www.cendio.com
Bug 4552 - Support for Windows Server 2012
: Support for Windows Server 2012
Status: CLOSED FIXED
: ThinLinc
| rdesktop (deprecated)
: 3.2.0
: PC Unknown
: P2 Normal
: 4.3.0
Assigned To:
:
:
: 4075 4508 4581 4695 4702 4724 4964
: 4912
  Show dependency treegraph
 
Reported: 2013-03-04 13:25 by
Modified: 2014-10-09 13:55 (History)
Acceptance Criteria:


Attachments


Note

You need to log in before you can comment on or make changes to this bug.


Description From cendio 2013-03-04 13:25:16
At some point, we should officially support Windows Server 2012 as a RDP
server.
------- Comment #1 From cendio 2014-01-15 09:18:07 -------
We've had at least one report of rdesktop failing to connect to a Windows 2012
server every time. Recompiling rdesktop without CredSSP support made the
problem disappear.
------- Comment #2 From cendio 2014-01-20 16:24:32 -------
More info for the sake of completeness: simply making sure that rdesktop fails
to find the kerberos ticket cache is sufficient, i.e. running:

KRB5CCNAME= tl-run-windesk

also avoids the problem. This was tested using rdesktop_4.1.1post-4194. Can
also confirm that bug 4075, comment #4 appears to be true against Windows 2012.
------- Comment #3 From cendio 2014-01-21 11:00:02 -------
(In reply to comment #2)
> More info for the sake of completeness: simply making sure that rdesktop fails
> to find the kerberos ticket cache is sufficient, i.e. running:
> 
> KRB5CCNAME= tl-run-windesk
> 
> also avoids the problem. This was tested using rdesktop_4.1.1post-4194. Can
> also confirm that bug 4075, comment #4 appears to be true against Windows 2012.

Move to bug #4964.
------- Comment #4 From cendio 2014-06-23 09:57:50 -------
Extensively tested rdesktop against Windows 2012 Server (Non R2), test bed is
one DC and two RDS session hosts servers. Tests was also performed using RDP
remote admin service on DC.

- Sound
- TLS, CredSSP
- Local drive redirection
  - C -> S ~16 MB/s (1 GB file transfer)
  - S -> C ~13 MB/s (1 GB file transfer)
- Smart card redirection 
  - NetID
  - Sign / Verify / Encrypt / Decrypt of file
- Printer redirection
- Clipboard redirection
  - Primary Clipboard
  - Clipboard
- RDS Session broker

Everything works ok except for Session broker redirection using CredSSP, the
reason for this is that the redirection packet from server contains a IP
address instead of a FQDN which will make CSSP negotiation fail. This is a
issue either created by wrong configuration server side or by a bug. We have
seen this work as expected in another test setup (2012 R2).
------- Comment #5 From cendio 2014-09-08 12:24:56 -------
(In reply to comment #4)
> Everything works ok except for Session broker redirection using CredSSP, the
> reason for this is that the redirection packet from server contains a IP
> address instead of a FQDN which will make CSSP negotiation fail. This is a
> issue either created by wrong configuration server side or by a bug. We have
> seen this work as expected in another test setup (2012 R2).

This is a configuration issue.Ensure that client can perform a revers lookup of
the IP address and that the krb5.conf configuration parameter rdns=true is
configured.
------- Comment #6 From cendio 2014-09-08 12:54:49 -------
Commit 29328 adds 2012 and 2012 R2 to supported RDP servers, this commit also
includes a note about; smart card and seamless rdp is not supported on Windows
Server 2012 / 2012 R2.
------- Comment #7 From cendio 2014-09-08 12:57:21 -------
Commit 29329 clarifies what version tl-gina is working with.
------- Comment #8 From cendio 2014-09-08 13:07:41 -------
Commit 29330 adds notes about smart card redirection and Seamless RDP not
working with 2012 (R2)
------- Comment #9 From cendio 2014-09-08 13:10:43 -------
(In reply to comment #6)
> Commit 29328 adds 2012 and 2012 R2 to supported RDP servers, this commit also
> includes a note about; smart card and seamless rdp is not supported on Windows
> Server 2012 / 2012 R2.

Commit 29331 fixes two typos.
------- Comment #10 From cendio 2014-10-09 13:55:40 -------
Doc changes looks good. Other testing was already done as part of the bug.
Closing