This has been carried over from bug 4552, comment #1. We haven't been able to reproduce this internally, but the problem has occurred at a customer site and unfortunately we don't know why yet. The most sensible workaround is to make sure rdesktop doesn't find the kerberos ticket cache and therefore doesn't use CredSSP, for example by calling it thusly: KRB5CCNAME= tl-run-windesk
Relevant errors from xinit.log: The xinit.log is the same: Tue Jan 7 10:11:19 2014 Connections: accepted: 127.0.0.1::36658 SConnection: Client needs protocol version 3.8 SConnection: Client requests security type VeNCrypt(19) Stopping initial window manager... VNCSConnST: tl-shadow-notify: OpenAuthenticatedConnection VNCSConnST: Server default pixel format depth 24 (32bpp) little-endian rgb888 Done. Executing command for profile windows: ${TLPREFIX}/bin/tl-run-windesk Tue Jan 7 10:11:20 2014 VNCSConnST: Client pixel format depth 24 (32bpp) little-endian rgb888 warning: neither padsp nor esddsp available, sound will not be redirected lpstat: Connection refused Connecting to RDP server 10.10.228.32... Connection established using CredSSP. Connection error: The connection to the Remote Desktop failed with error 76 Running /opt/thinlinc/etc/xlogout.d/tl-kdestroy.sh See also issue 14854.
I found a corner case bug with license handling code, "an error indicates that everything is ok", which is fixed in upstream commit r1780 which might be the source for this bug.
Everything looks good after testing. Closing