Hi,
I've tried a kerberos-enabled build of freerdp2; it didn't actually work. I
asked the freerdp people in #freerdp on irc.oftc.net and they said to use
FreeRDP3:
14:49 -> hi, I'm trying to use kerberos authentication to connect to a Windows
server using xfreerdp (compiled with gssapi support); I can see it request a
kerberos ticket successfully, but then authentication fails with
"[ERROR][com.winpr.sspi.Kerberos] - Init GSS security context failed : can't
use Kerberos" and "[WARN][com.winpr.sspi] - InitializeSecurityContextA status
SEC_E_INTERNAL_ERROR [0x80090304]" (also "NLA begin failed") -- what could be
wrong?
14:50 < hardening2[m]> switch to FreeRDP3 (master)
14:51 < hardening2[m]> it's not working with freerdp2
Since FreeRDP3 appears to be in late beta I think it would already be
appropriate to include it in sid.
Getting the current packaging to work with it doesn't look too difficult, only
some hardwired 2s need to be changed to 3s, and there is this bit in
debian/rules:
sed -E -i \
-e "s$(xSEDx)$${o}=[^=]+=\. $(xSEDx)$(xSEDx)g;" \
-e "s$(xSEDx) $${o}=[^=]+=\.$(xSEDx)$(xSEDx)g;" \
obj-$(DEB_HOST_GNU_TYPE)/*/*/buildflags.h
obj-$(DEB_HOST_GNU_TYPE)/*/*/*/buildflags.h
(There are several buildflags.h files now.)
András
--
To err is human; to forgive, infrequent.
