Benoît Cortier
                                            Benoît Cortier
                                        
                                    > J'espère que ça aidera à la résolution du problème. Merci ! :stuck_out_tongue: The pcap provided me with everything I needed to know. In mstsc, the `requestedProtocols` flags are set...
The user interface has been fixed in https://github.com/Devolutions/IronRDP/pull/328 > the clients are running on macOS 14.1.2 (IronRDP: commit https://github.com/Devolutions/IronRDP/commit/b87627b10e183ab7c7ebeb31d49755256c5d99c8, MS RDP: 10.9.4 (2161)). FYI, there is a bug related to...
> **EDIT** : I tried the `--security-protocol ssl` option and this leads to an other error message: `Connection error: [received bad MCS Channel Join Confirm] general error`. I'm not sure...
> The new message is : `Connection error: [ChannelJoinConfirm] reason: unexpected requested_channel_id in MCS Channel Join Confirm: received 1004, got 1002` ~~Interesting. 1002 is typically the ID used for the...
> I took an other log with both ssl and hybrid after reinstall: [ironrdp-client-reinstall.log](https://github.com/Devolutions/IronRDP/files/13613074/ironrdp-client-reinstall.log) I can see in the logs that the standard RDP security was negotiated again. ``` 2023-12-08T10:43:53.223062Z...
@mdenty Thank you for following up! > For some reason, this version does not create the log file, I had to redirect the console output. Oh, this was changed recently...
> **EDIT:** Here is the pcap: [ironrdp-pcap.zip](https://github.com/Devolutions/IronRDP/files/13841692/ironrdp-pcap.zip) Thank you! However, it appears that the keys file included in the archive is protected by password so I can’t use it.
Oh, thank you! Yes, I think I went to the wrong tab in Wireshark. Apologies. We can see in the trace that XRDP is sending the confirmation message without waiting...
Sounds like XRDP doesn’t like something about the Client Info PDU we are sending. ``` [20240109-10:12:15] [ERROR] received wrong flags, likely decrypt not working ``` IronRDP is sending these flags:...
> > IronRDP is sending these flags: DISABLE_CTRL_ALT_DEL | UNICODE | LOGON_NOTIFY | LOGON_ERRORS | NO_AUDIO_PLAYBACK | VIDEO_DISABLE. > > > VIDEO_DISABLE sounds suspicious. 🤔 > > I tried to...