apologies if this duplicates. I sent it originally to bugs@debian.org I am attempting to connect to a work site behind an RDP gateway. This has been fine in the past, but fails when I upgrade to 3.27. I am using freerd-x11 but tested it in the past with the sdl and wayland versions and they also failed with version 3.27. Downgrading to 3.26 solves the problem. Is a change in command syntax needed? If not, this is a serious bug that, but for downgrading, makes the program completely unusable for me. OS version Debian SID after dist-upgrade today $ xfreerdp --version This is FreeRDP version 3.27.0 (3.27.0) $ xfreerdp /size:1900x1024 /u:xx /p:xxxx /v:xxxx /gw:g:xxxx,u:xx,p:xxxx /log-level:warn -wallpaper -grab-keyboard /printer [12:48:48:758] [10274:00002822] [WARN][com.freerdp.client.common.cmdline] - [warn_credential_args]: Using /p is insecure [12:48:48:758] [10274:00002822] [WARN][com.freerdp.client.common.cmdline] - [warn_credential_args]: Passing credentials or secrets via command line might expose these in the process list [12:48:48:758] [10274:00002822] [WARN][com.freerdp.client.common.cmdline] - [warn_credential_args]: Consider using one of the following (more secure) alternatives: [12:48:48:758] [10274:00002822] [WARN][com.freerdp.client.common.cmdline] - [warn_credential_args]: - /args-from: pipe in arguments from stdin, file, file descriptor or environment variable [12:48:48:758] [10274:00002822] [WARN][com.freerdp.client.common.cmdline] - [warn_credential_args]: - /from-stdin pass the credential via stdin [12:48:48:758] [10274:00002822] [WARN][com.freerdp.client.common.cmdline] - [warn_credential_args]: - set environment variable FREERDP_ASKPASS to have a gui tool query for credentials [12:48:48:836] [10274:00002824] [WARN][com.freerdp.client.x11] - [load_map_from_xkbfile]: : keycode: 0x08 -> no RDP scancode found [12:48:48:836] [10274:00002824] [WARN][com.freerdp.client.x11] - [load_map_from_xkbfile]: ZEHA: keycode: 0x5d -> no RDP scancode found [12:48:48:852] [10274:00002824] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x557faaa1c000]: ************************************************* [12:48:48:852] [10274:00002824] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x557faaa1c000]: This build is using [experimental] build options: [12:48:48:852] [10274:00002824] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x557faaa1c000]: * 'WITH_VAAPI_H264_ENCODING=ON' [12:48:48:852] [10274:00002824] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x557faaa1c000]: * [12:48:48:852] [10274:00002824] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x557faaa1c000]: [experimental] build options might crash the application [12:48:48:852] [10274:00002824] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x557faaa1c000]: ************************************************* [12:48:48:852] [10274:00002824] [ERROR][com.freerdp.core.nego] - [nego_connect]: Failed to connect [12:48:48:852] [10274:00002824] [ERROR][com.freerdp.core] - [rdp_client_connect]: ERRCONNECT_SECURITY_NEGO_CONNECT_FAILED [0x0002000C] [12:48:48:852] [10274:00002824] [ERROR][com.freerdp.core.connection] - [rdp_client_connect]: Error: protocol security negotiation or connection failure $ xfreerdp --version This is FreeRDP version 3.26.0 (3.26.0) Log below is connecting with 3.26 with the same command and then signing off immediately [12:59:18:609] [10560:00002940] [WARN][com.freerdp.client.common.cmdline] - [warn_credential_args]: Using /p is insecure [12:59:18:609] [10560:00002940] [WARN][com.freerdp.client.common.cmdline] - [warn_credential_args]: Passing credentials or secrets via command line might expose these in the process list [12:59:18:609] [10560:00002940] [WARN][com.freerdp.client.common.cmdline] - [warn_credential_args]: Consider using one of the following (more secure) alternatives: [12:59:18:609] [10560:00002940] [WARN][com.freerdp.client.common.cmdline] - [warn_credential_args]: - /args-from: pipe in arguments from stdin, file, file descriptor or environment variable [12:59:18:609] [10560:00002940] [WARN][com.freerdp.client.common.cmdline] - [warn_credential_args]: - /from-stdin pass the credential via stdin [12:59:18:609] [10560:00002940] [WARN][com.freerdp.client.common.cmdline] - [warn_credential_args]: - set environment variable FREERDP_ASKPASS to have a gui tool query for credentials [12:59:18:684] [10560:00002942] [WARN][com.freerdp.client.x11] - [load_map_from_xkbfile]: : keycode: 0x08 -> no RDP scancode found [12:59:18:684] [10560:00002942] [WARN][com.freerdp.client.x11] - [load_map_from_xkbfile]: ZEHA: keycode: 0x5d -> no RDP scancode found [12:59:18:701] [10560:00002942] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x5569073c1000]: ************************************************* [12:59:18:701] [10560:00002942] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x5569073c1000]: This build is using [experimental] build options: [12:59:18:701] [10560:00002942] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x5569073c1000]: * 'WITH_VAAPI_H264_ENCODING=ON' [12:59:18:701] [10560:00002942] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x5569073c1000]: * [12:59:18:701] [10560:00002942] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x5569073c1000]: [experimental] build options might crash the application [12:59:18:701] [10560:00002942] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x5569073c1000]: ************************************************* [12:59:18:826] [10560:00002942] [ERROR][com.winpr.sspi.Kerberos] - [kerberos_AcquireCredentialsHandleA]: krb5_parse_name (Configuration file does not specify default realm [-1765328160]) [12:59:18:826] [10560:00002942] [ERROR][com.winpr.sspi.Kerberos] - [kerberos_AcquireCredentialsHandleA]: krb5_parse_name (Configuration file does not specify default realm [-1765328160]) [12:59:18:932] [10560:00002942] [WARN][com.winpr.negotiate] - [negotiate_FreeCredentialsHandle]: FreeCredentialsHandle returned SEC_E_INVALID_HANDLE [12:59:18:932] [10560:00002942] [WARN][com.winpr.negotiate] - [negotiate_FreeCredentialsHandle]: FreeCredentialsHandle returned SEC_E_INVALID_HANDLE [12:59:19:628] [10560:00002942] [WARN][com.freerdp.crypto] - [verify_cb]: Certificate verification failure 'self-signed certificate (18)' at stack position 0 [12:59:19:628] [10560:00002942] [WARN][com.freerdp.crypto] - [verify_cb]: CN = FreeGeek.myrealdata.net [12:59:19:628] [10560:00002942] [ERROR][com.winpr.sspi.Kerberos] - [kerberos_AcquireCredentialsHandleA]: krb5_parse_name (Configuration file does not specify default realm [-1765328160]) [12:59:19:628] [10560:00002942] [ERROR][com.winpr.sspi.Kerberos] - [kerberos_AcquireCredentialsHandleA]: krb5_parse_name (Configuration file does not specify default realm [-1765328160]) [12:59:20:887] [10560:00002942] [WARN][com.freerdp.client.x11] - [load_map_from_xkbfile]: : keycode: 0x08 -> no RDP scancode found [12:59:20:887] [10560:00002942] [WARN][com.freerdp.client.x11] - [load_map_from_xkbfile]: ZEHA: keycode: 0x5d -> no RDP scancode found [12:59:44:938] [10560:00002942] [ERROR][com.freerdp.core] - [rdp_set_error_info]: ERRINFO_LOGOFF_BY_USER [0x0001000C] [12:59:44:952] [10560:00002940] [WARN][com.winpr.negotiate] - [negotiate_FreeCredentialsHandle]: FreeCredentialsHandle returned SEC_E_INVALID_HANDLE [12:59:44:952] [10560:00002940] [WARN][com.winpr.negotiate] - [negotiate_FreeCredentialsHandle]: FreeCredentialsHandle returned SEC_E_INVALID_HANDLE Michael Westwind Bookkeeper Free Geek he/him/his (503) 232-9350 x128 accounting@freegeek.org 1731 SE 10th St, Portland, OR, 97214 [image: facebook] <https://www.facebook.com/freegeekmothership/> [image: twitter] <https://twitter.com/FreeGeekPDX> [image: linkedin] <https://www.linkedin.com/company/free-geek> [image: instagram] <https://www.instagram.com/freegeekmothership> YOU make Free Geek possible! Make a tax-deductible contribution today. <https://give.freegeek.org/>