xfreerdp fails with Windows 10 terminal server

[Götz Waschk]

This happens when I try to connect to a Windows 10 server:
Password:
[13:29:30:958] [16417:16418] [ERROR][com.freerdp.core.nla] - SPNEGO failed with NTSTATUS: 0xC00000BB
[13:29:30:958] [16417:16418] [ERROR][com.freerdp.core] - freerdp_set_last_error Unknown error class [0xC00000BB]
[13:29:30:958] [16417:16418] [ERROR][com.freerdp.core.rdp] - rdp_recv_callback: CONNECTION_STATE_NLA - nla_recv_pdu() fail
[13:29:30:958] [16417:16418] [ERROR][com.freerdp.core.transport] - transport_check_fds: transport->ReceiveCallback() - -1
[13:29:30:958] [16417:16418] [ERROR][com.freerdp.client.x11] - Freerdp connect error exit status 1

For comparison, the same command is working fine on RHEL7 with freerdp-2.0.0-1.rc4.el7.x86_64:

[13:32:03:765] [17075:17104] [INFO][com.freerdp.client.common.cmdline] - loading channelEx cliprdr
Password:
[13:32:07:455] [17075:17104] [INFO][com.freerdp.gdi] - Local framebuffer format PIXEL_FORMAT_BGRX32
[13:32:07:455] [17075:17104] [INFO][com.freerdp.gdi] - Remote framebuffer format PIXEL_FORMAT_RGB16
[13:32:07:509] [17075:17104] [INFO][com.winpr.clipboard] - initialized POSIX local file subsystem

ProblemType: Bug
DistroRelease: Ubuntu 18.04
Package: freerdp2-x11 2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1
ProcVersionSignature: Ubuntu 4.15.0-65.74-generic 4.15.18
Uname: Linux 4.15.0-65-generic x86_64
NonfreeKernelModules: openafs
ApportVersion: 2.20.9-0ubuntu7.7
Architecture: amd64
CurrentDesktop: ubuntu:GNOME
Date: Mon Oct 7 13:31:05 2019
SourcePackage: freerdp2
UpgradeStatus: No upgrade log present (probably fresh install)

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[Jakko (jakko)]

I'm affected too. I'm on Linux Mint 19.3 MATE (amd64) which is based on Ubuntu 18.04. Connecting to a Windows 10 machine and Windows Server 2019 fails. Connecting to a Ubuntu 18.04 server works, however.

freerdp2-x11 version: 2.0.0~git20170725.1.1648deb+dfsg1-7ubuntu0.1
openssh-client version: 1:7.6p1-4ubuntu0.3
openssl version: 1.1.1-1ubuntu2.1~18.04.5
kernel: 5.3.0-26-generic

This is how I try to connect:

Terminal 1
$ ssh -L [localport]:[server]:[port] [username]@[ssh-server]

Terminal 2
$ xfreerdp /v:localhost /port:[localport] /u:[username] /network:modem /kbd:german /f
Password:
[22:15:20:829] [15325:15326] [ERROR][com.freerdp.core.nla] - SPNEGO failed with NTSTATUS: 0xC00000BB
[22:15:20:829] [15325:15326] [ERROR][com.freerdp.core] - freerdp_set_last_error Unknown error class [0xC00000BB]
[22:15:20:829] [15325:15326] [ERROR][com.freerdp.core.rdp] - rdp_recv_callback: CONNECTION_STATE_NLA - nla_recv_pdu() fail
[22:15:20:829] [15325:15326] [ERROR][com.freerdp.core.transport] - transport_check_fds: transport->ReceiveCallback() - -1
[22:15:20:829] [15325:15326] [ERROR][com.freerdp.client.x11] - Freerdp connect error exit status 1

With option /log-level:TRACE
$ xfreerdp /v:localhost /port:[localport] /u:[username] /network:modem /kbd:german /f /log-level:TRACE
[22:16:59:351] [15346:15347] [DEBUG][com.freerdp.client.x11] - Searching for XInput pointer device
[22:16:59:353] [15346:15347] [DEBUG][com.freerdp.client.x11] - Pointer device: 11
[22:16:59:361] [15346:15347] [DEBUG][com.freerdp.core.nego] - Enabling security layer negotiation: TRUE
[22:16:59:361] [15346:15347] [DEBUG][com.freerdp.core.nego] - Enabling restricted admin mode: FALSE
[22:16:59:361] [15346:15347] [DEBUG][com.freerdp.core.nego] - Enabling RDP security: TRUE
[22:16:59:361] [15346:15347] [DEBUG][com.freerdp.core.nego] - Enabling TLS security: TRUE
[22:16:59:362] [15346:15347] [DEBUG][com.freerdp.core.nego] - Enabling NLA security: TRUE
[22:16:59:362] [15346:15347] [DEBUG][com.freerdp.core.nego] - Enabling NLA extended security: FALSE
[22:16:59:362] [15346:15347] [DEBUG][com.freerdp.core.nego] - state: NEGO_STATE_NLA
[22:16:59:362] [15346:15347] [DEBUG][com.freerdp.core.nego] - Attempting NLA security
[22:16:59:365] [15346:15347] [DEBUG][com.freerdp.core.nego] - RequestedProtocols: 3
[22:16:59:449] [15346:15347] [DEBUG][com.freerdp.core.nego] - RDP_NEG_RSP
[22:16:59:450] [15346:15347] [DEBUG][com.freerdp.core.nego] - selected_protocol: 2
[22:16:59:450] [15346:15347] [DEBUG][com.freerdp.core.nego] - state: NEGO_STATE_FINAL
[22:16:59:451] [15346:15347] [DEBUG][com.freerdp.core.nego] - Negotiated NLA security
[22:16:59:452] [15346:15347] [DEBUG][com.freerdp.core.nego] - nego_security_connect with PROTOCOL_NLA
[22:16:59:557] [15346:15347] [DEBUG][com.winpr.utils] - Could not open SAM file!
Password:
[22:17:04:907] [15346:15347] [DEBUG][com.winpr.sspi] - InitSecurityInterfaceExA
[22:17:04:907] [15346:15347] [TRACE][com.freerdp.core.nla] - InitializeSecurityContext status SEC_I_CONTINUE_NEEDED [0x00090312]
[22:17:04:907] [15346:15347] [DEBUG][com.freerdp.core.nla] - Sending Authentication Token
[22:17:04:907] [15346:15347] [DEBUG][com.freerdp.core.nla] - [...] NTLMSSP...........