Unable to enable NLA for RDP in Teleport Community via Docker Compose

[vbruge]

Hi everyone,

I'm currently deploying Teleport Community Edition (v17.4.8) using Docker Compose, and I'm trying to enable NLA (Network Level Authentication) for RDP connections to Windows hosts in an Active Directory domain.

I’ve added the following environment variable in my docker-compose.yml:

environment:
  - TELEPORT_ENABLE_RDP_NLA=1

The container starts without any error, but when I try to connect to a Windows host with NLA enabled, I get this error:

CredSSP enhanced RDP security required by server

And in the Teleport logs, I still see:

nla: false

I also tried adding nla: true in the teleport.yaml file, but it fails to parse with:

field nla not found in type config.WindowsDesktopService

Is NLA support fully functional in the Community Edition?
Does it require an Enterprise license or a specific build to work?

Thanks in advance for your help

Valentin

[zmb3]

You need to set the environment variable to yes, not 1:

https://goteleport.com/docs/enroll-resources/desktop-access/active-directory/#network-level-authentication-nla

To enable NLA, set the TELEPORT_ENABLE_RDP_NLA environment variable to yes on any hosts running the Teleport's windows_desktop_service.