zydronium/RDSFactor
1
0
Fork 0
mirror of https://github.com/jakobadam/RDSFactor.git synced 2025-06-02 02:28:18 +02:00
Code Issues Projects Releases Packages Wiki Activity
Two-factor authentication for Windows Remote Desktop Services (RDS)
72 commits 1 branch 4 tags 6.3 MiB
Find a file
Jakob Aarøe Dam 1a45e94501 Merge branch 'master' of https://github.com/jakobadam/RDSFactor
2015-04-28 13:18:39 +02:00
radar-radius@7f7f1dddce radar-radius update 2015-04-21 12:53:33 +02:00
server Logo on sms form. Fixes #8 2015-04-28 13:18:24 +02:00
web Logo on sms form. Fixes #8 2015-04-28 13:18:24 +02:00
.gitignore Rename: RDSFactorWeb -> web, RDSFactor -> server 2015-04-28 12:00:02 +02:00
.gitmodules Removed the bundled radar-radius. Added the original as submodule 2015-04-10 11:59:18 +02:00
install-server.bat Rename: RDSFactorWeb -> web, RDSFactor -> server 2015-04-28 12:00:02 +02:00
install-web.bat Rename: RDSFactorWeb -> web, RDSFactor -> server 2015-04-28 12:00:02 +02:00
LICENSE Create LICENSE 2015-04-10 15:31:20 +02:00
README.md Update README.md 2015-04-28 15:06:16 +02:00
restart-server.bat Bat scripts to uninstall, install and restart radius server 2015-04-28 08:46:22 +02:00
uninstall-server.bat Rename: RDSFactorWeb -> web, RDSFactor -> server 2015-04-28 12:00:02 +02:00

README.md

RDS Factor

Two-factor authentication for Remote Desktop Services (RDS).

RDS Factor consist of two components:

  • A server component that talks RADIUS with RD Web and the RD Gateway
  • An updated version of the RD Web pages that interacts with the RADIUS server and ask users to enter one-time passwords sent to their phone before letting them in.

Tested on Windows 2012 R2.

Prerequisites

An RDS setup. There are many options for orchestrating the RDS setup; the minimal RDS setup for use with RDS Factor consist of two servers:

  • Active Directory; and
  • RDS with Gateway component enabled

Installation

RD Web update

RDS factor comes with a customized version of the RD Web pages. To install these run:

$ install-web.bat

After install go and configure the application in IIS. RDWeb -> Pages -> Application Settings. You should configure the following settings:

  • RadiusServer (IP of the radius server)
  • RadiusSecret (Shared secret used for encryption of RADIUS traffic)

RADIUS server installation

The RADIUS server component can be installed on any server reacheable by both the RD Web and the RD Gateway. To install the server as a service run:

$ install-server.bat

After install go and configure the server. Open the file RDSFactor/server/bin/release/conf.ini for editing. You should configure the following settings:

  • LDAPDomain (IP of server to authenticate the user against and lookup phonenumber)
  • ADField (LDAP attribute to use for looking the user's phonenumber)
  • {client}={shared secret} should be added in the clients section

Note that the client should be the IP of RD Web, and the shared secret must match the value of RadiusSecret in the IIS.

To reload the configuration restart the RADIUS server service by running

$ restart-server.bat

Acknowledgements

  • Claus Isager - for the proof of concept two factor RDS authentication
  • Nikolay Semov - for the core RADIUS server