Giovanni Panozzo activity https://gitlab.com/giox069 2025-06-17T07:07:05Z tag:gitlab.com,2024-05-06:3342266636 Giovanni Panozzo commented on issue #3104 at Remmina / Remmina 2024-05-06T12:55:35Z giox069 Giovanni Panozzo

Ok. Maybe removing only the 6 lines that add "!kerberos" as default here https://gitlab.com/Remmina/Remmina/-/blob/master/plugins/rdp/rdp_settings.c?ref_type=heads#L69 will be enough.
Leaving the new option "Auth settings FreeRDP auth-pkg-list" as is now, on the RDP global settings will be useful for users that still need to change auth-pkg-list from Remmina.

tag:gitlab.com,2024-05-01:3333416614 Giovanni Panozzo commented on merge request !2581 at Remmina / Remmina 2024-05-01T12:32:13Z giox069 Giovanni Panozzo

I'm happy to have been of help, it made me feel less old than I am ;).
You are doing a very good job with Remmina.

I will "use" the full patch daily when available on master (or better in the PPA, or even better in Ubuntu 24.04 if and when they will accept it).

tag:gitlab.com,2024-05-01:3333163126 Giovanni Panozzo commented on merge request !2581 at Remmina / Remmina 2024-05-01T09:21:13Z giox069 Giovanni Panozzo

I did some changes (on my Remmina fork, branch REM-3104) to move initialization of rdp_auth_filter setting at remmina startup.
In this way, the "!kerberos" option is immediately visible on the global RDP settings.
It seems to be working. To test it, you have to delete rdp_auth_filter from the ~/.config/remmina/remmina.pref file.
Here: https://gitlab.com/giox069/remmina-gio-fork/-/commit/e208cff836c75215c4bd9b04af4370b0856defe0

tag:gitlab.com,2024-04-30:3332216919 Giovanni Panozzo commented on merge request !2581 at Remmina / Remmina 2024-04-30T18:24:33Z giox069 Giovanni Panozzo

1st connection ok. Then I opened the setting window, an empty "rdp_auth_filter" has been saved into remmina.pref and subsequent connection failed. Maybe they failed because auth_list was empty string and not NULL. Quick and dirty workaround could be if (auth_list == NULL || rdp_auth_filter[0] == 0).

But I don't like it too much, because this option is not clearly exposed to the user in the settings... I'm looking for new ideas. Tomorrow.

tag:gitlab.com,2024-04-30:3330589400 Giovanni Panozzo commented on issue #3104 at Remmina / Remmina 2024-04-30T08:34:57Z giox069 Giovanni Panozzo

I suggest a global RDP option, not a per profile one, to quicky solve this problem. Or users have to modify every single profile.

Maybe in the future a per profile option will be a better choice.

And Kerberos could be by default off: it has never been used before.

tag:gitlab.com,2024-04-30:3330559455 Giovanni Panozzo commented on ticket #3102 at Remmina / Remmina 2024-04-30T08:25:19Z giox069 Giovanni Panozzo

See issue #3104 (closed)

tag:gitlab.com,2024-04-30:3330420032 Giovanni Panozzo commented on ticket #3102 at Remmina / Remmina 2024-04-30T07:33:24Z giox069 Giovanni Panozzo

No patches for now from xfreerdp devel... maybe disabling kerberos from the remmina side like /auth-pkg-list:\\!kerberos and pushing that patch to Ubuntu 24.04 will be a good idea ? There is another issues due to Kerberos enabled by default in latest FreeRDP, making remmina not working: https://github.com/FreeRDP/FreeRDP/issues/10138

tag:gitlab.com,2024-04-27:3326079764 Giovanni Panozzo commented on ticket #3102 at Remmina / Remmina 2024-04-27T13:24:14Z giox069 Giovanni Panozzo

The PPA is working, but I have another problem: all RDP profiles using a numeric IP address instead of an hostname to connect to AD member PCs or Servers are failing with the following error:

Password:        
[15:12:12:874] [53053:0000cf3d] [ERROR][com.winpr.sspi.Kerberos] - [kerberos_InitializeSecurityContextA]: krb5_get_credentials (Configuration file does not specify default realm [-1765328160])
[15:12:12:874] [53053:0000cf3d] [WARN][com.winpr.sspi] - [winpr_InitializeSecurityContextA]: InitializeSecurityContextA status SEC_E_INTERNAL_ERROR [0x80090304]
[15:12:12:874] [53053:0000cf3d] [ERROR][com.freerdp.core.auth] - [credssp_auth_authenticate]: InitializeSecurityContext failed with SEC_E_INTERNAL_ERROR [0x80090304]
[15:12:12:874] [53053:0000cf3d] [ERROR][com.freerdp.core.rdp] - [rdp_recv_callback_int][0x633daabc4720]: CONNECTION_STATE_NLA - nla_recv_pdu() fail

xfreerdp3 has the same problem, and the current FreeRDP master branch too. I'm already writing to the FreeRDP devel for this. In the meanwhile the only workaround I have found for xfreerdp3 is to use /auth-pkg-list:\!kerberos in the xfreerdp3 command line.