NLA security

[ciberx]

Why in NLA Security level connection (with -n key), credetentials are not asks (as on attached picture) before connect and then this session are closed?

[citronneur]

In fact this windows is a window from credential provider of windows. We not call it. You need to provide throught command line arguments your credentials. I have to add a warning or an equivalent prompt ok.

Sylvain

[ciberx]

Ok, but why in direct connection this window appear?

[citronneur]

Because nla man in the middle throught credssp is not possible. So in server side rdpy ask classic ssl connection without nla. And in client side it can use nla. In RDP it's the server which choose the protocol! RDPY choose ssl as server and nla for client. But need to provide credentials. I keep this bug open.

[obeleh]

I'm sorry if this is a stupid question. Can you explain why it is not possible? Why would it not be possible to start a NLA server with RDPY?

[armin884]

@obeleh look here #39
But my question is even if NLA is not possible how does the client decide to use CredSSP or not? Does rdpy support CredSSP ? I'm still looking for a way to get that security prompt before connecting to server...