From f95ff94a76b12d9bac4986698e1a42d1f0e37076 Mon Sep 17 00:00:00 2001 From: Bolke de Bruin <bolke@xs4all.nl> Date: Wed, 20 Mar 2024 11:23:34 +0100 Subject: [PATCH] Add note about mstsc --- README.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/README.md b/README.md index db7d8e5..8175ac2 100644 --- a/README.md +++ b/README.md @@ -145,6 +145,9 @@ but it also supports LDAP authentication or even Active Directory if you have th (for passwd), PAM requires that it is accessed as root. Therefore, the gateway comes with a small helper program called `rdpgw-auth` that is used to authenticate the user. This program needs to be run as root or setuid. +__NOTE__: The default windows client ``mstsc`` does not support basic auth. You will need to use a different client or +switch to OpenID Connect or Kerberos. + __NOTE__: Using PAM for passwd (i.e. LDAP is fine) within a container is not recommended. It is better to use OpenID Connect or Kerberos. If you do want to use it within a container you can choose to run the helper program outside the container and have the socket available within. Alternatively, you can mount all what is needed into the container but -- GitLab