GNOME Remote Desktop Login on Fedora Workstation 42

Ask Fedora
, , , ,
1

Hi all

I’m just getting started on my Fedora journey (long time RHEL user though) and I’ve just installed Fedora Workstation 42 on my workstation. First thing I wanted to do was to set up remove access, and so I enabled both Remote Login and Remote Desktop Sharing on ports 3389 and 3390 respectively.

I cannot get the Remote Login to work however - I’ve verified that I’m using the same credentials as showing in the Settings application. The login proceeds from the Windows App on macOS, and starts the process of creating a remote desktop window - then suddenly the session disconnects and the client warns me of this.

I see the following in journalctl at the time of the failed login:

Jul 15 21:10:49 fedora gsd-smartcard[12247]: Got potentially spurious smartcard event error: Failed to wait for slot event, error: 5.
Jul 15 21:10:49 fedora pcscd[2702]: 00015454 ../src/auth.c:166:IsClientAuthorized() Process 12247 (user: 42) is NOT authorized for action: access_pcsc
Jul 15 21:10:49 fedora pcscd[2702]: 00000127 ../src/winscard_svc.c:357:ContextThread() Rejected unauthorized PC/SC client
Jul 15 21:10:49 fedora org.gnome.RemoteDesktop.Handover.desktop[12366]: [21:10:49:544] [12366:0000321f] [WARN][com.freerdp.core.connection] - [rdp_server_accept_nego]: server supports only NLA Security
Jul 15 21:10:49 fedora org.gnome.RemoteDesktop.Handover.desktop[12366]: [21:10:49:544] [12366:0000321f] [ERROR][com.freerdp.core.connection] - [rdp_server_accept_nego]: Protocol security negotiation failure
Jul 15 21:10:49 fedora org.gnome.RemoteDesktop.Handover.desktop[12366]: [21:10:49:548] [12366:0000321f] [ERROR][com.freerdp.crypto] - [freerdp_tls_handshake]: BIO_do_handshake failed
Jul 15 21:10:49 fedora org.gnome.RemoteDesktop.Handover.desktop[12366]: [21:10:49:549] [12366:0000321f] [ERROR][com.freerdp.api] - [peer_recv_callback_internal]: CONNECTION_STATE_NEGO - rdp_server_accept_nego() fail
Jul 15 21:10:49 fedora org.gnome.RemoteDesktop.Handover.desktop[12366]: [21:10:49:549] [12366:0000321f] [ERROR][com.freerdp.core.transport] - [transport_check_fds]: transport_check_fds: transport->ReceiveCallback() - STATE_RUN_FAILED [-1]
Jul 15 21:10:49 fedora gnome-remote-de[12366]: [RDP] Network or intentional disconnect, stopping session

I’ve read about issues with SELinux so right now running in Permissive move to make sure this isn’t an issue.

I’m guessing the client has negotiated the wrong security protocol from the server supports only NLA Security error but I wondered if anyone has seen this problem before, and whether I’m missing something in terms of configuration?

Thanks in advance!

James

3

Do you have an iOS device to double check your macOS app is not the issue?

I just double checked and the iOS/iPadOS App works with its defaults without issue with Workstation 42.

Check in the macOS app settings if NLA enforcement is enabled or disabled. At least on iOS it is enabled by default.

4

Thanks so much for your reply - sorry for the massively late response but I just wanted to let you know you had the answer. I can’t find a way to turn that off on macOS - my workaround was to install xfreerdp with Homebrew - not sure if there’s a better solution but that got me working? Thought I should update this thread in case anyone else experiences this.