My install of UltraVNC works great, but as soon as I tell it to use any DSM plugin it no longer allows a viewer connecting via the javascript web server to enter a user/pass, because it never opens that window.
Maybe I've been naive. Can you even use DSM plugins for the http based server? Do you have to use a VNC viewer to use the DSM plugins?
For my purposes it's really not acceptable to go installing a viewer anywhere I want to access my PC. It's very convenient to access my PC without doing anything on a foreign computer but opening a browser. But I'd still like to tunnel across the net to do it.
My guess is that unless whatever machine I'm connecting from has some sort of SSL handling functionality, that this isn't possible without installing the VNC veiwer. Is that correct, or can I still use a DSM plugin without installing the viewer?
And if I can use DSM without a viewer, then why do these plugins not allow me to log in remotely?
Update: UltraVNC 1.4.3.6 and UltraVNC SC 1.4.3.6: https://forum.uvnc.com/viewtopic.php?t=37885
Important: Please update to latest version before to create a reply, a topic or an issue: https://forum.uvnc.com/viewtopic.php?t=37864
Join us on social networks and share our announcements:
- Website: https://uvnc.com/
- GitHub: https://github.com/ultravnc
- Mastodon: https://mastodon.social/@ultravnc
- Facebook: https://www.facebook.com/ultravnc1
- X/Twitter: https://x.com/ultravnc1
- Reddit community: https://www.reddit.com/r/ultravnc
- OpenHub: https://openhub.net/p/ultravnc
Important: Please update to latest version before to create a reply, a topic or an issue: https://forum.uvnc.com/viewtopic.php?t=37864
Join us on social networks and share our announcements:
- Website: https://uvnc.com/
- GitHub: https://github.com/ultravnc
- Mastodon: https://mastodon.social/@ultravnc
- Facebook: https://www.facebook.com/ultravnc1
- X/Twitter: https://x.com/ultravnc1
- Reddit community: https://www.reddit.com/r/ultravnc
- OpenHub: https://openhub.net/p/ultravnc
DSM Plugins don't allow user/pass window to pop up
Re: DSM Plugins don't allow user/pass window to pop up
The Javaviewer does not support DSM plugin system
Sorry...
Sorry...
Last edited by UltraSam on 2006-11-02 22:04, edited 1 time in total.
UltraSam
Re: DSM Plugins don't allow user/pass window to pop up
The UltraVNC viewer and DSM run great from a USB memory stick.
Sean
Sean
Re: DSM Plugins don't allow user/pass window to pop up
Wow I never took the time to use the viewer but it's so much better than the http java functionality.
I guess I just assumed they had all the same features.
I guess I'll switch to using an install on a usb drive then.
Thx.
I guess I just assumed they had all the same features.
I guess I'll switch to using an install on a usb drive then.
Thx.
Re: DSM Plugins don't allow user/pass window to pop up
To UltraSam: The Javaviewer doesn't work when the DSM Plugin is specified in the VNC Server. You can't get a Javaviewer session to be encrypted. That's okay. What we want is for it to allow you to have an un-encrypted session, when you use the Javaviewer!
I use UltraVNC for two purposes. One is to use my home machine from another machine that I have installed the DSM plug-in on. Like my work machine. Or a friend's machine. I also have a thumb drive with vncviewer and the DSM plug-in and my encryption key on it.
The other purpose is if I am at a kiosk somewhere or in the public library, and I want to quickly look something up. Encryption is not necessary. There might not be a USB port for me to plug my thumb drive into. The Javaviewer would be just right. I would realize that no encryption was happening. But, I am stuck, I can't do it. Unless I remember to turn off DSM in the server, before I leave home.
As a more general case of this: when you turn on DSM encryption in the server, it (unfortunately) becomes manditory! This is not the best it could be. When you try to make a Vncviewer connection to a server, it should pop up a window: "no DSM in your viewer, so I can't start an encrypted session--do you want to start an un-encrypted one?" So, even if you don't have your key with you, you can still connect. That's all we're asking for!
I use UltraVNC for two purposes. One is to use my home machine from another machine that I have installed the DSM plug-in on. Like my work machine. Or a friend's machine. I also have a thumb drive with vncviewer and the DSM plug-in and my encryption key on it.
The other purpose is if I am at a kiosk somewhere or in the public library, and I want to quickly look something up. Encryption is not necessary. There might not be a USB port for me to plug my thumb drive into. The Javaviewer would be just right. I would realize that no encryption was happening. But, I am stuck, I can't do it. Unless I remember to turn off DSM in the server, before I leave home.
As a more general case of this: when you turn on DSM encryption in the server, it (unfortunately) becomes manditory! This is not the best it could be. When you try to make a Vncviewer connection to a server, it should pop up a window: "no DSM in your viewer, so I can't start an encrypted session--do you want to start an un-encrypted one?" So, even if you don't have your key with you, you can still connect. That's all we're asking for!
Re: DSM Plugins don't allow user/pass window to pop up
Well
The main advantage of using the MSRC4 plugin is not only the encryption of the connection but also the fact that you need the key file to connect to the server.
It brings an additional "secure" password -sort of- and a safer way to check user identity than the old unsecure VNC password.
Consequently if we allow JavaViewer to connect without plugin even when DSM plugin is activated on the server we lose the "strong password-rc4 key" advantage and the UltraVNC server is as vulnerable as when DSMPlugin is not activated.
The main advantage of using the MSRC4 plugin is not only the encryption of the connection but also the fact that you need the key file to connect to the server.
It brings an additional "secure" password -sort of- and a safer way to check user identity than the old unsecure VNC password.
Consequently if we allow JavaViewer to connect without plugin even when DSM plugin is activated on the server we lose the "strong password-rc4 key" advantage and the UltraVNC server is as vulnerable as when DSMPlugin is not activated.
UltraSam
Re: DSM Plugins don't allow user/pass window to pop up
Yes, it is a security issue. I agree. However, the level of security should be up to me. Just as whether I use DSM at all is my choice. After I have checked "use DSM" in the VNC server, let there be a new check box, such as: "Allow insecure Javaviewer connections?" I would hope this would not be too difficult to program.
Re: DSM Plugins don't allow user/pass window to pop up
As a temporary solution, you can install another VNC server such as RealVNC and change their vnc and java ports as well as disabling UltraVNC's java viewer. For example, UltraVNC hosts on port 5900 (DSM encrypted) and RealVNC hosts on 5800 with a java viewer on 5801.
Therefore, you can connect using the DSM plugin on port 5900 for a more secure connection or open port 5801 in a web browser to use the java viewer which connects to port 5800.
Hope this helps
Albert
Therefore, you can connect using the DSM plugin on port 5900 for a more secure connection or open port 5801 in a web browser to use the java viewer which connects to port 5800.
Hope this helps
Albert
Re: DSM Plugins don't allow user/pass window to pop up
I tested my method....It works except it has a few downsides....
RealVNC's java viewer must be used because UltraVNC's java viewer will automatically connect to UltraVNC's server port and give the error message. We need to connect to RealVNC's server port because it gives the unencrypted connection. Since RealVNC's java viewer asks for a port, server name/ip etc, it can be used to connect to the right unencrypted connection....The problem with this is that RealVNC's java viewer is less advanced and doesn't support the scaling and other features. But otherwise, its useful enough.
RealVNC's java viewer must be used because UltraVNC's java viewer will automatically connect to UltraVNC's server port and give the error message. We need to connect to RealVNC's server port because it gives the unencrypted connection. Since RealVNC's java viewer asks for a port, server name/ip etc, it can be used to connect to the right unencrypted connection....The problem with this is that RealVNC's java viewer is less advanced and doesn't support the scaling and other features. But otherwise, its useful enough.