SSO between Enterprise Client and ECS

[Steve92]

Hello,

I don’t find many info about how to get SSO between “Enterprise Client” and ECS… 🙁

“Enterprise Client” is on a Windows 11 PC (without admin rights).

ECS is on a RHEL9.4 server.

Authentication is done with a smartcard and a PIN or a user/password pair in an Active Directory.

ECS is connected to the same AD, I can get a ticket with kinit for my user/password.

How can I get SSO with this environment ?

= login to ECS without typing again user/password .

Any detailed documentation ?

Thanks!

Regards,

Steve.

 

 

[Guro]

hello

“Authentication is done with a smartcard and a PIN or a user/password pair in an Active Directory.

ECS is connected to the same AD, I can get a ticket with kinit for my user/password.”

We can recommend use kerberos authentication as client and server host in same ad domain.

You need enable kerberos authentication on server by edit /usr/NX/etc/server.cfg and update keys

#EnableNXKerberosAuthentication 0

to

EnableNXKerberosAuthentication 1

Please ensure that AD user is correctly seen on server host:

if commands: id ,  getent passwd | grep , su

correctly list/switch on user. more details for kerberos authentication might be check on https://kb.nomachine.com/DT07S00230

Thanks

[Author]

Posts