/usr/bin/freerdp-shadow-cli

[13:49:34:566] [2:00000002] [ERROR][com.winpr.commandline] - [CommandLineParseArgumentsA]: Failed at index 1 [<censored: build with -DWITH_DEBUG_UTILS_CMDLINE_DUMP=ON for details>]: Unexpected keyword
Usage: /usr/bin/freerdp-shadow-cli [options]

Notes: By default NLA security is active.
	In this mode a SAM database is required.
	Provide one with /sam-file:<file with path>
	else the default path /etc/FreeRDP/FreeRDP/SAM is used.
	If there is no existing SAM file authentication for all users will fail.

	If authentication against PAM is desired, start with -sec-nla (requires compiled in support for PAM)

Syntax:
    /flag (enables flag)
    /option:<value> (specifies option with value)
    +toggle -toggle (enables or disables toggle, where '/' is a synonym of '+')

    -auth (default:on)
	Clients must authenticate
    /bind-address:<bind-address>[,<another address>, ...]
	An address to bind to. Use '[<ipv6>]' for IPv6 addresses, e.g. '[::1]' for localhost
    +bitmap-compat (default:off)
	Limit BitmapUpdate to 1 rectangle (fixes broken windows 11 24H2 clients)
    /buildconfig
	Print the build configuration
    /ccache:<file>
	Kerberos host ccache file for NLA authentication
    -gfx (default:on)
	Allow GFX pipeline
    -gfx-avc420 (default:on)
	Allow GFX AVC420 codec
    -gfx-avc444 (default:on)
	Allow GFX AVC444 codec
    -gfx-planar (default:on)
	Allow GFX planar codec
    -gfx-progressive (default:on)
	Allow GFX progressive codec
    -gfx-rfx (default:on)
	Allow GFX RFX codec
    /help
	Print help
    /ipc-socket:<ipc-socket>
	Server IPC socket
    /keytab:<file>
	Kerberos keytab file for NLA authentication
    /log-filters:<tag>:<level>[,<tag>:<level>[,...]]
	Set logger filters, see wLog(7) for details
    /log-level:[OFF|FATAL|ERROR|WARN|INFO|DEBUG|TRACE]
	Set the default log level, see wLog(7) for details
    /max-connections:<number>
	maximum connections allowed to server, 0 to deactivate
    -may-interact (default:on)
	Clients may interact without prompt
    -may-view (default:on)
	Clients may view without prompt
    /monitors:<0,1,2...>
	Select or list monitors
    +mouse-relative (default:off)
	enable support for relative mouse events
    -nsc (default:on)
	Allow NSC codec
    /port:<number>
	Server port
    /rect:<x,y,w,h>
	Select rectangle within monitor to share
    +remote-guard (default:off)
	Remote credential guard
    -restricted-admin (default:on)
	Restricted Admin
    -rfx (default:on)
	Allow RFX surface bits
    /sam-file:<file>
	NTLM SAM file for NLA authentication
    /sec:<rdp|tls|nla|ext>
	force specific protocol security
    -sec-ext (default:on)
	nla extended protocol security
    -sec-nla (default:on)
	nla protocol security
    -sec-rdp (default:on)
	rdp protocol security
    -sec-tls (default:on)
	tls protocol security
    +server-side-cursor (default:off)
	hide mouse cursor in RDP client.
    /tls-secrets-file:<file>
	file where tls secrets shall be stored
    /version
	Print version
    /vmconnect
	Hyper-V console server (bind on vsock://1)