rdesktop mga5 credspp error when conncting to win7

[wintpe]

just so you guys have it on your radar
osoft
ive updated

https://bugs.mageia.org/show_bug.cgi?id=13526

with details of a fix to this issue.

it seems rdesktop credspp is not working , there is a similar topic of discussion by one of the maintainers on the microsoft and google forums.

I use this to connect to work.

mageia 3 still works OK, which i have on my rdesktop machine at home.

however the newer version included with mga5 fails with.

credSPP error kerberos ticket not initialized.

recompiling rdesktop 1.8.3 with --disable-credSPP fixes it. ( or is a workaround )

regards peter

[doktor5000]

Is there no runtime switch for that?

[wintpe]

i had hoped so, correct me if im wrong, but i cant see it, and if you read the thread where such an option was proposed.
the author suggested that further analysis should be taken , of which there was no follow up.

http://sourceforge.net/p/rdesktop/mailm ... 7:50_2012/

regards peter

[doktor5000]

Mhmm, just searched for "rdesktop disable credspp" and stopped after a few seconds - can of worms.
FWIW, at work for those servers (usually 2008r2 and later or 2008 with hardened security settings) and where rdesktop does not work,
the other alternative is xfreerdp (package is called freerdp) which has a few more options regarding logon, certificates and especially to disable NLA.

Maybe you can use that as alternative in the meantime.

Also FWIW, the related rdesktop bug to the mail thread you quoted has a patch attached to add the commandline switch:
http://sourceforge.net/p/rdesktop/bugs/360/ where the author also implemented fallback as the real solution. But the patch might still be worth a try ...

[doktor5000]

One more: maybe your issue stems from https://www.cendio.com/bugzilla/show_bug.cgi?id=4705 which stems from https://www.cendio.com/bugzilla/show_bug.cgi?id=2571 where that CredSSP feature was implemented.

EDIT: Seems that error in the OP is a clear case of "works as designed" according to http://sourceforge.net/p/rdesktop/support-requests/198/ and http://sourceforge.net/p/rdesktop/support-requests/207/

[wintpe]

the only problem with this , even if it works as intended, is that

1:windows XP does not have a problem with it, but does not support NLM

2:windows 7 works no problem.

3: older versions of rdesktop work without problem.

4: no opportunity to get the rdesktop client to initialize a kerberos ticket from the active directory server
as im coming in from home over a restricted and locked down vpn, that only allows the rdesktop protocol in.

clearly when CredSSP is disabled this works without error.

so irrespective of works as designed, its broken what did work, and still works for prior versions, and windows XP/7
it does not matter that Henrick is technically right about the implementation.

clearly NOT a problem that mageia teams are responsible for, however the bug was raised by another mageia user experiencing the same, and this is a forum for feeding back issues and workarounds for the beta and RC release.

regards peter