Andy Dixon
50c0104d57
clients::rdp connects over any caller-dialled TCP stream (direct, proxy or SSH tunnel), upgrades to TLS and logs on with NLA (CredSSP/NTLM), optionally falling back to TLS-only logon for servers without NLA such as xrdp (credentials are passed so they log straight in). The server certificate is pinned through a caller check on its SHA256 fingerprint before any credentials are sent. The desktop decodes into the VNC client's RGBA framebuffer; input (IronRDP's scancode/Unicode/mouse operations), Display Control resizes and the deactivation-reactivation sequence run on the session thread. IronRDP's releases need three vendored patches (vendor/README.md): picky and sspi with their RustCrypto release-candidate pins relaxed so they share russh's stable versions (their own suites, 402 tests, pass against them), and ironrdp-session with two unreleased upstream bitmap fixes (#1486 stride, #1524 RDP6 orientation) without which xrdp desktops render sheared. Verified live against xrdp (scottyhardy/docker-remote-desktop): logon, full desktop rendering, keyboard and mouse input.
32 lines
1.3 KiB
C#
32 lines
1.3 KiB
C#
using CommandLine;
|
|
|
|
namespace AADJoin
|
|
{
|
|
public class Options
|
|
{
|
|
[Option('j', "join-new-device", Required = false, HelpText = "Join new device to the Azure AD")]
|
|
public bool JoinNewDevice { get; set; }
|
|
|
|
[Option('c', "client-p2p-cert", Required = false, HelpText = "Obtain P2P certificate for the client authorization")]
|
|
public bool ClientP2PCert { get; set; }
|
|
|
|
[Option('s', "server-p2p-cert", Required = false, HelpText = "Obtain P2P certificate for the server authorization")]
|
|
public bool ServerP2PCert { get; set; }
|
|
|
|
[Option('d', "domain", Required = true, HelpText = "Azure AD domain")]
|
|
public string Domain { get; set; }
|
|
|
|
[Option('u', "username", Required = true, HelpText = "User Azure AD username in FQDN format")]
|
|
public string Username { get; set; }
|
|
|
|
[Option('p', "password", Required = true, HelpText = "User password")]
|
|
public string Password { get; set; }
|
|
|
|
[Option('e', "existing-device", Required = false, HelpText = "Path to the PFX file with the device key + certificate")]
|
|
public string DevicePfx { get; set; }
|
|
|
|
[Option('f', "pfx-key-password", Required = false, HelpText = "PFX file password")]
|
|
public string PfxPassword { get; set; }
|
|
}
|
|
}
|