Re: Single sign on / Kerberos

Henrik Andersson <[email protected]> Mon, 26 May 2014 11:22:20 +0200
Newsgroups gmane.network.rdesktop.user
Organization Cendio AB
Message-ID <[email protected]>
> Hello,
> 
> Sorry but I don't get your answer :
> -it's working as expected from a Windows 7 client computer, without 
> providing any password.
> -we also use SSO for SSH kerberized access, we don't need to enter
> any password neither.
>

Microsoft delegates username / password from the credential cache (SSO)
but rdesktop don't have such credential cache so that's why you need
to provide username / password. See M$ credential cache as the
gnome-keyring.

On the other hand as Peter pointed out, kerberos itself chould make it
possible to do user authentication using ticket's as you SSH case, but
M$ did not implement this in RDP. Kerberos is only used for server
authentication so that the client can "safely" send it's user
credentials to the server.

See my request on the topic here:

http://social.msdn.microsoft.com/Forums/en-US/da074f0f-0887-4151-88ea-19a671ed91d9/is-it-possible-to-do-true-kerberos-sso-using-rdp-?forum=os_windowsprotocols

Kind Regards,

Henrik Andersson (Cendio AB)

------------------------------------------------------------------------------
The best possible search technologies are now affordable for all companies.
Download your FREE open source Enterprise Search Engine today!
Our experts will assist you in its installation for $59/mo, no commitment.
Test it for FREE on our Cloud platform anytime!
http://pubads.g.doubleclick.net/gampad/clk?id=145328191&iu=/4140/ostg.clktrk