Trying to do smart card authentication

330 views
Skip to first unread message

Orion Poplawski

unread,
Jan 19, 2018, 4:53:34 PM1/19/18
to rdesktop User Discussion/Support
I'm trying to figure out how to do smart card authentication with the latest git snapshot of rdesktop and not having much luck.

If I do:

# rdesktop -v -i -r scard host
Autoselecting keyboard map 'en-us' from locale
Smart card PIN:
Core(warning): iso_connect(), missing smartcard information for SSO, disabling CredSSP
Connecting to server using SSL...
Failed to connect, CredSSP required by server.

I've seen references to using various -o sc-* options, and if I set one I get a bit farther:

# rdesktop -v -i -r scard -o sc-container-name=<user> <host>
Autoselecting keyboard map 'en-us' from locale
Smart card PIN:
Connecting to server using NLA...
Connection established using CredSSP.
Remote desktop does not support colour depth 24; falling back to 32
Connection successful

but in the remote desktop window I get:

Other user
The requested key container does not exist on the smart card.

I'm using a YubiKey 4.

- Orion Poplawski

Orion Poplawski

unread,
May 23, 2018, 5:29:18 PM5/23/18
to rdesktop User Discussion/Support
So this seems to mostly work:

rdesktop -r scard -i -o sc-csp-name="Microsoft Base Smart Card Crypto Provider" -u user fqdn

but it is flaky.
Reply all
Reply to author
Forward
0 new messages