omatasas

Hey,

I just tried to latest version you released (2026.1.11.4) and the embedded sessions problem still occur.

I've tried it on my personal Mac and it worked, so it's probably something related to the hardening on my work's Mac.

What else can we do to try and fix this one?

Thanks,

Ofir.

Hey @Richard Markiewicz,

I turned off the Palo Alto Networks' VPN and it still doesn't work (with both IP address and DNS).

[15:56:12:866] [94077:6fef3001] [DEBUG][com.winpr.timezone] - [winpr_get_timezone_from_link]: tzid: Asia/Jerusalem

[15:56:12:866] [94077:6fef3001] [DEBUG][com.winpr.timezone] - [winpr_get_timezone_from_link]: tzid: Asia/Jerusalem

[15:56:12:867] [94077:6fef3001] [DEBUG][com.winpr.timezone] - [winpr_get_timezone_from_link]: tzid: Asia/Jerusalem

[15:56:12:867] [94077:6fef3001] [DEBUG][com.winpr.timezone] - [winpr_get_timezone_from_link]: tzid: Asia/Jerusalem

// Devolutions.Rdp.Credentials part here

[15:56:12:882] [94077:6fef3001] [DEBUG][com.freerdp.core] - [freerdp_connect_begin]: resetting error state

[15:56:12:882] [94077:6fef3001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx rdpdr

[15:56:12:882] [94077:6fef3001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx rdpsnd

[15:56:12:882] [94077:6fef3001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx RDMJump

[15:56:12:882] [94077:6fef3001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx RDMCmd

[15:56:12:882] [94077:6fef3001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx RDMLog

[15:56:12:882] [94077:6fef3001] [DEBUG][com.freerdp.channels.cliprdr.client] - [cliprdr_VirtualChannelEntryEx]: VirtualChannelEntryEx

[15:56:12:882] [94077:6fef3001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx cliprdr

[15:56:12:882] [94077:6fef3001] [DEBUG][com.freerdp.channels.drdynvc.client] - [drdynvc_VirtualChannelEntryEx]: VirtualChannelEntryEx

[15:56:12:882] [94077:6fef3001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx drdynvc

[15:56:12:885] [94077:6fef3001] [DEBUG][com.freerdp.settings] - [log_monitor_configuration]: [BEGIN] MonitorDefArray[1]

[15:56:12:885] [94077:6fef3001] [DEBUG][com.freerdp.settings] - [log_monitor]: [0] [primary] {0x0-1348x889} [0] {1000x1000, orientation: 0, desktopScale: 100, deviceScale: 100}

[15:56:12:885] [94077:6fef3001] [DEBUG][com.freerdp.settings] - [log_monitor_configuration]: [END] MonitorDefArray[1]

[15:56:12:885] [94077:6fef3001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx rdpdr

[15:56:12:885] [94077:6fef3001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx rdpsnd

[15:56:12:885] [94077:6fef3001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx RDMJump

[15:56:12:885] [94077:6fef3001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx RDMCmd

[15:56:12:885] [94077:6fef3001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx RDMLog

[15:56:12:885] [94077:6fef3001] [DEBUG][com.freerdp.channels.cliprdr.client] - [cliprdr_VirtualChannelEntryEx]: VirtualChannelEntryEx

[15:56:12:885] [94077:6fef3001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx cliprdr

[15:56:12:885] [94077:6fef3001] [DEBUG][com.freerdp.channels.drdynvc.client] - [drdynvc_VirtualChannelEntryEx]: VirtualChannelEntryEx

[15:56:12:885] [94077:6fef3001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx drdynvc

[15:56:12:885] [94077:6fef3001] [ERROR][com.freerdp.channels.virtual.channel] - [virtchan_virtual_channel_init_event_ex]: Unhandled event type 0

[15:56:12:885] [94077:6fef3001] [ERROR][com.freerdp.channels.virtual.channel] - [virtchan_virtual_channel_init_event_ex]: Unhandled event type 0

[15:56:12:885] [94077:6fef3001] [ERROR][com.freerdp.channels.virtual.channel] - [virtchan_virtual_channel_init_event_ex]: Unhandled event type 0

[15:56:12:886] [94077:6fef3001] [DEBUG][com.freerdp.primitives] - [primitives_autodetect_best]: primitives benchmark: only one backend, skipping...

[15:56:12:886] [94077:6fef3001] [DEBUG][com.freerdp.primitives] - [primitives_autodetect_best]: primitives autodetect, using optimized

[15:56:12:886] [94077:6fef3001] [WARN][com.freerdp.codec.nsc.neon] - [nsc_init_neon_int]: TODO: Implement neon optimized version of this function

[15:56:12:886] [94077:6fef3001] [DEBUG][com.freerdp.codec] - [openh264_library_path_from_environment]: no environment variable 'FREERDP_OPENH264_LIBRARY_PATH'

[15:56:12:886] [94077:6fef3001] [DEBUG][com.freerdp.codec] - [openh264_init]: No FREERDP_OPENH264_LIBRARY_PATH set, using default search

[15:56:12:886] [94077:6fef3001] [ERROR][com.winpr.library] - [LoadLibraryA]: failed with dlopen(libopenh264.dylib, 0x0005): tried: 'libopenh264.dylib' (relative path not allowed in hardened program), '/System/Volumes/Preboot/Cryptexes/OSlibopenh264.dylib' (no such file), '/Applications/Remote Desktop Manager.app/Contents/Frameworks/FreeRDPSandboxed.app/Contents/MonoBundle/libopenh264.dylib' (no such file), '/usr/lib/libopenh264.dylib' (no such file, not in dyld cache), 'libopenh264.dylib' (relative path not allowed in hardened program)

[15:56:12:886] [94077:6fef3001] [WARN][com.freerdp.core.codecs] - [freerdp_client_codecs_prepare]: Failed to create h264 codec context

[15:56:12:887] [94077:6fef3001] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x9d68b4000]: *************************************************

[15:56:12:887] [94077:6fef3001] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x9d68b4000]: This build is using [runtime-check] build options:

[15:56:12:887] [94077:6fef3001] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x9d68b4000]: * 'WITH_VERBOSE_WINPR_ASSERT=ON'

[15:56:12:887] [94077:6fef3001] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x9d68b4000]: *

[15:56:12:887] [94077:6fef3001] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x9d68b4000]: [runtime-check] build options might slow down the application

[15:56:12:887] [94077:6fef3001] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x9d68b4000]: *************************************************

[15:56:12:887] [94077:6fef3001] [WARN][com.freerdp.core.rdp] - [log_build_warn_cipher][0x9d68b4000]: *************************************************

[15:56:12:887] [94077:6fef3001] [WARN][com.freerdp.core.rdp] - [log_build_warn_cipher][0x9d68b4000]: [SSL] {Cipher} build or configuration missing:

[15:56:12:887] [94077:6fef3001] [WARN][com.freerdp.core.rdp] - [log_build_warn_cipher][0x9d68b4000]: * des-ede3-cbc: RDP security FIPS mode will not work

[15:56:12:888] [94077:6fef3001] [WARN][com.freerdp.core.rdp] - [log_build_warn_cipher][0x9d68b4000]: *************************************************

[15:56:12:888] [94077:6fef3001] [DEBUG][com.freerdp.core.nego] - [nego_set_negotiation_enabled]: Enabling security layer negotiation: TRUE

[15:56:12:888] [94077:6fef3001] [DEBUG][com.freerdp.core.nego] - [nego_set_restricted_admin_mode_required]: Enabling restricted admin mode: FALSE

[15:56:12:888] [94077:6fef3001] [DEBUG][com.freerdp.core.nego] - [nego_set_RCG_required]: Enabling remoteCredentialGuards: FALSE

[15:56:12:888] [94077:6fef3001] [DEBUG][com.freerdp.core.nego] - [nego_enable_rdp]: Enabling RDP security: TRUE

[15:56:12:888] [94077:6fef3001] [DEBUG][com.freerdp.core.nego] - [nego_enable_tls]: Enabling TLS security: TRUE

[15:56:12:888] [94077:6fef3001] [DEBUG][com.freerdp.core.nego] - [nego_enable_nla]: Enabling NLA security: TRUE

[15:56:12:888] [94077:6fef3001] [DEBUG][com.freerdp.core.nego] - [nego_enable_ext]: Enabling NLA extended security: FALSE

[15:56:12:888] [94077:6fef3001] [DEBUG][com.freerdp.core.nego] - [nego_enable_rdstls]: Enabling RDSTLS security: FALSE

[15:56:12:888] [94077:6fef3001] [WARN][com.freerdp.core.nego] - [nego_enable_aad]: This build does not support AAD security, disabling.

[15:56:12:888] [94077:6fef3001] [DEBUG][com.freerdp.core.rdp] - [rdp_client_transition_to_state][0x9d68b4000]: CONNECTION_STATE_INITIAL --> CONNECTION_STATE_NEGO

[15:56:12:890] [94077:6fef3001] [DEBUG][com.freerdp.core] - [rdg_connect]: resetting error state

[15:56:12:891] [94077:6fef3001] [DEBUG][com.freerdp.core] - [freerdp_tcp_default_connect]: resetting error state

[15:56:12:891] [94077:6fef3001] [DEBUG][com.freerdp.core] - [freerdp_tcp_default_connect]: connecting to peer X.X.X.X (I masked it, but it's the right IP address)

[15:56:12:894] [94077:6fef3001] [ERROR][com.freerdp.core] - [freerdp_tcp_set_nodelay]: can't set TCP_NODELAY (Invalid argument)

[15:56:12:894] [94077:6fef3001] [ERROR][com.freerdp.core] - [freerdp_tcp_default_connect]: ERRCONNECT_CONNECT_FAILED [0x00020006]

[15:56:12:894] [94077:6fef3001] [ERROR][com.freerdp.core] - [freerdp_tcp_default_connect]: unable to set receive buffer len

[15:56:12:894] [94077:6fef3001] [ERROR][com.freerdp.core.nego] - [nego_connect]: Failed to connect

[15:56:12:894] [94077:6fef3001] [DEBUG][com.freerdp.core.rdp] - [rdp_finalize_reset_flags][0x9d68b4000]: [CONNECTION_STATE_NEGO] reset finalize_sc_pdus

[15:56:12:894] [94077:6fef3001] [DEBUG][com.freerdp.core.rdp] - [rdp_client_transition_to_state][0x9d68b4000]: CONNECTION_STATE_NEGO --> CONNECTION_STATE_INITIAL

I'm pretty familiar with FreeRDP myself, and I noticed they've made some changes lately, especially fixing buffers.

I don't know what version of FreeRDP you guys are using, but it worth considering updating to the latest stable version.

If you want to take it offline, maybe we could find the root cause of this issue by diving into more details.

And @jellehillen, It looks like we're talking about 2 different issues here, and it's getting hard to keep track with all of those context switches in this thread.

Could you please open a bug for your case?

Thanks,

Ofir.

Hey @Richard Markiewicz,

With 2025.3.9.2, it was the first time I've used RDM on MacOS. I always used the external option, so the embedded option was never tested.

These are the session logs with the SIA-RDP IP address:

[13:27:12:107] [56822:6e187001] [DEBUG][com.winpr.timezone] - [winpr_get_timezone_from_link]: tzid: Asia/Jerusalem

[13:27:12:107] [56822:6e187001] [DEBUG][com.winpr.timezone] - [winpr_get_timezone_from_link]: tzid: Asia/Jerusalem

[13:27:12:108] [56822:6e187001] [DEBUG][com.winpr.timezone] - [winpr_get_timezone_from_link]: tzid: Asia/Jerusalem

[13:27:12:108] [56822:6e187001] [DEBUG][com.winpr.timezone] - [winpr_get_timezone_from_link]: tzid: Asia/Jerusalem

// Devolutions.Rdp.Credentials part here

[13:27:12:123] [56822:6e187001] [DEBUG][com.freerdp.core] - [freerdp_connect_begin]: resetting error state

[13:27:12:123] [56822:6e187001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx rdpdr

[13:27:12:123] [56822:6e187001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx rdpsnd

[13:27:12:123] [56822:6e187001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx RDMJump

[13:27:12:123] [56822:6e187001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx RDMCmd

[13:27:12:123] [56822:6e187001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx RDMLog

[13:27:12:123] [56822:6e187001] [DEBUG][com.freerdp.channels.cliprdr.client] - [cliprdr_VirtualChannelEntryEx]: VirtualChannelEntryEx

[13:27:12:123] [56822:6e187001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx cliprdr

[13:27:12:124] [56822:6e187001] [DEBUG][com.freerdp.channels.drdynvc.client] - [drdynvc_VirtualChannelEntryEx]: VirtualChannelEntryEx

[13:27:12:124] [56822:6e187001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx drdynvc

[13:27:12:126] [56822:6e187001] [DEBUG][com.freerdp.settings] - [log_monitor_configuration]: [BEGIN] MonitorDefArray[1]

[13:27:12:126] [56822:6e187001] [DEBUG][com.freerdp.settings] - [log_monitor]: [0] [primary] {0x0-1348x889} [0] {1000x1000, orientation: 0, desktopScale: 100, deviceScale: 100}

[13:27:12:126] [56822:6e187001] [DEBUG][com.freerdp.settings] - [log_monitor_configuration]: [END] MonitorDefArray[1]

[13:27:12:126] [56822:6e187001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx rdpdr

[13:27:12:126] [56822:6e187001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx rdpsnd

[13:27:12:126] [56822:6e187001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx RDMJump

[13:27:12:126] [56822:6e187001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx RDMCmd

[13:27:12:126] [56822:6e187001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx RDMLog

[13:27:12:126] [56822:6e187001] [DEBUG][com.freerdp.channels.cliprdr.client] - [cliprdr_VirtualChannelEntryEx]: VirtualChannelEntryEx

[13:27:12:126] [56822:6e187001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx cliprdr

[13:27:12:126] [56822:6e187001] [DEBUG][com.freerdp.channels.drdynvc.client] - [drdynvc_VirtualChannelEntryEx]: VirtualChannelEntryEx

[13:27:12:126] [56822:6e187001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx drdynvc

[13:27:12:126] [56822:6e187001] [ERROR][com.freerdp.channels.virtual.channel] - [virtchan_virtual_channel_init_event_ex]: Unhandled event type 0

[13:27:12:126] [56822:6e187001] [ERROR][com.freerdp.channels.virtual.channel] - [virtchan_virtual_channel_init_event_ex]: Unhandled event type 0

[13:27:12:126] [56822:6e187001] [ERROR][com.freerdp.channels.virtual.channel] - [virtchan_virtual_channel_init_event_ex]: Unhandled event type 0

[13:27:12:127] [56822:6e187001] [DEBUG][com.freerdp.primitives] - [primitives_autodetect_best]: primitives benchmark: only one backend, skipping...

[13:27:12:127] [56822:6e187001] [DEBUG][com.freerdp.primitives] - [primitives_autodetect_best]: primitives autodetect, using optimized

[13:27:12:127] [56822:6e187001] [WARN][com.freerdp.codec.nsc.neon] - [nsc_init_neon_int]: TODO: Implement neon optimized version of this function

[13:27:12:127] [56822:6e187001] [DEBUG][com.freerdp.codec] - [openh264_library_path_from_environment]: no environment variable 'FREERDP_OPENH264_LIBRARY_PATH'

[13:27:12:127] [56822:6e187001] [DEBUG][com.freerdp.codec] - [openh264_init]: No FREERDP_OPENH264_LIBRARY_PATH set, using default search

[13:27:12:127] [56822:6e187001] [ERROR][com.winpr.library] - [LoadLibraryA]: failed with dlopen(libopenh264.dylib, 0x0005): tried: 'libopenh264.dylib' (relative path not allowed in hardened program), '/System/Volumes/Preboot/Cryptexes/OSlibopenh264.dylib' (no such file), '/Applications/Remote Desktop Manager.app/Contents/Frameworks/FreeRDPSandboxed.app/Contents/MonoBundle/libopenh264.dylib' (no such file), '/usr/lib/libopenh264.dylib' (no such file, not in dyld cache), 'libopenh264.dylib' (relative path not allowed in hardened program)

[13:27:12:127] [56822:6e187001] [WARN][com.freerdp.core.codecs] - [freerdp_client_codecs_prepare]: Failed to create h264 codec context

[13:27:12:128] [56822:6e187001] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x7cafb8000]: *************************************************

[13:27:12:128] [56822:6e187001] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x7cafb8000]: This build is using [runtime-check] build options:

[13:27:12:128] [56822:6e187001] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x7cafb8000]: * 'WITH_VERBOSE_WINPR_ASSERT=ON'

[13:27:12:128] [56822:6e187001] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x7cafb8000]: *

[13:27:12:128] [56822:6e187001] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x7cafb8000]: [runtime-check] build options might slow down the application

[13:27:12:128] [56822:6e187001] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x7cafb8000]: *************************************************

[13:27:12:129] [56822:6e187001] [WARN][com.freerdp.core.rdp] - [log_build_warn_cipher][0x7cafb8000]: *************************************************

[13:27:12:129] [56822:6e187001] [WARN][com.freerdp.core.rdp] - [log_build_warn_cipher][0x7cafb8000]: [SSL] {Cipher} build or configuration missing:

[13:27:12:129] [56822:6e187001] [WARN][com.freerdp.core.rdp] - [log_build_warn_cipher][0x7cafb8000]: * des-ede3-cbc: RDP security FIPS mode will not work

[13:27:12:129] [56822:6e187001] [WARN][com.freerdp.core.rdp] - [log_build_warn_cipher][0x7cafb8000]: *************************************************

[13:27:12:129] [56822:6e187001] [DEBUG][com.freerdp.core.nego] - [nego_set_negotiation_enabled]: Enabling security layer negotiation: TRUE

[13:27:12:129] [56822:6e187001] [DEBUG][com.freerdp.core.nego] - [nego_set_restricted_admin_mode_required]: Enabling restricted admin mode: FALSE

[13:27:12:129] [56822:6e187001] [DEBUG][com.freerdp.core.nego] - [nego_set_RCG_required]: Enabling remoteCredentialGuards: FALSE

[13:27:12:129] [56822:6e187001] [DEBUG][com.freerdp.core.nego] - [nego_enable_rdp]: Enabling RDP security: TRUE

[13:27:12:129] [56822:6e187001] [DEBUG][com.freerdp.core.nego] - [nego_enable_tls]: Enabling TLS security: TRUE

[13:27:12:129] [56822:6e187001] [DEBUG][com.freerdp.core.nego] - [nego_enable_nla]: Enabling NLA security: TRUE

[13:27:12:129] [56822:6e187001] [DEBUG][com.freerdp.core.nego] - [nego_enable_ext]: Enabling NLA extended security: FALSE

[13:27:12:129] [56822:6e187001] [DEBUG][com.freerdp.core.nego] - [nego_enable_rdstls]: Enabling RDSTLS security: FALSE

[13:27:12:129] [56822:6e187001] [WARN][com.freerdp.core.nego] - [nego_enable_aad]: This build does not support AAD security, disabling.

[13:27:12:129] [56822:6e187001] [DEBUG][com.freerdp.core.rdp] - [rdp_client_transition_to_state][0x7cafb8000]: CONNECTION_STATE_INITIAL --> CONNECTION_STATE_NEGO

[13:27:12:130] [56822:6e187001] [DEBUG][com.freerdp.core] - [rdg_connect]: resetting error state

[13:27:12:132] [56822:6e187001] [DEBUG][com.freerdp.core] - [freerdp_tcp_default_connect]: resetting error state

[13:27:12:132] [56822:6e187001] [DEBUG][com.freerdp.core] - [freerdp_tcp_default_connect]: connecting to peer X.X.X.X (I masked it, but it's the right IP address)

[13:27:12:134] [56822:6e187001] [ERROR][com.freerdp.core] - [freerdp_tcp_set_nodelay]: can't set TCP_NODELAY (Invalid argument)

[13:27:12:135] [56822:6e187001] [ERROR][com.freerdp.core] - [freerdp_tcp_default_connect]: ERRCONNECT_CONNECT_FAILED [0x00020006]

[13:27:12:135] [56822:6e187001] [ERROR][com.freerdp.core] - [freerdp_tcp_default_connect]: unable to set receive buffer len

[13:27:12:135] [56822:6e187001] [ERROR][com.freerdp.core.nego] - [nego_connect]: Failed to connect

[13:27:12:135] [56822:6e187001] [DEBUG][com.freerdp.core.rdp] - [rdp_finalize_reset_flags][0x7cafb8000]: [CONNECTION_STATE_NEGO] reset finalize_sc_pdus

[13:27:12:135] [56822:6e187001] [DEBUG][com.freerdp.core.rdp] - [rdp_client_transition_to_state][0x7cafb8000]: CONNECTION_STATE_NEGO --> CONNECTION_STATE_INITIAL

Let me know if you need anything else for better investigation of this issue.

Thanks,

Ofir.

Hey @Richard Markiewicz,

I've tried to disable the sandbox of the RDP session, and it didn't help.

I also rechecked the Local Network Access on my Mac's settings, and it's enabled for the Remote Desktop Manager already.

I've tried to update the version via the Remote Desktop Manager, but it didn't work, so I downloaded the latest version from your site and "forced" to update the version of the Remote Desktop Manager.

Do you want me to uninstall the Remote Desktop Manager from my machine and to reinstall everything from scratch?

Regarding the credentials part - it's irrelevant in our case, since we're trying to connect to CyberArk's SIA-RDP, so we're not having any authentication issue here, and the only thing we should deal with is the handshake with SIA-RDP and getting the SIA-RDP certificate.

Thanks,

Ofir.

Hello

Sorry for the inconvenience. Is this a regression on your side (i.e. you were using an older version previously and things worked well, and now they don't) or is it a new install?

If you don't mind troubleshooting a little bit - please go to Help > Session Logs; click to "Enable" session logging (see screenshot) and then reproduce the issue.

You can then send the session log to me, I will see it quickly if you just paste it into a PM but you also have the option of sending ir by email to service@devolutions.net and mention this forum thread.

Thanks and kind regards,

@Richard Markiewicz

Hey Richard,

I used 2 different versions (2025.3.9.2 & 2026.1.8.6) and it doesn't work for both of them.

I also tried to change the authentication method from NEGO to NTLM, and it didn't work either.

Attaching the requested session logs (without the "Devolutions.Rdp.Credentials" part, even though it's masked, since I can't see the value in that anyway):

[13:52:28:240] [41845:704c3001] [DEBUG][com.winpr.timezone] - [winpr_get_timezone_from_link]: tzid: Asia/Jerusalem

[13:52:28:240] [41845:704c3001] [DEBUG][com.winpr.timezone] - [winpr_get_timezone_from_link]: tzid: Asia/Jerusalem

[13:52:28:241] [41845:704c3001] [DEBUG][com.winpr.timezone] - [winpr_get_timezone_from_link]: tzid: Asia/Jerusalem

[13:52:28:241] [41845:704c3001] [DEBUG][com.winpr.timezone] - [winpr_get_timezone_from_link]: tzid: Asia/Jerusalem

// Devolutions.Rdp.Credentials part here

[13:52:28:302] [41845:704c3001] [DEBUG][com.freerdp.core] - [freerdp_connect_begin]: resetting error state

[13:52:28:303] [41845:704c3001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx rdpdr

[13:52:28:303] [41845:704c3001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx rdpsnd

[13:52:28:303] [41845:704c3001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx RDMJump

[13:52:28:303] [41845:704c3001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx RDMCmd

[13:52:28:303] [41845:704c3001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx RDMLog

[13:52:28:303] [41845:704c3001] [DEBUG][com.freerdp.channels.cliprdr.client] - [cliprdr_VirtualChannelEntryEx]: VirtualChannelEntryEx

[13:52:28:303] [41845:704c3001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx cliprdr

[13:52:28:303] [41845:704c3001] [DEBUG][com.freerdp.channels.drdynvc.client] - [drdynvc_VirtualChannelEntryEx]: VirtualChannelEntryEx

[13:52:28:303] [41845:704c3001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx drdynvc

[13:52:28:305] [41845:704c3001] [DEBUG][com.freerdp.settings] - [log_monitor_configuration]: [BEGIN] MonitorDefArray[1]

[13:52:28:305] [41845:704c3001] [DEBUG][com.freerdp.settings] - [log_monitor]: [0] [primary] {0x0-1348x889} [0] {1000x1000, orientation: 0, desktopScale: 100, deviceScale: 100}

[13:52:28:305] [41845:704c3001] [DEBUG][com.freerdp.settings] - [log_monitor_configuration]: [END] MonitorDefArray[1]

[13:52:28:305] [41845:704c3001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx rdpdr

[13:52:28:305] [41845:704c3001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx rdpsnd

[13:52:28:305] [41845:704c3001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx RDMJump

[13:52:28:305] [41845:704c3001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx RDMCmd

[13:52:28:305] [41845:704c3001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx RDMLog

[13:52:28:305] [41845:704c3001] [DEBUG][com.freerdp.channels.cliprdr.client] - [cliprdr_VirtualChannelEntryEx]: VirtualChannelEntryEx

[13:52:28:306] [41845:704c3001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx cliprdr

[13:52:28:306] [41845:704c3001] [DEBUG][com.freerdp.channels.drdynvc.client] - [drdynvc_VirtualChannelEntryEx]: VirtualChannelEntryEx

[13:52:28:306] [41845:704c3001] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin]: loading channelEx drdynvc

[13:52:28:306] [41845:704c3001] [ERROR][com.freerdp.channels.virtual.channel] - [virtchan_virtual_channel_init_event_ex]: Unhandled event type 0

[13:52:28:306] [41845:704c3001] [ERROR][com.freerdp.channels.virtual.channel] - [virtchan_virtual_channel_init_event_ex]: Unhandled event type 0

[13:52:28:306] [41845:704c3001] [ERROR][com.freerdp.channels.virtual.channel] - [virtchan_virtual_channel_init_event_ex]: Unhandled event type 0

[13:52:28:306] [41845:704c3001] [DEBUG][com.freerdp.primitives] - [primitives_autodetect_best]: primitives benchmark: only one backend, skipping...

[13:52:28:306] [41845:704c3001] [DEBUG][com.freerdp.primitives] - [primitives_autodetect_best]: primitives autodetect, using optimized

[13:52:28:306] [41845:704c3001] [WARN][com.freerdp.codec.nsc.neon] - [nsc_init_neon_int]: TODO: Implement neon optimized version of this function

[13:52:28:307] [41845:704c3001] [DEBUG][com.freerdp.codec] - [openh264_library_path_from_environment]: no environment variable 'FREERDP_OPENH264_LIBRARY_PATH'

[13:52:28:307] [41845:704c3001] [DEBUG][com.freerdp.codec] - [openh264_init]: No FREERDP_OPENH264_LIBRARY_PATH set, using default search

[13:52:28:307] [41845:704c3001] [ERROR][com.winpr.library] - [LoadLibraryA]: failed with dlopen(libopenh264.dylib, 0x0005): tried: 'libopenh264.dylib' (relative path not allowed in hardened program), '/System/Volumes/Preboot/Cryptexes/OSlibopenh264.dylib' (no such file), '/Applications/Remote Desktop Manager.app/Contents/Frameworks/FreeRDPSandboxed.app/Contents/MonoBundle/libopenh264.dylib' (no such file), '/usr/lib/libopenh264.dylib' (no such file, not in dyld cache), 'libopenh264.dylib' (relative path not allowed in hardened program)

[13:52:28:307] [41845:704c3001] [WARN][com.freerdp.core.codecs] - [freerdp_client_codecs_prepare]: Failed to create h264 codec context

[13:52:28:309] [41845:704c3001] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x7b6424e00]: *************************************************

[13:52:28:309] [41845:704c3001] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x7b6424e00]: This build is using [runtime-check] build options:

[13:52:28:309] [41845:704c3001] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x7b6424e00]: * 'WITH_VERBOSE_WINPR_ASSERT=ON'

[13:52:28:309] [41845:704c3001] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x7b6424e00]: *

[13:52:28:309] [41845:704c3001] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x7b6424e00]: [runtime-check] build options might slow down the application

[13:52:28:309] [41845:704c3001] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x7b6424e00]: *************************************************

[13:52:28:309] [41845:704c3001] [WARN][com.freerdp.core.rdp] - [log_build_warn_cipher][0x7b6424e00]: *************************************************

[13:52:28:309] [41845:704c3001] [WARN][com.freerdp.core.rdp] - [log_build_warn_cipher][0x7b6424e00]: [SSL] {Cipher} build or configuration missing:

[13:52:28:309] [41845:704c3001] [WARN][com.freerdp.core.rdp] - [log_build_warn_cipher][0x7b6424e00]: * des-ede3-cbc: RDP security FIPS mode will not work

[13:52:28:309] [41845:704c3001] [WARN][com.freerdp.core.rdp] - [log_build_warn_cipher][0x7b6424e00]: *************************************************

[13:52:28:309] [41845:704c3001] [DEBUG][com.freerdp.core.nego] - [nego_set_negotiation_enabled]: Enabling security layer negotiation: TRUE

[13:52:28:309] [41845:704c3001] [DEBUG][com.freerdp.core.nego] - [nego_set_restricted_admin_mode_required]: Enabling restricted admin mode: FALSE

[13:52:28:309] [41845:704c3001] [DEBUG][com.freerdp.core.nego] - [nego_set_RCG_required]: Enabling remoteCredentialGuards: FALSE

[13:52:28:309] [41845:704c3001] [DEBUG][com.freerdp.core.nego] - [nego_enable_rdp]: Enabling RDP security: TRUE

[13:52:28:309] [41845:704c3001] [DEBUG][com.freerdp.core.nego] - [nego_enable_tls]: Enabling TLS security: TRUE

[13:52:28:309] [41845:704c3001] [DEBUG][com.freerdp.core.nego] - [nego_enable_nla]: Enabling NLA security: TRUE

[13:52:28:309] [41845:704c3001] [DEBUG][com.freerdp.core.nego] - [nego_enable_ext]: Enabling NLA extended security: FALSE

[13:52:28:309] [41845:704c3001] [DEBUG][com.freerdp.core.nego] - [nego_enable_rdstls]: Enabling RDSTLS security: FALSE

[13:52:28:309] [41845:704c3001] [WARN][com.freerdp.core.nego] - [nego_enable_aad]: This build does not support AAD security, disabling.

[13:52:28:309] [41845:704c3001] [DEBUG][com.freerdp.core.rdp] - [rdp_client_transition_to_state][0x7b6424e00]: CONNECTION_STATE_INITIAL --> CONNECTION_STATE_NEGO

[13:52:28:312] [41845:704c3001] [DEBUG][com.freerdp.core] - [rdg_connect]: resetting error state

[13:52:58:316] [41845:704c3001] [ERROR][com.freerdp.core] - [freerdp_tcp_resolve_host]: getaddrinfo failed with 8

[13:52:58:317] [41845:704c3001] [ERROR][com.freerdp.core] - [freerdp_tcp_default_connect]: ERRCONNECT_DNS_NAME_NOT_FOUND [0x00020005]

[13:52:58:317] [41845:704c3001] [ERROR][com.freerdp.core.nego] - [nego_connect]: Failed to connect

[13:52:58:319] [41845:704c3001] [DEBUG][com.freerdp.core.rdp] - [rdp_finalize_reset_flags][0x7b6424e00]: [CONNECTION_STATE_NEGO] reset finalize_sc_pdus

[13:52:58:319] [41845:704c3001] [DEBUG][com.freerdp.core.rdp] - [rdp_client_transition_to_state][0x7b6424e00]: CONNECTION_STATE_NEGO --> CONNECTION_STATE_INITIAL

Thanks,

Ofir

Hey,

I've been trying to establish multiple embedded RDP sessions with the latest Remote Desktop Manager for MacOS (2026.1.8.6), but none of them worked.

I tried to establish "plain" RDP sessions (direct connection to the target machine), but it didn't work.

I also tried to establish CyberArk's SIA-RDP connections (with RD Gateway), but it didn't work either.

The message I keep getting is "unable to connect to host - CONNECT_FAILED (0x00020006)". I also tried to change the hostname to the public IP, but it didn't work as well.

The thing is - I tried all of those sessions with an external RDP client (Windows App triggered via Remote Desktop Manager), and all of them worked.

I asked a team member to try on their machine and they got the same issue.

The way I configured my RDP sessions was by importing RDP files, which, again, worked well on Windows App.

My setup:

• MacOS Tahoe (26.3.1)

• Latest Remote Desktop Manager version (2026.1.8.6)

• Palo Alto Networks VPN