Start a new topic

Kerberos support question.

Hello! I was doing some searching and was not able to find a definitive answer. Is Kerberos supported in the latest version? Do you need to use FreeRDP for this functionality? Does this need to be configured during install or is it baked in now? If you could explain the current state of Kerberos support, it would be much appreciated. Thanks!


Hi John,


Royal TS has many areas and plugins which support all sorts of authentication. Can you please clarify where exactly you expect Kerberos support? You mentioned FreeRDP. So are you only referring to RDP sessions?


Regards,
Stefan

Hello, this would be for Microsoft RDP sessions. We are getting NTLM failures which I understand might be resolved if the authentication uses Kerberos? ( I am not an expert at this). I saw random forum posts from years ago mentioning kerberos support for RDP so I thought I would inquire. Thanks for any info. 

I see. Thanks for the details. This is actually a bit more complicated as it seems. The RDP ActiveX control is actually defaulting to Kerberos and falls back to NTLM. How and when the ActiveX decides to use NTLM is not always clear and can't really diagnosed. Unfortunately there's also no way to enforce Kerberos on the ActiveX (but if it falls back to NTLM for you it wouldn't work, probably).


If I remember correctly you can set the authentication method (Kerberos) using FreeRDP (using additional CLI argument). I'm not sure if it will "enforce" kerberos or only tell that kerberos should be preferred. You may have to try for yourself.

Thanks, can you point me in the direction of how to do that via command line? I tried searching for it but came up empty. I appreciate the information thus far!

Login or Signup to post a comment