Two-factor authentication for Windows Remote Desktop Services (RDS)
Find a file
2015-04-21 12:53:33 +02:00
radar-radius@7f7f1dddce radar-radius update 2015-04-21 12:53:33 +02:00
RDSFactor Challange-Response: Follow the RFC spec 2015-04-21 12:52:04 +02:00
RDSFactorConfig Remove compiled files from version control 2015-04-20 10:55:05 +02:00
RDSFactorWeb/RDWeb/Pages Challange-Response: Follow the RFC spec 2015-04-21 12:52:04 +02:00
.gitignore Ignoring 2015-04-20 10:55:21 +02:00
.gitmodules Removed the bundled radar-radius. Added the original as submodule 2015-04-10 11:59:18 +02:00
install-web.bat Remove compiled files from version control 2015-04-20 10:55:05 +02:00
LICENSE Create LICENSE 2015-04-10 15:31:20 +02:00
README.md Update README.md 2015-04-20 12:04:22 +02:00

RDSFactor

Two-factor authentication for Remote Desktop Services (RDS)

http://www.isager.dk/is/CICRadarR/SMStokenforWindows2012RDGateway.aspx

Prerequisites

An RDS setup. The minimal RDS setup for use with RDSFactor consist of two servers:

  • Active Directory; and
  • RDS with Gateway component enabled

Installation

RDWeb update

RDSfactor comes with a customized version of the RDWeb pages. To install these run:

$ install-web.bat

After install go and configure the application in IIS. RDWeb -> Pages -> Application Settings. You should configure the following settings:

  • RadiusServer (IP of the radius server)
  • RadiusSecret (Shared secret used for encryption of RADIUS traffic)

RADIUS server installation

The RADIUS server component can be installed on any server reacheable by both the RD Web and the RD Gateway. To install the server as a service run:

$ install-server.bat

TODO: NPS config, Web config

Acknowledgements

  • Claus Isager - for the proof of concept two factor RDS authentication
  • Nikolay Semov - for the core RADIUS server