{"action":"created","issue":{"url":"https://api.github.com/repos/neutrinolabs/xrdp/issues/325","repository_url":"https://api.github.com/repos/neutrinolabs/xrdp","labels_url":"https://api.github.com/repos/neutrinolabs/xrdp/issues/325/labels{/name}","comments_url":"https://api.github.com/repos/neutrinolabs/xrdp/issues/325/comments","events_url":"https://api.github.com/repos/neutrinolabs/xrdp/issues/325/events","html_url":"https://github.com/neutrinolabs/xrdp/issues/325","id":134240060,"number":325,"title":"Password issue sessman and vnc","user":{"login":"antoinetran","id":14093758,"avatar_url":"https://avatars.githubusercontent.com/u/14093758?v=3","gravatar_id":"","url":"https://api.github.com/users/antoinetran","html_url":"https://github.com/antoinetran","followers_url":"https://api.github.com/users/antoinetran/followers","following_url":"https://api.github.com/users/antoinetran/following{/other_user}","gists_url":"https://api.github.com/users/antoinetran/gists{/gist_id}","starred_url":"https://api.github.com/users/antoinetran/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/antoinetran/subscriptions","organizations_url":"https://api.github.com/users/antoinetran/orgs","repos_url":"https://api.github.com/users/antoinetran/repos","events_url":"https://api.github.com/users/antoinetran/events{/privacy}","received_events_url":"https://api.github.com/users/antoinetran/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":11,"created_at":"2016-02-17T10:22:02Z","updated_at":"2016-03-01T17:02:52Z","closed_at":"2016-02-17T11:43:52Z","body":"Hi,\r\n\r\nI have this issue with xrdp 0.5.0-0.13.el6 and 0.6.1-3.el6 and tigervnc-server 1.1.0-5.el6_4.1, in Red Hat 6.5.\r\n\r\nWith LDAP account, I cannot connect to a xrdp server at the first login. At the second time, it works (only for 0.5.0, not for 0.6.1). There is no problem if I create the home dir before connecting the first time. This let me to believe there is a sleep issue between xrdp-sesman and Xvnc. The time xrdp-sesman creates ~/.vnc/sesman_$USER_passwd, and launch Xvnc, xrdp or xrdp-sesman says it cannot connect to Xvnc (127.0.0.1:591X).\r\n\r\nWorkaround:\r\na) Disable VNCAuth (in /etc/xrdp/sesman.ini, adds SecurityTypes to None see https://github.com/TigerVNC/tigervnc/issues/24)\r\nb) Creates the home dir before connecting for xrdp 0.5.0 (for 0.6.1, restart xrdp too)\r\n\r\na) is not secure enough for us since there is a big security risk. b) does not work either because we do not know who wants to connect before creating the home dir. Trying to modify Xvnc or startwm.sh, to create the home dir, does not work because it is already too late when they are called.\r\n\r\nWhat is expected:\r\nxrdp or xrdp-sesman or libvnc.so must create the sesman_$USER_passwd, even when the home dir does not exist, then waits for it (or sleep).\r\n\r\nRelated bug tracking:\r\nhttps://bugzilla.redhat.com/show_bug.cgi?id=557510\r\nhttps://bugs.debian.org/cgi-bin/bugreport.cgi?bug=654788\r\n"},"comment":{"url":"https://api.github.com/repos/neutrinolabs/xrdp/issues/comments/190815515","html_url":"https://github.com/neutrinolabs/xrdp/issues/325#issuecomment-190815515","issue_url":"https://api.github.com/repos/neutrinolabs/xrdp/issues/325","id":190815515,"user":{"login":"antoinetran","id":14093758,"avatar_url":"https://avatars.githubusercontent.com/u/14093758?v=3","gravatar_id":"","url":"https://api.github.com/users/antoinetran","html_url":"https://github.com/antoinetran","followers_url":"https://api.github.com/users/antoinetran/followers","following_url":"https://api.github.com/users/antoinetran/following{/other_user}","gists_url":"https://api.github.com/users/antoinetran/gists{/gist_id}","starred_url":"https://api.github.com/users/antoinetran/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/antoinetran/subscriptions","organizations_url":"https://api.github.com/users/antoinetran/orgs","repos_url":"https://api.github.com/users/antoinetran/repos","events_url":"https://api.github.com/users/antoinetran/events{/privacy}","received_events_url":"https://api.github.com/users/antoinetran/received_events","type":"User","site_admin":false},"created_at":"2016-03-01T17:02:52Z","updated_at":"2016-03-01T17:02:52Z","body":"I believe you would have to analyze all the PAM stack, finding at which point your PAM returns. This may indicate you have a sufficient rule in common-auth. You could try to put the mkhome dir in the first position, but this will be dirty, as it will create homedir even for inexistant user."}}