Re: rdesktop seg fault possibly related to MS13-029
Henrik Andersson <[email protected]> Thu, 18 Apr 2013 07:37:49 +0200
| Newsgroups | gmane.network.rdesktop.devel |
|---|---|
| Message-ID | <[email protected]> |
This is a multi-part message in MIME format. --===============7242836013215047873== Content-Type: multipart/alternative; boundary="------------030800000002080007090400" This is a multi-part message in MIME format. --------------030800000002080007090400 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: quoted-printable Hi Brian, This is due to the new NLA code of rdesktop, your server presents it can=20 do TLS but you do not have a certificate assigned to the RDP-tcp=20 connection which will make rdesktop fallback to use non TLS eg. plain=20 RDP protocol. See following article how to configure a certificate for your server,=20 http://support.microsoft.com/kb/895433, which applies on both 2003 and 20= 08. Regards, Henrik Andersson On 04/17/2013 11:24 PM, Brian D wrote: > Well, it appears I get a different result with the latest from svn.. > > Autoselected keyboard map en-us > Failed to connect, no valid authentication certificate on server. > > I did discover that I can get a successful connection dropping back to = RDP > v4 (-4). > > Any thoughts to debug further? > > Thanks, > Brian > > > > > On Wed, Apr 17, 2013 at 2:17 AM, Henrik Andersson < > [email protected]> wrote: > >> Hi Brian, >> >> What i can see is that ms13-029 issue is only related to the client an= d >> update should not >> affect the terminal service. However judging by your backtrace that is= a >> problem that was >> newly fixed in upstream commit r1701 and will be included in next >> release of rdesktop. >> >> It would be nice if you could build rdesktop from upstream source and >> verify that your issue >> is solved with above mentioned commit. >> >> >> Kind Regards, >> >> Henrik Andersson >> >> > > > -----------------------------------------------------------------------= ------- > Precog is a next-generation analytics platform capable of advanced > analytics on semi-structured data. The platform includes APIs for build= ing > apps and a phenomenal toolset for data science. Developers can use > our toolset for easy data analysis & visualization. Get a free account! > http://www2.precog.com/precogplatform/slashdotnewsletter > > > _______________________________________________ > rdesktop-devel mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/rdesktop-devel --=20 --- Henrik Andersson Cendio AB http://cendio.com Teknikringen 8 http://twitter.com/ThinLinc 583 30 Link=F6ping http://facebook.com/ThinLinc Phone: +46-13-214600 http://plus.google.com/112509906846170010689 --------------030800000002080007090400 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit <html> <head> <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type"> </head> <body bgcolor="#FFFFFF" text="#000000"> <div class="moz-cite-prefix">Hi Brian,<br> <br> This is due to the new NLA code of rdesktop, your server presents it can do TLS but you do not have a certificate assigned to the RDP-tcp connection which will make rdesktop fallback to use non TLS eg. plain RDP protocol.<br> <br> See following article how to configure a certificate for your server, <a class="moz-txt-link-freetext" href="http://support.microsoft.com/kb/895433">http://support.microsoft.com/kb/895433</a>, which applies on both 2003 and 2008.<br> <br> <br> Regards,<br> <br> Henrik Andersson<br> <br> <br> On 04/17/2013 11:24 PM, Brian D wrote:<br> </div> <blockquote cite="mid:CAEWMk_S-xxNXPnCawzSoqnQ0S9q=PHnptf4p5SpkPDr5p6nWMg@mail.gmail.com" type="cite"> <pre wrap="">Well, it appears I get a different result with the latest from svn.. Autoselected keyboard map en-us Failed to connect, no valid authentication certificate on server. I did discover that I can get a successful connection dropping back to RDP v4 (-4). Any thoughts to debug further? Thanks, Brian On Wed, Apr 17, 2013 at 2:17 AM, Henrik Andersson < <a class="moz-txt-link-abbreviated" href="mailto:[email protected]">[email protected]</a>> wrote: </pre> <blockquote type="cite"> <pre wrap="">Hi Brian, What i can see is that ms13-029 issue is only related to the client and update should not affect the terminal service. However judging by your backtrace that is a problem that was newly fixed in upstream commit r1701 and will be included in next release of rdesktop. It would be nice if you could build rdesktop from upstream source and verify that your issue is solved with above mentioned commit. Kind Regards, Henrik Andersson </pre> </blockquote> <pre wrap=""> </pre> <br> <fieldset class="mimeAttachmentHeader"></fieldset> <br> <pre wrap="">------------------------------------------------------------------------------ Precog is a next-generation analytics platform capable of advanced analytics on semi-structured data. The platform includes APIs for building apps and a phenomenal toolset for data science. Developers can use our toolset for easy data analysis & visualization. Get a free account! <a class="moz-txt-link-freetext" href="http://www2.precog.com/precogplatform/slashdotnewsletter">http://www2.precog.com/precogplatform/slashdotnewsletter</a></pre> <br> <fieldset class="mimeAttachmentHeader"></fieldset> <br> <pre wrap="">_______________________________________________ rdesktop-devel mailing list <a class="moz-txt-link-abbreviated" href="mailto:[email protected]">[email protected]</a> <a class="moz-txt-link-freetext" href="https://lists.sourceforge.net/lists/listinfo/rdesktop-devel">https://lists.sourceforge.net/lists/listinfo/rdesktop-devel</a> </pre> </blockquote> <br> <br> <pre class="moz-signature" cols="72">-- --- Henrik Andersson Cendio AB <a class="moz-txt-link-freetext" href="http://cendio.com">http://cendio.com</a> Teknikringen 8 <a class="moz-txt-link-freetext" href="http://twitter.com/ThinLinc">http://twitter.com/ThinLinc</a> 583 30 Linköping <a class="moz-txt-link-freetext" href="http://facebook.com/ThinLinc">http://facebook.com/ThinLinc</a> Phone: +46-13-214600 <a class="moz-txt-link-freetext" href="http://plus.google.com/112509906846170010689">http://plus.google.com/112509906846170010689</a></pre> </body> </html> --------------030800000002080007090400-- --===============7242836013215047873== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline ------------------------------------------------------------------------------ Precog is a next-generation analytics platform capable of advanced analytics on semi-structured data. The platform includes APIs for building apps and a phenomenal toolset for data science. Developers can use our toolset for easy data analysis & visualization. Get a free account! http://www2.precog.com/precogplatform/slashdotnewsletter --===============7242836013215047873== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ rdesktop-devel mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/rdesktop-devel --===============7242836013215047873==--