[KRdp] [Bug 501477] New: NTML_MESSAGE_HEADER Invalid Signature - SEC_E_INVALID TOKEN

[Ash]

https://bugs.kde.org/show_bug.cgi?id=501477

            Bug ID: 501477
           Summary: NTML_MESSAGE_HEADER Invalid Signature - SEC_E_INVALID
                    TOKEN
    Classification: Plasma
           Product: KRdp
           Version: 6.3.3
          Platform: Other
                OS: Linux
            Status: REPORTED
          Severity: normal
          Priority: NOR
         Component: general
          Assignee: unassigned-bugs at kde.org
          Reporter: ashleysommer at gmail.com
                CC: ahiemstra at heimr.nl
  Target Milestone: ---

I got provisioned a new Windows 11 laptop from my new workplace.
I'm trying to use the built-in "Remote Desktop Connection" software to connect
to KRDP on my KDE Neon Desktop

Using latest release KRDP v6.3.3 on Up-to-date KDE-Neon, and windows laptop
with latest Windows 11 updates.

After entering the IP address and username into the connection window, plasma
xdg-desktop-portal-kde asks me to share my screen. I click "OK".
Then I am asked to enter the password. I enter the correct password, windows
shows an authentication error.

Here is the output from krdpserver cli:
----
org.kde.krdp: Initializing Freedesktop Portal Session
org.kde.krdp: Session setup completed, start processing...
[16:08:59:857] [296889:302985] [INFO][com.freerdp.core.connection] - Client
Security: NLA:0 TLS:0 RDP:1
[16:08:59:857] [296889:302985] [INFO][com.freerdp.core.connection] - Server
Security: NLA:1 TLS:0 RDP:0
[16:08:59:857] [296889:302985] [WARN][com.freerdp.core.connection] - server
supports only NLA Security
[16:08:59:857] [296889:302985] [ERROR][com.freerdp.core.connection] - Protocol
security negotiation failure
[16:08:59:860] [296889:302985] [ERROR][com.freerdp.core.peer] -
peer_recv_callback: CONNECTION_STATE_INITIAL - rdp_server_accept_nego() fail
[16:08:59:860] [296889:302985] [ERROR][com.freerdp.core.transport] -
transport_check_fds: transport->ReceiveCallback() - -1
org.kde.krdp: Unable to check file descriptor
org.kde.krdp: Closing session
org.kde.krdp: Closing Freedesktop Portal Session
org.kde.krdp: Initializing Freedesktop Portal Session
org.kde.krdp: Session setup completed, start processing...
[16:10:38:453] [296889:304164] [INFO][com.freerdp.core.connection] - Client
Security: NLA:1 TLS:1 RDP:0
[16:10:38:453] [296889:304164] [INFO][com.freerdp.core.connection] - Server
Security: NLA:1 TLS:0 RDP:0
[16:10:38:453] [296889:304164] [INFO][com.freerdp.core.connection] - Negotiated
Security: NLA:1 TLS:0 RDP:0
org.kde.krdp: Started Freedesktop Portal session
libva info: VA-API version 1.20.0
libva info: Trying to open /usr/lib/x86_64-linux-gnu/dri/iHD_drv_video.so
libva info: Found init function __vaDriverInit_1_20
libva info: va_openDriver() returns 0
kpipewire_vaapi_logging: VAAPI: entrypoint 6 of profile 14 is not supported by
the device "/dev/dri/renderD128"
kpipewire_vaapi_logging: VAAPI: entrypoint 8 of profile 14 is not supported by
the device "/dev/dri/renderD128"
libva info: VA-API version 1.20.0
libva info: Trying to open /usr/lib/x86_64-linux-gnu/dri/iHD_drv_video.so
libva info: Found init function __vaDriverInit_1_20
libva info: va_openDriver() returns 0
libva info: VA-API version 1.20.0
libva info: Trying to open /usr/lib/x86_64-linux-gnu/dri/iHD_drv_video.so
libva info: Found init function __vaDriverInit_1_20
libva info: va_openDriver() returns 0
libva info: VA-API version 1.20.0
libva info: Trying to open /usr/lib/x86_64-linux-gnu/dri/iHD_drv_video.so
libva info: Found init function __vaDriverInit_1_20
libva info: va_openDriver() returns 0
kpipewire_vaapi_logging: VAAPI: entrypoint 6 of profile 14 is not supported by
the device "/dev/dri/renderD128"
kpipewire_vaapi_logging: VAAPI: entrypoint 8 of profile 14 is not supported by
the device "/dev/dri/renderD128"
libva info: VA-API version 1.20.0
libva info: Trying to open /usr/lib/x86_64-linux-gnu/dri/iHD_drv_video.so
libva info: Found init function __vaDriverInit_1_20
libva info: va_openDriver() returns 0
libva info: VA-API version 1.20.0
libva info: Trying to open /usr/lib/x86_64-linux-gnu/dri/iHD_drv_video.so
libva info: Found init function __vaDriverInit_1_20
libva info: va_openDriver() returns 0
[16:10:56:380] [296889:304164] [ERROR][com.winpr.sspi.NTLM] -
NTLM_MESSAGE_HEADER Invalid signature, got `z+, expected NTLMSSP
[16:10:56:380] [296889:304164] [WARN][com.winpr.negotiate] -
AcceptSecurityContext status SEC_E_INVALID_TOKEN [0x80090308]
[16:10:56:380] [296889:304164] [WARN][com.winpr.sspi] - AcceptSecurityContext
status SEC_E_INVALID_TOKEN [0x80090308]
[16:10:56:380] [296889:304164] [ERROR][com.freerdp.core.nla] -
AcceptSecurityContext status SEC_E_INVALID_TOKEN [0x80090308]
[16:10:56:380] [296889:304164] [ERROR][com.freerdp.core.transport] - client
authentication failure
[16:10:56:380] [296889:304164] [ERROR][com.freerdp.core.peer] -
peer_recv_callback: CONNECTION_STATE_INITIAL - rdp_server_accept_nego() fail
[16:10:56:380] [296889:304164] [ERROR][com.freerdp.core.transport] -
transport_check_fds: transport->ReceiveCallback() - -1
org.kde.krdp: Unable to check file descriptor
org.kde.krdp: Closing session
org.kde.krdp: Closing Freedesktop Portal Session
---

I believe the key issue is this line:
"NTLM_MESSAGE_HEADER Invalid signature, got `z+, expected NTLMSSP"
Whatever kind of NTLM the Windows client is using seems to be not compatible
with KRDP.

-- 
You are receiving this mail because:
You are the assignee for the bug.