aardwolf icon indicating copy to clipboard operation
aardwolf copied to clipboard

Kerberos broken ?

Open mpgn opened this issue 5 months ago • 1 comments

Hello,

I feel like kerberos auth is broken, i try the most simple script:

import asyncio
from aardwolf.commons.factory import RDPConnectionFactory
from aardwolf.commons.iosettings import RDPIOSettings

async def check_rdp_kerberos(hostname, username, password, domain, port=3389, dc_ip=None, timeout=10):
    """Check if RDP Kerberos login works using URL format"""
    connection = None
    
    rdp_url = f'rdp+kerberos-password://{domain}\\{username}:{password}@{hostname}:{port}/?dc={dc_ip}'

    # Configure minimal RDP settings
    iosettings = RDPIOSettings()
    iosettings.channels = []
    iosettings.clipboard_use_pyperclip = False
    
    # Create connection factory and connect
    factory = RDPConnectionFactory.from_url(rdp_url, iosettings)
    connection = factory.get_connection(iosettings)
    
    success, error = await asyncio.wait_for(connection.connect(), timeout=timeout)
    
    if error is None:
        print("✅ Kerberos login successful")
        return True
    else:
        print(f"❌ Login failed: {error}")
        return False
            

if __name__ == "__main__":
    # Test configuration
    HOSTNAME = 'dc01.gotham.city'
    USERNAME = 'Administrator'
    PASSWORD = 'October2022'
    DOMAIN = 'gotham.city'
    DC_IP = '192.168.231.150'  # Optional
    
    asyncio.run(check_rdp_kerberos(HOSTNAME, USERNAME, PASSWORD, DOMAIN, dc_ip=DC_IP))

If y replace rdp+kerberos-password by rdp+ntlm-password it's working

Image

mpgn avatar Jul 07 '25 22:07 mpgn

More info, it's working on a windows server 2022 but not on a windows server 2025

mpgn avatar Jul 13 '25 21:07 mpgn