On Tue, Mar 10, 2009 at 11:48:23AM +0100, Pierre Ossman wrote:
> On Mon, 9 Mar 2009 21:32:30 +0200
> Pasi Kärkkäinen <pa...@iki.fi> wrote:
> 
> > Hello!
> > 
> > Maybe now it would be possible to also merge UltraVNC Windows
> > authentication ("MS-Logon") support into TigerVNC client on *nix?
> > 
> > That feature allows authentication using Windows/AD-domain username+password
> > to UltraVNC server running on Windows.. This feature has been missing from
> > *nix VNC clients for a long time.. 
> > 
> > There's a patch available for some (old) Linux VNC version, and it can be
> > found from the vnc mailinglist archives:          
> > 
> > http://www.realvnc.com/pipermail/vnc-list/2004-May/045424.html
> > http://bofh.be/patches/vncviewer-mslogon.patch
> > 
> > Comments? 
> > 
> 
> If the only way of doing it is the way the patch does it, then I'd say
> no. It uses a very hacky way that checks the RFB version number, which
> is extremely error prone, and overloads the existing VNCauth mechanism.
> 
> What is should be doing is handshaking for a separate authentication
> method. There is a "Ultra" method allocated, so perhaps there is
> already a better way?
> 

Hmm.. I'm not really familiar with the UltraVNC design and/or code..

http://code.google.com/p/vncthumbnailviewer/source/detail?r=16

Quote from that page:

"It appears that...

u...@vnc's MS-Logon 1 uses the RFB version string to communicate it's desire
to use a different authentication technique.  If the version is 003.004 the
Security Negotiation requests it uses VNCAuthentication and does a hybrid of
VncAuthentication (DES encrypted with a fixed key) and MS Challenge.

u...@vnc's MS-Logon II uses the Security Negotiation protocol (send "-6") to
select their MS Logon Authentication procedure."

Is "MS-Logon II" better, or something that can be supported/added? 
Would be nice to have both though. 

-- Pasi

------------------------------------------------------------------------------
_______________________________________________
Tigervnc-devel mailing list
Tigervnc-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/tigervnc-devel

Reply via email to