[rdesktop-devel] [ rdesktop-Bugs-3589086 ] credssp + kerberos - cannot connect to misconfigured TSs

[SourceForge.net <no...@so...>]

Bugs item #3589086, was opened at 2012-11-21 23:59
Message generated for change (Comment added) made by hean01
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=381347&aid=3589086&group_id=24366

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: Authentication
Group: None
Status: Open
Resolution: None
Priority: 5
Private: No
Submitted By: Jarosław (Jarek) Polok ()
>Assigned to: Henrik Andersson (hean01)
Summary: credssp + kerberos - cannot connect to misconfigured TSs

Initial Comment:
Hello Devs !

With current rdesktop SVN trunk I have problems connecting to some (misconfigured) Terminal Servers: these servers advertise CredSSP + Kerberos but do not have proper Kerberos identities (ie: TERMSERV/server.domain@REALM keys have not been created)

rdesktop fails with:

# rdesktop terminal.server.domain
Autoselected keyboard map en-us
ERROR: CredSSP: Initialize failed, do you have correct kerberos tgt initialized ?
ERROR: GSS error [0:13:0]: CredSSP: SPNEGO negotiation failed.
ERROR:  - Unspecified GSS failure.  Minor code may provide more information

Proposed patch adds an '-Z' command line option permitting disabling CredSSP at run time.

Please consider including this patch in rdesktop.

Best Regards

Jarek


----------------------------------------------------------------------

>Comment By: Henrik Andersson (hean01)
Date: 2012-11-22 00:37

Message:
Hi Jarek,

I wonder if this is the right approach, could you please verify how M$
client behaves when
connecting to the misconfigured TS servers ?

Regards,

Henrik Andersson

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=381347&aid=3589086&group_id=24366