desktop-packages team mailing list archive

[Jason Gunthorpe <jgunthorpe@xxxxxxxxx>]

Public bug reported:

This is a regression from Trusty, which worked OK

$ rdesktop ads1.ads.orcorp.ca 
Connection established using CredSSP.
$ echo $?
76

No GUI appears.

It does go through kerberos steps:

$ klist
05/25/15 15:39:52  05/26/15 01:39:48  TERMSRV/ads1.ads.orcorp.ca@
	renew until 05/26/15 15:39:47
05/25/15 15:39:52  05/26/15 01:39:48  TERMSRV/ads1.ads.orcorp.ca@xxxxxxxxxxxxx
	renew until 05/26/15 15:39:47

And it works as expected if KRB5CCNAME is blanked out (disabling
kerberos):

$ KRB5CCNAME= rdesktop ads1.ads.orcorp.ca
ERROR: CredSSP: Initialize failed, do you have correct kerberos tgt initialized ?
Connection established using SSL.

This basically makes it unusable.

The client is configured to use the Window AD server as a kerberos
server,  and the login user has a valid kerberos ticket from the sever.

** Affects: rdesktop (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to rdesktop in Ubuntu.
https://bugs.launchpad.net/bugs/1458687

Title:
  rdesktop will not connect to Server 2008 when Kerberos is enabled

Status in rdesktop package in Ubuntu:
  New

Bug description:
  This is a regression from Trusty, which worked OK

  $ rdesktop ads1.ads.orcorp.ca 
  Connection established using CredSSP.
  $ echo $?
  76

  No GUI appears.

  It does go through kerberos steps:

  $ klist
  05/25/15 15:39:52  05/26/15 01:39:48  TERMSRV/ads1.ads.orcorp.ca@
  	renew until 05/26/15 15:39:47
  05/25/15 15:39:52  05/26/15 01:39:48  TERMSRV/ads1.ads.orcorp.ca@xxxxxxxxxxxxx
  	renew until 05/26/15 15:39:47

  And it works as expected if KRB5CCNAME is blanked out (disabling
  kerberos):

  $ KRB5CCNAME= rdesktop ads1.ads.orcorp.ca
  ERROR: CredSSP: Initialize failed, do you have correct kerberos tgt initialized ?
  Connection established using SSL.

  This basically makes it unusable.

  The client is configured to use the Window AD server as a kerberos
  server,  and the login user has a valid kerberos ticket from the
  sever.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/rdesktop/+bug/1458687/+subscriptions