Public bug reported:
The version of Remmina currently in Ubuntu 24.04 (v1.4.35) is unable to
perform initial RDP authentication via smartcard. While general
smartcard redirection works once a session is established, the initial
login handshake defaults to password-based NLA. This is because Remmina
does not expose or pass the xfreerdp /smartcard-logon flag to the
underlying libfreerdp library. Accessing modern secured Windows
Server/Desktop environments (specifically those with NLA and smartcard-
only policies) is impossible without this flag.
The fix provided in Upstream Merge Request 2680 introduces two new
configuration options to the RDP plugin:
Checkbox: "Use a smartcard for logon"
Password Textbox: "Smartcard PIN"
When enabled, Remmina configures libfreerdp to use the smartcard for the
initial authentication phase. If a suitable smartcard is not found, it
gracefully exits with an error: "Could not authenticate using
smartcard."
Upstream References:
1.4.42 Release: https://gitlab.com/Remmina/Remmina/-/merge_requests/2726
GitLab Issue: https://gitlab.com/Remmina/Remmina/-/issues/2953
Upstream Fix (Merged):
https://gitlab.com/Remmina/Remmina/-/merge_requests/2680
The fix is localized to the RDP plugin's UI and credential-handling
logic. It does not alter the core connection engine. Risk to existing
password-based users is negligible, as the new logic is only active when
the specific "Smartcard for logon" checkbox is toggled on.
This fix is released upstream in version 1.4.42 and needs to be
backported to the Remmina package in Ubuntu 24.04 to allow smart card
login for RDP with NLA.
** Affects: remmina (Ubuntu)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2142615
Title:
[SRU] Smartcard logon not possible in Remmina (RDP)
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/remmina/+bug/2142615/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
