VNC-Server: Handling of encrypted passwords

[buggybunny]

Hey folks,

i searched the forum but there seems to be no similar request:

Is it planned to extend the VNC-Server in a way that it can handle encrypted passwords?

The course of event could be as follows:

-> There is a flag in the servers configuration that tells the server that by default all transmitted passwords are encrypted
-> The server knows where the decryption key on the local filesystem resides
-> Server decrypts the password with the key
-> Checks wether password is correct and does the rest of the stuff needed to initiate the VNC session

Background of this question:

I have a special customer setup, in which the employees of our customers connect to the VNC-servers via a portal application.
It is a request of our customer that the employees may connect to the server, but they shall NOT know the passwords for the VNC-servers (passwords should be handled by our portal application). In the future, our portal application would provide the employees with an encrypted password, which is then decrypted by the server.

So, what do you say?......

P.S.:

Please note that DSM-Plugins do NOT solve this problem.....

[UltraSam]

Not planned...

But if you have access to the code and DB of your portal application I don't see why we would need to do what you describe. Tell me if I'm missing something:

1. All the VNC servers passwords are stored somewhere in your portal Database (not far from the users table)

2. A user authentifies himself on your portal, whith whatever login/password system you want (stored encrypted (or hashed) in your DB), then select the VNC server if required.

3. The portal runs the Ultra vncviewer with the selected VNC server password found in the DB, using the following syntax:

vncviewer.exe serverAdr -password TheServerPasswordTookFromPortalDB

This way, the users only have to know their own personal Login/password and never see the UltraVNC servers passwords.