If you get this far, you got farther than I did. After successful authentication, the client will send out an RDP intiation packet, and attempt to connect to the server using the credentials supplied to it. At this point, you should be able to redirect all this to some hacked up xrdp code that will accept any authentication attempts. Voila.