[root@localhost ~]# xfreerdp 192.168.1.107 -u username --sec nla
connected to 192.168.1.107:3389
Password:
SSL_read: Failure in SSL library (protocol error?)
Authentication failure, check credentials.
If credentials are valid, the NTLMSSP implementation may be to blame.
[root@localhost ~]# xfreerdp 192.168.1.107 -u username -p 123 -sec-nla
connected to 192.168.1.107:3389
Password:
SSL_read: Failure in SSL library (protocol error?)
Authentication failure, check credentials.
If credentials are valid, the NTLMSSP implementation may be to blame.
[root@localhost ~]# xfreerdp 192.168.1.107 -u username /cert-ignore
connected to 192.168.1.107:3389
Password:
SSL_read: Failure in SSL library (protocol error?)
Authentication failure, check credentials.
If credentials are valid, the NTLMSSP implementation may be to blame.
[root@localhost ~]# xfreerdp 192.168.1.107 -u username --no-tls
connected to 192.168.1.107:3389
Password:
SSL_read: Failure in SSL library (protocol error?)
Authentication failure, check credentials.
If credentials are valid, the NTLMSSP implementation may be to blame.
[root@localhost ~]# xfreerdp 192.168.1.107 -u username --no-nla
connected to 192.168.1.107:3389
Password:
SSL_read: Failure in SSL library (protocol error?)
Authentication failure, check credentials.
If credentials are valid, the NTLMSSP implementation may be to blame.
[root@localhost ~]# xfreerdp -u username --no-nla 192.168.1.107
connected to 192.168.1.107:3389
username是远程主机192.168.1.107的用户名，从以上过程可以看出来，最后一次尝试成功了。具体原因下面这个帖子回答了：
https://github.com/FreeRDP/FreeRDP/issues/2128
julianjm commented on May 31, 2016 ? edited
I had the same problem. It turns out that the order of the arguments is important:
Works: xfreerdp -u username -d domain rd.example.com
Doesn't work: xfreerdp rd.example.com -u username -d domain
Edited: better late than never. I obviously meant xfreerdp insted of rdesktop :(
dkwami commented on Aug 10, 2016
I thought the same thing, but changing the order of my arguments actually helped.
I've had the same problem going from ubuntu to windows server 2012 for a couple
of weeks. What finally worked for me was:
xfreerdp --sec nla --ignore-certificate -u username -d domain serverName
Thanks @julianjm!