morgan/FreeRDP
1
0
Fork 0
mirror of https://github.com/morgan9e/FreeRDP synced 2026-04-14 08:24:16 +09:00
Code Issues Packages Projects Releases Wiki Activity

Support 'Restrict Credential Delegation' mode

Browse Source
This commit is contained in:
gpotter2
2025-04-22 19:32:51 +02:00
parent 32956261e4
commit c7dc736a3f
1 changed files with 20 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

28
libfreerdp/core/nego.c
View File

@@ -1258,18 +1258,30 @@ BOOL nego_process_negotiation_request(rdpNego* nego, wStream* s)
if (flags & REDIRECTED_AUTHENTICATION_MODE_REQUIRED)
{
if (!nego->RemoteCredsGuardSupported)
{
WLog_Print(nego->log, WLOG_ERROR,
"RDP_NEG_REQ::flags REDIRECTED_AUTHENTICATION_MODE_REQUIRED but disabled");
return FALSE;
}
else
if (nego->RemoteCredsGuardSupported)
{
WLog_Print(nego->log, WLOG_INFO,
"RDP_NEG_REQ::flags REDIRECTED_AUTHENTICATION_MODE_REQUIRED");
nego->RemoteCredsGuardActive = TRUE;
}
else
{
/* If both RESTRICTED_ADMIN_MODE_REQUIRED and REDIRECTED_AUTHENTICATION_MODE_REQUIRED
* are set, it means one or the other. In this case, don't fail if Remote Guard isn't
* available. */
if (flags & RESTRICTED_ADMIN_MODE_REQUIRED)
{
WLog_Print(nego->log, WLOG_INFO,
"RDP_NEG_REQ::flags REDIRECTED_AUTHENTICATION_MODE_REQUIRED ignored.");
}
else
{
WLog_Print(
nego->log, WLOG_ERROR,
"RDP_NEG_REQ::flags REDIRECTED_AUTHENTICATION_MODE_REQUIRED but disabled");
return FALSE;
}
}
nego->RemoteCredsGuardActive = TRUE;
}
Stream_Read_UINT16(s, length);