Re: rdesktop seg fault possibly related to MS13-029

Henrik Andersson <[email protected]> Thu, 18 Apr 2013 07:37:49 +0200
Newsgroups gmane.network.rdesktop.devel
Message-ID <[email protected]>
This is a multi-part message in MIME format.
--===============7242836013215047873==
Content-Type: multipart/alternative;
	boundary="------------030800000002080007090400"

This is a multi-part message in MIME format.
--------------030800000002080007090400
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: quoted-printable

Hi Brian,

This is due to the new NLA code of rdesktop, your server presents it can=20
do TLS but you do not have a certificate assigned to the RDP-tcp=20
connection which will make rdesktop fallback to use non TLS eg. plain=20
RDP protocol.

See following article how to configure a certificate for your server,=20
http://support.microsoft.com/kb/895433, which applies on both 2003 and 20=
08.


Regards,

Henrik Andersson


On 04/17/2013 11:24 PM, Brian D wrote:
> Well, it appears I get a different result with the latest from svn..
>
> Autoselected keyboard map en-us
> Failed to connect, no valid authentication certificate on server.
>
> I did discover that I can get a successful connection dropping back to =
RDP
> v4 (-4).
>
> Any thoughts to debug further?
>
> Thanks,
> Brian
>
>
>
>
> On Wed, Apr 17, 2013 at 2:17 AM, Henrik Andersson <
> [email protected]> wrote:
>
>> Hi Brian,
>>
>> What i can see is that ms13-029 issue is only related to the client an=
d
>> update should not
>> affect the terminal service. However judging by your backtrace that is=
 a
>> problem that was
>> newly fixed in upstream commit r1701 and will be included in next
>> release of rdesktop.
>>
>> It would be nice if you could build rdesktop from upstream source and
>> verify that your issue
>> is solved with above mentioned commit.
>>
>>
>> Kind Regards,
>>
>> Henrik Andersson
>>
>>
>
>
> -----------------------------------------------------------------------=
-------
> Precog is a next-generation analytics platform capable of advanced
> analytics on semi-structured data. The platform includes APIs for build=
ing
> apps and a phenomenal toolset for data science. Developers can use
> our toolset for easy data analysis & visualization. Get a free account!
> http://www2.precog.com/precogplatform/slashdotnewsletter
>
>
> _______________________________________________
> rdesktop-devel mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/rdesktop-devel


--=20
---
Henrik Andersson
Cendio AB        http://cendio.com
Teknikringen 8        http://twitter.com/ThinLinc
583 30 Link=F6ping    http://facebook.com/ThinLinc
Phone: +46-13-214600    http://plus.google.com/112509906846170010689


--------------030800000002080007090400
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

<html>
  <head>
    <meta content="text/html; charset=ISO-8859-1"
      http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    <div class="moz-cite-prefix">Hi Brian,<br>
      <br>
      This is due to the new NLA code of rdesktop, your server presents
      it can do TLS but you do not have a certificate assigned to the
      RDP-tcp connection which will make rdesktop fallback to use non
      TLS eg. plain RDP protocol.<br>
      <br>
      See following article how to configure a certificate for your
      server, <a class="moz-txt-link-freetext" href="http://support.microsoft.com/kb/895433">http://support.microsoft.com/kb/895433</a>, which applies on
      both 2003 and 2008.<br>
      <br>
      <br>
      Regards,<br>
      <br>
      Henrik Andersson<br>
      <br>
      <br>
      On 04/17/2013 11:24 PM, Brian D wrote:<br>
    </div>
    <blockquote
cite="mid:CAEWMk_S-xxNXPnCawzSoqnQ0S9q=PHnptf4p5SpkPDr5p6nWMg@mail.gmail.com"
      type="cite">
      <pre wrap="">Well, it appears I get a different result with the latest from svn..

Autoselected keyboard map en-us
Failed to connect, no valid authentication certificate on server.

I did discover that I can get a successful connection dropping back to RDP
v4 (-4).

Any thoughts to debug further?

Thanks,
Brian




On Wed, Apr 17, 2013 at 2:17 AM, Henrik Andersson &lt;
<a class="moz-txt-link-abbreviated" href="mailto:[email protected]">[email protected]</a>&gt; wrote:

</pre>
      <blockquote type="cite">
        <pre wrap="">Hi Brian,

What i can see is that ms13-029 issue is only related to the client and
update should not
affect the terminal service. However judging by your backtrace that is a
problem that was
newly fixed in upstream commit r1701 and will be included in next
release of rdesktop.

It would be nice if you could build rdesktop from upstream source and
verify that your issue
is solved with above mentioned commit.


Kind Regards,

Henrik Andersson


</pre>
      </blockquote>
      <pre wrap="">
</pre>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <br>
      <pre wrap="">------------------------------------------------------------------------------
Precog is a next-generation analytics platform capable of advanced
analytics on semi-structured data. The platform includes APIs for building
apps and a phenomenal toolset for data science. Developers can use
our toolset for easy data analysis &amp; visualization. Get a free account!
<a class="moz-txt-link-freetext" href="http://www2.precog.com/precogplatform/slashdotnewsletter">http://www2.precog.com/precogplatform/slashdotnewsletter</a></pre>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <br>
      <pre wrap="">_______________________________________________
rdesktop-devel mailing list
<a class="moz-txt-link-abbreviated" href="mailto:[email protected]">[email protected]</a>
<a class="moz-txt-link-freetext" href="https://lists.sourceforge.net/lists/listinfo/rdesktop-devel">https://lists.sourceforge.net/lists/listinfo/rdesktop-devel</a>
</pre>
    </blockquote>
    <br>
    <br>
    <pre class="moz-signature" cols="72">-- 
---
Henrik Andersson
Cendio AB        <a class="moz-txt-link-freetext" href="http://cendio.com">http://cendio.com</a>
Teknikringen 8        <a class="moz-txt-link-freetext" href="http://twitter.com/ThinLinc">http://twitter.com/ThinLinc</a>
583 30 Link&ouml;ping    <a class="moz-txt-link-freetext" href="http://facebook.com/ThinLinc">http://facebook.com/ThinLinc</a>
Phone: +46-13-214600    <a class="moz-txt-link-freetext" href="http://plus.google.com/112509906846170010689">http://plus.google.com/112509906846170010689</a></pre>
  </body>
</html>

--------------030800000002080007090400--


--===============7242836013215047873==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

------------------------------------------------------------------------------
Precog is a next-generation analytics platform capable of advanced
analytics on semi-structured data. The platform includes APIs for building
apps and a phenomenal toolset for data science. Developers can use
our toolset for easy data analysis & visualization. Get a free account!
http://www2.precog.com/precogplatform/slashdotnewsletter
--===============7242836013215047873==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
rdesktop-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/rdesktop-devel

--===============7242836013215047873==--