[
https://issues.apache.org/jira/browse/GUACAMOLE-413?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16205485#comment-16205485
]
Michael Jumper commented on GUACAMOLE-413:
------------------------------------------
In both of the provided logs, the same username data is being sent to the RDP
server. I don't see what could be different between the two cases, unless
perhaps guacamole-server was built against a different version of FreeRDP. The
error in the logs for the Guacamole attempt indicates a failure within the TLS
portion of the conversation, not within handling of NLA itself:
{code:none}
SSL_read: Failure in SSL library (protocol error?)
SSL_read: error:14094419:SSL routines:SSL3_READ_BYTES:tlsv1 alert access denied
credssp_recv() error: -1
{code}
The error messages from FreeRDP itself say the credentials may be invalid, but
that looks more like FreeRDP misinterpreting the failure given the error
messages which precede it.
Can you confirm that only one version of FreeRDP is present on your system, and
it's that version which both Guacamole and xfreerdp are using?
What parameters are you giving to xfreerdp and what parameters are you
specifying for the Guacamole connection?
> RDP-NLA Authentification fails with username who contains accentued characters
> ------------------------------------------------------------------------------
>
> Key: GUACAMOLE-413
> URL: https://issues.apache.org/jira/browse/GUACAMOLE-413
> Project: Guacamole
> Issue Type: Bug
> Components: guacamole
> Affects Versions: 0.9.13-incubating
> Reporter: Chris B
> Attachments: log_freerdp_only.txt, log_guacamole.txt
>
>
> I'm currently trying to use guacamole with NLA Authentification in RDP.
> It works with users who has username that contain standarts characters
> (A-Z/a-z..), but when i try to connect with users who username contains "é",
> "è", "Ü", "ç", "à"... characters (like "André"), i've got the error "Error
> connecting to RDP Server" in syslog and i can see that the NLA
> authentification failed on my server event viewer.
> When i try "Andre" instead of "André", it works (AD usernames aren't case
> sensitive), and if i try to connect with "André" WITHOUT NLA
> Authentification, it also works.
> This doesn't seems to be a FreeRDP issue, i tried NLA authentification
> directly with FreeRDP (branch stable.1-1) and it works.
> I activated FreeRDP Authentification logs (with cmake -DWITH_DEBUG_NLA before
> FreeRDP build).
> Attachements :
> log_guacamole.txt : connection with user "José" and NLA Authentification
> throught Guacamole 0-9-13 based on FreeRDP stable 1-1.
> log_freerdp_only.txt : connection with user "José" and NLA Authentification
> throught FreeRDP stable 1-1
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
