rDesktop 1.7.0

The good news is I'm successfully running rdesktop-1.7 with Lion; the bad news is your Mac may be unable to properly read your smart card; if it's an Oberthur 128 v5.5 Dual card, you'll need to install the OpenSC token on your system. This can be tricky in Lion; sometimes the installer will run, sometimes it'll say it can't run in Lion. Try to install OpenSC and let me know how that goes (there's a work around if it won't install easily).

Additionally, I've had problems at the final log-in process, where the remote terminal never completes the log-in. Sometimes if you quickly remove-and-reinsert your smart card and re-enter your PIN when prompted, the remote terminal will "magically" decide to log you in.

By the way, my modified rdesktop-1.7.0 files are available for download again at:

https://files.me.com/captarendt/l3scpk

These files should be ready for compiling/installing without any more debugging; you'll still need to use the previous commands to compile/install with smart card support.

Thank you for the files --- they compile fine and rdesktop 1.7 runs on Lion. I am having problems at the final log-in process; the remote terminal is not completing the log-in. I tried your 'quickly remove-and-reinsert' trick a few times, but it hasn't worked for me. I can keep trying that a few times to see if it "magically" decides to log me in, but can you elaborate further or provide any hints for where to investigate to fix that issue?

By the way, my card is not an Orberthur, and it works great on webmail and authenticating to the VPN.

Thanks for your help!

The only other "work around" I've found is to log-in to the remote server from a locally networked machine (whenever you get a chance). I had a user who could not get passed the log-in process at home, so I had him come in to work and log-in to the remote server from a local network computer. After that, he was able to log-in through VPN from home.

It's dumb, I know, but it's the only other method I've seen work.

jan0k,

Unfortunately, it looks like rdesktop-1.7.1 still produces an error in the TS_SCard_Control function (just like rdesktop-1.7.0 did).

I'll take a look at it this weekend and let you know when I've made a patch or work-around.

Minor update: I have been able to log on through the VPN via remote desktop on windows 7 in virtualbox using the smart card, and I am still unable to complete logon with any version of rdesktop. (1.6 compiles fine, 1.7.0 and 1.7.1 produce an error in the TS_SCard_Control function, but compile if certain code is deleted from there or the entire function is replaced with the 1.6 version)

I noticed that after I enter the pin, while it is still trying to complete the logon (which it never does), that no other app can access the smart card (e.g. Keychain Access).

Thank you again TRON for your previous assistance and future help :-)

Hello again,

i'm still trying to find a way to use a smartcard-services.

I tried to compile rdesktop 1.7.0 and 1.7.1 but i got the same error:

ld: warning: directory not found for option '-L/usr/lib64'

Undefined symbols for architecture x86_64:

"_SCARD_CTL_CODE", referenced from:

_scard_device_control in scard.o

ld: symbol(s) not found for architecture x86_64

collect2: ld returned 1 exit status

make: *** [rdesktop] Error 1

I'm running the latest lion, latest xcode, but there is no directory "lib64". I don't understand where the problem is.

Hope you can help me.

greets

Stefan

Sorry to make you wait, but my work-around version of rdesktop-1.7.0 that will compile is available for download here:

https://files.me.com/captarendt/l3scpk

However, you may be having trouble due to an incompatability with your smart-card reader and your Mac. Certain next generation smart-cards won't work "out of the box" with Mac OS 10.7 Lion, so you may need a third-party utility to gain compatibility. I recommend the utility from OpenSC, found here:

http://www.opensc-project.org/opensc/wiki/MacInstaller

I had trouble running the installer on Mac OS 10.7, so if you do as well, let me know and I may be able to provide you with a work-around for installing the OpenSC files.

So, the process would be:

1. Launch Keychain Access (from the Utilities folder), and make sure your smart-card appears as a keychain, and make sure its certificates show up in the card's keychain

2. If your card's certificates aren't appearing in the card's keychain, install the OpenSC utility

3. After Keychain Access is able to read your card (its certificates appear in the card's keychain), download and compile my work-around rdesktop-1.7.0 (with your card connected, and following the other directions previously given).

Please post your results/problems. Thanks.

Hello TRON!

Unfortunately the opensc-installier dosn't work. Running 10.7.2 it demands "10.6.8 and above" !?

The card-reader i was using in snow-leopard was an scm 335. I don't think it's a newer one, but it's not shown in the lion's keychain-utility.

Greets

Stefan

Stefan,

My work-around OpenSC installer is available for download here:

https://files.me.com/captarendt/yk4qn0

password: opensc

Try to run this installer (it's just like the original, just "compiled" on a machine running Lion), and please post your results/problems. Thanks.

The work-around OpenSc installer works fine. Thank you.

Now i tried to go further on. Using your "patched" rdesktop 1.7.0 i got an error during the make process:

Undefined symbols for architecture x86_64:

"_iconv_open", referenced from:

_ui_clip_handle_data in xclip.o

_xclip_send_data_with_convert in xclip.o

_rdp_out_unistr in rdp.o

_rdp_in_unistr in rdp.o

"_iconv_close", referenced from:

_ui_clip_handle_data in xclip.o

_xclip_send_data_with_convert in xclip.o

_rdp_out_unistr in rdp.o

_rdp_in_unistr in rdp.o

"_iconv", referenced from:

_ui_clip_handle_data in xclip.o

_xclip_send_data_with_convert in xclip.o

_rdp_out_unistr in rdp.o

_rdp_in_unistr in rdp.o

ld: symbol(s) not found for architecture x86_64

collect2: ld returned 1 exit status

make: *** [rdesktop] Error 1

So what can i do now?

Do you get that error if you run "make" alone (without "&& sudo make install")?

Hi TRON,

It was "make" alone. I did it step by step on every Time and it worked.

Stefan