AWS EC2 Ubuntu Disconnects and Tries to Get Password
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
⚙️ Check out my series on Automating Cybersecurity Metrics | Code.
🔒 Related Stories: Bugs | AWS Security | Secure Code | Ubuntu
💻 Free Content on Jobs in Cybersecurity | ✉️ Sign up for the Email List
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
I wrote about how I configured an AWS EC2 instance in these two posts so I can log into it with RDP in these posts:
Previously, I wrote about how I was getting an error where a login box pops up in certain circumstances. This post provides a bit more detail about the problem because I am finding this behavior a bit odd.
When I’m logged in and working, the EC2 instance will stop timing out for no reason. I check my traffic in Wireshark and only the EC2 instance connection is having problems, not other things on my network.
After that happens I try to log back in and get this error:
connecting to sesman ip 127.0.0.1 port 3350 — sending login info to session manager — failed for display 0.
Someone else was exploring this problem here:
The final conclusion is:
In my case, and with much time dispend, I was found a simple resolution when note broke login in register log file xrdp after 50 connection session display
You need to change in both sesmain.in and sesman.ini the field MaxSessions to a greater number than you already have. It seems that some sessions are not set freed in a proper way. Both files are in /etc/xrdp. You would need sudo privileges to edit them.
I did the above in order to get RDP to work as I wrote in one of the posts linked above. First of all, why is that required? Secondly, why is this happening only when the session disconnects? Interesting.
Where is it getting the password that it’s “sending” somewhere?
Wish I had more time to dig into this.
Follow for updates.
Teri Radichel | © 2nd Sight Lab 2023
About Teri Radichel:
~~~~~~~~~~~~~~~~~~~~
⭐️ Author: Cybersecurity Books
⭐️ Presentations: Presentations by Teri Radichel
⭐️ Recognition: SANS Award, AWS Security Hero, IANS Faculty
⭐️ Certifications: SANS ~ GSE 240
⭐️ Education: BA Business, Master of Software Engineering, Master of Infosec
⭐️ Company: Penetration Tests, Assessments, Phone Consulting ~ 2nd Sight LabNeed Help With Cybersecurity, Cloud, or Application Security?
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
🔒 Request a penetration test or security assessment
🔒 Schedule a consulting call
🔒 Cybersecurity Speaker for PresentationFollow for more stories like this:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
❤️ Sign Up my Medium Email List
❤️ Twitter: @teriradichel
❤️ LinkedIn: https://www.linkedin.com/in/teriradichel
❤️ Mastodon: @teriradichel@infosec.exchange
❤️ Facebook: 2nd Sight Lab
❤️ YouTube: @2ndsightlab