled
[20170717-19:39:02] [DEBUG] TLSv1 enabled
[20170717-19:39:02] [DEBUG] Security layer: requested 11, selected 1
[20170717-19:39:02] [DEBUG] Closed socket 12 (AF_INET 10.169.18.123:3389)
[20170717-19:39:02] [ERROR] Listening socket is in wrong state, terminating listener
[20170717-19:39:02] [CORE ] shutting down log subsystem...
[20170717-19:39:02] [INFO ] Socket 12: AF_INET connection received from 10.160.2.12 port 37182
[20170717-19:39:02] [DEBUG] Closed socket 12 (AF_INET 10.169.18.123:3389)
[20170717-19:39:02] [DEBUG] Closed socket 11 (AF_INET 0.0.0.0:3389)
[20170717-19:39:02] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20170717-19:39:02] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20170717-19:39:02] [DEBUG] TLSv1.2 enabled
[20170717-19:39:02] [DEBUG] TLSv1.1 enabled
[20170717-19:39:02] [DEBUG] TLSv1 enabled
[20170717-19:39:02] [DEBUG] Security layer: requested 11, selected 1
[20170717-19:39:02] [INFO ] connected client computer name: NC403-MUC
[20170717-19:39:02] [INFO ] TLS connection established from 10.160.2.12 port 37182: TLSv1.2 with cipher AES256-GCM-SHA384
[20170717-19:39:03] [DEBUG] xrdp_00002f05_wm_login_mode_event_00000001
[20170717-19:39:03] [INFO ] Loading keymap file /etc/xrdp/km-00000407.ini
[20170717-19:39:03] [WARN ] local keymap file for 0x00000407 found and doesn't match built in keymap, using local keymap file
[20170717-19:39:08] [DEBUG] xrdp_wm_log_msg: connecting to sesman ip 127.0.0.1 port 3350
[20170717-19:39:09] [INFO ] xrdp_wm_log_msg: sesman connect ok
[20170717-19:39:09] [DEBUG] xrdp_wm_log_msg: sending login info to session manager, please wait...
[20170717-19:39:09] [DEBUG] return value from xrdp_mm_connect 0
[20170717-19:39:09] [INFO ] xrdp_wm_log_msg: login successful for display 13
[20170717-19:39:09] [DEBUG] xrdp_wm_log_msg: VNC started connecting
[20170717-19:39:09] [DEBUG] xrdp_wm_log_msg: VNC connecting to 127.0.0.1 5913
[20170717-19:39:12] [DEBUG] VNC error 1 after security negotiation
[20170717-19:39:12] [DEBUG] VNC error before sending share flag
[20170717-19:39:12] [DEBUG] VNC error before receiving server init
[20170717-19:39:12] [DEBUG] VNC error before receiving pixel format
[20170717-19:39:12] [DEBUG] VNC error before receiving name length
[20170717-19:39:12] [DEBUG] VNC error before receiving name
[20170717-19:39:12] [DEBUG] xrdp_wm_log_msg: VNC error - problem connecting
[20170717-19:39:12] [DEBUG] Closed socket 19 (AF_INET 0.0.0.0:41072)
[20170717-19:39:12] [DEBUG] xrdp_wm_log_msg: some problem
[20170717-19:39:12] [DEBUG] xrdp_mm_module_cleanup
[20170717-19:39:12] [DEBUG] VNC mod_exit
[20170717-19:39:12] [DEBUG] Closed socket 18 (AF_INET 127.0.0.1:39554)
[20170717-19:39:16] [DEBUG] Closed socket 12 (AF_INET 10.169.18.123:3389)
[20170717-19:39:16] [DEBUG] xrdp_mm_module_cleanup
[20170717-19:39:16] [ERROR] Listening socket is in wrong state, terminating listener
[20170717-19:39:16] [CORE ] shutting down log subsystem...

/var/log/xrdp-sesman.log:

[20170717-19:38:54] [DEBUG] libscp initialized
[20170717-19:38:54] [INFO ] starting xrdp-sesman with pid 12034
[20170717-19:38:54] [INFO ] listening to port 3350 on 127.0.0.1
[20170717-19:39:08] [INFO ] A connection received from 127.0.0.1 port 39554
[20170717-19:39:09] [INFO ] ++ created session (access granted): username root, ip 10.160.2.12:37182 - socket: 12
[20170717-19:39:09] [INFO ] starting Xvnc session...
[20170717-19:39:09] [DEBUG] Closed socket 11 (AF_INET 0.0.0.0:5910)
[20170717-19:39:09] [DEBUG] Closed socket 11 (AF_INET 0.0.0.0:0)
[20170717-19:39:09] [DEBUG] Closed socket 11 (AF_INET 0.0.0.0:5911)
[20170717-19:39:09] [DEBUG] Closed socket 11 (AF_INET 0.0.0.0:6011)
[20170717-19:39:09] [DEBUG] Closed socket 11 (AF_INET 0.0.0.0:6211)
[20170717-19:39:09] [DEBUG] Closed socket 11 (AF_INET 0.0.0.0:5912)
[20170717-19:39:09] [DEBUG] Closed socket 11 (AF_INET 0.0.0.0:6012)
[20170717-19:39:09] [DEBUG] Closed socket 11 (AF_INET 0.0.0.0:6212)
[20170717-19:39:09] [DEBUG] Closed socket 11 (AF_INET 0.0.0.0:5913)
[20170717-19:39:09] [DEBUG] Closed socket 11 (AF_INET 0.0.0.0:6013)
[20170717-19:39:09] [DEBUG] Closed socket 11 (AF_INET 0.0.0.0:6213)
[20170717-19:39:09] [DEBUG] Closed socket 10 (AF_INET 127.0.0.1:3350)
[20170717-19:39:09] [DEBUG] Closed socket 9 (AF_INET 127.0.0.1:3350)
[20170717-19:39:09] [DEBUG] Closed socket 10 (AF_INET 127.0.0.1:3350)
[20170717-19:39:09] [INFO ] Xvnc :13 -auth .Xauthority -geometry 1920x1200 -depth 24 -rfbauth /root/.vnc/sesman_root_passwd:13 -bs -nolisten tcp -localhost -dpi 96
[20170717-19:39:09] [CORE ] waiting for window manager (pid 12043) to exit
[20170717-19:39:09] [CORE ] window manager (pid 12043) did exit, cleaning up session
[20170717-19:39:09] [INFO ] ++ terminated session:  username root, display :13.0, session_pid 12042, ip 10.160.2.12:37182 - socket: 12

tps800 on 20 Jul 2017

I get similar results to this on minimal systems that aren't set to boot into a GUI (but to have X11 and window managers installed). It seems like this correlates with startx not working.

I've fixed it by creating a .xsession file.

For example (assuming gnome desktop):

echo gnome-session > ~/.xsession
chmod +x ~/.xsession

evanlinde on 3 Aug 2017

👍4

As you say, you issue can be fixed by creating ~/.xsession or modifying startwm.sh.

If Xorg or Xvnc is terminated immediatery after launch, suspect startwm.sh.

[20170717-19:31:34] [INFO ] setpriv --no-new-privs Xorg :13 -auth .Xauthority -config xrdp/xorg.conf -noreset -nolisten tcp -logfile .xorgxrdp.%s.log
(snip) 
[20170717-19:31:34] [INFO ] ++ terminated session:  username root, display :13.0, session_pid 11949, ip 10.160.2.12:36647 - socket: 12

For example, in this log, Xorg is terminated within less than 1 second.

metalefty on 14 Sep 2017

No feedback from the reporter. A possible solution is suggested. Closing.
If you're back and the issue continues, I'll reopen this.

metalefty on 20 Jan 2018

Check password, it may be diferent for vnc and sesman

Alhel on 26 Jan 2018

Password isn't the issue in this case.

metalefty on 29 Jan 2018

@metalefty
I do have the same issue, but intermittently.
About 90% of my login attempts fail and I cannot stay whether restarting RDP on Windows 10 or trying it 5 minutes later again helps or not. The login success seems to be random.
I am using Windows 10, xrdp and either Xvnc or Xorg.