я обычно при первой установке ставлю так:
(yes | apt-get install xrdp && usermod -a -G tsusers твой_пользователь && yes | apt-get reinstall xrdp && systemctl enable xrdp && systemctl start xrdp && systemctl status xrdp)
Систему обновил. Эту суперскую команду запустил.
Пока эффект тот же.
login failed 4 display 0
= = =
[20190613-14:20:34] [DEBUG] Closed socket 11 (AF_INET 0.0.0.0:3389)
[20190613-14:21:30] [DEBUG] Testing if xrdp can listen on 0.0.0.0 port 3389.
[20190613-14:21:31] [DEBUG] Closed socket 7 (AF_INET 0.0.0.0:3389)
[20190613-14:21:32] [INFO ] starting xrdp with pid 864
[20190613-14:21:32] [INFO ] listening to port 3389 on 0.0.0.0
[20190613-14:37:01] [DEBUG] Closed socket 11 (AF_INET 0.0.0.0:3389)
[20190613-14:38:00] [DEBUG] Testing if xrdp can listen on 0.0.0.0 port 3389.
[20190613-14:38:01] [DEBUG] Closed socket 7 (AF_INET 0.0.0.0:3389)
[20190613-14:38:02] [INFO ] starting xrdp with pid 858
[20190613-14:38:02] [INFO ] listening to port 3389 on 0.0.0.0
[20190613-14:39:20] [INFO ] Socket 12: AF_INET connection received from 192.168.10.62 port 53585
[20190613-14:39:20] [DEBUG] Closed socket 12 (AF_INET 192.168.10.61:3389)
[20190613-14:39:20] [DEBUG] Closed socket 11 (AF_INET 0.0.0.0:3389)
[20190613-14:39:20] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20190613-14:39:20] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20190613-14:39:20] [WARN ] TLSv1.3 enabled by config, but not supported by system OpenSSL
[20190613-14:39:20] [DEBUG] TLSv1.2 enabled
[20190613-14:39:20] [DEBUG] Security layer: requested 11, selected 1
[20190613-14:39:20] [INFO ] connected client computer name: 1064C-HH-0
[20190613-14:39:20] [INFO ] adding channel item name rdpdr chan_id 1004 flags 0x80800000
[20190613-14:39:20] [INFO ] adding channel item name rdpsnd chan_id 1005 flags 0xc0000000
[20190613-14:39:20] [INFO ] adding channel item name cliprdr chan_id 1006 flags 0xc0a00000
[20190613-14:39:20] [INFO ] adding channel item name drdynvc chan_id 1007 flags 0xc0800000
[20190613-14:39:21] [INFO ] TLS connection established from 192.168.10.62 port 53585: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384
[20190613-14:39:21] [DEBUG] xrdp_00000727_wm_login_mode_event_00000001
[20190613-14:39:21] [INFO ] Loading keymap file /etc/xrdp/km-00000419.ini
[20190613-14:39:21] [WARN ] local keymap file for 0x00000419 found and doesn't match built in keymap, using local keymap file
[20190613-14:39:24] [DEBUG] xrdp_wm_log_msg: connecting to sesman ip 127.0.0.1 port 3350
[20190613-14:39:24] [INFO ] xrdp_wm_log_msg: sesman connect ok
[20190613-14:39:24] [DEBUG] xrdp_wm_log_msg: sending login info to session manager, please wait...
[20190613-14:39:24] [DEBUG] return value from xrdp_mm_connect 0
[20190613-14:39:26] [INFO ] xrdp_wm_log_msg: login failed for display 0
[20190613-14:39:26] [DEBUG] xrdp_mm_module_cleanup
[20190613-14:39:26] [DEBUG] Closed socket 18 (AF_INET 127.0.0.1:59562)
= = =
Файрвол, кстати, отключен. Думал он мешает. Ан нет...