Hi,

On 03/01/2011 06:48 PM, Robert Goley wrote:
My understanding is that they were going to change the auth code so that it defaulted to using VeNCrypt so that you would no longer have to specify it on the command line. You would however have to set the method priority. The method priority would default to VncAuth for compatibility. I do not know if that was completed or is in the current binaries that DRC built. I am running the same binaries and I am still specifying in the old manner. I have not tested the short form using them. I was not sure if that work was completed yet.

Again this is my understanding from following that thread. If anything in my 2 cents above is incorrect, please jump in let me know.

Working on understanding too: if VeNCrypt would be the default, the authentication is always done using PAM. However, a 'vnc' pam file is not present by default. It is also not trivial to make one since each distribution has its own way of configuring pam. I would suggest to default to /etc/pam.d/vnc if present, otherwise use /etc/pam.d/login (which is present on all systems).

Sebastiaan



Robert


On 03/01/2011 08:10 AM, Sebastiaan Breedveld wrote:
On 03/01/2011 12:13 PM, DRC wrote:
As far as checking for the VNC password, we're no longer requiring
"VeNCrypt" to be specified in the -SecurityTypes parameter, so checking
for that won't work.  The correct approach is to check whether
-SecurityTypes is not specified -- or -- whether -SecurityTypes is
specified and contains (case insensitive) "VncAuth".  If either of those
conditions is true, then and only then should vncserver check for the
existence of the VNC password.

Looking at it again, the vncserver script adds --rfbauth automatically,
so a more structural change is necessary:

- if no options are given, force VeNCrypt, and do not use --rfbauth anymore
- force VeNCrypt by specifying SecurityTypes, and do not use --rfbauth
in that case

Or am I misunderstanding something?

Greetings,
Sebastiaan


------------------------------------------------------------------------------
Free Software Download: Index, Search & Analyze Logs and other IT data in 
Real-Time with Splunk. Collect, index and harness all the fast moving IT data 
generated by your applications, servers and devices whether physical, virtual
or in the cloud. Deliver compliance at lower cost and gain new business 
insights. http://p.sf.net/sfu/splunk-dev2dev 
_______________________________________________
Tigervnc-devel mailing list
Tigervnc-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/tigervnc-devel

Reply via email to