Re: Single sign on / Kerberos
Henrik Andersson <[email protected]> Mon, 26 May 2014 11:22:20 +0200
| Newsgroups | gmane.network.rdesktop.user |
|---|---|
| Organization | Cendio AB |
| Message-ID | <[email protected]> |
> Hello, > > Sorry but I don't get your answer : > -it's working as expected from a Windows 7 client computer, without > providing any password. > -we also use SSO for SSH kerberized access, we don't need to enter > any password neither. > Microsoft delegates username / password from the credential cache (SSO) but rdesktop don't have such credential cache so that's why you need to provide username / password. See M$ credential cache as the gnome-keyring. On the other hand as Peter pointed out, kerberos itself chould make it possible to do user authentication using ticket's as you SSH case, but M$ did not implement this in RDP. Kerberos is only used for server authentication so that the client can "safely" send it's user credentials to the server. See my request on the topic here: http://social.msdn.microsoft.com/Forums/en-US/da074f0f-0887-4151-88ea-19a671ed91d9/is-it-possible-to-do-true-kerberos-sso-using-rdp-?forum=os_windowsprotocols Kind Regards, Henrik Andersson (Cendio AB) ------------------------------------------------------------------------------ The best possible search technologies are now affordable for all companies. Download your FREE open source Enterprise Search Engine today! Our experts will assist you in its installation for $59/mo, no commitment. Test it for FREE on our Cloud platform anytime! http://pubads.g.doubleclick.net/gampad/clk?id=145328191&iu=/4140/ostg.clktrk