Xrdp: Xrdp Shows Blank Screen, Then it Turns Black, and Then It Disconnects

[mlavie]

I hadn't tried remote access from my Windows boxes to my Fedora 25 xrdp servers for about 4-5 months. It worked fine then. My Fedoras' desktops are gnome. Both Fedoras and Windows boxes are always updated weekly.

Yesterday, I upgraded one of my Fedoras from F25 to F26. When I tried to RDP to the F26 from my Windows boxes - then after the login, I got a blank light blue screen, then it turned black, and then it disconnected. I am using Windows Server 2008 R2 and Windows 10 mstsc as the rdp clients. I then tried RDP-ing to an F25, and that failed, too (as stated, the F25 is updated weekly).

I uninstalled and re-installed xrdp, and it didn't help.

The 2 Fedoras can successfully remote to each other using a vinagre rdp client.

systmctl status xrdp:
Jul 21 02:23:18 lavie022.lavie.org xrdp[6323]: ssl_tls_print_error: SSL_shutdown: I/O error
Jul 21 02:23:18 lavie022.lavie.org xrdp[6323]: [20170721-02:23:18] [DEBUG] Closed socket 12 (AF_INET 192.168.1.3:3389)
Jul 21 02:23:18 lavie022.lavie.org xrdp[6323]: xrdp_mcs_disconnect - socket closed
Jul 21 02:23:18 lavie022.lavie.org xrdp[6323]: [20170721-02:23:18] [DEBUG] xrdp_mm_module_cleanup
Jul 21 02:23:18 lavie022.lavie.org xrdp[6323]: [20170721-02:23:18] [DEBUG] VNC mod_exit
Jul 21 02:23:18 lavie022.lavie.org xrdp[6323]: [20170721-02:23:18] [DEBUG] Closed socket 19 (AF_INET 127.0.0.1:36060)
Jul 21 02:23:18 lavie022.lavie.org xrdp[6323]: [20170721-02:23:18] [DEBUG] Closed socket 20 (AF_UNIX)
Jul 21 02:23:18 lavie022.lavie.org xrdp[6323]: xrdp:xrdp_encoder [1649412391]: xrdp_encoder_delete:
Jul 21 02:23:18 lavie022.lavie.org xrdp[6323]: [20170721-02:23:18] [ERROR] Listening socket is in wrong state, terminating listener
Jul 21 02:23:18 lavie022.lavie.org xrdp[6323]: [20170721-02:23:18] [CORE ] shutting down log subsystem...

systemctl status xrdp-sesman.service
Jul 21 02:06:06 lavie022.lavie.org xrdp-sesman[6322]: (6322)(140405073602368)[DEBUG] Closed socket 9 (AF_INET 0.0.0.0:5910)
Jul 21 02:06:06 lavie022.lavie.org xrdp-sesman[6322]: (6322)(140405073602368)[DEBUG] Closed socket 9 (AF_INET 0.0.0.0:0)
Jul 21 02:06:06 lavie022.lavie.org xrdp-sesman[6322]: (6322)(140405073602368)[DEBUG] Closed socket 9 (AF_INET 0.0.0.0:5914)
Jul 21 02:06:06 lavie022.lavie.org xrdp-sesman[6322]: (6322)(140405073602368)[DEBUG] Closed socket 9 (AF_INET 0.0.0.0:6014)
Jul 21 02:06:06 lavie022.lavie.org xrdp-sesman[6322]: (6322)(140405073602368)[DEBUG] Closed socket 9 (AF_INET 0.0.0.0:6214)
Jul 21 02:06:06 lavie022.lavie.org xrdp-sesman[6322]: (6322)(140405073602368)[DEBUG] Closed socket 9 (AF_INET 0.0.0.0:5916)
Jul 21 02:06:06 lavie022.lavie.org xrdp-sesman[6322]: (6322)(140405073602368)[DEBUG] Closed socket 9 (AF_INET 0.0.0.0:6016)
Jul 21 02:06:06 lavie022.lavie.org xrdp-sesman[6322]: (6322)(140405073602368)[DEBUG] Closed socket 9 (AF_INET 0.0.0.0:6216)
Jul 21 02:12:28 lavie022.lavie.org xrdp-sesman[1015]: rdpSaveScreen:
Jul 21 02:22:28 lavie022.lavie.org xrdp-sesman[1015]: rdpSaveScreen:

[mlavie]

Some more info:
This could be due to a change in the MS mstc client itself.
I just installed a Fedora 25 from original media, and installed the old version of xrdp (9.0.6).
I got the same problem.

[ToddAndMargo]

I have a Fedora Core 25 and an FC26 server where the rdp clients crash immediately after the user enters his password. Sound like exactly what mlavie describes.

The FC26 is a fresh install. I do have ssh access to both machines if you guys need me to collect any data

[tps800]

It does not crash, but just does not connect to the started Xvnc-Server. After a while xrdp reports "some problem connecting", after all Login works. Then a new session is started. This works too. Next Xvnc ist started -- this even works. Now no connection is established between Xvnc and xorgxrdp. Xvnc hangs around waiting for connections, but these never happen.
As far as I could test: Xvnc is started with the awaited port (display 11: 5911, display 12: 5912, ...). But does xrdp listen to these ports? It reports it would, but testing with lsof or stat does not show any program listening to port 5911, 5912. After some time xrdp tells me it could not connect. Did it ever try?

[tps800]

xrdp is broken on CentOS 6, 7; Fedora 25, 26, 27; Ubuntu 14.04, 16.04, 16.10, 17.04, 17.10; Debian stable, testing; FreeBSD 10, 11, HEAD. I'm asuming it is broken by design ....

[tfischer77]

I cannot confirm that it is "broken by design". For me, it runs quite well...
But I can confirm there are some challenges when installing it. At least on Debian stable (stretch), you have to edit the file /etc/Xwrapper.config and set allowed_users=anybody there...
I also opened a bug report for that on Debian, but it was closed due to the fact that it is described in "README.Debian". I know that nobody is reading manuals and "Readmes", so I'm still convinced it is a bug, but the package maintainers see it a little bit differently. I guess the problem is the same with all the other distros: X has to be started with SUID root bit (?), and standard settings on most distributions forbid that for xrdp.
Please have a look at usr/share/doc/xrdp/README.Debian:

If the Xorg server does not start, you may need to install the
xserver-xorg-legacy package (if you're not using systemd's or
consolekit's privilege mechanism, or not using Linux), and/or set
"allowed_users=anybody" in /etc/X11/Xwrapper.config to allow users, once
they are logged in through xrdp, to start their own X server. Please
note that xserver-xorg-legacy may cause its own issues, so keep an eye
on Xorg being suid root and the like.

[mlavie]

I am using Fedora, which doesn't seem to have an Xwrapper.config file. So I added it at /etc/X11 with content "allowed_users=anybody".

No joy.

[tps800]

I cannot confirm that it is "broken by design". For me, it runs quite well...
But I can confirm there are some challenges when installing it. At least on Debian stable (stretch), you have to edit the file /etc/Xwrapper.config and set allowed_users=anybody there...
I also opened a bug report for that on Debian, but it was closed due to the fact that it is described in "README.Debian". I know that nobody is reading manuals and "Readmes", so I'm still convinced it is a bug, but the package maintainers see it a little bit differently. I guess the problem is the same with all the other distros: X has to be started with SUID root bit (?), and standard settings on most distributions forbid that for xrdp.

This helps with Debian/Ubuntu and most of Debian based distros. It does not help with CentOS 6, 7, RHEL 6, 7 and Oracle Linux 6, 7, and any derived distros out there. Creating /etc/X11/Xwrapper.config as found on Debian does not have any effect.

On any RHEL 6, 7-derived distros I could not find /usr/libexec/Xorg or /usr/libexec/Xorg.wrap as mentioned in /usr/share/doc/xrdp-0.9.2/README.Fedora. Searching for this file in all packages did not give any match. At least for latest releases of Fedora (24, 25, 26) this seems to be true too: no file /usr/libexec/Xorg.wrap or /usr/libexec/Xorg. /etc/X11/Xwrapper.config is just ignored or not used any more.

Looking for /usr/sbin/xrdp and /usr/sbin/xrdp-sesman both running as root on CentOS 6, 7. SUID should not be necessary in this case. Since I set seLinux to _permissive_ I consider it not to block anything, but report if something would be blocked if set to _enforcing_.

It is working now for

• Debian / Ubuntu

but not for

• Fedora / CentOS / RHEL / Oracle Linux

I did not have the time to test FreeBSD now, but maybe tomorrow.

[evanlinde]

I've actually had remarkably little trouble with xrdp on CentOS 7 lately. It seems like as long as you've already got a standard GUI (i.e. gnome desktop), and install xrdp from EPEL, it "just works". I haven't had to mess with SELinux or edit any config files.

Starting with a minimal CentOS 7 install, here are all the steps I had to do:

yum groups install "server with gui"
yum install epel-release
yum install xrdp
systemctl enable xrdp
systemctl start xrdp
firewall-cmd --permanent --add-port=3389/tcp
firewall-cmd --reload
# Remote desktop connections now work

[ToddAndMargo]

On 08/02/2017 03:36 PM, evanlinde wrote:

I've actually had remarkably little trouble with xrdp on CentOS 7
lately. It seems like as long as you've already got a standard GUI (i.e.
gnome desktop), and install xrdp from EPEL, it "just works". I haven't
had to mess with SELinux or edit any config files.

Have you tried logging into it with your client's "clipboard"
option enabled?

[evanlinde]

Yes, and it works as expected. The only feature I've looked at that I'm having trouble with is drive redirection.

[ToddAndMargo]

On 08/02/2017 06:53 PM, evanlinde wrote:

Yes, and it works as expected. The only feature I've looked at that I'm
having trouble with is drive redirection.

Would you an?
$ rpm -qa xrdp*

Fedora 26 is
xrdp.x86_64 1:0.9.2-12.fc26

[evanlinde]

On CentOS 7:

$ rpm -qa \*xrdp\*
xrdp-0.9.2-12.el7.x86_64
xorgxrdp-0.2.2-1.el7.x86_64

[tps800]

On CentOS 6,7 it works since the last upgrade to:
xorgxrdp-0.2.3-1.el7.x86_64
xrdp-0.9.2-12.el7.x86_64

On RHEL 6,7; Oracle Linux 6,7; Scientific Linux 6,7 this upgrade does not help. Same as before: does not connect. I've tried various variants starting the whole thing. It works with CentOS, but not RHEL, Oracle Linux or Scientific Linux.

[shalabhgoel13]

Hi does the audio redirection works on Centos 7 ?? Can someone confirm it
for me?

On Thu, Aug 3, 2017 at 10:05 AM, evanlinde [e-mail] wrote:

On CentOS 7:

$ rpm -qa *xrdp*
xrdp-0.9.2-12.el7.x86_64
xorgxrdp-0.2.2-1.el7.x86_64

—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub
https://github.com/neutrinolabs/xrdp/issues/832#issuecomment-319865460,
or mute the thread
https://github.com/notifications/unsubscribe-auth/ANASHtaPoyWDj_aYvCjtAbdIzpD4n72Fks5sUU4PgaJpZM4OfIrs
.

--
Shalabh Goel

[shalabhgoel13]

Please. It is really important. Thanks

On Mon, Aug 14, 2017 at 5:28 PM, Shalabh Goel [e-mail]
wrote:

Hi does the audio redirection works on Centos 7 ?? Can someone confirm it
for me?

On Thu, Aug 3, 2017 at 10:05 AM, evanlinde [e-mail]
wrote:

On CentOS 7:

$ rpm -qa *xrdp*
xrdp-0.9.2-12.el7.x86_64
xorgxrdp-0.2.2-1.el7.x86_64

—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub
https://github.com/neutrinolabs/xrdp/issues/832#issuecomment-319865460,
or mute the thread
https://github.com/notifications/unsubscribe-auth/ANASHtaPoyWDj_aYvCjtAbdIzpD4n72Fks5sUU4PgaJpZM4OfIrs
.

--
Shalabh Goel

--
Shalabh Goel

[ToddAndMargo]

Downstream bug: https://bugzilla.redhat.com/show_bug.cgi?id=1483292
They recommended using Xvnc

[mlavie]

In dnf I see that there have been updates to xrdp and xorg, but still no joy.

[tps800]

For CentOS 6, 7, Oracle Linux 6, 7 and Fedora 25, 26, 27:

• Xvnc seems to work now to some extend, since the latest updates to various packages.
• Xorg does not work:

~
[ 2119.830]
X.Org X Server 1.19.3
Release Date: 2017-03-15
[ 2119.830] X Protocol Version 11, Revision 0
[ 2119.830] Build Operating System: 3.10.0-514.16.1.el7.x86_64
[ 2119.830] Current Operating System: Linux nxnode04-muc.bfs.de 4.13.3-1.el7.elrepo.x86_64 #1 SMP Wed Sep 20 12:49:48 EDT 2017 x86_64
[ 2119.830] Kernel command line: BOOT_IMAGE=/vmlinuz-4.13.3-1.el7.elrepo.x86_64 root=/dev/mapper/ol_oel7--64-root ro rd.lvm.lv=ol_oel7-64/root crashkernel=auto rd.lvm.lv=ol_oel7-64/swap vconsole.font=latarcyrheb-sun16 vconsole.keymap=de rhgb quiet LANG=de_DE.UTF-8
[ 2119.830] Build Date: 05 August 2017 06:19:43AM
[ 2119.830] Build ID: xorg-x11-server 1.19.3-11.el7
[ 2119.830] Current version of pixman: 0.34.0
[ 2119.830] Before reporting problems, check http://wiki.x.org
to make sure that you have the latest version.
[ 2119.830] Markers: (--) probed, () from config file, (==) default setting,
(++) from command line, (!!) notice, (II) informational,
(WW) warning, (EE) error, (NI) not implemented, (??) unknown.
[ 2119.830] (++) Log file: ".xorgxrdp.11.log", Time: Wed Sep 27 17:50:16 2017
[ 2119.833] (++) Using config file: "/etc/X11/xrdp/xorg.conf"
[ 2119.833] (==) Using config directory: "/etc/X11/xorg.conf.d"
[ 2119.833] (==) Using system config directory "/usr/share/X11/xorg.conf.d"
[ 2119.834] (==) ServerLayout "X11 Server"
[ 2119.834] () |-->Screen "Screen (xrdpdev)" (0)
[ 2119.834] () | |-->Monitor "Monitor"
[ 2119.835] () | |-->Device "Video Card (xrdpdev)"
[ 2119.835] () |-->Input Device "xrdpMouse"
[ 2119.835] () |-->Input Device "xrdpKeyboard"
[ 2119.835] () Option "DontVTSwitch" "on"
[ 2119.835] () Option "AutoAddDevices" "off"
[ 2119.835] (*) Not automatically adding devices
[ 2119.835] (==) Automatically enabling devices
[ 2119.835] (==) Automatically adding GPU devices
[ 2119.835] (==) Automatically binding GPU devices
[ 2119.835] (==) Max clients allowed: 256, resource mask: 0x1fffff
[ 2119.835] (==) FontPath set to:
catalogue:/etc/X11/fontpath.d,
built-ins
[ 2119.835] (==) ModulePath set to "/usr/lib64/xorg/modules"
[ 2119.835] (II) Loader magic: 0x55d7795f1020
[ 2119.835] (II) Module ABI versions:
[ 2119.835] X.Org ANSI C Emulation: 0.4
[ 2119.835] X.Org Video Driver: 23.0
[ 2119.835] X.Org XInput driver : 24.1
[ 2119.835] X.Org Server Extension : 10.0
[ 2119.835] (II) xfree86: Adding drm device (/dev/dri/card0)
[ 2119.843] (--) PCI:(0:0:15:0) 15ad:0405:15ad:0405 rev 0, Mem @ 0xec000000/67108864, 0xfe000000/8388608, I/O @ 0x00001070/16, BIOS @ 0x????????/65536
[ 2119.843] (II) "glx" will be loaded. This was enabled by default and also specified in the config file.
[ 2119.843] (II) LoadModule: "dbe"
[ 2119.843] (II) Module "dbe" already built-in
[ 2119.843] (II) LoadModule: "ddc"
[ 2119.843] (II) Module "ddc" already built-in
[ 2119.843] (II) LoadModule: "extmod"
[ 2119.843] (II) Module "extmod" already built-in
[ 2119.843] (II) LoadModule: "glx"
[ 2119.843] (II) Loading /usr/lib64/xorg/modules/extensions/libglx.so
[ 2119.844] (II) Module glx: vendor="X.Org Foundation"
[ 2119.844] compiled for 1.19.3, module version = 1.0.0
[ 2119.844] ABI class: X.Org Server Extension, version 10.0
[ 2119.844] (II) LoadModule: "int10"
[ 2119.844] (II) Loading /usr/lib64/xorg/modules/libint10.so
[ 2119.847] (II) Module int10: vendor="X.Org Foundation"
[ 2119.847] compiled for 1.19.3, module version = 1.0.0
[ 2119.847] ABI class: X.Org Video Driver, version 23.0
[ 2119.847] (II) LoadModule: "record"
[ 2119.847] (II) Module "record" already built-in
[ 2119.847] (II) LoadModule: "vbe"
[ 2119.847] (II) Loading /usr/lib64/xorg/modules/libvbe.so
[ 2119.848] (II) Module vbe: vendor="X.Org Foundation"
[ 2119.848] compiled for 1.19.3, module version = 1.1.0
[ 2119.848] ABI class: X.Org Video Driver, version 23.0
[ 2119.848] (II) LoadModule: "xorgxrdp"
[ 2119.848] (II) Loading /usr/lib64/xorg/modules/libxorgxrdp.so
[ 2119.850] (II) Module XORGXRDP: vendor="X.Org Foundation"
[ 2119.850] compiled for 1.17.2, module version = 1.0.0
[ 2119.850] ABI class: X.Org Video Driver, version 19.0
[ 2119.850] (EE) xorgxrdp: module ABI major version (19) doesn't match the server's version (23)
[ 2119.850] (II) UnloadModule: "xorgxrdp"
[ 2119.850] (II) Unloading xorgxrdp
[ 2119.850] (EE) Failed to load module "xorgxrdp" (module requirement mismatch, 0)
[ 2119.850] (II) LoadModule: "fb"
[ 2119.850] (II) Loading /usr/lib64/xorg/modules/libfb.so
[ 2119.850] (II) Module fb: vendor="X.Org Foundation"
[ 2119.850] compiled for 1.19.3, module version = 1.0.0
[ 2119.850] ABI class: X.Org ANSI C Emulation, version 0.4
[ 2119.850] (II) LoadModule: "xrdpdev"
[ 2119.850] (II) Loading /usr/lib64/xorg/modules/drivers/xrdpdev_drv.so
[ 2119.852] (EE) Failed to load /usr/lib64/xorg/modules/drivers/xrdpdev_drv.so: /usr/lib64/xorg/modules/drivers/xrdpdev_drv.so: undefined symbol: rdpRRModeDestroy
[ 2119.852] (II) UnloadModule: "xrdpdev"
[ 2119.852] (II) Unloading xrdpdev
[ 2119.852] (EE) Failed to load module "xrdpdev" (loader failed, 7)
[ 2119.852] (II) LoadModule: "xrdpmouse"
[ 2119.852] (II) Loading /usr/lib64/xorg/modules/input/xrdpmouse_drv.so
[ 2119.852] (II) Module XRDPMOUSE: vendor="X.Org Foundation"
[ 2119.852] compiled for 1.17.2, module version = 1.0.0
[ 2119.852] Module class: X.Org XInput Driver
[ 2119.853] ABI class: X.Org XInput driver, version 21.0
[ 2119.853] (EE) xrdpmouse: module ABI major version (21) doesn't match the server's version (24)
[ 2119.853] (II) UnloadModule: "xrdpmouse"
[ 2119.853] (II) Unloading xrdpmouse
[ 2119.853] (EE) Failed to load module "xrdpmouse" (module requirement mismatch, 0)
[ 2119.853] (II) LoadModule: "xrdpkeyb"
[ 2119.853] (II) Loading /usr/lib64/xorg/modules/input/xrdpkeyb_drv.so
[ 2119.853] (II) Module XRDPKEYB: vendor="X.Org Foundation"
[ 2119.853] compiled for 1.17.2, module version = 1.0.0
[ 2119.853] Module class: X.Org XInput Driver
[ 2119.853] ABI class: X.Org XInput driver, version 21.0
[ 2119.853] (EE) xrdpkeyb: module ABI major version (21) doesn't match the server's version (24)
[ 2119.853] (II) UnloadModule: "xrdpkeyb"
[ 2119.853] (II) Unloading xrdpkeyb
[ 2119.853] (EE) Failed to load module "xrdpkeyb" (module requirement mismatch, 0)
[ 2119.853] (EE) No drivers available.
[ 2119.853] (EE)
Fatal server error:
[ 2119.853] (EE) no screens found(EE)
[ 2119.854] (EE)
Please consult the The X.Org Foundation support
at http://wiki.x.org
for help.
[ 2119.854] (EE) Please also check the log file at ".xorgxrdp.11.log" for additional information.
[ 2119.854] (EE)
[ 2119.854] (EE) Server terminated with error (1). Closing log file.
~

Looks a lot like things where compiled against wrong libraries.

On Debian the very same versions are used. Both variants Xvnc and Xorg work as expected -- time for a new package?!

[evanlinde]

The 0.2.4-3 build of xorgxrdp in EPEL should work on the latest updates (i.e. if your xorg-x11-server-Xorg version is 1.19.3). It's still in testing but you can grab the rpm from https://apps.fedoraproject.org/packages/xorgxrdp/updates/.

[armonica17]

xrdp was working. Version xrdp-0.9.3-1 installed on 22 Aug 2017 worked fine though it had that black screen problem. I tried to update the system yesterday and it's broken. I had done a snapshot. Drilling down, it's just xrdp that broke it. It'll come up with the screen, ask you about the color bit and then that's all it'll do, except lock the screen. Unlocking the screen is REALLY slow. System isn't doing anything. Restore the snapshot and everything's fine. I'm running the kde/plasma desktop. Let me know if I can help. I have xrdp-devel installed if that helps. Another machine I didn't snapshot and even if I download, it's useless. There is nothing special about these VMs. Fedora 26, loaded with kde and xrdp.