Re: rdesktop seg fault possibly related to MS13-029

Henrik Andersson <[email protected]> Thu, 18 Apr 2013 09:30:42 +0200
Newsgroups gmane.network.rdesktop.devel
Message-ID <[email protected]>
This is a multi-part message in MIME format.
--===============8021789526164843530==
Content-Type: multipart/alternative;
	boundary="------------050400070609080105050201"

This is a multi-part message in MIME format.
--------------050400070609080105050201
Content-Type: text/plain; charset=windows-1252; format=flowed
Content-Transfer-Encoding: quoted-printable

Hi Brian,

I was pretty sure that rdesktop would fallback to plain RDP connection=20
but that was not the case. I have pushed a fix to upstream for that.=20
Could you update and recompile rdesktop to verify the functionlity.


Regards,

Henrik Andersson

On 04/18/2013 07:37 AM, Henrik Andersson wrote:
> Hi Brian,
>
> This is due to the new NLA code of rdesktop, your server presents it=20
> can do TLS but you do not have a certificate assigned to the RDP-tcp=20
> connection which will make rdesktop fallback to use non TLS eg. plain=20
> RDP protocol.
>
> See following article how to configure a certificate for your server,=20
> http://support.microsoft.com/kb/895433, which applies on both 2003 and=20
> 2008.
>
>
> Regards,
>
> Henrik Andersson
>
>
> On 04/17/2013 11:24 PM, Brian D wrote:
>> Well, it appears I get a different result with the latest from svn..
>>
>> Autoselected keyboard map en-us
>> Failed to connect, no valid authentication certificate on server.
>>
>> I did discover that I can get a successful connection dropping back=20
>> to RDP
>> v4 (-4).
>>
>> Any thoughts to debug further?
>>
>> Thanks,
>> Brian
>>
>>
>>
>>
>> On Wed, Apr 17, 2013 at 2:17 AM, Henrik Andersson <
>> [email protected]> wrote:
>>
>>> Hi Brian,
>>>
>>> What i can see is that ms13-029 issue is only related to the client a=
nd
>>> update should not
>>> affect the terminal service. However judging by your backtrace that=20
>>> is a
>>> problem that was
>>> newly fixed in upstream commit r1701 and will be included in next
>>> release of rdesktop.
>>>
>>> It would be nice if you could build rdesktop from upstream source and
>>> verify that your issue
>>> is solved with above mentioned commit.
>>>
>>>
>>> Kind Regards,
>>>
>>> Henrik Andersson
>>>
>>>
>>
>>
>> ----------------------------------------------------------------------=
--------=20
>>
>> Precog is a next-generation analytics platform capable of advanced
>> analytics on semi-structured data. The platform includes APIs for=20
>> building
>> apps and a phenomenal toolset for data science. Developers can use
>> our toolset retry_without_neg =3D Truefor easy data analysis &=20
>> visualization. Get a free account!
>> http://www2.precog.com/precogplatform/slashdotnewsletter
>>
>>
>> _______________________________________________
>> rdesktop-devel mailing list
>> [email protected]
>> https://lists.sourceforge.net/lists/listinfo/rdesktop-devel
>
>
>
>
> -----------------------------------------------------------------------=
-------
> Precog is a next-generation analytics platform capable of advanced
> analytics on semi-structured data. The platform includes APIs for build=
ing
> apps and a phenomenal toolset for data science. Developers can use
> our toolset for easy data analysis & visualization. Get a free account!
> http://www2.precog.com/precogplatform/slashdotnewsletter
>
>
> _______________________________________________
> rdesktop-devel mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/rdesktop-devel


--=20
---
Henrik Andersson
Cendio AB        http://cendio.com
Teknikringen 8        http://twitter.com/ThinLinc
583 30 Link=F6ping    http://facebook.com/ThinLinc
Phone: +46-13-214600    http://plus.google.com/112509906846170010689


--------------050400070609080105050201
Content-Type: text/html; charset=windows-1252
Content-Transfer-Encoding: quoted-printable

<html>
  <head>
    <meta content=3D"text/html; charset=3Dwindows-1252"
      http-equiv=3D"Content-Type">
  </head>
  <body bgcolor=3D"#FFFFFF" text=3D"#000000">
    <div class=3D"moz-cite-prefix">Hi Brian,<br>
      <br>
      I was pretty sure that rdesktop would fallback to plain RDP
      connection but that was not the case. I have pushed a fix to
      upstream for that. Could you update and recompile rdesktop to
      verify the functionlity.<br>
      <br>
      <br>
      Regards,<br>
      <br>
      Henrik Andersson<br>
      <br>
      On 04/18/2013 07:37 AM, Henrik Andersson wrote:<br>
    </div>
    <blockquote cite=3D"mid:[email protected]" type=3D"cite">Hi
      Brian,
      <br>
      <br>
      This is due to the new NLA code of rdesktop, your server presents
      it can do TLS but you do not have a certificate assigned to the
      RDP-tcp connection which will make rdesktop fallback to use non
      TLS eg. plain RDP protocol.
      <br>
      <br>
      See following article how to configure a certificate for your
      server, <a class=3D"moz-txt-link-freetext" href=3D"http://support.m=
icrosoft.com/kb/895433">http://support.microsoft.com/kb/895433</a>, which=
 applies on
      both 2003 and 2008.
      <br>
      <br>
      <br>
      Regards,
      <br>
      <br>
      Henrik Andersson
      <br>
      <br>
      <br>
      On 04/17/2013 11:24 PM, Brian D wrote:
      <br>
      <blockquote type=3D"cite">Well, it appears I get a different result
        with the latest from svn..
        <br>
        <br>
        Autoselected keyboard map en-us
        <br>
        Failed to connect, no valid authentication certificate on
        server.
        <br>
        <br>
        I did discover that I can get a successful connection dropping
        back to RDP
        <br>
        v4 (-4).
        <br>
        <br>
        Any thoughts to debug further?
        <br>
        <br>
        Thanks,
        <br>
        Brian
        <br>
        <br>
        <br>
        <br>
        <br>
        On Wed, Apr 17, 2013 at 2:17 AM, Henrik Andersson &lt;
        <br>
        <a class=3D"moz-txt-link-abbreviated" href=3D"mailto:henrik.ander=
[email protected]">[email protected]</a>&gt; wrote:
        <br>
        <br>
        <blockquote type=3D"cite">Hi Brian,
          <br>
          <br>
          What i can see is that ms13-029 issue is only related to the
          client and
          <br>
          update should not
          <br>
          affect the terminal service. However judging by your backtrace
          that is a
          <br>
          problem that was
          <br>
          newly fixed in upstream commit r1701 and will be included in
          next
          <br>
          release of rdesktop.
          <br>
          <br>
          It would be nice if you could build rdesktop from upstream
          source and
          <br>
          verify that your issue
          <br>
          is solved with above mentioned commit.
          <br>
          <br>
          <br>
          Kind Regards,
          <br>
          <br>
          Henrik Andersson
          <br>
          <br>
          <br>
        </blockquote>
        <br>
        <br>
-------------------------------------------------------------------------=
-----
        <br>
        Precog is a next-generation analytics platform capable of
        advanced
        <br>
        analytics on semi-structured data. The platform includes APIs
        for building
        <br>
        apps and a phenomenal toolset for data science. Developers can
        use
        <br>
        our toolset retry_without_neg =3D Truefor easy data analysis &amp=
;
        visualization. Get a free account!
        <br>
        <a class=3D"moz-txt-link-freetext" href=3D"http://www2.precog.com=
/precogplatform/slashdotnewsletter">http://www2.precog.com/precogplatform=
/slashdotnewsletter</a>
        <br>
        <br>
        <br>
        _______________________________________________
        <br>
        rdesktop-devel mailing list
        <br>
        <a class=3D"moz-txt-link-abbreviated" href=3D"mailto:rdesktop-dev=
[email protected]">[email protected]</a>
        <br>
        <a class=3D"moz-txt-link-freetext" href=3D"https://lists.sourcefo=
rge.net/lists/listinfo/rdesktop-devel">https://lists.sourceforge.net/list=
s/listinfo/rdesktop-devel</a>
        <br>
      </blockquote>
      <br>
      <br>
      <br>
      <fieldset class=3D"mimeAttachmentHeader"></fieldset>
      <br>
      <pre wrap=3D"">----------------------------------------------------=
--------------------------
Precog is a next-generation analytics platform capable of advanced
analytics on semi-structured data. The platform includes APIs for buildin=
g
apps and a phenomenal toolset for data science. Developers can use
our toolset for easy data analysis &amp; visualization. Get a free accoun=
t!
<a class=3D"moz-txt-link-freetext" href=3D"http://www2.precog.com/precogp=
latform/slashdotnewsletter">http://www2.precog.com/precogplatform/slashdo=
tnewsletter</a></pre>
      <br>
      <fieldset class=3D"mimeAttachmentHeader"></fieldset>
      <br>
      <pre wrap=3D"">_______________________________________________
rdesktop-devel mailing list
<a class=3D"moz-txt-link-abbreviated" href=3D"mailto:rdesktop-devel@lists=
.sourceforge.net">[email protected]</a>
<a class=3D"moz-txt-link-freetext" href=3D"https://lists.sourceforge.net/=
lists/listinfo/rdesktop-devel">https://lists.sourceforge.net/lists/listin=
fo/rdesktop-devel</a>
</pre>
    </blockquote>
    <br>
    <br>
    <pre class=3D"moz-signature" cols=3D"72">--=20
---
Henrik Andersson
Cendio AB        <a class=3D"moz-txt-link-freetext" href=3D"http://cendio=
.com">http://cendio.com</a>
Teknikringen 8        <a class=3D"moz-txt-link-freetext" href=3D"http://t=
witter.com/ThinLinc">http://twitter.com/ThinLinc</a>
583 30 Link=F6ping    <a class=3D"moz-txt-link-freetext" href=3D"http://f=
acebook.com/ThinLinc">http://facebook.com/ThinLinc</a>
Phone: +46-13-214600    <a class=3D"moz-txt-link-freetext" href=3D"http:/=
/plus.google.com/112509906846170010689">http://plus.google.com/1125099068=
46170010689</a></pre>
  </body>
</html>

--------------050400070609080105050201--


--===============8021789526164843530==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

------------------------------------------------------------------------------
Precog is a next-generation analytics platform capable of advanced
analytics on semi-structured data. The platform includes APIs for building
apps and a phenomenal toolset for data science. Developers can use
our toolset for easy data analysis & visualization. Get a free account!
http://www2.precog.com/precogplatform/slashdotnewsletter
--===============8021789526164843530==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
rdesktop-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/rdesktop-devel

--===============8021789526164843530==--