Smartcards, DoD CAC and RDP with RDesktop 1.5.x

In continuing to integrate CAC into Linux, I went to the RDesktop SourceForge CVS website, followed the cvs download directions (using “rdesktop” as the modulename), and downloaded the latest version of rdesktop, which is supposed to have smartcard reader support. This piggybacks off of the installation of the CAC reader software in the previous post.

Once downloaded, cd to the rdesktop directory and do the following:

  1. Run the command “declare -x PKG_CONFIG_PATH=/usr/cac/lib/pkgconfig”
  2. “./configure –prefix=/usr/cac –enable-smartcard” – look for the line, “checking for PCSCLITE:” – it should say “yes” (thanks to the previous “declare” command)
  3. make && make install
  4. Run with “rdesktop -r scard <remote IP>:<remote port>

I was able to RDP over a VPN tunnel I established to a Windows machine I could test with, and confirmed that ActiveCard Gold utilities on the remote computer read and accepted my card certs from my local computer. Next, I was able to pass the certs to my (remote computer’s) Outlook e-mail client in order to send signed and encrypted messages.


8 Responses

  1. First off, thanks for the great how-to!
    Did you connect to the rdesktop CVS anonymously? I’ve tried anonymous for several days and always get ‘connection refused.’ Is there any other place to get the latest dev patches for rdesktop?

  2. RTM, I used the following commands:

    cvs login (press when prompted for a password)

    cvs -z3 co -P rdesktop

    I tested this before posting this comment, so it definitely works. The most current version was downloaded, and it looks like there are some recent bug fixes (use the web-based CVS browser to see what I mean).

    I do not know of any other sites, but I am sure they would come up on Google. Being that this is the primary development site, however, I still think this is your best bet.

    Thanks for stopping by, and hope this helps!

  3. symbolik, I know that I’m missing something, but the (current) cvs download of the 1.5 client doesn’t have a configure file. Is there some trick to compiling without it?


  4. Kevin – sorry, I don’t know. I would just download everything again, and Google if there is no configure file. Someone out there has probably found a way around this already.

  5. I have followed these directions and they worked for me. Thanks. But do you know how to integrate this recompiled rdesktop into tsclient so that the tsclient (with smart card support) can be used vs the command line rdesktop call?

  6. Woah! I’m really digging the template/theme of this website.

    It’s simple, yet effective. A lot of times it’s very difficult to get that
    “perfect balance” between superb usability and visual appeal.

    I must say that you’vedone a awesome job with this.
    In addition, thee blog loads sper quick for me on Safari.
    Outstanding Blog!

  7. Hello there I am so excited I found your website, I really found you by error,
    while I was searching on Google ffor something else, Anyhhow I am here now and would just likle to
    say cheers ffor a tremendous pot and a all round
    excitinbg blog (I also love the theme/design), I don’t have
    time to read through iit all at the minutge but I have bookmarked
    it and also included your RSS feeds, so when I have time I willl be back to read much more,
    Please do keep up thee great work.

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )


Connecting to %s

%d bloggers like this: