CredSSP Error

All about WTware on Raspberry. Wtware works with Raspberry Pi 3 Model B and Pi 2 Model B devices
http://www.winterminal.com
cory1768
Posts: 7
Joined: Sun Sep 03, 2017 5:05 am

CredSSP Error

Postby cory1768 » Sun Sep 03, 2017 5:25 am

WTWare 5.6.12 connecting to Windows Server 2016 Remote Desktop Services, when attempting to login I am getting the following error from the client:

[ rdpclient 713] [ 1112.242079] CredSSP.
[ rdpclient 713] [ 1112.242164] SSL/TLS.
[ rdpclient 713] [ 1113.312155] SSL_ERROR_SSL
[ rdpclient 713] [ 1113.312313] [SSL] error:14094419:SSL routines:ssl3_read_bytes:tlsv1 alert access denied
[ rdpclient 713] [ 1113.312408] rdpclient-credssp.cpp ( 146): -- ERROR -- INTERNAL ERROR. Please, contact WTware tech support.
[ rdpclient 713] [ 1113.312492] rdpclient-credssp.cpp ( 196): -- ERROR -- INTERNAL ERROR. Please, contact WTware tech support.
[ rdpclient 713] [ 1113.312580] rdpclient-credssp.cpp ( 324): -- ERROR -- INTERNAL ERROR. Please, contact WTware tech support.
[ gm] [ 1113.312711] Final message: CredSSP connection failed.
[ rdpclient 713] [ 1113.312766] rdpclient-credssp.cpp ( 656): -- ERROR -- INTERNAL ERROR. Please, contact WTware tech support.
[ rdpclient 713] [ 1113.312862] rdpclient-tcp.cpp ( 533): -- ERROR -- INTERNAL ERROR. Please, contact WTware tech support.
[ rdpclient 713] [ 1113.312961] CredSSP connection failed.

Does anyone know a fix, I saw a familiar post here: Windows 2012 R2 and TLS 1.0

I enabled TLS1.0 to see if that would work and it didn't seem to make a difference. I hope someone can help me resolve this issue, also if someone could tell me, what is WTWare using for connection encryption?

My WTWare Config is pretty basic:

httpd = IPREDACTED
clienthostname = VDI*IP3
server = rdp:VDISERVER1
graphic = abcdefg
sound = on
timezone = Central Standard Time
display = 1920x1080, hdmi
usb=041e:4095, 0458:708c

cory1768
Posts: 7
Joined: Sun Sep 03, 2017 5:05 am

Re: CredSSP Error

Postby cory1768 » Sun Sep 03, 2017 7:37 am

Looks like its not a credssp error, it would error out if I put the domain\userid, leaving the domain\ out it is working but has led me to another error I cannot get past. I hope someone could shed some light or help with this.

Client Error:

Code: Select all

[ rdpclient 719] [ 1740.605688] Enable font smoothing and Desktop Composition.
[ rdpclient 719] [ 1740.608635] errorInfo 0x00000009.
[ rdpclient 719] [ 1740.608751] LOGON_EX_LOGONERRORS: ErrorNotificationType 0xffffffff, ErrorNotificationData 0x80070005.
[ rdpclient 719] [ 1740.608835] rdpclient-connect.cpp ( 3010): -- ERROR -- INTERNAL ERROR. Please, contact WTware tech support.
[ rdpclient 719] [ 1740.608917] Receive Disconnect Provider Ultimatum.
[ rdpclient 719] [ 1740.608998] Connection rejected by server.
Error code: 00000009.
Error text:
ERRINFO_SERVER_INSUFFICIENT_PRIVILEGES
For more details see "Event View" on the server.
[            gm] [ 1740.609263] Final message: Connection rejected by server.
Error code: 00000009.
Error text:
ERRINFO_SERVER_INSUFFICIENT_PRIVILEGES
For more details see "Event View" on the server.
[        rdpsnd] [ 1740.621830] Link lost.
[          pfac] [ 1740.621989] Process pid 719 terminated, status 00000009.


Server Error:

Code: Select all

Remote Desktop Connection Broker Client failed to redirect the user REDACTED.
Error: NULL

cory1768
Posts: 7
Joined: Sun Sep 03, 2017 5:05 am

Re: CredSSP Error

Postby cory1768 » Sun Sep 03, 2017 5:40 pm

I never figured out what was going on but I think there's an issue with the Remote Desktop Services Deployment I did. I decided to test having a client point to just one VM Desktop, that works, so I decided that I will just spin up a VM and hard point the thin clients to the correct VM, as the complex infrastructure is just not required.

I strongly believe the problem was with the Remote Desktop Services Deployment on Server 2016, I think the broker had issues I couldn't get past.

cory1768
Posts: 7
Joined: Sun Sep 03, 2017 5:05 am

Re: CredSSP Error

Postby cory1768 » Sun Sep 03, 2017 11:22 pm

So it turns out I am way to stubborn to admit defeat that easily and I have figure out the problem. I hope someone else finds this article useful.

Resolution
For Server 2016 RDS

Inside the RDP file you would download from the RDWeb Server, in my case the loadbalanceinfo parameter did need to be applied however I was applying it with the wrong value, as per the documentation I was giving it this:

Code: Select all

loadbalanceinfo = tsv://MS Terminal Services Plugin.1.NameSC


In Server 2016 it needed to be this:

Code: Select all

loadbalanceinfo = tsv://VMResource.1.NameSC


with of course the 'NameSC' needs to be the actual name of your collection. I am still trying to figure out why RemoteFX will not forward other USB devices but working on that as I know its set properly in the config for the right USB devices.


Return to “WTware on Raspberry Pi 3 / Raspberry Pi 2”

Who is online

Users browsing this forum: akatik and 1 guest