Arch Linux

oxwivi

Member

Registered: 2019-07-01

Posts: 25

xfreerdp not accepting blank password

KRDC did not connect to the remote RDP server with a blank password, but it didn't produce any error message either. Googling, I thought it should be the case of /media no longer being a directory in the Arch FS tree, but it didn't seem to be the only issue since removing it didn't change the behavior.

I took to the debug logs and found the xfreerdp arguments being used and executed the command manually, this is what happened:

$ xfreerdp -decorations /w:1280 /h:1024 /kbd:0x00000409 /u:HP /parent-window:22 /bpp:24 /audio-mode:0 /sound:sys:pulse /network:lan /rfx /cert-ignore +clipboard /port:3389 /v:hp-pc.lan 
[11:56:20:619] [12551:12556] [INFO][com.freerdp.client.common.cmdline] - loading channelEx rdpdr
[11:56:20:619] [12551:12556] [INFO][com.freerdp.client.common.cmdline] - loading channelEx rdpsnd
[11:56:20:619] [12551:12556] [INFO][com.freerdp.client.common.cmdline] - loading channelEx cliprdr
Password: 
[11:56:22:189] [12551:12556] [ERROR][com.winpr.sspi.Kerberos] - Failed to convert password
[11:56:22:189] [12551:12556] [INFO][com.winpr.sspi.Kerberos] - Authenticated to Kerberos v5 via login/password
[11:56:22:198] [12551:12556] [ERROR][com.winpr.sspi.Kerberos] - Init GSS security context failed : can't use Kerberos
[11:56:22:198] [12551:12556] [WARN][com.winpr.sspi] - InitializeSecurityContextA status SEC_E_INTERNAL_ERROR [0x80090304]
[11:56:22:198] [12551:12556] [ERROR][com.freerdp.core.transport] - NLA begin failed
[11:56:22:198] [12551:12556] [ERROR][com.freerdp.core] - freerdp_set_last_error ERRCONNECT_AUTHENTICATION_FAILED [0x00020009]

Since there's no password, I just hit the return key and that's how it behaved. I tried with Remmina, this is the stdout logs:

[12:26:24:275] [2826:12587] [ERROR][com.winpr.sspi.Kerberos] - Failed to convert password
[12:26:24:275] [2826:12587] [INFO][com.winpr.sspi.Kerberos] - Authenticated to Kerberos v5 via login/password
[12:26:24:279] [2826:12587] [ERROR][com.winpr.sspi.Kerberos] - Init GSS security context failed : can't use Kerberos
[12:26:24:279] [2826:12587] [WARN][com.winpr.sspi] - InitializeSecurityContextA status SEC_E_INTERNAL_ERROR [0x80090304]
[12:26:24:279] [2826:12587] [ERROR][com.freerdp.core.transport] - NLA begin failed
[12:26:24:279] [2826:12587] [ERROR][com.freerdp.core] - freerdp_set_last_error ERRCONNECT_AUTHENTICATION_FAILED [0x00020009]

Why is this? I only switched to Arch less than a couple of weeks ago, I used KRDC and Remmina successfully with blank passwords back on Ubuntu. Is there any configuration that disables blank password on Arch? I wasn't able to find any relevant freerdp conf files. Or did the behavior on blank password change between whatever versions Ubuntu shipped and Arch's?

EDIT
Forgot to mention, but Window's own RDP client worked with a blank password so it's not a server configuration error regarding the default behavior of blocking password-less logins.

Last edited by oxwivi (2019-07-14 08:53:35)