How to disable credssp

[trent...@gmail.com]

Hi,

I have a high mem and cpu usage, and I'm not sure but I suspect that is a probem with credssp, I'm using rdekstop 1.8.3 and windows 2012r2.
How can I force rdesktop no negotiate without credssp without recompile source?

Thanks

[Henrik Andersson]

Hi,

>
> I have a high mem and cpu usage, and I'm not sure but I suspect that
> is a probem with credssp, I'm using rdekstop 1.8.3 and windows 2012r2.
>

That is a bit suspicious, could you provide more information, what CPU
and MEM usage are the rdesktop process using ?

I'm pretty sure it is unrelated to CredSSP, why do you think it is
related ?

> How can I force rdesktop no negotiate without credssp without
> recompile source?
>

CredSSP is only used if the following two requirements are fulfilled:

1. There is a kerberos ticket available on the client which is
integrated with the active directory of your windows
infrastructure.

2. Network Level Authentication (NLA) is enabled on the RDS session
host.

To authenticate without CredSSP disable NLA server side and force only
SSL or make sure there is no kerberos ticket available.


Kind Regards,

Henrik Andersson