Ive tried searching the forums for this issue, but can't find anything similar. So I apologize in advance if this has already been asked, but maybe someone can point me in the right direction?

Here is my current scenario. In a school district of over 1000 students, we have setup a Linux server with Thin Clients using NoMachines NX, which is authenticating against AD. We are currently using Winbind and Kerberos for authentication and Pam to mount their AD home dirs. This all works great, but we also have a Windows application server for must have windows apps, to access those, we are using rdesktop to launch a single application. The shortcut would be as follows (rdesktop -g 95% -T <program name> <serverIP> -s <path to program> -S "standard") The reason for this is so when they login to rdesktop it will map their home dir so they can save for example a Word document.

But heres what Im looking for, as you can probably tell, each time a user launches a "Windows App" using rdesktop, they have to log in. So what I want to do is somehow have rdesktop pull thier login and password in from their original login to the Linux box.

I was thinking of creating some sort of Pam module to intercept their login credentials and stick in something like ~/.credentials or something like that, and have rdesktop pull from that file, but no luck so far. I guess with 700 permissions on the home dir that wouldn't be so bad being that it would have to be clear text. Anyway, any help would be appreciated!!!!
Thanks in advance.

I think it's a noble idea to try to make this a seamless login, but I'm also thinking you're going to enrage the first user who finds his login and password stored as plain-text in his home directory.

Short answer: I don't know of any way to do this safely with rdesktop, since it appears to require password authentication. Sounds like a situation where the user is going to have to deal with logging in again. (You know how convenience and security are inversely proportional...)

Thanks for the reply! I know exactly what your saying with the clear text password file. Unfortunately I cannot figure out any other way to make this happen, in fact, am beginning to believe its impossible. The students are dealing with the login everytime they launch an app better than I thought they would, but I just thought I'd try to be the hero and make that happen seamlessly.

I would sure appreciate anymore thoughts.
Thanks