Commit Graph

53 Commits

Author SHA1 Message Date
Dries Mys
2f4e5edc13 Moved NTLM to rdpgw-auth to avoid accessing passwords in main program
NTLM tests added
NTLM licensing info added
Avoid logging NTLM messages as it may contain sensitive information
Renamed database authentication to NTLM as requested by bolkedebruin (see PR #109)
2024-04-21 18:21:58 +02:00
Dries Mys
8714a87d52 Support for NTLM authentication added
To support NTLM authentication, a database is added as an authentication source.
Currently, only the configuration file is supported as a database.
Database authentication supports Basic and NTLM authentication protcols.

ServerConfig.BasicAuthEnabled renamed to LocalEnabled as Basic auth can be used with Database or Local.
2024-04-14 23:28:25 +02:00
Bolke de Bruin
9c6d056d69 Use jose v4 and make clearer and fix signing/encryption 2024-04-12 12:33:46 +02:00
Bolke de Bruin
2d9a368fc4 More details about the clients 2024-03-21 16:36:47 +01:00
Bolke de Bruin
f95ff94a76 Add note about mstsc 2024-03-20 11:23:34 +01:00
Bolke de Bruin
dc60652b83 Add docker compose options 2024-03-19 09:30:03 +01:00
Bolke de Bruin
1006f2bac9 Further details 2024-03-18 12:08:58 +01:00
Bolke de Bruin
32693f4197 Update images 2024-03-18 12:07:56 +01:00
Bolke de Bruin
43ac78bf57 Fixes 2024-03-18 11:36:55 +01:00
Bolke de Bruin
918f1b9e93 Clarify usage 2024-03-18 11:34:43 +01:00
Bolke de Bruin
43493e9548 Add more docs 2024-03-18 11:18:44 +01:00
Bolke de Bruin
5d92dcff8d Improve security docs 2024-03-16 14:59:04 +01:00
Jonathan Giroux (Koltes)
8e117ad083
Can omit username from rendered RDP (#83) 2024-03-15 12:30:22 +01:00
ryanblenis
f72613c2ba
Add BasicAuthTimeout setting versus static 5 seconds (#90) 2023-12-16 21:07:37 +01:00
bolkedebruin
769abae3ba
Update README.md
Kerberos is integrated
2023-04-17 07:25:43 +00:00
Ben Westover
b11eb0879e
Clarify build dependencies (#64) 2023-01-09 16:25:57 +01:00
bolkedebruin
236ddb4f9b
Update README.md
Some clarifications
2022-10-18 11:59:03 +02:00
Bolke de Bruin
2a2edaa21c Update readme with settings for tls 2022-08-31 09:52:55 +02:00
bolkedebruin
159cf56154
Update README.md 2022-08-25 12:41:56 +02:00
Bolke de Bruin
be77ffef12 Update readme 2022-08-25 12:29:07 +02:00
Bolke de Bruin
16c087d3bf Add config items and checks 2022-08-25 12:26:03 +02:00
Bolke de Bruin
8bc3e25f83 Allow host query parameter
the host query parameter can now be used
dependent on the `hostselection` config.
2022-08-17 10:49:21 +02:00
Bolke de Bruin
40d9cdda57 Make config more docker friendly 2022-08-16 14:54:31 +02:00
bolkedebruin
3ca05cbf16
Encryption keys need to be 32 characters 2022-08-14 20:21:55 +02:00
Bolke de Bruin
bdd0155dbb Switch to uppercase due to koanf 2022-08-11 14:43:30 +02:00
Bolke de Bruin
cd4182c1f5 Switch from viper to koanf 2022-08-11 13:58:24 +02:00
bolkedebruin
c8acaeff0e
Update README with docker badges 2022-08-09 10:52:21 +02:00
Bolke de Bruin
008ae03557 TLS updates 2022-08-04 21:49:59 +02:00
Bolke de Bruin
a548d2b30a Update doc on tls 2022-08-04 21:38:19 +02:00
Bolke de Bruin
188ce3586d Update build instructions 2021-05-17 11:42:18 +02:00
Bolke de Bruin
505eafdc1e Support setting send/receive buffers for the IP sockets 2020-09-11 22:01:40 +02:00
Bolke de Bruin
c6cfdc4dd4 Add support for splitting the username from the domain to enable smaller tokens 2020-08-31 21:07:58 +02:00
Bolke de Bruin
c66a2c9dd3 Change user templating and split domain name 2020-08-30 21:13:53 +02:00
Bolke de Bruin
6358eb1fa5 Add doc 2020-08-22 10:07:43 +02:00
Bolke de Bruin
27f2220a6e Make the use of a user token configurable 2020-08-22 10:04:31 +02:00
Bolke de Bruin
93c558786f Add description on endpoint 2020-08-19 14:44:53 +02:00
Bolke de Bruin
188f077da1 Work with go-jose to have encryption 2020-08-19 11:33:26 +02:00
bolkedebruin
007f93ed4a
Update README.md
Provide friendlier description on testing
2020-07-28 08:57:42 +02:00
Krzysztof Adamski
94acec7529
Add local docker test environment (#1)
* local docker test environment with keycloak and xrdp

Co-authored-by: Krzysztof Adamski <krzysztof.adamski@ing.com>
2020-07-28 08:49:58 +02:00
Bolke de Bruin
263312dc7b Fix check and use 256 bit 2020-07-25 21:27:03 +02:00
Bolke de Bruin
0b299619ff Make sure to validate the client's ip address 2020-07-25 21:00:58 +02:00
Bolke de Bruin
5fc75ef877 More security documentation 2020-07-25 19:57:27 +02:00
Bolke de Bruin
6d7eb94deb Add extra info in readme 2020-07-25 19:50:00 +02:00
Bolke de Bruin
5de3767e70 Use encryption for cookies 2020-07-24 16:22:13 +02:00
Bolke de Bruin
46e1e9b9f4 Switch to jwt tokens and allow some extra rdp settings 2020-07-24 11:54:43 +02:00
Bolke de Bruin
3ace4610fc Make sample config work with current state 2020-07-23 13:09:29 +02:00
Bolke de Bruin
55df8df3bc Further config improvements 2020-07-21 10:36:25 +02:00
Bolke de Bruin
097a2deca7 Improve config 2020-07-21 10:29:18 +02:00
Bolke de Bruin
7e62f39579 Minor doc update 2020-07-18 20:20:37 +02:00
Bolke de Bruin
89bf784a04 Allow caps settings 2020-07-18 20:16:32 +02:00