Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Is there a way to use rdesktop or another Linux client to connect to a server that requires Network Level Authentication?

From Windows Server 2008 R2 -- Control Panel -- System And Security -- System -- Allow Remote Access there is an option that says "Allow connections only from computers running Remote Desktop with Network Level Authentication". So with this enabled I can con not connect from Linux. I can connect from XP but you need SP3 and I had to edit a couple of things in the registry for it to work.

share|improve this question
add comment

3 Answers 3

up vote 11 down vote accepted

FreeRDP (a spin-off from rdesktop) supports this in recent versions.

share|improve this answer
    
I did a git pull from the stable repo this morning, and found it had NLA support now. –  sysadmin1138 Mar 2 '11 at 18:07
    
It works very well on Ubuntu 13.10. I too pulled from the repository on github. Made a directory called build inside the root directory. Did a cd into build . Ran a "cmake .." followed by a "make" then a "make install" . I was then able to seemlessly rdp using a command " /usr/local/bin/xfreerdp -u hari.lastname 10.0.150.1" It worked flawlessly with the Network Level authentication. –  harijay Jan 29 at 21:41
add comment

Sadly, I dont know if you are going to have much luck. I had to disable NLA to get our linux thinclients to connect when I was setting this up a year ago as I could not find any support for it in linux

Looking on sourceforge for rdesktop I see a feature request for it that is still open and some posts from 2009 with people asking for support.

http://sourceforge.net/tracker/index.php?func=detail&aid=1773895&group_id=24366&atid=381350

share|improve this answer
    
+1, NLA only works with MSTSC 6+ on Win 6.0+ –  Chris S Jun 28 '10 at 17:41
2  
+1. Agree, it isn't supported. Also keep in mind that rdesktop will not support redirection by a connection broker. All round rdesktop is pretty broke when combined with windows 2008 –  Zoredache Jun 28 '10 at 18:12
    
Yes. The amount of pain being felt by the 'administering windows from linux' crowd is getting to the point that someone may actually Do Something About It. –  sysadmin1138 Jun 28 '10 at 18:15
    
@sysadmin1138 It's also keeping a lot of people on XP/Server 2003; Microsoft don't realise that they're losing sales by changing their technologies. –  Andrew Jun 29 '10 at 0:42
    
@Andrew: are you saying Microsoft is losing sales by making its products more secure? If Linux can't keep up with Windows is not a Microsoft issue. Basically it is as if a Windows sysadmin would ask to use telnet instead SSH to manage a server because Windows has no built-in SSH client. –  ldsandon Sep 15 '11 at 15:18
show 2 more comments

rdesktop v1.7.0 has various fixes (probably the same as the recent FreeRDP version) for RDP 6.0 / RDP 6.1 (Windows 7 / 2008) compatibility problems.

See the changelog: http://sourceforge.net/projects/rdesktop/files/rdesktop/1.7.0/

  • Improved support for Windows 2008 Session Broker
  • Windows 2008 R2 / 7: Fix sound playback when not using other redirections
  • Windows 2008 R2 / 7: Solve disk redirection read-only issues
  • Windows 2008 R2 / 7: Solve issue with recursive deletion

But NLA (Network Level Authentication) is still not supported.

As for FreeRDP, only the release notes of v0.7.1 mentions it in the "work in progress" section: "Network Level Authentication is half-way done (TLS works, but NTLM authentication is partially implemented)"

Release notes of the following versions do not even mention it. Thus it's probably still in the same "half-way done" state.

share|improve this answer
1  
Anna Martynova reported in April that rdesktop v1.7.0 did not solve the problems of connecting through a Windows 2008 R2 session broker for her. See the message in the archive of the rdesktop-devel mailing list: sourceforge.net/mailarchive/message.php?msg_id=27907218 –  müzso Sep 16 '11 at 13:11
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.