Howto use the eToken to log in to a Windows Terminal Server

Coming with the new source code of http://www.rdesktop.org/ rdesktop now supports smartcards. Thus you can also use your eToken to login from a linux client to a Windows Terminal Server.

assumptions

We assume, you or your company set up the Windows Terminal Server this way, that smartcard logon is possible that you enrolled the user certificates (certificate template smartcard logon) to your eToken.

i.e. Smartcard logon to the Terminal Server works fine from the Windows XP box of your collegue ;-)

getting it

So go and get the latest sources of rdesktop via cvs and configure and compile it at least with the flag

  configure --enable-smartcard

Roughly -- that is all.

either or

In fact you now can choose, if you want to use opensc or the Aladdin middleware for accessing the eToken.

For eTokens supported by opensc/openct, you can just use openct and pcsc-lite.

If you got some newer eRokens, that are not supported by opensc yet, you will use the eToken middleware as described in the HowTos/eToken_on_Linux.

start it

Now you should be able to connect to your terminal server by starting

   rdesktop -r scard my.terminal.server

you will be prompted for the PIN of your eToken.

It is also possible to connect to a second terminal server from within the first one.

Hardware

The eTokenPro 16K does not work very well.

An eTokenNG OTP with CardOS 4.20 works very fine and fast.

missing

when having connected to your terminal server your eTokenPro USB will be identified as eToken Smartcard.

required downloads

The rdesktop sources newer than 1.5.0:

http://sourceforge.net/cvs/?group_id=24366

HowTos/eToken_and_rdesktop (last edited 2008-09-12 12:59:36 by localhost)