Support for Azure Active Directory Auth with himmelblau

[JordiRoman]

Hi everybody

Do you have any plans to support authentication against Azure Active Directory using the himmelblau PAM modules (https://himmelblau-idm.org/)?

These modules enable authentication using MFA.

I think it is a good job

[matt335672]

Thanks for the pointer, @JordiRoman

I'd very much like to update the authentication phase to support the CredSSP service provider. Azure support was always going to be tricky, as any support within xrdp would require us to have an Azure Domain Controller to test against, and as a project we can't afford that.

We made changes for v0.10.x to make better PAM support easier to add. There's still a big chunk of work to do for this, and at the moment it's likely we'll be looking at how we can support some Wayland desktops before we get to PAM improvements.

[JordiRoman]

259 / 5.000
I have been told about the existence of free accounts that last 1 year and must be for educational purposes (I think development could be included here). You can find more information at

https://azure.microsoft.com/en-us/pricing/purchase-options/azure-account

[matt335672]

Thanks.

The problem is that you get 12 months for free, and then it's a payable option. As a project, we're not sponsored to a level which makes this viable. We can't really develop and test something and then deploy it with no maintenance options.