Bug#1061500: libfreerdp-server2-2: Connection from windows to gnome-remote-deskopt fails with the following error: [ERROR][com.winpr.sspi.NTLM] - Message Integrity Check (MIC) verification failed!

2024-01-31 Thread Mike Gabriel

Control: tags -1 moreinfo

Hi Patrick,

On  Do 25 Jan 2024 16:21:23 CET, Patrick Winnertz wrote:


Package: libfreerdp-server2-2
Version: 2.10.0+dfsg1-1
Severity: important
Tags: patch

Dear Maintainer,

it's currently impossible to connect to a running gnome-remote-desktop
instance due to a issue in freerdp.

there is already a patch available in upstream for that issue, which
just needs to be backported to 2.10.

https://github.com/FreeRDP/FreeRDP/commit/a23a24fe068c37d20c254fe393d4fe5d4c6ab31d

You'll find additional information within this bug report: #1040395 and
at
https://gitlab.gnome.org/GNOME/gnome-remote-desktop/-/issues/86

It would be nice if the freerdp implementation in stable could be fixed,
so that rdp is again usable in a stable environment.

With best regards
Patrick

*** Reporter, please consider answering these questions, where  
appropriate ***


   * What led up to the situation?
   * What exactly did you do (or not do) that was effective (or
 ineffective)?
   * What was the outcome of this action?
   * What outcome did you expect instead?

*** End of the template - remove these template lines ***


Interesting hmmm... when applying the patch referenced above, quilt says:

```
[sunweaver@sunobo freerdp2 (debian/bookworm/updates)]$ dquilt push -a
Applying patch 0001_fix-NTOWFvxxxA-functions.patch
patching file winpr/libwinpr/utils/ntlm.c
Hunk #1 FAILED at 48.
Hunk #2 FAILED at 94.
Hunk #3 FAILED at 160.
3 out of 3 hunks FAILED -- rejects in file winpr/libwinpr/utils/ntlm.c
Patch 0001_fix-NTOWFvxxxA-functions.patch can be reverse-applied
```

Can you check if that is different for you? Is the upsream commit the  
wrong URL?


Also, the commit is listed for the 2.10.0 tag in upstream freerdp Git:
https://github.com/FreeRDP/FreeRDP/commits/2.10.0/

Can you provide more information on this? Ideally a list of commits to  
cherry-pick for a test ride.


Mike
--

DAS-NETZWERKTEAM
c\o Technik- und Ökologiezentrum Eckernförde
Mike Gabriel, Marienthaler Str. 17, 24340 Eckernförde
mobile: +49 (1520) 1976 148
landline: +49 (4351) 850 8940

GnuPG Fingerprint: 9BFB AEE8 6C0A A5FF BF22  0782 9AF4 6B30 2577 1B31
mail: mike.gabr...@das-netzwerkteam.de, http://das-netzwerkteam.de



pgpvFQu9Lt3E6.pgp
Description: Digitale PGP-Signatur


Bug#1061500: libfreerdp-server2-2: Connection from windows to gnome-remote-deskopt fails with the following error: [ERROR][com.winpr.sspi.NTLM] - Message Integrity Check (MIC) verification failed!

2024-01-25 Thread Patrick Winnertz
Package: libfreerdp-server2-2
Version: 2.10.0+dfsg1-1
Severity: important
Tags: patch

Dear Maintainer,

it's currently impossible to connect to a running gnome-remote-desktop
instance due to a issue in freerdp.

there is already a patch available in upstream for that issue, which
just needs to be backported to 2.10.

https://github.com/FreeRDP/FreeRDP/commit/a23a24fe068c37d20c254fe393d4fe5d4c6ab31d

You'll find additional information within this bug report: #1040395 and
at
https://gitlab.gnome.org/GNOME/gnome-remote-desktop/-/issues/86

It would be nice if the freerdp implementation in stable could be fixed,
so that rdp is again usable in a stable environment.

With best regards
Patrick

*** Reporter, please consider answering these questions, where appropriate ***

   * What led up to the situation?
   * What exactly did you do (or not do) that was effective (or
 ineffective)?
   * What was the outcome of this action?
   * What outcome did you expect instead?

*** End of the template - remove these template lines ***


-- System Information:
Debian Release: 12.4
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 6.1.0-15-amd64 (SMP w/6 CPU threads; PREEMPT)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages libfreerdp-server2-2 depends on:
ii  libc6  2.36-9+deb12u3
ii  libfreerdp2-2  2.10.0+dfsg1-1
ii  libwinpr2-22.10.0+dfsg1-1

libfreerdp-server2-2 recommends no packages.

libfreerdp-server2-2 suggests no packages.

-- no debconf information


--
Dr. Patrick Winnertz
Leostraße 26
68789 St. Leon-Rot
Tel: +49 163 253 636 9