@@ -1104,11 +1104,24 @@ pub mod dto {
1104
1104
pub password : String ,
1105
1105
}
1106
1106
1107
- /// Kerberos server config.
1107
+ /// Kerberos server config
1108
+ ///
1109
+ /// This config is used to configure the kerberos server during RDP proxying.
1108
1110
#[ derive( PartialEq , Eq , Debug , Clone , Serialize , Deserialize ) ]
1109
1111
pub struct KerberosServer {
1112
+ /// The maximum allowed time difference between client and proxy clocks
1113
+ ///
1114
+ /// The value must be in seconds.
1110
1115
pub max_time_skew : u64 ,
1116
+ /// Ticket decryption key
1117
+ ///
1118
+ /// This key is used to decrypt the TGS ticket sent by the client. If you do not plan
1119
+ /// to use Kerberos U2U authentication, then the `ticket_decryption_key' is required.
1111
1120
pub ticket_decryption_key : Option < Vec < u8 > > ,
1121
+ /// The domain user credentials for the Kerberos U2U authentication
1122
+ ///
1123
+ /// This field is needed only for Kerberos User-to-User authentication. If you do not plan
1124
+ /// to use Kerberos U2U, do not specify it.
1112
1125
pub service_user : Option < DomainUser > ,
1113
1126
}
1114
1127
@@ -1152,6 +1165,9 @@ pub mod dto {
1152
1165
#[ serde( default = "ws_keep_alive_interval_default_value" ) ]
1153
1166
pub ws_keep_alive_interval : u64 ,
1154
1167
1168
+ /// Kerberos application server configuration
1169
+ ///
1170
+ /// It is used only during RDP proxying.
1155
1171
pub kerberos_server : Option < KerberosServer > ,
1156
1172
1157
1173
/// Enable unstable features which may break at any point
0 commit comments