VRDP external auth fails under 5.06, worked under 4.x
Posted: 15. Oct 2015, 09:11
I have been using virtualbox for quite some time, and I use VRDP on a pretty regular basis. Under 4.x I could use external authentication but after upgrading to 5.06 it fails 100% of the time. If I turn off all authentication, VRDP works just fine. Guest authentication doesn't work, but I've never used it, so I can't say if it worked before 5.06 or not.
External authentication fails 100% of the time, regardless of which VM I try to boot. I've tried against both Linux and Windows 10 guests, with identical results.
This particular test is being run with the guest as a brand new Linux Mint install, on a Windows 7 host. Vbox is 5.0.4r102546.
External authentication fails 100% of the time, regardless of which VM I try to boot. I've tried against both Linux and Windows 10 guests, with identical results.
This particular test is being run with the guest as a brand new Linux Mint install, on a Windows 7 host. Vbox is 5.0.4r102546.
00:01:18.625681 VRDP: New connection: 00:01:18.625746 VRDP: Connection opened (IPv4): 0 00:01:18.625877 VRDP: Negotiating security method with the client. 00:01:19.659686 VRDP: Connection closed: 0 00:01:19.664334 VRDP: New connection: 00:01:19.664379 VRDP: Connection opened (IPv4): 1 00:01:19.664470 VRDP: Negotiating security method with the client. 00:01:23.128885 VRDP: Methods 0x0000001b 00:01:23.128935 VRDP: Channel: [rdpdr] [1004]. Accepted. 00:01:23.128950 VRDP: Channel: [rdpsnd] [1005]. Accepted. 00:01:23.128963 VRDP: Channel: [cliprdr] [1006]. Accepted. 00:01:23.128975 VRDP: Channel: [drdynvc] [1007]. Accepted. 00:01:23.128987 VRDP: Unsupported SEC_TAG: 0xC006/8. Skipping. 00:01:23.129000 VRDP: Unsupported SEC_TAG: 0xC00A/8. Skipping. 00:01:23.208031 VRDP: Client seems to be MSFT. 00:01:23.208065 VRDP: Logon: MYHOSTNAME (192.168.xxx.xxx) build 9600. User: [myuser] Domain: [] Screen: 0 00:01:23.208252 AUTH: User: [myuser]. Domain: []. Authentication type: [External] 00:01:23.208345 AUTH: loading external authentication library 'VBoxAuth' 00:01:23.222109 AUTH: Using entry point 'AuthEntry'. 00:01:23.231589 AUTH: external authentication module returned 'access denied' 00:01:23.231604 AUTH: Access denied. 00:01:23.231616 VRDP: Connection closed: 1I'm not familiar with the VboxStartup.log contents, but it looks like it finds the VboxAuth.dll ok:
82c.f98: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxAuth.dll) WinVerifyTrust 82c.f98: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxAuth.dll 82c.f98: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'... 82c.f98: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008] 82c.f98: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'... 82c.f98: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008] 82c.f98: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxAuth.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000004b6bc70:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling] 82c.f98: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxAuth.dll 82c.f98: supR3HardenedDllNotificationCallback: load 000007fef9370000 LB 0x00007000 C:\Program Files\Oracle\VirtualBox\VBoxAuth.DLL [fFlags=0x0] 82c.f98: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxAuth.dll 82c.f98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef9370000 'C:\Program Files\Oracle\VirtualBox\VBoxAuth.DLL'I really hope I'm missing something obvious, but on the VM I use the most, I made no changes but upgrading Vbox, and VRDP external authentication stopped working. Any advice for me?