RDP Kerberos authentication

Hello

I'm sorry to hear about the problem. Your logs confirm that only NLTM is being attempted.

We ship our own SSP module to enable kerberos on platforms other than Windows. In the settings for one of your RDP sessions, can you switch to the "authentication" tab and under "SSPI" change the "SSPI Module" to "Portable".



You can also explicitly select kerberos for the authentication package to skip negotiation.

I believe it should work, but if you try that and still experience issues, let me know. Let me know also if something isn't clear.

Thanks and kind regards,

Richard thanks for your response, after the changes the problem persists, this is my RDP configuration:



I have create a new RDP profile and set up the SSPI to portable and also got the same error message, attach is the log file that i think is the same than before.

Regards

Hello

Thanks for the follow up. The log is actually different; we're attempting kerberos but not finding the KDC. We don't use the information in the krb5 configuration but will try to locate the server using DNS SRV records.

So, as a next step, let's make sure this actually works and then drill into why the KDC cannot be found.

You can try setting KDC detection method to "Explicit" and then providing the server URL in the next field; e.g. tcp://my-domain-dc.my-domain.com:88 (I don't think you need to be explicit with the port number unless it's not standard, but for now include it anyway).

Let me know if that unblocks the connection. If so we can look further at why the KDC can't be resolved automatically.

Please let me know if something isn't clear

Best regards,

Hey Richard it work just fine doing a declaration like tcp://my-domain-dc.my-domain.com:88, thank you very much for your support.
Now to have some fun with my RDM for macOS :)

Kind regards

Hello

I'm glad that's working for you. If you're interested in seeing why the automatic KDC detection isn't working, please try running the following command on your terminal and send me the output:

dig {realm}.{tld} srv

For example: `dig mydomain.com srv`

Please let me know any further questions or comments

Kind regards,