Hello,

I can?t connect via xrdp to KALI 2020 v.2. I could get there in KALI 2019 and older versions, but after the upgrade to KALI 2020 it's no longer possible.
I found out that the problem might be related to authentication to Gnome GUI, actually the error messages I managed to found are related to gnome-keyring-daemon. And also something with /etc/pam.d/common-auth.
In /var/log/auth :
Jul 19 04:37:52 la gnome-keyring-daemon[1510]: couldn't access control socket: /run/user/1001/keyring/control: No such file or directory

I have a VM KALI machine on ESXI v6 virtual, I log there using an SSH tunnel made in putty. I log via RDP in windows10. It let?s me to enter the credentials, but both my user nor the root cannot get further. After sending the credentials the screen goes black and it says that "Oh no! Something has gone wrong..."

Which logs could I investigate further?

If I cat all logs and grep "keyring" I get:

Aug 14 18:11:57 pkali09 gnome-keyring-d[18310]: couldn't access control socket: /run/user/1001/keyring/control: No such file or directory
Aug 14 18:11:58 pkali09 gnome-keyring-ssh.desktop[18396]: SSH_AUTH_SOCK=/run/user/1001/keyring/ssh
Aug 14 18:11:58 pkali09 gnome-keyring-d[18310]: The Secret Service was already initialized
Aug 14 18:11:58 pkali09 gnome-keyring-secrets.desktop[18398]: SSH_AUTH_SOCK=/run/user/1001/keyring/ssh
Aug 14 18:11:58 pkali09 gnome-keyring-pkcs11.desktop[18399]: SSH_AUTH_SOCK=/run/user/1001/keyring/ssh
Aug 14 18:12:56 pkali09 gnome-keyring-d[18921]: couldn't access control socket: /run/user/0/keyring/control: No such file or directory
Aug 14 18:12:57 pkali09 gnome-keyring-d[18921]: The Secret Service was already initialized
Aug 14 18:12:57 pkali09 gnome-keyring-secrets.desktop[18982]: SSH_AUTH_SOCK=/run/user/0/keyring/ssh
Aug 14 18:12:57 pkali09 gnome-keyring-ssh.desktop[18980]: SSH_AUTH_SOCK=/run/user/0/keyring/ssh
Aug 14 18:12:57 pkali09 gnome-keyring-pkcs11.desktop[18984]: SSH_AUTH_SOCK=/run/user/0/keyring/ssh
Aug 14 18:20:44 pkali09 org.freedesktop.secrets[19503]: GNOME_KEYRING_CONTROL=/root/.cache/keyring-H60EP0
Aug 14 18:20:45 pkali09 gnome-keyring-ssh.desktop[19541]: GNOME_KEYRING_CONTROL=/root/.cache/keyring-H60EP0
Aug 14 18:20:45 pkali09 gnome-keyring-ssh.desktop[19541]: SSH_AUTH_SOCK=/root/.cache/keyring-H60EP0/ssh
Aug 14 18:20:45 pkali09 gnome-keyring-pkcs11.desktop[19546]: GNOME_KEYRING_CONTROL=/root/.cache/keyring-H60EP0
Aug 14 18:20:45 pkali09 gnome-keyring-pkcs11.desktop[19546]: SSH_AUTH_SOCK=/root/.cache/keyring-H60EP0/ssh
Aug 14 18:20:45 pkali09 gnome-keyring-secrets.desktop[19543]: GNOME_KEYRING_CONTROL=/root/.cache/keyring-H60EP0
Aug 14 18:20:45 pkali09 gnome-keyring-secrets.desktop[19543]: SSH_AUTH_SOCK=/root/.cache/keyring-H60EP0/ssh
Aug 14 18:20:45 pkali09 gnome-keyring-d[19503]: The Secret Service was already initialized
Aug 14 18:27:44 pkali09 gnome-keyring-d[20234]: couldn't access control socket: /run/user/0/keyring/control: No such file or directory
Aug 14 18:27:44 pkali09 gnome-keyring-ssh.desktop[20288]: SSH_AUTH_SOCK=/run/user/0/keyring/ssh
Aug 14 18:27:44 pkali09 gnome-keyring-d[20234]: The Secret Service was already initialized
Aug 14 18:27:44 pkali09 gnome-keyring-secrets.desktop[20290]: SSH_AUTH_SOCK=/run/user/0/keyring/ssh
Aug 14 18:27:44 pkali09 gnome-keyring-pkcs11.desktop[20291]: SSH_AUTH_SOCK=/run/user/0/keyring/ssh


The logs also say:
[20200814-07:39:29] [ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied

the file is a softlink:
lrwxrwxrwx 1 root root 38 Oct 12 2018 /etc/xrdp/key.pem -> /etc/ssl/private/ssl-cert-snakeoil.key

-rw-r----- 1 root ssl-cert 1704 Aug 21 2018 ssl-cert-snakeoil.key
which probably belongs to a cert. in ../certs folder:
-rw-r--r-- 1 root root 1013 Aug 21 2018 /etc/ssl/certs/ssl-cert-snakeoil.pem
This cert. is a self signed "CN=kali" certificate recently autogenerated.


So I dont understand why there is the permission denied message.