diff --git a/guacamole-ext/src/main/resources/org/apache/guacamole/protocols/rdp.json b/guacamole-ext/src/main/resources/org/apache/guacamole/protocols/rdp.json
index 58331118e7..a242e91b2d 100644
--- a/guacamole-ext/src/main/resources/org/apache/guacamole/protocols/rdp.json
+++ b/guacamole-ext/src/main/resources/org/apache/guacamole/protocols/rdp.json
@@ -40,6 +40,19 @@
                     "type"    : "ENUM",
                     "options" : [ "", "rdp", "tls", "nla", "vmconnect", "any" ]
                 },
+                {
+                    "name"    : "auth-pkg",
+                    "type"    : "ENUM",
+                    "options" : [ "", "ntlm", "kerberos"]
+                },
+                {
+                    "name"    : "kdc-url",
+                    "type"    : "TEXT"
+                },
+                {
+                    "name"    : "kerberos-cache",
+                    "type"    : "TEXT"
+                },
                 {
                     "name"    : "disable-auth",
                     "type"    : "BOOLEAN",
diff --git a/guacamole/src/main/frontend/src/translations/en.json b/guacamole/src/main/frontend/src/translations/en.json
index ef21734225..8f886b7c33 100644
--- a/guacamole/src/main/frontend/src/translations/en.json
+++ b/guacamole/src/main/frontend/src/translations/en.json
@@ -581,6 +581,7 @@
 
     "PROTOCOL_RDP" : {
 
+        "FIELD_HEADER_AUTH_PKG"              : "Authentication package:",
         "FIELD_HEADER_CERT_TOFU"             : "Trust host certificate on first use:",
         "FIELD_HEADER_CERT_FINGERPRINTS"     : "Fingerprints of trusted host certificates:",
         "FIELD_HEADER_CLIENT_NAME"           : "Client name:",
@@ -625,7 +626,9 @@
         "FIELD_HEADER_HOSTNAME"        : "Hostname:",
         "FIELD_HEADER_IGNORE_CERT"     : "Ignore server certificate:",
         "FIELD_HEADER_INITIAL_PROGRAM" : "Initial program:",
-        "FIELD_HEADER_LOAD_BALANCE_INFO" : "Load balance info/cookie:",
+        "FIELD_HEADER_KDC_URL"         : "Kerberos KDC URL:",
+        "FIELD_HEADER_KERBEROS_CACHE"  : "Kerberos cache:",
+        "FIELD_HEADER_LOAD_BALANCE_INFO"   : "Load balance info/cookie:",
         "FIELD_HEADER_NORMALIZE_CLIPBOARD" : "Line endings:",
         "FIELD_HEADER_PASSWORD"        : "Password:",
         "FIELD_HEADER_PORT"            : "Port:",
@@ -671,6 +674,10 @@
         "FIELD_HEADER_WOL_UDP_PORT"       : "UDP port for WoL packet: ",
         "FIELD_HEADER_WOL_WAIT_TIME"      : "Host boot wait time:",
 
+        "FIELD_OPTION_AUTH_PKG_EMPTY"                   : "",
+        "FIELD_OPTION_AUTH_PKG_KERBEROS"                : "Kerberos",
+        "FIELD_OPTION_AUTH_PKG_NTLM"                    : "NTLM",
+
         "FIELD_OPTION_CLIPBOARD_BUFFER_SIZE_EMPTY"    : "",
         "FIELD_OPTION_CLIPBOARD_BUFFER_SIZE_262144"   : "256KB",
         "FIELD_OPTION_CLIPBOARD_BUFFER_SIZE_1048576"  : "1MB",