We have a similar problem, and have tracked it to an issue with PAM. We're using libpam-ldap here, and replacing the "@include common-session" line in /etc/pam.d/xrdp-sesman with the content of /etc/pam.d/common-session, then commenting out the "session optional pam_ldap.so" line fixes the problem.
-- Scott Barker
