Re: [rdesktop-users] Single sign on / Kerberos

[Vincent M. <vmi...@an...>]

Hello,

Sorry but I don't get your answer :
-it's working as expected from a Windows 7 client computer, without 
providing any password.
-we also use SSO for SSH kerberized access, we don't need to enter any 
password neither.

And I thought myself a kerberos ticket is used to login to remote 
Kerberized resources (SMB,HTTP, whatever) and forwardables tickets are 
meant to be used for remote login (SSH, redesktop, whatever).

Could you please give some explanations about your point ?

Vincent

On 05/26/2014 09:09 AM, Peter Astrand wrote:
> Microsoft didn't quite understand what Kerberos is about... The Kerberos
> ticket can only be used for creating a secure tunnel to the remote server.
> It cannot be used for actually logging in to Windows. You still need to
> use some other credential such as a password.
>
> Br,
> Peter
>
> On Fri, 23 May 2014, Vincent Miszczak wrote:
>
>> Hello,
>>
>> I often see "CredSSP + Kerberos" support for rdesktop, but I always have
>> to enter a password to remote desktop my Windows servers.
>> I have a correct Kerberos ticket (forwardable) and SSO is working from a
>> Windows 7 client machine, but I cannot SSO from my Fedora 20 machine.
>>
>> Is SSO supported ?
>>
>> Vincent
>>
>> -- 
>> This message has been scanned for viruses and
>> dangerous content by MailScanner, and is
>> believed to be clean.
>>
>>
>> ------------------------------------------------------------------------------
>> "Accelerate Dev Cycles with Automated Cross-Browser Testing - For FREE
>> Instantly run your Selenium tests across 300+ browser/OS combos.
>> Get unparalleled scalability from the best Selenium testing platform available
>> Simple to use. Nothing to install. Get started now for free."
>> http://p.sf.net/sfu/SauceLabs
>> _______________________________________________
>> rdesktop-users mailing list
>> rde...@li...
>> https://lists.sourceforge.net/lists/listinfo/rdesktop-users
>>
>
> ---
> Peter Astrand		ThinLinc Chief Developer
> Cendio AB		http://cendio.com
> Teknikringen 8		http://twitter.com/ThinLinc
> 583 30 Linkoping	http://facebook.com/ThinLinc
> Phone: +46-13-214600	http://google.com/+CendioThinLinc
>


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.