Howto to use CSCO_WEBVPN_PASSWORD in rdp:// bookmark, SSL VPN

[alig.norbert]

Hi all

I got an ASA5510 (8.4.4, ASDM 6.4(7) with WEBVPN access.

Now I'm facing the problem, that the customer uses an OTP authentication.

I've changed the SSL portal login page with username / password (OTP) / internal password ( the AD-user password).

So the idea is, that those variables

- CSCO_WEBVPN_USERNAME

- CSCO_WEBVPN_INTERNAL_PASSWORD

are used for SSO purpose.

Here my bookmark:

rdp2://<IP>/?keymap=de&bpp=16&geometry=1024x768&FullScreen=true&RedirectDrives=true&domain=<DOMAIN>&username=CSCO_WEBVPN_USERNAME&password=CSCO_WEBVPN_INTERNAL_PASSWORD

The problem is, that the password will not be sent to the rdp session. When I enter the password hardcoded (e.g. passwort=secret) it works.

So, how can a variable be sent for the password? Or it's by design, that only a hardcoded password can be used?

Thanks a lot,

Norbert

[Javier Portuguez]

Dear Norbert,

To get this to work, you must configure the bookmark as following:

server/?csco_sso=1&Parameter&Parameter

server/?Parameter&Parameter&csco_sso=1

Please notice that the key is csco_sso=1 to provide java plug-in SSO feature.

For example:

rdp://10.198.29.26/?geometry=1024x768&csco_sso=1&username=CSCO_WEBVPN_USERNAME

&password=CSCO_WEBVPN_PASSWORD

I just tested this locally

Please let me know.

Thanx.

Portu.

[Javier Portuguez]

BTW, by mistake I used a different parameter instead of the internal WebVPN pass, but it should be the same

Sent from Cisco Technical Support Android App

[alig.norbert]

Hi Portu

I have no ASA handy to test it, but I guess the parameter csco_sso=1 sends the WEBVPN_USERNAME and WEBVPN_PASSWORD and doesn't care about the parameters username and password. Could you try it with the internal_password?

rdp://10.198.29.26/?geometry=1024x76&username=CSCO_WEBVPN_USERNAME

&password=CSCO_WEBVPN_INTERNAL_PASSWORD

Thanks,

Norbert

Sent from Cisco Technical Support iPhone App

[Javier Portuguez · Accepted solution]

Good Morning,

I just tested it and it worked just fine.

Keep me posted.

Please rate any post you find useful.

[alig.norbert]

Thanks a lot,

works like a champ...

Here the final url:

rdp://192.1168.x.x/?keymap=de&bpp=16&geometry=1280x1024&FullScreen=true&RedirectDrives=true&RedirectPrinters=true&domain=MYDOMAIN&csco_sso=1&username=CSCO_WEBVPN_USERNAME  &password=CSCO_WEBVPN_INTERNAL_PASSWORD

Greets,

Norbert

[Martin Ostberg]

Thanks, now I got it working, finally!

BUT, it doesn't work on 2003 servers, any clues?

Cheers!

[jesmuril]

Extremely helpful thank you!!