search

citronneur / rdpy

Remote Desktop Protocol in Twisted Python
GNU General Public License v3.0
1.69k stars 546 forks source link

NLA security #28

Closed ciberx closed 9 years ago

ciberx commented 9 years ago

Why in NLA Security level connection (with -n key), credetentials are not asks (as on attached picture) before connect and then this session are closed? image

citronneur commented 9 years ago

In fact this windows is a window from credential provider of windows. We not call it. You need to provide throught command line arguments your credentials. I have to add a warning or an equivalent prompt ok.

Sylvain

ciberx commented 9 years ago

Ok, but why in direct connection this window appear?

citronneur commented 9 years ago

Because nla man in the middle throught credssp is not possible. So in server side rdpy ask classic ssl connection without nla. And in client side it can use nla. In RDP it's the server which choose the protocol! RDPY choose ssl as server and nla for client. But need to provide credentials. I keep this bug open.

obeleh commented 8 years ago

I'm sorry if this is a stupid question. Can you explain why it is not possible? Why would it not be possible to start a NLA server with RDPY?

armin884 commented 8 years ago

@obeleh look here https://github.com/citronneur/rdpy/issues/39 But my question is even if NLA is not possible how does the client decide to use CredSSP or not? Does rdpy support CredSSP ? I'm still looking for a way to get that security prompt before connecting to server...