Nginx Reverse proxy + RD Gateway Auth Problem

Server NGINX
1

Hello all,

Nginx is the reverse proxy+ MS Remote Desktop Gateway using SSL, the
first
authentication is working, the problem is when I try to open a program
in
this environment for example wordpad.exe of session host RD, it ask for
user and password (I use the same credentials used to connect in RD
Gateway), when the credentials are filled up again, I get the message
user
or password are wrong.

My .conf for the context:

 location /RDWeb {   <--- the same context context in IIS
    proxy_pass https://server.domain/RDWeb;
    proxy_set_header Accept-Encoding "";
    proxy_set_header host server.domain;
 }

 location /rpc { <--  the same context context in IIS
    proxy_pass http://server.domain/rpc;
 }

In the log of nginx with debug mode on, show this information:

2014/10/17 09:06:02 [info] 20589#0: *43 client x.x.x.x closed keepalive
connection(this is the only message)

Any help will be appreciated, thank you!

Posted at Nginx Forum:

2

Hello!

On Fri, Oct 17, 2014 at 08:24:18AM -0400, timbo wrote:

Hello all,

Nginx is the reverse proxy+ MS Remote Desktop Gateway using SSL, the first
authentication is working, the problem is when I try to open a program in
this environment for example wordpad.exe of session host RD, it ask for
user and password (I use the same credentials used to connect in RD
Gateway), when the credentials are filled up again, I get the message user
or password are wrong.

Make sure that Basic authentication is used, not NTLM aka
Integrated Windows Authentication. The latter has problem with
proxy servers due to it’s connection-oriented design, and will not
work though nginx.

–
Maxim D.
http://nginx.org/

3

Hi timbo,

I am also trying to connect to a Remote Desktop Gateway through nginx.
Did
you get it work?

Regards,
Fred

Posted at Nginx Forum:

4

Thank you very much Maxim, I will check your recommendation I will post
the
results here.

Posted at Nginx Forum:

5

Hi, sorry, but I don’t understand what you mean with stream {}, my nginx
config for the RD Gateway is the following:

server {listen *:6080; listen *:6443 ssl;
server_name  ~^rdg..*$; include ssl_rdg.conf;
location / {proxy_pass  https://s2012-rdg; include

proxy_defaults.conf;}}

Should I replace proxy_pass to stream?

Regards,
Fred

Posted at Nginx Forum:

6

frederico Wrote:

Hi timbo,

I am also trying to connect to a Remote Desktop Gateway through nginx.
Did you get it work?

Have you tried this using stream {} ? which works fine for vpn and other
streaming services.

Posted at Nginx Forum:

7

Hi,

I’ve tried a lot of commands, stream is not recognized and I don’t think
it’s possible to make it work. nginx need a certificate and RD Gateway
need
also a certificate, so there are 2 SSL connection between the client and
the
server, it’s can’t work.

I also tried with the same certificate on the 2 connections, but without
success… :frowning:

Regards,
Fred

Posted at Nginx Forum:

8

frederico Wrote:

9

frederico Wrote:

Hi,

I’ve tried a lot of commands, stream is not recognized and I don’t
think it’s possible to make it work. nginx need a certificate and RD
Gateway need also a certificate, so there are 2 SSL connection between
the client and the server, it’s can’t work.

Then you have tried the wrong version:
http://nginx.org/en/docs/stream/ngx_stream_ssl_module.html
http://nginx.org/en/docs/stream/ngx_stream_proxy_module.html#proxy_pass

Posted at Nginx Forum: