Embedded RDP sessions are not working on MacOS

Hello

Sorry for the inconvenience. Is this a regression on your side (i.e. you were using an older version previously and things worked well, and now they don't) or is it a new install?

If you don't mind troubleshooting a little bit - please go to Help > Session Logs; click to "Enable" session logging (see screenshot) and then reproduce the issue.


You can then send the session log to me, I will see it quickly if you just paste it into a PM but you also have the option of sending ir by email to service@devolutions.net and mention this forum thread.

Thanks and kind regards,

Hi,

I have the same issue and noticed that if you connect via FQDN instead of IP it does seem to work. Perhaps something about authentication has changed in the underlying RDP components?

Best regards,
Jelle Hillen

Hello

Indeed there have been changes to authentication in latest versions and we are still ironing out a few bugs that have cropped up. However every scenario is different.

I would really appreciate if you can follow my last post and create a session log for the failure case, and send it to me.

Further, you might try (as a workaround) changing the "Authentication Package" to "NTLM" in the "Authentication" tab of the RDP session. Please let me know if it helps.

Thanks and kind regards,

Hi Richard,

I've sent you a PM with the logs.

Setting the Authentication Package manually to NTLM helps: I can connect using the IP.

Best regards,
Jelle Hillen

Hello

Sorry for the inconvenience. Is this a regression on your side (i.e. you were using an older version previously and things worked well, and now they don't) or is it a new install?

If you don't mind troubleshooting a little bit - please go to Help > Session Logs; click to "Enable" session logging (see screenshot) and then reproduce the issue.


You can then send the session log to me, I will see it quickly if you just paste it into a PM but you also have the option of sending ir by email to service@devolutions.net and mention this forum thread.

Thanks and kind regards,

@Richard Markiewicz

Hey Richard,

I used 2 different versions (2025.3.9.2 & 2026.1.8.6) and it doesn't work for both of them.
I also tried to change the authentication method from NEGO to NTLM, and it didn't work either.

Attaching the requested session logs (without the "Devolutions.Rdp.Credentials" part, even though it's masked, since I can't see the value in that anyway):

[13:52:28:240] [41845:704c3001] [DEBUG][com.winpr.timezone] - [winpr_get_timezone_from_link]: tzid: Asia/Jerusalem
[13:52:28:240] [41845:704c3001] [DEBUG][com.winpr.timezone] - [winpr_get_timezone_from_link]: tzid: Asia/Jerusalem
[13:52:28:241] [41845:704c3001] [DEBUG][com.winpr.timezone] - [winpr_get_timezone_from_link]: tzid: Asia/Jerusalem
[13:52:28:241] [41845:704c3001] [DEBUG][com.winpr.timezone] - [winpr_get_timezone_from_link]: tzid: Asia/Jerusalem

// Devolutions.Rdp.Credentials part here

[13:52:28:302] [41845:704c3001] [DEBUG][com.freerdp.core] - [freerdp_connect_begin]: resetting error state
[13:52:28:303] [41845:704c3001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx rdpdr
[13:52:28:303] [41845:704c3001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx rdpsnd
[13:52:28:303] [41845:704c3001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx RDMJump
[13:52:28:303] [41845:704c3001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx RDMCmd
[13:52:28:303] [41845:704c3001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx RDMLog
[13:52:28:303] [41845:704c3001] [DEBUG][com.freerdp.channels.cliprdr.client] - [cliprdr_VirtualChannelEntryEx]: VirtualChannelEntryEx
[13:52:28:303] [41845:704c3001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx cliprdr
[13:52:28:303] [41845:704c3001] [DEBUG][com.freerdp.channels.drdynvc.client] - [drdynvc_VirtualChannelEntryEx]: VirtualChannelEntryEx
[13:52:28:303] [41845:704c3001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx drdynvc
[13:52:28:305] [41845:704c3001] [DEBUG][com.freerdp.settings] - [log_monitor_configuration]: [BEGIN] MonitorDefArray[1]
[13:52:28:305] [41845:704c3001] [DEBUG][com.freerdp.settings] - [log_monitor]: [0] [primary] {0x0-1348x889} [0] {1000x1000, orientation: 0, desktopScale: 100, deviceScale: 100}
[13:52:28:305] [41845:704c3001] [DEBUG][com.freerdp.settings] - [log_monitor_configuration]: [END] MonitorDefArray[1]
[13:52:28:305] [41845:704c3001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx rdpdr
[13:52:28:305] [41845:704c3001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx rdpsnd
[13:52:28:305] [41845:704c3001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx RDMJump
[13:52:28:305] [41845:704c3001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx RDMCmd
[13:52:28:305] [41845:704c3001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx RDMLog
[13:52:28:305] [41845:704c3001] [DEBUG][com.freerdp.channels.cliprdr.client] - [cliprdr_VirtualChannelEntryEx]: VirtualChannelEntryEx
[13:52:28:306] [41845:704c3001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx cliprdr
[13:52:28:306] [41845:704c3001] [DEBUG][com.freerdp.channels.drdynvc.client] - [drdynvc_VirtualChannelEntryEx]: VirtualChannelEntryEx
[13:52:28:306] [41845:704c3001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx drdynvc
[13:52:28:306] [41845:704c3001] [ERROR][com.freerdp.channels.virtual.channel] - [virtchan_virtual_channel_init_event_ex]: Unhandled event type 0
[13:52:28:306] [41845:704c3001] [ERROR][com.freerdp.channels.virtual.channel] - [virtchan_virtual_channel_init_event_ex]: Unhandled event type 0
[13:52:28:306] [41845:704c3001] [ERROR][com.freerdp.channels.virtual.channel] - [virtchan_virtual_channel_init_event_ex]: Unhandled event type 0
[13:52:28:306] [41845:704c3001] [DEBUG][com.freerdp.primitives] - [primitives_autodetect_best]: primitives benchmark: only one backend, skipping...
[13:52:28:306] [41845:704c3001] [DEBUG][com.freerdp.primitives] - [primitives_autodetect_best]: primitives autodetect, using optimized
[13:52:28:306] [41845:704c3001] [WARN][com.freerdp.codec.nsc.neon] - [nsc_init_neon_int]: TODO: Implement neon optimized version of this function
[13:52:28:307] [41845:704c3001] [DEBUG][com.freerdp.codec] - [openh264_library_path_from_environment]: no environment variable 'FREERDP_OPENH264_LIBRARY_PATH'
[13:52:28:307] [41845:704c3001] [DEBUG][com.freerdp.codec] - [openh264_init]: No FREERDP_OPENH264_LIBRARY_PATH set, using default search
[13:52:28:307] [41845:704c3001] [ERROR][com.winpr.library] - [LoadLibraryA]: failed with dlopen(libopenh264.dylib, 0x0005): tried: 'libopenh264.dylib' (relative path not allowed in hardened program), '/System/Volumes/Preboot/Cryptexes/OSlibopenh264.dylib' (no such file), '/Applications/Remote Desktop Manager.app/Contents/Frameworks/FreeRDPSandboxed.app/Contents/MonoBundle/libopenh264.dylib' (no such file), '/usr/lib/libopenh264.dylib' (no such file, not in dyld cache), 'libopenh264.dylib' (relative path not allowed in hardened program)
[13:52:28:307] [41845:704c3001] [WARN][com.freerdp.core.codecs] - [freerdp_client_codecs_prepare]: Failed to create h264 codec context
[13:52:28:309] [41845:704c3001] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x7b6424e00]: *************************************************
[13:52:28:309] [41845:704c3001] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x7b6424e00]: This build is using [runtime-check] build options:
[13:52:28:309] [41845:704c3001] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x7b6424e00]: * 'WITH_VERBOSE_WINPR_ASSERT=ON'
[13:52:28:309] [41845:704c3001] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x7b6424e00]: *
[13:52:28:309] [41845:704c3001] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x7b6424e00]: [runtime-check] build options might slow down the application
[13:52:28:309] [41845:704c3001] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x7b6424e00]: *************************************************
[13:52:28:309] [41845:704c3001] [WARN][com.freerdp.core.rdp] - [log_build_warn_cipher][0x7b6424e00]: *************************************************
[13:52:28:309] [41845:704c3001] [WARN][com.freerdp.core.rdp] - [log_build_warn_cipher][0x7b6424e00]: [SSL] {Cipher} build or configuration missing:
[13:52:28:309] [41845:704c3001] [WARN][com.freerdp.core.rdp] - [log_build_warn_cipher][0x7b6424e00]: * des-ede3-cbc: RDP security FIPS mode will not work
[13:52:28:309] [41845:704c3001] [WARN][com.freerdp.core.rdp] - [log_build_warn_cipher][0x7b6424e00]: *************************************************
[13:52:28:309] [41845:704c3001] [DEBUG][com.freerdp.core.nego] - [nego_set_negotiation_enabled]: Enabling security layer negotiation: TRUE
[13:52:28:309] [41845:704c3001] [DEBUG][com.freerdp.core.nego] - [nego_set_restricted_admin_mode_required]: Enabling restricted admin mode: FALSE
[13:52:28:309] [41845:704c3001] [DEBUG][com.freerdp.core.nego] - [nego_set_RCG_required]: Enabling remoteCredentialGuards: FALSE
[13:52:28:309] [41845:704c3001] [DEBUG][com.freerdp.core.nego] - [nego_enable_rdp]: Enabling RDP security: TRUE
[13:52:28:309] [41845:704c3001] [DEBUG][com.freerdp.core.nego] - [nego_enable_tls]: Enabling TLS security: TRUE
[13:52:28:309] [41845:704c3001] [DEBUG][com.freerdp.core.nego] - [nego_enable_nla]: Enabling NLA security: TRUE
[13:52:28:309] [41845:704c3001] [DEBUG][com.freerdp.core.nego] - [nego_enable_ext]: Enabling NLA extended security: FALSE
[13:52:28:309] [41845:704c3001] [DEBUG][com.freerdp.core.nego] - [nego_enable_rdstls]: Enabling RDSTLS security: FALSE
[13:52:28:309] [41845:704c3001] [WARN][com.freerdp.core.nego] - [nego_enable_aad]: This build does not support AAD security, disabling.
[13:52:28:309] [41845:704c3001] [DEBUG][com.freerdp.core.rdp] - [rdp_client_transition_to_state][0x7b6424e00]: CONNECTION_STATE_INITIAL --> CONNECTION_STATE_NEGO
[13:52:28:312] [41845:704c3001] [DEBUG][com.freerdp.core] - [rdg_connect]: resetting error state
[13:52:58:316] [41845:704c3001] [ERROR][com.freerdp.core] - [freerdp_tcp_resolve_host]: getaddrinfo failed with 8
[13:52:58:317] [41845:704c3001] [ERROR][com.freerdp.core] - [freerdp_tcp_default_connect]: ERRCONNECT_DNS_NAME_NOT_FOUND [0x00020005]
[13:52:58:317] [41845:704c3001] [ERROR][com.freerdp.core.nego] - [nego_connect]: Failed to connect
[13:52:58:319] [41845:704c3001] [DEBUG][com.freerdp.core.rdp] - [rdp_finalize_reset_flags][0x7b6424e00]: [CONNECTION_STATE_NEGO] reset finalize_sc_pdus
[13:52:58:319] [41845:704c3001] [DEBUG][com.freerdp.core.rdp] - [rdp_client_transition_to_state][0x7b6424e00]: CONNECTION_STATE_NEGO --> CONNECTION_STATE_INITIAL

Thanks,
Ofir

Hello

We seem to be looking at two separate issues in this thread.

First @jellehillen: in the same settings page you tweaked earlier, please try changing "SSPI Module" to "System" and let me know if you're able to connect by both IP and FQDN. Your feedback will be important here as your log file seems strange to me; if that change works it indicates an issue with NTLM in our portable SSPI module and I'd like to understand that better. Please let me know your results!

Second @omatasas: this seems a bit more nuanced. You said you also had a failure on 2025.3.9.2; which is before any changes to authentication on our side. But your log also shows ERRCONNECT_DNS_NAME_NOT_FOUND - we called `getaddrinfo` on the hostname you provided and it did not return us a hostname. Is this a new install or are you upgrading from an older version where this worked? I'm interested in how that log compares with one where you connect by IP address, since obviously that bypasses DNS.

A couple of quick things to check are disabling the "sandbox" mode in the "Advanced" tab of the RDP session settings, and ensuring Remote Desktop Manager has the "Local Network Access" permission in System Settings > Privacy & Security > Local Network.

I know this is really frustrating where we expect things to "just work" and I apologize for the inconvenience. I'm eager to get to the bottom of this.

A side note that the credential entries in the log file are often useful in troubleshooting issues around username and domain formatting problems. It's surprisingly common, for example, for a user to find that Kerberos is not working and the answer is not immediately obvious until you realize that they used a domain that wasn't a valid Kerberos realm ("domain" instead of "domain.loc"); things like that. Redacting the logs is of course fine and they can also be sent to me by PM or to service@devolutions.net (with a mention of the current forum thread).

I hope it's all clear. Once again, sorry for the inconvenience and please reach out with other questions or comments

Kind regards

Hi,

By setting SSPI Module to System and changing the authentication method back to NEGO, I can use both IP and FQDN to connect. Setting SSPI back to Portable and leaving the method on NEGO breaks connecting via IP while FQDN continues to work.

Let me know if you need system logs.

Best regards,
Jelle Hillen

Hello @jellehillen

Thank you for the update. There is something really strange here, as I observed in the logs you sent me:

[15:11:21:204] [4768:6e36b001] [ERROR][com.freerdp.core.nla] - [nla_recv_pdu]: SPNEGO failed with NTSTATUS: (null) [0x80090308]

It's really odd that we get a null error back from the SSPI module. While you have a workaround, I would really like to get to the bottom of this issue and I'd appreciate your help.

First to confirm:

• SSPI Module "System" -> connection works with both IP and FQDN
• SSPI Module "Portable" -> Authentication Package "Negotiate" -> connection works with FQDN but fails with IP

That it works with "System" implies that your server allows NTLM. With "Portable" and connecting by IP address, it should still be NTLM; so I don't understand the failure mode.

It would really help me if you can try this:

• Close RDM
• Open Terminal.app and run the following commands (pressing "Enter" after each)
• export SSPI_LOG_LEVEL=trace
• export SSPI_LOG_PATH=/Users/rmarkiewicz/Desktop/rdm-sspi.log
  • note that here we need a complete path to create a log file, you'll need to adjust this to at least swap out your username
• /Applications/Remote\ Desktop\ Manager.app/Contents/MacOS/RemoteDesktopManager
  • This assumes you have RDM installed in the regular /Applications path
• RDM will launch
• Configure your session to use SSPI Module "Portable" and Authentication Package "Negotiate"
• Try to connect by FQDN
• Try to connect by IP Address

Then, please send me the rdm-sspi.log that should be created in the path we specified. You can send to me by PM.

Thanks for your involvement, and don't hesitate with any questions or comments

Kind regards,

Hey @Richard Markiewicz,

I've tried to disable the sandbox of the RDP session, and it didn't help.

I also rechecked the Local Network Access on my Mac's settings, and it's enabled for the Remote Desktop Manager already.

I've tried to update the version via the Remote Desktop Manager, but it didn't work, so I downloaded the latest version from your site and "forced" to update the version of the Remote Desktop Manager.
Do you want me to uninstall the Remote Desktop Manager from my machine and to reinstall everything from scratch?

Regarding the credentials part - it's irrelevant in our case, since we're trying to connect to CyberArk's SIA-RDP, so we're not having any authentication issue here, and the only thing we should deal with is the handshake with SIA-RDP and getting the SIA-RDP certificate.

Thanks,
Ofir.

Hi @omatasas

Well, this is confusing. I'm trying to piece together what is going on here. I don't recommend reinstalling from scratch, I don't think it will change something.

You wrote that you have the same issue with 2025.3.9.2 and 2026.1.8.6.

2025.3.x precedes the changes that we made to our authentication stack that have caused issues for a number of users. So I can rule that out at as the problem here.

2025.3.9.2 did get an update to our FreeRDP integration, and if that is when things broke this is the most likely reason. I assume this was working for you prior to that version? Or; it's the first time you've tried this with RDM on macOS?

The log you uploaded shows a failure in DNS resolution; right at the start of the connection; it doesn't tell me if that's a direct connection to the server or to the Cyberark RD Gateway. But either way, we expect the direct connection to work; since you also wrote that you tested that scenario in Windows App.

For what it's worth I did just try a CyberArk SIA RDP connection on my side and found it to work well. So whatever the problem is here, it's not systemic.

Can you do one more test for me? Try the direct connection via IP address, with session logging enabled; and either PM me the session the log or post a redacted version here?

Thanks for your patience, and sorry for the inconvenience

Kind regards,

Hey @Richard Markiewicz,

With 2025.3.9.2, it was the first time I've used RDM on MacOS. I always used the external option, so the embedded option was never tested.

These are the session logs with the SIA-RDP IP address:

[13:27:12:107] [56822:6e187001] [DEBUG][com.winpr.timezone] - [winpr_get_timezone_from_link]: tzid: Asia/Jerusalem
[13:27:12:107] [56822:6e187001] [DEBUG][com.winpr.timezone] - [winpr_get_timezone_from_link]: tzid: Asia/Jerusalem
[13:27:12:108] [56822:6e187001] [DEBUG][com.winpr.timezone] - [winpr_get_timezone_from_link]: tzid: Asia/Jerusalem
[13:27:12:108] [56822:6e187001] [DEBUG][com.winpr.timezone] - [winpr_get_timezone_from_link]: tzid: Asia/Jerusalem

// Devolutions.Rdp.Credentials part here

[13:27:12:123] [56822:6e187001] [DEBUG][com.freerdp.core] - [freerdp_connect_begin]: resetting error state
[13:27:12:123] [56822:6e187001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx rdpdr
[13:27:12:123] [56822:6e187001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx rdpsnd
[13:27:12:123] [56822:6e187001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx RDMJump
[13:27:12:123] [56822:6e187001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx RDMCmd
[13:27:12:123] [56822:6e187001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx RDMLog
[13:27:12:123] [56822:6e187001] [DEBUG][com.freerdp.channels.cliprdr.client] - [cliprdr_VirtualChannelEntryEx]: VirtualChannelEntryEx
[13:27:12:123] [56822:6e187001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx cliprdr
[13:27:12:124] [56822:6e187001] [DEBUG][com.freerdp.channels.drdynvc.client] - [drdynvc_VirtualChannelEntryEx]: VirtualChannelEntryEx
[13:27:12:124] [56822:6e187001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx drdynvc
[13:27:12:126] [56822:6e187001] [DEBUG][com.freerdp.settings] - [log_monitor_configuration]: [BEGIN] MonitorDefArray[1]
[13:27:12:126] [56822:6e187001] [DEBUG][com.freerdp.settings] - [log_monitor]: [0] [primary] {0x0-1348x889} [0] {1000x1000, orientation: 0, desktopScale: 100, deviceScale: 100}
[13:27:12:126] [56822:6e187001] [DEBUG][com.freerdp.settings] - [log_monitor_configuration]: [END] MonitorDefArray[1]
[13:27:12:126] [56822:6e187001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx rdpdr
[13:27:12:126] [56822:6e187001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx rdpsnd
[13:27:12:126] [56822:6e187001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx RDMJump
[13:27:12:126] [56822:6e187001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx RDMCmd
[13:27:12:126] [56822:6e187001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx RDMLog
[13:27:12:126] [56822:6e187001] [DEBUG][com.freerdp.channels.cliprdr.client] - [cliprdr_VirtualChannelEntryEx]: VirtualChannelEntryEx
[13:27:12:126] [56822:6e187001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx cliprdr
[13:27:12:126] [56822:6e187001] [DEBUG][com.freerdp.channels.drdynvc.client] - [drdynvc_VirtualChannelEntryEx]: VirtualChannelEntryEx
[13:27:12:126] [56822:6e187001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx drdynvc
[13:27:12:126] [56822:6e187001] [ERROR][com.freerdp.channels.virtual.channel] - [virtchan_virtual_channel_init_event_ex]: Unhandled event type 0
[13:27:12:126] [56822:6e187001] [ERROR][com.freerdp.channels.virtual.channel] - [virtchan_virtual_channel_init_event_ex]: Unhandled event type 0
[13:27:12:126] [56822:6e187001] [ERROR][com.freerdp.channels.virtual.channel] - [virtchan_virtual_channel_init_event_ex]: Unhandled event type 0
[13:27:12:127] [56822:6e187001] [DEBUG][com.freerdp.primitives] - [primitives_autodetect_best]: primitives benchmark: only one backend, skipping...
[13:27:12:127] [56822:6e187001] [DEBUG][com.freerdp.primitives] - [primitives_autodetect_best]: primitives autodetect, using optimized
[13:27:12:127] [56822:6e187001] [WARN][com.freerdp.codec.nsc.neon] - [nsc_init_neon_int]: TODO: Implement neon optimized version of this function
[13:27:12:127] [56822:6e187001] [DEBUG][com.freerdp.codec] - [openh264_library_path_from_environment]: no environment variable 'FREERDP_OPENH264_LIBRARY_PATH'
[13:27:12:127] [56822:6e187001] [DEBUG][com.freerdp.codec] - [openh264_init]: No FREERDP_OPENH264_LIBRARY_PATH set, using default search
[13:27:12:127] [56822:6e187001] [ERROR][com.winpr.library] - [LoadLibraryA]: failed with dlopen(libopenh264.dylib, 0x0005): tried: 'libopenh264.dylib' (relative path not allowed in hardened program), '/System/Volumes/Preboot/Cryptexes/OSlibopenh264.dylib' (no such file), '/Applications/Remote Desktop Manager.app/Contents/Frameworks/FreeRDPSandboxed.app/Contents/MonoBundle/libopenh264.dylib' (no such file), '/usr/lib/libopenh264.dylib' (no such file, not in dyld cache), 'libopenh264.dylib' (relative path not allowed in hardened program)
[13:27:12:127] [56822:6e187001] [WARN][com.freerdp.core.codecs] - [freerdp_client_codecs_prepare]: Failed to create h264 codec context
[13:27:12:128] [56822:6e187001] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x7cafb8000]: *************************************************
[13:27:12:128] [56822:6e187001] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x7cafb8000]: This build is using [runtime-check] build options:
[13:27:12:128] [56822:6e187001] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x7cafb8000]: * 'WITH_VERBOSE_WINPR_ASSERT=ON'
[13:27:12:128] [56822:6e187001] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x7cafb8000]: *
[13:27:12:128] [56822:6e187001] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x7cafb8000]: [runtime-check] build options might slow down the application
[13:27:12:128] [56822:6e187001] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x7cafb8000]: *************************************************
[13:27:12:129] [56822:6e187001] [WARN][com.freerdp.core.rdp] - [log_build_warn_cipher][0x7cafb8000]: *************************************************
[13:27:12:129] [56822:6e187001] [WARN][com.freerdp.core.rdp] - [log_build_warn_cipher][0x7cafb8000]: [SSL] {Cipher} build or configuration missing:
[13:27:12:129] [56822:6e187001] [WARN][com.freerdp.core.rdp] - [log_build_warn_cipher][0x7cafb8000]: * des-ede3-cbc: RDP security FIPS mode will not work
[13:27:12:129] [56822:6e187001] [WARN][com.freerdp.core.rdp] - [log_build_warn_cipher][0x7cafb8000]: *************************************************
[13:27:12:129] [56822:6e187001] [DEBUG][com.freerdp.core.nego] - [nego_set_negotiation_enabled]: Enabling security layer negotiation: TRUE
[13:27:12:129] [56822:6e187001] [DEBUG][com.freerdp.core.nego] - [nego_set_restricted_admin_mode_required]: Enabling restricted admin mode: FALSE
[13:27:12:129] [56822:6e187001] [DEBUG][com.freerdp.core.nego] - [nego_set_RCG_required]: Enabling remoteCredentialGuards: FALSE
[13:27:12:129] [56822:6e187001] [DEBUG][com.freerdp.core.nego] - [nego_enable_rdp]: Enabling RDP security: TRUE
[13:27:12:129] [56822:6e187001] [DEBUG][com.freerdp.core.nego] - [nego_enable_tls]: Enabling TLS security: TRUE
[13:27:12:129] [56822:6e187001] [DEBUG][com.freerdp.core.nego] - [nego_enable_nla]: Enabling NLA security: TRUE
[13:27:12:129] [56822:6e187001] [DEBUG][com.freerdp.core.nego] - [nego_enable_ext]: Enabling NLA extended security: FALSE
[13:27:12:129] [56822:6e187001] [DEBUG][com.freerdp.core.nego] - [nego_enable_rdstls]: Enabling RDSTLS security: FALSE
[13:27:12:129] [56822:6e187001] [WARN][com.freerdp.core.nego] - [nego_enable_aad]: This build does not support AAD security, disabling.
[13:27:12:129] [56822:6e187001] [DEBUG][com.freerdp.core.rdp] - [rdp_client_transition_to_state][0x7cafb8000]: CONNECTION_STATE_INITIAL --> CONNECTION_STATE_NEGO
[13:27:12:130] [56822:6e187001] [DEBUG][com.freerdp.core] - [rdg_connect]: resetting error state
[13:27:12:132] [56822:6e187001] [DEBUG][com.freerdp.core] - [freerdp_tcp_default_connect]: resetting error state
[13:27:12:132] [56822:6e187001] [DEBUG][com.freerdp.core] - [freerdp_tcp_default_connect]: connecting to peer X.X.X.X (I masked it, but it's the right IP address)
[13:27:12:134] [56822:6e187001] [ERROR][com.freerdp.core] - [freerdp_tcp_set_nodelay]: can't set TCP_NODELAY (Invalid argument)
[13:27:12:135] [56822:6e187001] [ERROR][com.freerdp.core] - [freerdp_tcp_default_connect]: ERRCONNECT_CONNECT_FAILED [0x00020006]
[13:27:12:135] [56822:6e187001] [ERROR][com.freerdp.core] - [freerdp_tcp_default_connect]: unable to set receive buffer len
[13:27:12:135] [56822:6e187001] [ERROR][com.freerdp.core.nego] - [nego_connect]: Failed to connect
[13:27:12:135] [56822:6e187001] [DEBUG][com.freerdp.core.rdp] - [rdp_finalize_reset_flags][0x7cafb8000]: [CONNECTION_STATE_NEGO] reset finalize_sc_pdus
[13:27:12:135] [56822:6e187001] [DEBUG][com.freerdp.core.rdp] - [rdp_client_transition_to_state][0x7cafb8000]: CONNECTION_STATE_NEGO --> CONNECTION_STATE_INITIAL

Let me know if you need anything else for better investigation of this issue.

Thanks,
Ofir.

Hi @omatasas

This is something completely new, I've never seen this before.

FreeRDP successfully connects to the IP address; the TCP handshake happens and the socket is verified to be valid. The next step that FreeRDP does is try to set some options on the socket; both of which fail. First it tries to set `TCP_NODELAY`, which fails but is non-fatal - it's just an optimization. Next it checks the size of the receive buffer on the socket and if's less than 32k, it tries to increase it to 32k. The read succeeds and is obviously less than 32k, but the set then fails with "invalid argument" and that is considered a fatal error. Receive buffers smaller than 32k are not supported.

So why does this happen? Like I said, I've never seen it before; and this is all very stable, standard BSD sockets code from a nearly 15 year old project. It's not really a source of bugs.

I have to assume it's an interaction with the VPN, although even then I can't explain it. Palo Alto is using a network extension on macOS and making a transparent proxy at the network layer. I don't know the implications of that. I assume Windows App is using Apple's network frameworks whereas FreeRDP is using raw sockets but it's not like programming sockets is uncommon...

Is it possible for you to (temporarily) bypass the VPN? We really need to rule it out.

Please let me know if something isn't clear or you have other questions

Kind regards,

Hello @jellehillen

Thank you for the update. There is something really strange here, as I observed in the logs you sent me:

[15:11:21:204] [4768:6e36b001] [ERROR][com.freerdp.core.nla] - [nla_recv_pdu]: SPNEGO failed with NTSTATUS: (null) [0x80090308]

It's really odd that we get a null error back from the SSPI module. While you have a workaround, I would really like to get to the bottom of this issue and I'd appreciate your help.

First to confirm:

• SSPI Module "System" -> connection works with both IP and FQDN
• SSPI Module "Portable" -> Authentication Package "Negotiate" -> connection works with FQDN but fails with IP

That it works with "System" implies that your server allows NTLM. With "Portable" and connecting by IP address, it should still be NTLM; so I don't understand the failure mode.

It would really help me if you can try this:

• Close RDM
• Open Terminal.app and run the following commands (pressing "Enter" after each)
• export SSPI_LOG_LEVEL=trace
  • export SSPI_LOG_PATH=/Users/rmarkiewicz/Desktop/rdm-sspi.lognote that here we need a complete path to create a log file, you'll need to adjust this to at least swap out your username
  • /Applications/Remote\ Desktop\ Manager.app/Contents/MacOS/RemoteDesktopManagerThis assumes you have RDM installed in the regular /Applications path
• RDM will launch
• Configure your session to use SSPI Module "Portable" and Authentication Package "Negotiate"
• Try to connect by FQDN
• Try to connect by IP Address

Then, please send me the rdm-sspi.log that should be created in the path we specified. You can send to me by PM.

Thanks for your involvement, and don't hesitate with any questions or comments

Kind regards,

@Richard Markiewicz
Hi,

I have created a SSPI debug file, but am unable to send it via PM as the attachment doesn't seem to accept .log or .txt. The file is sizeable so pasting its contents doesn't seem like a good idea. :-)

Do you have any other way that I can send you the file, perhaps via e-mail?

Best regards,
Jelle Hillen

Hey @Richard Markiewicz,

I turned off the Palo Alto Networks' VPN and it still doesn't work (with both IP address and DNS).

[15:56:12:866] [94077:6fef3001] [DEBUG][com.winpr.timezone] - [winpr_get_timezone_from_link]: tzid: Asia/Jerusalem
[15:56:12:866] [94077:6fef3001] [DEBUG][com.winpr.timezone] - [winpr_get_timezone_from_link]: tzid: Asia/Jerusalem
[15:56:12:867] [94077:6fef3001] [DEBUG][com.winpr.timezone] - [winpr_get_timezone_from_link]: tzid: Asia/Jerusalem
[15:56:12:867] [94077:6fef3001] [DEBUG][com.winpr.timezone] - [winpr_get_timezone_from_link]: tzid: Asia/Jerusalem

// Devolutions.Rdp.Credentials part here

[15:56:12:882] [94077:6fef3001] [DEBUG][com.freerdp.core] - [freerdp_connect_begin]: resetting error state
[15:56:12:882] [94077:6fef3001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx rdpdr
[15:56:12:882] [94077:6fef3001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx rdpsnd
[15:56:12:882] [94077:6fef3001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx RDMJump
[15:56:12:882] [94077:6fef3001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx RDMCmd
[15:56:12:882] [94077:6fef3001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx RDMLog
[15:56:12:882] [94077:6fef3001] [DEBUG][com.freerdp.channels.cliprdr.client] - [cliprdr_VirtualChannelEntryEx]: VirtualChannelEntryEx
[15:56:12:882] [94077:6fef3001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx cliprdr
[15:56:12:882] [94077:6fef3001] [DEBUG][com.freerdp.channels.drdynvc.client] - [drdynvc_VirtualChannelEntryEx]: VirtualChannelEntryEx
[15:56:12:882] [94077:6fef3001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx drdynvc
[15:56:12:885] [94077:6fef3001] [DEBUG][com.freerdp.settings] - [log_monitor_configuration]: [BEGIN] MonitorDefArray[1]
[15:56:12:885] [94077:6fef3001] [DEBUG][com.freerdp.settings] - [log_monitor]: [0] [primary] {0x0-1348x889} [0] {1000x1000, orientation: 0, desktopScale: 100, deviceScale: 100}
[15:56:12:885] [94077:6fef3001] [DEBUG][com.freerdp.settings] - [log_monitor_configuration]: [END] MonitorDefArray[1]
[15:56:12:885] [94077:6fef3001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx rdpdr
[15:56:12:885] [94077:6fef3001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx rdpsnd
[15:56:12:885] [94077:6fef3001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx RDMJump
[15:56:12:885] [94077:6fef3001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx RDMCmd
[15:56:12:885] [94077:6fef3001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx RDMLog
[15:56:12:885] [94077:6fef3001] [DEBUG][com.freerdp.channels.cliprdr.client] - [cliprdr_VirtualChannelEntryEx]: VirtualChannelEntryEx
[15:56:12:885] [94077:6fef3001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx cliprdr
[15:56:12:885] [94077:6fef3001] [DEBUG][com.freerdp.channels.drdynvc.client] - [drdynvc_VirtualChannelEntryEx]: VirtualChannelEntryEx
[15:56:12:885] [94077:6fef3001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx drdynvc
[15:56:12:885] [94077:6fef3001] [ERROR][com.freerdp.channels.virtual.channel] - [virtchan_virtual_channel_init_event_ex]: Unhandled event type 0
[15:56:12:885] [94077:6fef3001] [ERROR][com.freerdp.channels.virtual.channel] - [virtchan_virtual_channel_init_event_ex]: Unhandled event type 0
[15:56:12:885] [94077:6fef3001] [ERROR][com.freerdp.channels.virtual.channel] - [virtchan_virtual_channel_init_event_ex]: Unhandled event type 0
[15:56:12:886] [94077:6fef3001] [DEBUG][com.freerdp.primitives] - [primitives_autodetect_best]: primitives benchmark: only one backend, skipping...
[15:56:12:886] [94077:6fef3001] [DEBUG][com.freerdp.primitives] - [primitives_autodetect_best]: primitives autodetect, using optimized
[15:56:12:886] [94077:6fef3001] [WARN][com.freerdp.codec.nsc.neon] - [nsc_init_neon_int]: TODO: Implement neon optimized version of this function
[15:56:12:886] [94077:6fef3001] [DEBUG][com.freerdp.codec] - [openh264_library_path_from_environment]: no environment variable 'FREERDP_OPENH264_LIBRARY_PATH'
[15:56:12:886] [94077:6fef3001] [DEBUG][com.freerdp.codec] - [openh264_init]: No FREERDP_OPENH264_LIBRARY_PATH set, using default search
[15:56:12:886] [94077:6fef3001] [ERROR][com.winpr.library] - [LoadLibraryA]: failed with dlopen(libopenh264.dylib, 0x0005): tried: 'libopenh264.dylib' (relative path not allowed in hardened program), '/System/Volumes/Preboot/Cryptexes/OSlibopenh264.dylib' (no such file), '/Applications/Remote Desktop Manager.app/Contents/Frameworks/FreeRDPSandboxed.app/Contents/MonoBundle/libopenh264.dylib' (no such file), '/usr/lib/libopenh264.dylib' (no such file, not in dyld cache), 'libopenh264.dylib' (relative path not allowed in hardened program)
[15:56:12:886] [94077:6fef3001] [WARN][com.freerdp.core.codecs] - [freerdp_client_codecs_prepare]: Failed to create h264 codec context
[15:56:12:887] [94077:6fef3001] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x9d68b4000]: *************************************************
[15:56:12:887] [94077:6fef3001] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x9d68b4000]: This build is using [runtime-check] build options:
[15:56:12:887] [94077:6fef3001] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x9d68b4000]: * 'WITH_VERBOSE_WINPR_ASSERT=ON'
[15:56:12:887] [94077:6fef3001] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x9d68b4000]: *
[15:56:12:887] [94077:6fef3001] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x9d68b4000]: [runtime-check] build options might slow down the application
[15:56:12:887] [94077:6fef3001] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x9d68b4000]: *************************************************
[15:56:12:887] [94077:6fef3001] [WARN][com.freerdp.core.rdp] - [log_build_warn_cipher][0x9d68b4000]: *************************************************
[15:56:12:887] [94077:6fef3001] [WARN][com.freerdp.core.rdp] - [log_build_warn_cipher][0x9d68b4000]: [SSL] {Cipher} build or configuration missing:
[15:56:12:887] [94077:6fef3001] [WARN][com.freerdp.core.rdp] - [log_build_warn_cipher][0x9d68b4000]: * des-ede3-cbc: RDP security FIPS mode will not work
[15:56:12:888] [94077:6fef3001] [WARN][com.freerdp.core.rdp] - [log_build_warn_cipher][0x9d68b4000]: *************************************************
[15:56:12:888] [94077:6fef3001] [DEBUG][com.freerdp.core.nego] - [nego_set_negotiation_enabled]: Enabling security layer negotiation: TRUE
[15:56:12:888] [94077:6fef3001] [DEBUG][com.freerdp.core.nego] - [nego_set_restricted_admin_mode_required]: Enabling restricted admin mode: FALSE
[15:56:12:888] [94077:6fef3001] [DEBUG][com.freerdp.core.nego] - [nego_set_RCG_required]: Enabling remoteCredentialGuards: FALSE
[15:56:12:888] [94077:6fef3001] [DEBUG][com.freerdp.core.nego] - [nego_enable_rdp]: Enabling RDP security: TRUE
[15:56:12:888] [94077:6fef3001] [DEBUG][com.freerdp.core.nego] - [nego_enable_tls]: Enabling TLS security: TRUE
[15:56:12:888] [94077:6fef3001] [DEBUG][com.freerdp.core.nego] - [nego_enable_nla]: Enabling NLA security: TRUE
[15:56:12:888] [94077:6fef3001] [DEBUG][com.freerdp.core.nego] - [nego_enable_ext]: Enabling NLA extended security: FALSE
[15:56:12:888] [94077:6fef3001] [DEBUG][com.freerdp.core.nego] - [nego_enable_rdstls]: Enabling RDSTLS security: FALSE
[15:56:12:888] [94077:6fef3001] [WARN][com.freerdp.core.nego] - [nego_enable_aad]: This build does not support AAD security, disabling.
[15:56:12:888] [94077:6fef3001] [DEBUG][com.freerdp.core.rdp] - [rdp_client_transition_to_state][0x9d68b4000]: CONNECTION_STATE_INITIAL --> CONNECTION_STATE_NEGO
[15:56:12:890] [94077:6fef3001] [DEBUG][com.freerdp.core] - [rdg_connect]: resetting error state
[15:56:12:891] [94077:6fef3001] [DEBUG][com.freerdp.core] - [freerdp_tcp_default_connect]: resetting error state
[15:56:12:891] [94077:6fef3001] [DEBUG][com.freerdp.core] - [freerdp_tcp_default_connect]: connecting to peer X.X.X.X (I masked it, but it's the right IP address)
[15:56:12:894] [94077:6fef3001] [ERROR][com.freerdp.core] - [freerdp_tcp_set_nodelay]: can't set TCP_NODELAY (Invalid argument)
[15:56:12:894] [94077:6fef3001] [ERROR][com.freerdp.core] - [freerdp_tcp_default_connect]: ERRCONNECT_CONNECT_FAILED [0x00020006]
[15:56:12:894] [94077:6fef3001] [ERROR][com.freerdp.core] - [freerdp_tcp_default_connect]: unable to set receive buffer len
[15:56:12:894] [94077:6fef3001] [ERROR][com.freerdp.core.nego] - [nego_connect]: Failed to connect
[15:56:12:894] [94077:6fef3001] [DEBUG][com.freerdp.core.rdp] - [rdp_finalize_reset_flags][0x9d68b4000]: [CONNECTION_STATE_NEGO] reset finalize_sc_pdus
[15:56:12:894] [94077:6fef3001] [DEBUG][com.freerdp.core.rdp] - [rdp_client_transition_to_state][0x9d68b4000]: CONNECTION_STATE_NEGO --> CONNECTION_STATE_INITIAL

I'm pretty familiar with FreeRDP myself, and I noticed they've made some changes lately, especially fixing buffers.
I don't know what version of FreeRDP you guys are using, but it worth considering updating to the latest stable version.

If you want to take it offline, maybe we could find the root cause of this issue by diving into more details.

And @jellehillen, It looks like we're talking about 2 different issues here, and it's getting hard to keep track with all of those context switches in this thread.
Could you please open a bug for your case?

Thanks,
Ofir.

Hello

Yes indeed we are dealing with two separate issues here.

@jellehillen Let's continue by PM for now; if you're able to .zip that file it should be attachable. If it still doesn't work, poke me in PM and I'll give you an upload link.

@omatasas This is really strange. The current release of RDM Mac carries FreeRDP 3.18.0. Not the latest, but not old either. The next release will carry 3.24.1. What is really strange is that we've done the TCP handshake ok, but not got to the point of actually sending any data yet. This is simply continuing to configure the socket before actually starting the protocol.

Let me check on my side what possible reasons there could be for this. As I said, it's a new one for me. I'm looking into it and will get back to you.

Kind regards,

Hello

Yes indeed we are dealing with two separate issues here.

@jellehillen Let's continue by PM for now; if you're able to .zip that file it should be attachable. If it still doesn't work, poke me in PM and I'll give you an upload link.

@omatasas This is really strange. The current release of RDM Mac carries FreeRDP 3.18.0. Not the latest, but not old either. The next release will carry 3.24.1. What is really strange is that we've done the TCP handshake ok, but not got to the point of actually sending any data yet. This is simply continuing to configure the socket before actually starting the protocol.

Let me check on my side what possible reasons there could be for this. As I said, it's a new one for me. I'm looking into it and will get back to you.

Kind regards,

@Richard Markiewicz
Hi,

I've sent you a PM with the zipped log.

Best regards,
Jelle Hillen

@omatasas

I've asked my colleagues in the support team to open a ticket for you, and I've sent you a message directly through the ticket. Please let me know if you have any problems accessing that.

Thanks and kind regards,

I run into this same issue since about a week. At first I thought it was due to a Windows update on the target machine, but nothing checked out. If it helps solving, here's my most recent session log. after updating to latest RDM (2026.1.9.5)

[18:39:08:083] [21671:6e8a7001] [DEBUG][com.winpr.timezone] - [winpr_get_timezone_from_link]: tzid: Europe/Rome
[18:39:08:083] [21671:6e8a7001] [DEBUG][com.winpr.timezone] - [winpr_get_timezone_from_link]: tzid: Europe/Rome
[18:39:08:084] [21671:6e8a7001] [DEBUG][com.winpr.timezone] - [winpr_get_timezone_from_link]: tzid: Europe/Rome
[18:39:08:084] [21671:6e8a7001] [DEBUG][com.winpr.timezone] - [winpr_get_timezone_from_link]: tzid: Europe/Rome
[18:39:08:087] [21671:6e8a7001] [DEBUG][Remote Desktop Manager] - [Connect]: HomePath /Users/angelo/Documents ConfigPath /Users/angelo/Documents/.freerdp
[18:39:08:091] [21671:6e8a7001] [INFO][Devolutions.Rdp.Credentials] - [Parse]: parsing "a*****", "" (None) => "Username: "a*****" Domain: """
[18:39:08:094] [21671:6e8a7001] [DEBUG][com.freerdp.core] - [freerdp_connect_begin]: resetting error state
[18:39:08:094] [21671:6e8a7001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx rdpdr
[18:39:08:094] [21671:6e8a7001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx rdpsnd
[18:39:08:094] [21671:6e8a7001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx RDMJump
[18:39:08:094] [21671:6e8a7001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx RDMCmd
[18:39:08:094] [21671:6e8a7001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx RDMLog
[18:39:08:094] [21671:6e8a7001] [DEBUG][com.freerdp.channels.cliprdr.client] - [cliprdr_VirtualChannelEntryEx]: VirtualChannelEntryEx
[18:39:08:094] [21671:6e8a7001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx cliprdr
[18:39:08:094] [21671:6e8a7001] [DEBUG][com.freerdp.channels.drdynvc.client] - [drdynvc_VirtualChannelEntryEx]: VirtualChannelEntryEx
[18:39:08:094] [21671:6e8a7001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx drdynvc
[18:39:08:095] [21671:6e8a7001] [DEBUG][com.freerdp.settings] - [log_monitor_configuration]: [BEGIN] MonitorDefArray[1]
[18:39:08:095] [21671:6e8a7001] [DEBUG][com.freerdp.settings] - [log_monitor]: [0] [primary] {0x0-1792x1042} [0] {1000x1000, orientation: 0, desktopScale: 100, deviceScale: 100}
[18:39:08:095] [21671:6e8a7001] [DEBUG][com.freerdp.settings] - [log_monitor_configuration]: [END] MonitorDefArray[1]
[18:39:08:095] [21671:6e8a7001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx rdpdr
[18:39:08:095] [21671:6e8a7001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx rdpsnd
[18:39:08:095] [21671:6e8a7001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx RDMJump
[18:39:08:095] [21671:6e8a7001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx RDMCmd
[18:39:08:095] [21671:6e8a7001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx RDMLog
[18:39:08:095] [21671:6e8a7001] [DEBUG][com.freerdp.channels.cliprdr.client] - [cliprdr_VirtualChannelEntryEx]: VirtualChannelEntryEx
[18:39:08:095] [21671:6e8a7001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx cliprdr
[18:39:08:095] [21671:6e8a7001] [DEBUG][com.freerdp.channels.drdynvc.client] - [drdynvc_VirtualChannelEntryEx]: VirtualChannelEntryEx
[18:39:08:095] [21671:6e8a7001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx drdynvc
[18:39:08:095] [21671:6e8a7001] [ERROR][com.freerdp.channels.virtual.channel] - [virtchan_virtual_channel_init_event_ex]: Unhandled event type 0
[18:39:08:095] [21671:6e8a7001] [ERROR][com.freerdp.channels.virtual.channel] - [virtchan_virtual_channel_init_event_ex]: Unhandled event type 0
[18:39:08:095] [21671:6e8a7001] [ERROR][com.freerdp.channels.virtual.channel] - [virtchan_virtual_channel_init_event_ex]: Unhandled event type 0
[18:39:08:095] [21671:6e8a7001] [DEBUG][com.freerdp.primitives] - [primitives_autodetect_best]: primitives benchmark: only one backend, skipping...
[18:39:08:095] [21671:6e8a7001] [DEBUG][com.freerdp.primitives] - [primitives_autodetect_best]: primitives autodetect, using optimized
[18:39:08:095] [21671:6e8a7001] [WARN][com.freerdp.codec.nsc.neon] - [nsc_init_neon_int]: TODO: Implement neon optimized version of this function
[18:39:08:096] [21671:6e8a7001] [DEBUG][com.freerdp.codec] - [openh264_library_path_from_environment]: no environment variable 'FREERDP_OPENH264_LIBRARY_PATH'
[18:39:08:096] [21671:6e8a7001] [DEBUG][com.freerdp.codec] - [openh264_init]: No FREERDP_OPENH264_LIBRARY_PATH set, using default search
[18:39:08:096] [21671:6e8a7001] [ERROR][com.winpr.library] - [LoadLibraryA]: failed with dlopen(libopenh264.dylib, 0x0005): tried: 'libopenh264.dylib' (relative path not allowed in hardened program), '/System/Volumes/Preboot/Cryptexes/OSlibopenh264.dylib' (no such file), '/Applications/Remote Desktop Manager.app/Contents/Frameworks/FreeRDPSandboxed.app/Contents/MonoBundle/libopenh264.dylib' (no such file), '/usr/lib/libopenh264.dylib' (no such file, not in dyld cache), 'libopenh264.dylib' (relative path not allowed in hardened program)
[18:39:08:096] [21671:6e8a7001] [WARN][com.freerdp.core.codecs] - [freerdp_client_codecs_prepare]: Failed to create h264 codec context
[18:39:08:098] [21671:6e8a7001] [WARN][com.freerdp.core.rdp] - [log_build_warn][0xa6b30ce00]: *************************************************
[18:39:08:098] [21671:6e8a7001] [WARN][com.freerdp.core.rdp] - [log_build_warn][0xa6b30ce00]: This build is using [runtime-check] build options:
[18:39:08:098] [21671:6e8a7001] [WARN][com.freerdp.core.rdp] - [log_build_warn][0xa6b30ce00]: * 'WITH_VERBOSE_WINPR_ASSERT=ON'
[18:39:08:098] [21671:6e8a7001] [WARN][com.freerdp.core.rdp] - [log_build_warn][0xa6b30ce00]: *
[18:39:08:098] [21671:6e8a7001] [WARN][com.freerdp.core.rdp] - [log_build_warn][0xa6b30ce00]: [runtime-check] build options might slow down the application
[18:39:08:098] [21671:6e8a7001] [WARN][com.freerdp.core.rdp] - [log_build_warn][0xa6b30ce00]: *************************************************
[18:39:08:098] [21671:6e8a7001] [WARN][com.freerdp.core.rdp] - [log_build_warn_cipher][0xa6b30ce00]: *************************************************
[18:39:08:098] [21671:6e8a7001] [WARN][com.freerdp.core.rdp] - [log_build_warn_cipher][0xa6b30ce00]: [SSL] {Cipher} build or configuration missing:
[18:39:08:098] [21671:6e8a7001] [WARN][com.freerdp.core.rdp] - [log_build_warn_cipher][0xa6b30ce00]: * des-ede3-cbc: RDP security FIPS mode will not work
[18:39:08:098] [21671:6e8a7001] [WARN][com.freerdp.core.rdp] - [log_build_warn_cipher][0xa6b30ce00]: *************************************************
[18:39:08:098] [21671:6e8a7001] [DEBUG][com.freerdp.core.nego] - [nego_set_negotiation_enabled]: Enabling security layer negotiation: TRUE
[18:39:08:098] [21671:6e8a7001] [DEBUG][com.freerdp.core.nego] - [nego_set_restricted_admin_mode_required]: Enabling restricted admin mode: FALSE
[18:39:08:098] [21671:6e8a7001] [DEBUG][com.freerdp.core.nego] - [nego_set_RCG_required]: Enabling remoteCredentialGuards: FALSE
[18:39:08:098] [21671:6e8a7001] [DEBUG][com.freerdp.core.nego] - [nego_enable_rdp]: Enabling RDP security: TRUE
[18:39:08:098] [21671:6e8a7001] [DEBUG][com.freerdp.core.nego] - [nego_enable_tls]: Enabling TLS security: TRUE
[18:39:08:098] [21671:6e8a7001] [DEBUG][com.freerdp.core.nego] - [nego_enable_nla]: Enabling NLA security: TRUE
[18:39:08:098] [21671:6e8a7001] [DEBUG][com.freerdp.core.nego] - [nego_enable_ext]: Enabling NLA extended security: FALSE
[18:39:08:098] [21671:6e8a7001] [DEBUG][com.freerdp.core.nego] - [nego_enable_rdstls]: Enabling RDSTLS security: FALSE
[18:39:08:098] [21671:6e8a7001] [WARN][com.freerdp.core.nego] - [nego_enable_aad]: This build does not support AAD security, disabling.
[18:39:08:098] [21671:6e8a7001] [DEBUG][com.freerdp.core.rdp] - [rdp_client_transition_to_state][0xa6b30ce00]: CONNECTION_STATE_INITIAL --> CONNECTION_STATE_NEGO
[18:39:08:099] [21671:6e8a7001] [DEBUG][com.freerdp.core] - [freerdp_tcp_is_hostname_resolvable]: resetting error state
[18:39:08:099] [21671:6e8a7001] [DEBUG][com.freerdp.core] - [freerdp_tcp_default_connect]: resetting error state
[18:39:08:099] [21671:6e8a7001] [DEBUG][com.freerdp.core] - [freerdp_tcp_default_connect]: connecting to peer 192.168.1.3
[18:39:08:099] [21671:6e8a7001] [ERROR][com.freerdp.core] - [freerdp_tcp_default_connect]: ERRCONNECT_CONNECT_FAILED [0x00020006]
[18:39:08:099] [21671:6e8a7001] [ERROR][com.freerdp.core] - [freerdp_tcp_default_connect]: failed to connect to 192.168.1.3
[18:39:08:099] [21671:6e8a7001] [ERROR][com.freerdp.core.nego] - [nego_connect]: Failed to connect
[18:39:08:100] [21671:6e8a7001] [DEBUG][com.freerdp.core.rdp] - [rdp_finalize_reset_flags][0xa6b30ce00]: [CONNECTION_STATE_NEGO] reset finalize_sc_pdus
[18:39:08:100] [21671:6e8a7001] [DEBUG][com.freerdp.core.rdp] - [rdp_client_transition_to_state][0xa6b30ce00]: CONNECTION_STATE_NEGO --> CONNECTION_STATE_INITIAL

Hi @angelo1

Actually you have a separate issue. Your log shows us connecting to an internal IP address; did you provide the IP address on the connection or a hostname?

The connection to the IP and port (typically 3389 unless you changed it) was refused or unreachable; i.e. a network failure before any RDP protocol involvement.

Can you double-check the address? Can you connect with the Microsoft client (Windows App)?

Thanks and kind regards,

Hi Richard,

I am using the IP address to connect. The Windows app works, RDM does not, with the same IP address. This started about 2 weeks ago, the RDM settings had not changed at that time.

Hello

That's strange. You might check in System Settings > Privacy and Security > Local Network.

Both Remote Desktop Manager and (if you have "Sandboxing" enabled in the RDP session advanced options FreeRDPSandboxed should have local network access.

If they are both enabled, try closing RDM completely and toggling those settings "Off" and then "On" again.

Something else to check: is RDM able to "Ping" the server? Right-click the entry, and choose Macros / Scripts / Tools > Ping.

Let me know if that helps

Thanks and kind regards,

Hello again

Adding a screenshot for clarity
Kind regards,