1. Proposed title of this feature request
PAM-based logins for RDP

3. What is the nature and description of the request?
Remote desktop tools such as VNC (cf. Weston) have the ability to use PAM to manage the login bits. Currently RDP requires a different authentication setup which can cause passwords to drift and become difficult to enforce complexity and lifecycle.

4. Why does the customer need this? (List the business requirements here)
Operationally, they'd like to force their users to use their system password (provided by sssd or shadow-utils) to authenticate to RDP sessions.

5. How would the customer like to achieve this? (List the functional requirements here)
The ability to use a PAM stack for RDP (gnome-remote-desktop) authentication.

6. For each functional requirement listed, specify how Red Hat and the customer can test to confirm the requirement is successfully implemented.

• launch RDP session
• login with "system" password
• change user password (passwd/ldap)
• RDP login now uses new password

7. Is there already an existing RFE upstream or in Red Hat Bugzilla?
No

8. Does the customer have any specific timeline dependencies and which release would they like to target (i.e. RHEL5, RHEL6)?
None at present

9. Is the sales team involved in this request and do they have any additional input?
Sales is not involved

10. List any affected packages or components.
gnome-remote-desktop, freerdp

11. Would the customer be able to assist in testing this functionality if implemented?
Yes