RE: Kerberos support in Guacamole for RDP

2024-03-22 Thread Shawn Southern
Thanks for the quick response!

Is there a roadmap or timeline for migrating from FreeRDP 2.x to 3.x?

From: Nick Couchman 
Sent: Thursday, March 21, 2024 3:55 PM
To: user@guacamole.apache.org
Subject: Re: Kerberos support in Guacamole for RDP

On Thu, Mar 21, 2024 at 3:46 PM Shawn Southern 
mailto:sh...@southernfamily.ca>> wrote:
Where can I find information at where the project is with implementing Kerberos 
support with Guacamole and FreeRDP?


You've come to the right place.

It’s a best practice to eliminate NTLM, and NTLM is officially being deprecated 
and eventually removed from Windows anyway, so we’re building our roadmap to 
completely eliminate NTLM from our infrastructure.+  RDP works well without 
NTLM, but things like Guacamole still apparently need it.


Yes, we need to do it; however, I believe this depends on also adding support 
for FreeRDP 3.x, because I do not believe that FreeRDP 2.x includes Kerberos 
support (if it does, it's beta/unstable). I suspect that, after FreeRDP 3 
support is added, enabling Kerberos support in Guacamole will be (relatively) 
easy.

-Nick


Re: Kerberos support in Guacamole for RDP

2024-03-21 Thread Nick Couchman
On Thu, Mar 21, 2024 at 3:46 PM Shawn Southern 
wrote:

> Where can I find information at where the project is with implementing
> Kerberos support with Guacamole and FreeRDP?
>
>
>

You've come to the right place.


> It’s a best practice to eliminate NTLM, and NTLM is officially being
> deprecated and eventually removed from Windows anyway, so we’re building
> our roadmap to completely eliminate NTLM from our infrastructure.+  RDP
> works well without NTLM, but things like Guacamole still apparently need it.
>
>
>

Yes, we need to do it; however, I believe this depends on also adding
support for FreeRDP 3.x, because I do not believe that FreeRDP 2.x includes
Kerberos support (if it does, it's beta/unstable). I suspect that, after
FreeRDP 3 support is added, enabling Kerberos support in Guacamole will be
(relatively) easy.

-Nick

>


Kerberos support in Guacamole for RDP

2024-03-21 Thread Shawn Southern
Where can I find information at where the project is with implementing Kerberos 
support with Guacamole and FreeRDP?

It's a best practice to eliminate NTLM, and NTLM is officially being deprecated 
and eventually removed from Windows anyway, so we're building our roadmap to 
completely eliminate NTLM from our infrastructure.+  RDP works well without 
NTLM, but things like Guacamole still apparently need it.

I've searched many times to try to find an answer to this, including the 
mailing list archives and have not had any luck.

Thanks!