Re: [rdesktop-users] Single sign on / Kerberos

[Vincent M. <vmi...@an...>]

Thank you for explanation, it's now clear.

If M$ do so, and if that's not stupid regarding security, is there any 
chance rdesktop can mimic this behaviour using gnome-keyring ? (mine is 
also unlocked on session start, so everything is keeped synced ).

Vincent

On 05/26/2014 11:22 AM, Henrik Andersson wrote:
>> Hello,
>>
>> Sorry but I don't get your answer :
>> -it's working as expected from a Windows 7 client computer, without
>> providing any password.
>> -we also use SSO for SSH kerberized access, we don't need to enter
>> any password neither.
>>
> Microsoft delegates username / password from the credential cache (SSO)
> but rdesktop don't have such credential cache so that's why you need
> to provide username / password. See M$ credential cache as the
> gnome-keyring.
>
> On the other hand as Peter pointed out, kerberos itself chould make it
> possible to do user authentication using ticket's as you SSH case, but
> M$ did not implement this in RDP. Kerberos is only used for server
> authentication so that the client can "safely" send it's user
> credentials to the server.
>
> See my request on the topic here:
>
> http://social.msdn.microsoft.com/Forums/en-US/da074f0f-0887-4151-88ea-19a671ed91d9/is-it-possible-to-do-true-kerberos-sso-using-rdp-?forum=os_windowsprotocols
>
> Kind Regards,
>
> Henrik Andersson (Cendio AB)
>
> ------------------------------------------------------------------------------
> The best possible search technologies are now affordable for all companies.
> Download your FREE open source Enterprise Search Engine today!
> Our experts will assist you in its installation for $59/mo, no commitment.
> Test it for FREE on our Cloud platform anytime!
> http://pubads.g.doubleclick.net/gampad/clk?id=145328191&iu=/4140/ostg.clktrk
> _______________________________________________
> rdesktop-users mailing list
> rde...@li...
> https://lists.sourceforge.net/lists/listinfo/rdesktop-users
>


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.