Windows RDP crashes on connection

[NullDev]

I'm running KDE Neon in WSL on Windows 11 and using RDP to basically have a Linux desktop on windows.
It sounds whacky but until now everything worked perfectly fine.

I did an sudo apt update && sudo apt dist-upgrade -y now, rebooted and now I can't connect anymore.
The windows RDP just shows a black window with cursor for a second and then crashes.

sudo tail -f xrdp.log shows the following:

[2024-07-09T05:12:38.515+0200] [INFO ] Socket 11: connection accepted from [::1]:55978
[2024-07-09T05:12:38.537+0200] [INFO ] Security protocol: configured [SSL|RDP], requested [SSL|HYBRID|HYBRID_EX|RDP], selected [SSL]
[2024-07-09T05:12:38.686+0200] [ERROR] SSL_read: Failure in SSL library (protocol error?)
[2024-07-09T05:12:38.702+0200] [ERROR] SSL: error:0A000126:SSL routines::unexpected eof while reading
[2024-07-09T05:12:38.715+0200] [ERROR] libxrdp_force_read: header read error
[2024-07-09T05:12:38.730+0200] [ERROR] Processing [ITU-T T.125] Connect-Initial failed
[2024-07-09T05:12:38.743+0200] [ERROR] [MCS Connection Sequence] receive connection request failed
[2024-07-09T05:12:38.756+0200] [ERROR] xrdp_sec_incoming: xrdp_mcs_incoming failed
[2024-07-09T05:12:38.769+0200] [ERROR] xrdp_rdp_incoming: xrdp_sec_incoming failed
[2024-07-09T05:12:38.782+0200] [ERROR] xrdp_process_main_loop: libxrdp_process_incoming failed
[2024-07-09T05:12:38.796+0200] [ERROR] xrdp_iso_send: trans_write_copy_s failed
[2024-07-09T05:12:38.809+0200] [ERROR] Sending [ITU T.125] DisconnectProviderUltimatum failed
[2024-07-09T05:12:38.182+0200] [INFO ] Socket 11: connection accepted from [::1]:55990
[2024-07-09T05:12:38.185+0200] [INFO ] Security protocol: configured [SSL|RDP], requested [SSL|HYBRID|HYBRID_EX|RDP], selected [SSL]
[2024-07-09T05:12:38.190+0200] [INFO ] Connected client computer name: NULLBYTE
[2024-07-09T05:12:38.195+0200] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc006 is unknown (ignored)
[2024-07-09T05:12:38.197+0200] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc00a is unknown (ignored)
[2024-07-09T05:12:38.245+0200] [INFO ] xrdp_load_keyboard_layout: Keyboard information sent by the RDP client, keyboard_type:[0x04], keyboard_subtype:[0x00], keylayout:[0x00000407]
[2024-07-09T05:12:38.247+0200] [INFO ] xrdp_load_keyboard_layout: model [] variant [] layout [de] options []
[2024-07-09T05:12:38.248+0200] [INFO ] TLS connection established from [::1]:55990 TLSv1.3 with cipher TLS_AES_256_GCM_SHA384
[2024-07-09T05:12:38.252+0200] [INFO ] xrdp_caps_process_pointer: client supports new(color) cursor
[2024-07-09T05:12:38.254+0200] [INFO ] xrdp_process_offscreen_bmpcache: support level 1 cache size 7864320 MB cache entries 100
[2024-07-09T05:12:38.256+0200] [INFO ] xrdp_caps_process_codecs: NSCodec(CA8D1BB9-000F-154F-589F-AE2D1A87E2D6), codec id [1], properties len [3]
[2024-07-09T05:12:38.257+0200] [WARN ] xrdp_caps_process_codecs: unknown(2744CCD4-9D8A-4E74-803C-0ECBEEA19C54), codec id [5], properties len [49]
[2024-07-09T05:12:38.295+0200] [INFO ] Loading keymap file /etc/xrdp/km-00000407.ini
[2024-07-09T05:12:38.297+0200] [WARN ] local keymap file for 0x00000407 found and doesn't match built in keymap, using local keymap file
[2024-07-09T05:12:38.299+0200] [INFO ] Login screen monitor height is 1080 pixels over 287 mm (95 DPI)
[2024-07-09T05:12:38.303+0200] [INFO ] xrdp_egfx_create: error 0 channel_id 1
[2024-07-09T05:12:38.493+0200] [INFO ] xrdp_mm_egfx_caps_advertise:
[2024-07-09T05:12:38.496+0200] [INFO ]   version 0x00080004 flags 0x00000000 (index: 0)
[2024-07-09T05:12:38.497+0200] [INFO ]   version 0x00080105 flags 0x00000000 (index: 1)
[2024-07-09T05:12:38.498+0200] [INFO ]   version 0x000a0002 flags 0x00000000 (index: 2)
[2024-07-09T05:12:38.500+0200] [INFO ]   version 0x000a0200 flags 0x00000000 (index: 3)
[2024-07-09T05:12:38.501+0200] [INFO ]   version 0x000a0301 flags 0x00000000 (index: 4)
[2024-07-09T05:12:38.502+0200] [INFO ]   version 0x000a0400 flags 0x00000000 (index: 5)
[2024-07-09T05:12:38.503+0200] [INFO ]   version 0x000a0502 flags 0x00000000 (index: 6)
[2024-07-09T05:12:38.504+0200] [INFO ]   version 0x000a0600 flags 0x00000000 (index: 7)
[2024-07-09T05:12:38.506+0200] [INFO ]   version 0x000a0701 flags 0x00000000 (index: 8)
[2024-07-09T05:12:38.507+0200] [INFO ]   replying version 0x000a0600 flags 0x00000000
[2024-07-09T05:12:38.509+0200] [INFO ] xrdp_mm_egfx_caps_advertise: xrdp_egfx_send_capsconfirm error 0
[2024-07-09T05:12:38.510+0200] [INFO ] xrdp_egfx_reset_graphics:
[2024-07-09T05:12:38.511+0200] [INFO ] xrdp_egfx_reset_graphics: width 2560 height 1080 monitorcount 1
[2024-07-09T05:12:38.512+0200] [INFO ] xrdp_mm_egfx_caps_advertise: xrdp_egfx_send_reset_graphics error 0 monitorCount 0
[2024-07-09T05:12:38.513+0200] [INFO ] xrdp_encoder_create:
[2024-07-09T05:12:38.515+0200] [INFO ] xrdp_encoder_create: starting h264 codec session gfx
[2024-07-09T05:12:38.516+0200] [INFO ] xrdp_mm_egfx_invalidate_all:
[2024-07-09T05:12:38.517+0200] [INFO ] xrdp_mm_egfx_caps_advertise: egfx created.
[2024-07-09T05:12:38.518+0200] [WARN ] Ignoring obsolete SCP port value '3350'
[2024-07-09T05:12:38.520+0200] [INFO ] xrdp_wm_log_msg: sesman connect ok
[2024-07-09T05:12:38.521+0200] [INFO ] xrdp_wm_log_msg: Performing login request for shad0w
[2024-07-09T05:12:38.543+0200] [INFO ] xrdp_wm_log_msg: login was successful - creating session
[2024-07-09T05:12:38.570+0200] [INFO ] xrdp_wm_log_msg: session is available on display 27 for user shad0w
[2024-07-09T05:12:38.572+0200] [INFO ] xrdp_wm_log_msg: Connecting to session
[2024-07-09T05:12:38.573+0200] [INFO ] loaded module 'libxup.so' ok, interface size 10408, version 4
[2024-07-09T05:12:38.575+0200] [INFO ] lib_mod_connect: connecting via UNIX socket
[2024-07-09T05:12:40.578+0200] [INFO ] lib_mod_log_peer: xrdp_pid=2724 connected to Xorg_pid=2728 Xorg_uid=1000 Xorg_gid=1000 client=[::1]:55990
[2024-07-09T05:12:40.580+0200] [INFO ] xrdp_wm_log_msg: Connecting to chansrv
[2024-07-09T05:12:40.589+0200] [INFO ] Received memory_allocation_completecommand. width: 2560, height: 1088
[2024-07-09T05:12:40.590+0200] [INFO ] server_reset:
[2024-07-09T05:12:41.621+0200] [INFO ] proc_enc_msg: xrdp_mm term
[2024-07-09T05:12:42.621+0200] [ERROR] Attempting to send data to a channel that is not open. channel id 1, channel status CLOSED

any idea what went wrong?

[matt335672]

Well, as you suspect it looks like the client is going away.

This looks odd:-

[2024-07-09T05:12:38.570+0200] [INFO ] xrdp_wm_log_msg: session is available on display 27 for user shad0w

The display number should be 10, or near that.

Try setting the RDP client to 24 bits-per-pixel. That might give us more info.

[NullDev]

I think that's already the case:

neon.rdp:

session bpp:i:24      # <--

allow desktop composition:i:1
connection type:i:6
networkautodetect:i:0
bandwidthautodetect:i:1
screen mode id:i:2
use multimon:i:0
compression:i:0
redirectprinters:i:0
redirectlocation:i:0
redirectcomports:i:0
redirectsmartcards:i:0
redirectwebauthn:i:0
redirectclipboard:i:1
redirectposdevices:i:0
drivestoredirect:s:
full address:s:LocalHost:3399
promptcredentialonce:i:1
username:s:shad0w
password ###
desktopwidth:i:2560
desktopheight:i:1080
winposstr:s:0,3,0,0,800,600
keyboardhook:i:2
audiocapturemode:i:0
videoplaybackmode:i:1
displayconnectionbar:i:1
enableworkspacereconnect:i:0
disable wallpaper:i:0
allow font smoothing:i:1
disable full window drag:i:0
disable menu anims:i:0
disable themes:i:0
disable cursor setting:i:0
bitmapcachepersistenable:i:1
audiomode:i:0
autoreconnection enabled:i:1
authentication level:i:2
prompt for credentials:i:0
negotiate security layer:i:1
remoteapplicationmode:i:0
alternate shell:s:
shell working directory:s:
gatewayhostname:s:
gatewayusagemethod:i:4
gatewaycredentialssource:i:4
gatewayprofileusagemethod:i:0
gatewaybrokeringtype:i:0
use redirection server name:i:0
rdgiskdcproxy:i:0
kdcproxyname:s:
enablerdsaadauth:i:0

This is the config that has worked for the past year

[matt335672]

That's pretty odd. The two are trying to negotiate GFX and that can't possibly succeed with the client set to 24bpp. We fixed that back in d23d147 which was pre-release v0.10.

Where did your xrdp build come from? What do you get forxrdp -v?

[NullDev]

xrdp 0.9.80
  A Remote Desktop Protocol Server.
  Copyright (C) 2004-2020 Jay Sorg, Neutrino Labs, and all contributors.
  See https://github.com/neutrinolabs/xrdp for more information.

  Configure options:
      --enable-ipv6
      --enable-jpeg
      --enable-rfxcodec
      --enable-opus
      --enable-fdkaac
      --enable-rdpsndaudin
      --enable-painter
      --enable-pixman
      --enable-x264
      --enable-nvenc
      --enable-vsock
      --with-imlib2=yes
      --with-freetype2=yes
      --build=x86_64-linux-gnu
      --prefix=/usr
      --includedir=${prefix}/include
      --mandir=${prefix}/share/man
      --infodir=${prefix}/share/info
      --sysconfdir=/etc
      --localstatedir=/var
      --disable-silent-rules
      --libdir=${prefix}/lib/x86_64-linux-gnu
      --libexecdir=${prefix}/lib/x86_64-linux-gnu
      --disable-maintainer-mode
      --disable-dependency-tracking
      --with-socketdir=/run/xrdp/sockdir
      --disable-fuse
      build_alias=x86_64-linux-gnu
      CFLAGS=-g -O2 -ffile-prefix-map=/root/xrdp-egfx-0.9.19.20230215=. -flto=auto -ffat-lto-objects -flto=auto -ffat-lto-objects -fstack-protector-strong -Wformat -Werror=format-security
      LDFLAGS=-Wl,-Bsymbolic-functions -flto=auto -ffat-lto-objects -flto=auto -Wl,-z,relro -Wl,-z,now -Wl,--as-needed
      CPPFLAGS=-Wdate-time -D_FORTIFY_SOURCE=2
      CXXFLAGS=-g -O2 -ffile-prefix-map=/root/xrdp-egfx-0.9.19.20230215=. -flto=auto -ffat-lto-objects -flto=auto -ffat-lto-objects -fstack-protector-strong -Wformat -Werror=format-security
      PKG_CONFIG_PATH=/root/xrdp-egfx-0.9.19.20230215/pkgconfig

  Compiled with OpenSSL 3.0.2 15 Mar 2022

I'm just confused as to why a KDE Upgrade would break that since its been working for months without issues on that version with the provided configs

[matt335672]

I think something else must have changed. You're not getting as far as running KDE.

I'd suggest either rebuilding xrdp to a later version (you're missing some GFX fixes), or trying 32 bpp on the client. The first of these might be preferable.

[NullDev]

Same issue with 32bpp.
I now removed xrdp (or rather xrdp-egfx in my case) and compiled 0.10 from scratch.
Now I unfortunately have a different batch of issues.

sudo systemctl start xrdp

service xrdp start
/etc/init.d/xrdp: 48: .: cannot open /usr/share/xrdp/socksetup: No such file

so I started both xrdp and xrdp-sesman from the terminal.
Now in my xrdp client I at least get to a login screen. However the xrdp log now says

[INFO ] Received sys login status for shad0w : logged in
[2024-07-10T14:13:02.220+0200] [INFO ] Received request from xrdp to create a session for user shad0w
[2024-07-10T14:13:02.233+0200] [INFO ] Found X server running at /tmp/.X10-lock      # ???
[2024-07-10T14:13:02.245+0200] [INFO ] Found X server running at /tmp/.X11-lock
[2024-07-10T14:13:02.255+0200] [INFO ] Found X server running at /tmp/.X12-lock
[2024-07-10T14:13:02.265+0200] [INFO ] Found X server running at /tmp/.X13-lock
[2024-07-10T14:13:02.276+0200] [INFO ] Found X server running at /tmp/.X14-lock
[2024-07-10T14:13:02.287+0200] [INFO ] Found X server running at /tmp/.X15-lock
[2024-07-10T14:13:02.298+0200] [INFO ] Found X server running at /tmp/.X16-lock
[2024-07-10T14:13:02.309+0200] [INFO ] Found X server running at /tmp/.X17-lock
[2024-07-10T14:13:02.319+0200] [INFO ] Found X server running at /tmp/.X18-lock
[2024-07-10T14:13:02.330+0200] [INFO ] Found X server running at /tmp/.X19-lock
[2024-07-10T14:13:02.342+0200] [INFO ] Found X server running at /tmp/.X20-lock
[2024-07-10T14:13:02.354+0200] [INFO ] Found X server running at /tmp/.X21-lock
[2024-07-10T14:13:02.366+0200] [INFO ] Found X server running at /tmp/.X22-lock
[2024-07-10T14:13:02.377+0200] [INFO ] Found X server running at /tmp/.X23-lock
[2024-07-10T14:13:02.390+0200] [INFO ] Found X server running at /tmp/.X24-lock
[2024-07-10T14:13:02.402+0200] [INFO ] Found X server running at /tmp/.X25-lock
[2024-07-10T14:13:02.413+0200] [INFO ] Found X server running at /tmp/.X26-lock
[2024-07-10T14:13:02.426+0200] [INFO ] PAM: Last login: Wed Jul 10 14:11:07 CEST 2024 from 127.0.0.1 on :27
[2024-07-10T14:13:02.484+0200] [INFO ] Starting X server on display 27: Xorg :27 -auth .Xauthority -config xrdp/xorg.conf -noreset -nolisten tcp -logfile .xorgxrdp.%s.log
[2024-07-10T14:13:12.514+0200] [ERROR] waitforx: Unable to open display :27    # Well....
[2024-07-10T14:13:12.536+0200] [ERROR] X server failed to start

So I checked Xorg :27 -auth .Xauthority -config xrdp/xorg.conf -noreset -nolisten tcp -logfile .xorgxrdp.%s.log

Fatal server error:
(EE) no screens found(EE)

I honestly have no idea why everything broke now

[matt335672]

My bad - you'll need to rebuild a matching version of xorgxrdp to go with xrdp. Sorry I forgot to mention that.

If you're using the latest devel of xrdp, use the latest devel of xorgxrdp. Sticking with the v0.10 branch of both may be safer though.