Devolutions ForumDevolutions Forum

Not able to connect via RDP to Windows Server 2022 from RDM installed in Arch Linux

Not able to connect via RDP to Windows Server 2022 from RDM installed in Arch Linux

avatar
233982

Hello everyone! Desperately looking for help here..

So I've got a bunch of Windows Server 2019/2022 machines in my LAN.
I've also got two instances of RDM, one is on my Windows 11 PC, another is on my Arch Linux laptop.
The Windows 11 RDM connects to these Windows Server machines via RDP with 0 issues. All I had is to enter the host/username/password and all worked like a charm!

Unfortunately it's been everything but similar experience when I installed (using yay) RDM on my Arch.
The system is fully updated. RDM version is 2025.3.2.2

After creating the session entry the same way I always did, I'm getting an error:

2026-02-12_22-04-28.png

That's what the console gives me out:

~ ❯ remotedesktopmanager
[22:10:20:498] [46753:0000b6b5] [INFO][Devolutions.Rdp.Credentials] - [Parse]: parsing "A************", "" (Mstsc) => "Username: "A************" Domain: """
[22:10:20:504] [46753:0000b6b5] [WARN][com.freerdp.settings] - [freerdp_settings_print_warnings]: [experimental] enabled GlyphSupportLevel GLYPH_SUPPORT_FULL[0x00000002], expect visual artefacts!
[22:10:20:505] [46753:0000b6b5] [ERROR][com.freerdp.channels.virtual.channel] - [virtchan_virtual_channel_init_event_ex]: Unhandled event type 0
[22:10:20:505] [46753:0000b6b5] [ERROR][com.freerdp.channels.virtual.channel] - [virtchan_virtual_channel_init_event_ex]: Unhandled event type 0
[22:10:20:505] [46753:0000b6b5] [ERROR][com.freerdp.channels.virtual.channel] - [virtchan_virtual_channel_init_event_ex]: Unhandled event type 0
[22:10:20:513] [46753:0000b6b5] [INFO][com.freerdp.codec] - [openh264_load_functionpointers]: loaded libopenh264.so.7 2.6.0
[22:10:20:529] [46753:0000b6b5] [INFO][com.freerdp.codec] - [openh264_load_functionpointers]: loaded libopenh264.so.7 2.6.0
[22:10:20:533] [46753:0000b6b5] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x7f5f583115e0]: *************************************************
[22:10:20:533] [46753:0000b6b5] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x7f5f583115e0]: This build is using [runtime-check] build options:
[22:10:20:533] [46753:0000b6b5] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x7f5f583115e0]: * 'WITH_VERBOSE_WINPR_ASSERT=ON'
[22:10:20:533] [46753:0000b6b5] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x7f5f583115e0]: *
[22:10:20:533] [46753:0000b6b5] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x7f5f583115e0]: [runtime-check] build options might slow down the application
[22:10:20:533] [46753:0000b6b5] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x7f5f583115e0]: *************************************************
[22:10:20:533] [46753:0000b6b5] [WARN][com.freerdp.core.rdp] - [log_build_warn_cipher][0x7f5f583115e0]: *************************************************
[22:10:20:533] [46753:0000b6b5] [WARN][com.freerdp.core.rdp] - [log_build_warn_cipher][0x7f5f583115e0]: [SSL] {Cipher} build or configuration missing:
[22:10:20:533] [46753:0000b6b5] [WARN][com.freerdp.core.rdp] - [log_build_warn_cipher][0x7f5f583115e0]: * des-ede3-cbc: RDP security FIPS mode will not work
[22:10:20:534] [46753:0000b6b5] [WARN][com.freerdp.core.rdp] - [log_build_warn_cipher][0x7f5f583115e0]: *************************************************
[22:10:20:534] [46753:0000b6b5] [WARN][com.freerdp.core.nego] - [nego_enable_aad]: This build does not support AAD security, disabling.
[22:10:20:546] [46753:0000b6b5] [ERROR][com.freerdp.core] - [rdp_client_connect]: ERRCONNECT_SECURITY_NEGO_CONNECT_FAILED [0x0002000C]
[22:10:20:546] [46753:0000b6b5] [ERROR][com.freerdp.core.connection] - [rdp_client_connect]: Error: protocol security negotiation or connection failure
[22:10:20:556] [46753:0000b6b5] [INFO][Devolutions.Rdp.Credentials] - [Parse]: parsing "A************", "" (Mstsc) => "Username: "A************" Domain: """
[22:10:20:557] [46753:0000b6b5] [WARN][com.freerdp.settings] - [freerdp_settings_print_warnings]: [experimental] enabled GlyphSupportLevel GLYPH_SUPPORT_FULL[0x00000002], expect visual artefacts!
[22:10:20:557] [46753:0000b6b5] [ERROR][com.freerdp.channels.virtual.channel] - [virtchan_virtual_channel_init_event_ex]: Unhandled event type 0
[22:10:20:557] [46753:0000b6b5] [ERROR][com.freerdp.channels.virtual.channel] - [virtchan_virtual_channel_init_event_ex]: Unhandled event type 0
[22:10:20:557] [46753:0000b6b5] [ERROR][com.freerdp.channels.virtual.channel] - [virtchan_virtual_channel_init_event_ex]: Unhandled event type 0
[22:10:20:566] [46753:0000b6b5] [INFO][com.freerdp.codec] - [openh264_load_functionpointers]: loaded libopenh264.so.7 2.6.0
[22:10:20:578] [46753:0000b6b5] [INFO][com.freerdp.codec] - [openh264_load_functionpointers]: loaded libopenh264.so.7 2.6.0
[22:10:20:579] [46753:0000b6b5] [WARN][com.freerdp.core.nego] - [nego_enable_aad]: This build does not support AAD security, disabling.
[22:10:20:588] [46753:0000b6b5] [WARN][com.freerdp.core.nego] - [nego_process_negotiation_failure]: Error: HYBRID_REQUIRED_BY_SERVER [0x00000005]
[22:10:20:588] [46753:0000b6b5] [ERROR][com.freerdp.core.nego] - [nego_connect]: Protocol Security Negotiation Failure
[22:10:20:588] [46753:0000b6b5] [ERROR][com.freerdp.core] - [rdp_client_connect]: ERRCONNECT_SECURITY_NEGO_CONNECT_FAILED [0x0002000C]
[22:10:20:588] [46753:0000b6b5] [ERROR][com.freerdp.core.connection] - [rdp_client_connect]: Error: protocol security negotiation or connection failure



Not sure if that's helpful, but I've also made TLS Diagnostics and here are results:

2026-02-12_22-05-01.png
What I've tried so far:
Switching back and forth every possible checkbox/option in the RDP session settings as well as global RDP settings in RDM.
On a Windows Server machine itself I tried removing NLA (network level authentication) requirement.
I tried exporting my working sessions from Windows 11 RDM and importing them to Linux instance. The behaviour is the same.


At the same time on the same Linux machine, running 'xfreerdp3 /v:10.10.10.123 /u:Administrator /d:. /p:'mycoolpassword' /sec:nla /cert:ignore '/auth-pkg-list:!kerberos' lets me connect successfully (this was suggested when I tried troubleshooting with AI)

Also, installing remmina and connecting through it works like a charm. But I'm so used to use RDM in Windows, I want it also to be running in Linux.

If anyone can provide any useful info, I'd greatly appreciate that! If you need any additional logs/info, I'll happily provide that.
Thanks in advance!

Victor

2026-02-12_22-05-01.png

2026-02-12_22-04-28.png

avatar
Simon Duguay Létourneau

Recommended Answer

Hello,

Version 2025.3.2.3 is now out.

Let us know if you continue to get the error.

Best regards,

Simon Duguay Létourneau

All Comments (8)

avatar
Simon Duguay Létourneau

Hello Victor,

We’ve received reports from Flatpak users that look very similar to what you’re experiencing, even if you’re not using Flatpak.

https://forum.devolutions.net/topics/52131/fedora-43-kde-flatpak-2025322-previously-working-rdp-sessions-now-fail

Once the hotfix is published, please let us know if the issue occurs again on your side.

Best regards,

Simon Duguay Létourneau

avatar
233982

Hello @Simon Duguay Létourneau

First of all thanks for such a fast response!
Yes, I don't use Flatpak (never used it in my life), I used yay exactly the way the official guide recommends to do.

Do you know the ballpark of when the hotfix will be released? Or, what would be a proper way for me to downgrade to the working version (while waiting for that hotfix) using yay? (Not feeling really good using flatpak just for that)

Much obliged,

Victor

avatar
Simon Duguay Létourneau

Hello Victor,

You’re welcome!

The hotfix is scheduled to be released tomorrow morning.

In the meantime, you can try working around the issue by launching RDM with:

XDG_DOCUMENTS_DIR=$HOME/Documents remotedesktopmanager


If that still doesn’t work and you’d like to downgrade via yay, you can first check which versions are available in your cache:

ls -1 /var/cache/pacman/pkg | grep -i remotedesktopmanager


Then install the version you want with:

sudo pacman -U /var/cache/pacman/pkg/remotedesktopmanager-<version>-<arch>.pkg.tar.zst

Simon Duguay Létourneau

avatar
233982

@Simon Duguay Létourneau

Thanks for providing the guide!
But since it's really going to be fixed soon (I was expecting, like, week or two) and hotfix will be released really in such a short time, I will better wait and just update my existing installation and then report here on whether the hotfix helped or not.

Have a great rest of the day!

Much obliged,

Victor

avatar
Simon Duguay Létourneau

Hello,

Version 2025.3.2.3 is now out.

Let us know if you continue to get the error.

Best regards,

Simon Duguay Létourneau

avatar
233982

The version now is 2025.3.2.3 64-bit and the aforementioned issue is gone!
Thanks @Simon Duguay Létourneau !

avatar
rimbalza

Same problem here with 2025.3.10.2 for Mac. Unable to connect to the RDP hosts I always connect to.
Security nego connect failed 0x002000c.
Edit: rolled back to 2025.3.9.2 and it works again.

[14:08:34:119] [25455:02240000] [DEBUG][com.winpr.timezone] - [winpr_get_timezone_from_link]: tzid: Europe/Rome
[14:08:34:119] [25455:02240000] [DEBUG][com.winpr.timezone] - [winpr_get_timezone_from_link]: tzid: Europe/Rome
[14:08:34:120] [25455:02240000] [DEBUG][com.winpr.timezone] - [winpr_get_timezone_from_link]: tzid: Europe/Rome
[14:08:34:120] [25455:02240000] [DEBUG][com.winpr.timezone] - [winpr_get_timezone_from_link]: tzid: Europe/Rome
[14:08:34:151] [25455:02240000] [INFO][Devolutions.Rdp.Credentials] - [Parse]: parsing "xxx", "xxxx" (Mstsc) => "Username: "xxx" Domain: "xxx""
[14:08:34:162] [25455:02240000] [DEBUG][com.freerdp.core] - [freerdp_connect_begin]: resetting error state
[14:08:34:162] [25455:02240000] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx rdpdr
[14:08:34:162] [25455:02240000] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx rdpsnd
[14:08:34:162] [25455:02240000] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx RDMJump
[14:08:34:162] [25455:02240000] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx RDMCmd
[14:08:34:162] [25455:02240000] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx RDMLog
[14:08:34:162] [25455:02240000] [DEBUG][com.freerdp.channels.cliprdr.client] - [cliprdr_VirtualChannelEntryEx]: VirtualChannelEntryEx
[14:08:34:162] [25455:02240000] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx cliprdr
[14:08:34:162] [25455:02240000] [DEBUG][com.freerdp.channels.drdynvc.client] - [drdynvc_VirtualChannelEntryEx]: VirtualChannelEntryEx
[14:08:34:162] [25455:02240000] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx drdynvc
[14:08:34:165] [25455:02240000] [DEBUG][com.freerdp.settings] - [log_monitor_configuration]: [BEGIN] MonitorDefArray[1]
[14:08:34:165] [25455:02240000] [DEBUG][com.freerdp.settings] - [log_monitor]: [0] [primary] {0x0-1500x1158} [0] {1000x1000, orientation: 0, desktopScale: 100, deviceScale: 100}
[14:08:34:165] [25455:02240000] [DEBUG][com.freerdp.settings] - [log_monitor_configuration]: [END] MonitorDefArray[1]
[14:08:34:165] [25455:02240000] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx rdpdr
[14:08:34:165] [25455:02240000] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx rdpsnd
[14:08:34:165] [25455:02240000] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx RDMJump
[14:08:34:165] [25455:02240000] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx RDMCmd
[14:08:34:165] [25455:02240000] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx RDMLog
[14:08:34:165] [25455:02240000] [DEBUG][com.freerdp.channels.cliprdr.client] - [cliprdr_VirtualChannelEntryEx]: VirtualChannelEntryEx
[14:08:34:165] [25455:02240000] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx cliprdr
[14:08:34:165] [25455:02240000] [DEBUG][com.freerdp.channels.drdynvc.client] - [drdynvc_VirtualChannelEntryEx]: VirtualChannelEntryEx
[14:08:34:165] [25455:02240000] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx drdynvc
[14:08:34:165] [25455:02240000] [ERROR][com.freerdp.channels.virtual.channel] - [virtchan_virtual_channel_init_event_ex]: Unhandled event type 0
[14:08:34:165] [25455:02240000] [ERROR][com.freerdp.channels.virtual.channel] - [virtchan_virtual_channel_init_event_ex]: Unhandled event type 0
[14:08:34:166] [25455:02240000] [ERROR][com.freerdp.channels.virtual.channel] - [virtchan_virtual_channel_init_event_ex]: Unhandled event type 0
[14:08:34:166] [25455:02240000] [DEBUG][com.freerdp.primitives] - [primitives_autodetect_best]: primitives benchmark: only one backend, skipping...
[14:08:34:166] [25455:02240000] [DEBUG][com.freerdp.primitives] - [primitives_autodetect_best]: primitives autodetect, using optimized
[14:08:34:166] [25455:02240000] [DEBUG][com.freerdp.codec] - [openh264_library_path_from_environment]: no environment variable 'FREERDP_OPENH264_LIBRARY_PATH'
[14:08:34:166] [25455:02240000] [DEBUG][com.freerdp.codec] - [openh264_init]: No FREERDP_OPENH264_LIBRARY_PATH set, using default search
[14:08:34:166] [25455:02240000] [ERROR][com.winpr.library] - [LoadLibraryA]: failed with dlopen(libopenh264.dylib, 0x0005): tried: 'libopenh264.dylib' (relative path not allowed in hardened program), '/System/Volumes/Preboot/Cryptexes/OSlibopenh264.dylib' (no such file), '/Applications/Remote Desktop Manager.app/Contents/Frameworks/FreeRDPSandboxed.app/Contents/MonoBundle/libopenh264.dylib' (no such file), '/usr/lib/libopenh264.dylib' (no such file, not in dyld cache), 'libopenh264.dylib' (relative path not allowed in hardened program)
[14:08:34:166] [25455:02240000] [WARN][com.freerdp.core.codecs] - [freerdp_client_codecs_prepare]: Failed to create h264 codec context
[14:08:34:174] [25455:02240000] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x7fded281e800]: *************************************************
[14:08:34:174] [25455:02240000] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x7fded281e800]: This build is using [runtime-check] build options:
[14:08:34:174] [25455:02240000] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x7fded281e800]: * 'WITH_VERBOSE_WINPR_ASSERT=ON'
[14:08:34:174] [25455:02240000] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x7fded281e800]: *
[14:08:34:174] [25455:02240000] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x7fded281e800]: [runtime-check] build options might slow down the application
[14:08:34:174] [25455:02240000] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x7fded281e800]: *************************************************
[14:08:34:174] [25455:02240000] [WARN][com.freerdp.core.rdp] - [log_build_warn_cipher][0x7fded281e800]: *************************************************
[14:08:34:174] [25455:02240000] [WARN][com.freerdp.core.rdp] - [log_build_warn_cipher][0x7fded281e800]: [SSL] {Cipher} build or configuration missing:
[14:08:34:174] [25455:02240000] [WARN][com.freerdp.core.rdp] - [log_build_warn_cipher][0x7fded281e800]: * des-ede3-cbc: RDP security FIPS mode will not work
[14:08:34:174] [25455:02240000] [WARN][com.freerdp.core.rdp] - [log_build_warn_cipher][0x7fded281e800]: *************************************************
[14:08:34:174] [25455:02240000] [DEBUG][com.freerdp.core.nego] - [nego_set_negotiation_enabled]: Enabling security layer negotiation: TRUE
[14:08:34:174] [25455:02240000] [DEBUG][com.freerdp.core.nego] - [nego_set_restricted_admin_mode_required]: Enabling restricted admin mode: FALSE
[14:08:34:174] [25455:02240000] [DEBUG][com.freerdp.core.nego] - [nego_set_RCG_required]: Enabling remoteCredentialGuards: FALSE
[14:08:34:174] [25455:02240000] [DEBUG][com.freerdp.core.nego] - [nego_enable_rdp]: Enabling RDP security: TRUE
[14:08:34:174] [25455:02240000] [DEBUG][com.freerdp.core.nego] - [nego_enable_tls]: Enabling TLS security: TRUE
[14:08:34:174] [25455:02240000] [DEBUG][com.freerdp.core.nego] - [nego_enable_nla]: Enabling NLA security: TRUE
[14:08:34:174] [25455:02240000] [DEBUG][com.freerdp.core.nego] - [nego_enable_ext]: Enabling NLA extended security: FALSE
[14:08:34:174] [25455:02240000] [DEBUG][com.freerdp.core.nego] - [nego_enable_rdstls]: Enabling RDSTLS security: FALSE
[14:08:34:174] [25455:02240000] [WARN][com.freerdp.core.nego] - [nego_enable_aad]: This build does not support AAD security, disabling.
[14:08:34:174] [25455:02240000] [DEBUG][com.freerdp.core.rdp] - [rdp_client_transition_to_state][0x7fded281e800]: CONNECTION_STATE_INITIAL --> CONNECTION_STATE_NEGO
[14:08:34:176] [25455:02240000] [DEBUG][com.freerdp.core] - [freerdp_tcp_is_hostname_resolvable]: resetting error state
[14:08:34:176] [25455:02240000] [DEBUG][com.freerdp.core] - [freerdp_tcp_default_connect]: resetting error state
[14:08:34:176] [25455:02240000] [DEBUG][com.freerdp.core] - [freerdp_tcp_default_connect]: connecting to peer 10.1.10.245
[14:08:34:180] [25455:02240000] [DEBUG][com.freerdp.core.nego] - [nego_connect]: state: NEGO_STATE_NLA
[14:08:34:180] [25455:02240000] [DEBUG][com.freerdp.core.nego] - [nego_attempt_nla]: Attempting NLA security
[14:08:34:180] [25455:02240000] [DEBUG][com.freerdp.core.nego] - [nego_send_negotiation_request]: RequestedProtocols: [SSL|HYBRID][0x00000003]
[14:08:34:206] [25455:02240000] [DEBUG][com.freerdp.core.nego] - [nego_process_negotiation_response]: RDP_NEG_RSP::flags = { [0x1f] |EXTENDED_CLIENT_DATA_SUPPORTED|DYNVC_GFX_PROTOCOL_SUPPORTED|RDP_NEGRSP_RESERVED|RESTRICTED_ADMIN_MODE_SUPPORTED|REDIRECTED_AUTHENTICATION_MODE_SUPPORTED }
[14:08:34:206] [25455:02240000] [DEBUG][com.freerdp.core.nego] - [nego_recv]: selected_protocol: [HYBRID][0x00000002]
[14:08:34:206] [25455:02240000] [DEBUG][com.freerdp.core.nego] - [nego_attempt_nla]: state: NEGO_STATE_FINAL
[14:08:34:206] [25455:02240000] [DEBUG][com.freerdp.core.nego] - [nego_connect]: Negotiated [HYBRID][0x00000002] security
[14:08:34:206] [25455:02240000] [DEBUG][com.freerdp.core.nego] - [nego_try_connect]: nego_security_connect with PROTOCOL_HYBRID
[14:08:34:206] [25455:02240000] [DEBUG][com.freerdp.core.nego] - [nego_connect]: Failed to connect with [HYBRID][0x00000002] security
[14:08:34:206] [25455:02240000] [ERROR][com.freerdp.core] - [rdp_client_connect]: ERRCONNECT_SECURITY_NEGO_CONNECT_FAILED [0x0002000C]
[14:08:34:206] [25455:02240000] [ERROR][com.freerdp.core.connection] - [rdp_client_connect]: Error: protocol security negotiation or connection failure
[14:08:34:208] [25455:02240000] [DEBUG][com.freerdp.core.rdp] - [rdp_finalize_reset_flags][0x7fded281e800]: [CONNECTION_STATE_NEGO] reset finalize_sc_pdus
[14:08:34:208] [25455:02240000] [DEBUG][com.freerdp.core.rdp] - [rdp_client_transition_to_state][0x7fded281e800]: CONNECTION_STATE_NEGO --> CONNECTION_STATE_INITIAL
[14:08:35:261] [25456:03d8d000] [DEBUG][com.winpr.timezone] - [winpr_get_timezone_from_link]: tzid: Europe/Rome
[14:08:35:261] [25456:03d8d000] [DEBUG][com.winpr.timezone] - [winpr_get_timezone_from_link]: tzid: Europe/Rome
[14:08:35:262] [25456:03d8d000] [DEBUG][com.winpr.timezone] - [winpr_get_timezone_from_link]: tzid: Europe/Rome
[14:08:35:263] [25456:03d8d000] [DEBUG][com.winpr.timezone] - [winpr_get_timezone_from_link]: tzid: Europe/Rome
[14:08:35:294] [25456:03d8d000] [INFO][Devolutions.Rdp.Credentials] - [Parse]: parsing "a**.*.g******", "f***********" (Mstsc) => "Username: "a**.*.g******" Domain: "f***********""
[14:08:35:304] [25456:03d8d000] [DEBUG][com.freerdp.core] - [freerdp_connect_begin]: resetting error state
[14:08:35:304] [25456:03d8d000] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx rdpdr
[14:08:35:304] [25456:03d8d000] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx rdpsnd
[14:08:35:304] [25456:03d8d000] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx RDMJump
[14:08:35:304] [25456:03d8d000] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx RDMCmd
[14:08:35:304] [25456:03d8d000] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx RDMLog
[14:08:35:304] [25456:03d8d000] [DEBUG][com.freerdp.channels.cliprdr.client] - [cliprdr_VirtualChannelEntryEx]: VirtualChannelEntryEx
[14:08:35:304] [25456:03d8d000] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx cliprdr
[14:08:35:304] [25456:03d8d000] [DEBUG][com.freerdp.channels.drdynvc.client] - [drdynvc_VirtualChannelEntryEx]: VirtualChannelEntryEx
[14:08:35:304] [25456:03d8d000] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx drdynvc
[14:08:35:307] [25456:03d8d000] [DEBUG][com.freerdp.settings] - [log_monitor_configuration]: [BEGIN] MonitorDefArray[1]
[14:08:35:307] [25456:03d8d000] [DEBUG][com.freerdp.settings] - [log_monitor]: [0] [primary] {0x0-1500x1158} [0] {1000x1000, orientation: 0, desktopScale: 100, deviceScale: 100}
[14:08:35:307] [25456:03d8d000] [DEBUG][com.freerdp.settings] - [log_monitor_configuration]: [END] MonitorDefArray[1]
[14:08:35:307] [25456:03d8d000] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx rdpdr
[14:08:35:307] [25456:03d8d000] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx rdpsnd
[14:08:35:307] [25456:03d8d000] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx RDMJump
[14:08:35:307] [25456:03d8d000] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx RDMCmd
[14:08:35:307] [25456:03d8d000] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx RDMLog
[14:08:35:307] [25456:03d8d000] [DEBUG][com.freerdp.channels.cliprdr.client] - [cliprdr_VirtualChannelEntryEx]: VirtualChannelEntryEx
[14:08:35:307] [25456:03d8d000] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx cliprdr
[14:08:35:307] [25456:03d8d000] [DEBUG][com.freerdp.channels.drdynvc.client] - [drdynvc_VirtualChannelEntryEx]: VirtualChannelEntryEx
[14:08:35:307] [25456:03d8d000] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx drdynvc
[14:08:35:307] [25456:03d8d000] [ERROR][com.freerdp.channels.virtual.channel] - [virtchan_virtual_channel_init_event_ex]: Unhandled event type 0
[14:08:35:307] [25456:03d8d000] [ERROR][com.freerdp.channels.virtual.channel] - [virtchan_virtual_channel_init_event_ex]: Unhandled event type 0
[14:08:35:307] [25456:03d8d000] [ERROR][com.freerdp.channels.virtual.channel] - [virtchan_virtual_channel_init_event_ex]: Unhandled event type 0
[14:08:35:307] [25456:03d8d000] [DEBUG][com.freerdp.primitives] - [primitives_autodetect_best]: primitives benchmark: only one backend, skipping...
[14:08:35:307] [25456:03d8d000] [DEBUG][com.freerdp.primitives] - [primitives_autodetect_best]: primitives autodetect, using optimized
[14:08:35:310] [25456:03d8d000] [DEBUG][com.freerdp.codec] - [openh264_library_path_from_environment]: no environment variable 'FREERDP_OPENH264_LIBRARY_PATH'
[14:08:35:310] [25456:03d8d000] [DEBUG][com.freerdp.codec] - [openh264_init]: No FREERDP_OPENH264_LIBRARY_PATH set, using default search
[14:08:35:310] [25456:03d8d000] [ERROR][com.winpr.library] - [LoadLibraryA]: failed with dlopen(libopenh264.dylib, 0x0005): tried: 'libopenh264.dylib' (relative path not allowed in hardened program), '/System/Volumes/Preboot/Cryptexes/OSlibopenh264.dylib' (no such file), '/Applications/Remote Desktop Manager.app/Contents/Frameworks/FreeRDPSandboxed.app/Contents/MonoBundle/libopenh264.dylib' (no such file), '/usr/lib/libopenh264.dylib' (no such file, not in dyld cache), 'libopenh264.dylib' (relative path not allowed in hardened program)
[14:08:35:310] [25456:03d8d000] [WARN][com.freerdp.core.codecs] - [freerdp_client_codecs_prepare]: Failed to create h264 codec context
[14:08:35:323] [25456:03d8d000] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x7fe301075000]: *************************************************
[14:08:35:323] [25456:03d8d000] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x7fe301075000]: This build is using [runtime-check] build options:
[14:08:35:323] [25456:03d8d000] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x7fe301075000]: * 'WITH_VERBOSE_WINPR_ASSERT=ON'
[14:08:35:323] [25456:03d8d000] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x7fe301075000]: *
[14:08:35:323] [25456:03d8d000] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x7fe301075000]: [runtime-check] build options might slow down the application
[14:08:35:323] [25456:03d8d000] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x7fe301075000]: *************************************************
[14:08:35:323] [25456:03d8d000] [WARN][com.freerdp.core.rdp] - [log_build_warn_cipher][0x7fe301075000]: *************************************************
[14:08:35:323] [25456:03d8d000] [WARN][com.freerdp.core.rdp] - [log_build_warn_cipher][0x7fe301075000]: [SSL] {Cipher} build or configuration missing:
[14:08:35:323] [25456:03d8d000] [WARN][com.freerdp.core.rdp] - [log_build_warn_cipher][0x7fe301075000]: * des-ede3-cbc: RDP security FIPS mode will not work
[14:08:35:323] [25456:03d8d000] [WARN][com.freerdp.core.rdp] - [log_build_warn_cipher][0x7fe301075000]: *************************************************
[14:08:35:323] [25456:03d8d000] [DEBUG][com.freerdp.core.nego] - [nego_set_negotiation_enabled]: Enabling security layer negotiation: TRUE
[14:08:35:323] [25456:03d8d000] [DEBUG][com.freerdp.core.nego] - [nego_set_restricted_admin_mode_required]: Enabling restricted admin mode: FALSE
[14:08:35:323] [25456:03d8d000] [DEBUG][com.freerdp.core.nego] - [nego_set_RCG_required]: Enabling remoteCredentialGuards: FALSE
[14:08:35:323] [25456:03d8d000] [DEBUG][com.freerdp.core.nego] - [nego_enable_rdp]: Enabling RDP security: TRUE
[14:08:35:323] [25456:03d8d000] [DEBUG][com.freerdp.core.nego] - [nego_enable_tls]: Enabling TLS security: TRUE
[14:08:35:323] [25456:03d8d000] [DEBUG][com.freerdp.core.nego] - [nego_enable_nla]: Enabling NLA security: FALSE
[14:08:35:323] [25456:03d8d000] [DEBUG][com.freerdp.core.nego] - [nego_enable_ext]: Enabling NLA extended security: FALSE
[14:08:35:323] [25456:03d8d000] [DEBUG][com.freerdp.core.nego] - [nego_enable_rdstls]: Enabling RDSTLS security: FALSE
[14:08:35:323] [25456:03d8d000] [WARN][com.freerdp.core.nego] - [nego_enable_aad]: This build does not support AAD security, disabling.
[14:08:35:323] [25456:03d8d000] [DEBUG][com.freerdp.core.rdp] - [rdp_client_transition_to_state][0x7fe301075000]: CONNECTION_STATE_INITIAL --> CONNECTION_STATE_NEGO
[14:08:35:324] [25456:03d8d000] [DEBUG][com.freerdp.core] - [freerdp_tcp_is_hostname_resolvable]: resetting error state
[14:08:35:324] [25456:03d8d000] [DEBUG][com.freerdp.core] - [freerdp_tcp_default_connect]: resetting error state
[14:08:35:324] [25456:03d8d000] [DEBUG][com.freerdp.core] - [freerdp_tcp_default_connect]: connecting to peer 10.1.10.245
[14:08:35:328] [25456:03d8d000] [DEBUG][com.freerdp.core.nego] - [nego_connect]: state: NEGO_STATE_TLS
[14:08:35:328] [25456:03d8d000] [DEBUG][com.freerdp.core.nego] - [nego_attempt_tls]: Attempting TLS security
[14:08:35:328] [25456:03d8d000] [DEBUG][com.freerdp.core.nego] - [nego_send_negotiation_request]: RequestedProtocols: [SSL][0x00000001]
[14:08:35:353] [25456:03d8d000] [DEBUG][com.freerdp.core.nego] - [nego_process_negotiation_failure]: RDP_NEG_FAILURE
[14:08:35:353] [25456:03d8d000] [DEBUG][com.freerdp.core.nego] - [nego_disable_all_except]: Disabling all modes except [HYBRID][0x00000002]
[14:08:35:353] [25456:03d8d000] [WARN][com.freerdp.core.nego] - [nego_process_negotiation_failure]: Error: HYBRID_REQUIRED_BY_SERVER [0x00000005]
[14:08:35:353] [25456:03d8d000] [ERROR][com.freerdp.core.nego] - [nego_connect]: Protocol Security Negotiation Failure
[14:08:35:353] [25456:03d8d000] [ERROR][com.freerdp.core] - [rdp_client_connect]: ERRCONNECT_SECURITY_NEGO_CONNECT_FAILED [0x0002000C]
[14:08:35:353] [25456:03d8d000] [ERROR][com.freerdp.core.connection] - [rdp_client_connect]: Error: protocol security negotiation or connection failure
[14:08:35:354] [25456:03d8d000] [DEBUG][com.freerdp.core.rdp] - [rdp_finalize_reset_flags][0x7fe301075000]: [CONNECTION_STATE_NEGO] reset finalize_sc_pdus
[14:08:35:354] [25456:03d8d000] [DEBUG][com.freerdp.core.rdp] - [rdp_client_transition_to_state][0x7fe301075000]: CONNECTION_STATE_NEGO --> CONNECTION_STATE_INITIAL


avatar
Richard Markiewicz

Hello

This was reported on the Mac side here. I suggest you follow that thread for updates.

In summary, this does look like the same problem but with a good understanding of the code it's hard to see how that happens on macOS. I'm looking into it, I recommend that you stay on 2025.3.9.2 for the short term and I'll provide an update ASAP.

Sorry for the inconvenience

Kind regards,

Richard Markievicz