"VNCViewer BMPFlasher" window blocked

balubeto · Post by **balubeto** » 2004-11-14 12:56

HI

I have installed on two computer A and B (with Windows XP Pro SP2) the MS-Logon v3 TEST19_13 on U and have activated the MS-Logon v3 on B.

When I me connected in remote from A to B, the window of Login appears me where I insert the Username and the Password and I click on OK.

To this point, on A, "VNCViewer BMPFlasher" window appears and stop while on B, window appears indicating the authssp.dll file lack.

In fact, the authssp.dll file is not found in B. Therefore, where it can be gone to download the authssp.dll file?

THANKS

HI

Marscha · Post by **Marscha** » 2004-11-15 07:12

Download http://dl.ultravnc.net/TEST19_12/winvnc19_12.zip.
Stop VNC Server service.
Extract winvnc19_12.zip to your ultravnc installation directory.
Copy winvnc.exe and MSLogonACL.exe from http://dl.ultravnc.net/TEST19_13/ to your ultravnc installation directory.
Start VNC Server service.

lenisham · Post by **lenisham** » 2004-11-15 09:21

I guess that means that "TEST19 installer-test online" (http://forum.ultravnc.net/viewforum.php?f=2)

Doesn't include the latest MS logon. What would you need to do to get MS Logon working with that?

Marscha · Post by **Marscha** » 2004-11-15 17:25

"TEST19 installer-test online" does include the latest MS-Logon.
I just wasn't aware of the new installer when I posted my reply.

balubeto · Post by **balubeto** » 2004-11-15 17:31

Marscha wrote:Download http://dl.ultravnc.net/TEST19_12/winvnc19_12.zip.
Stop VNC Server service.
Extract winvnc19_12.zip to your ultravnc installation directory.
Copy winvnc.exe and MSLogonACL.exe from http://dl.ultravnc.net/TEST19_13/ to your ultravnc installation directory.
Start VNC Server service.

I have followed your instructions and, now, when I try to be connected, on computer A a window appears me with written "VNC authentication failed" in how much the "VNC Viewer Status" windows says "Wrong Password" (that it is not true) to me. How never?

THANKS

HI

balubeto · Post by **balubeto** » 2004-11-15 17:55

TEST19 installer-test online:

Enter user name : balubeto

Enter password : andrea

Enter group : Users

loc=1 dom=3 local+domain=3 : 1

Trying authlogonuser.dll
This only works on XP>
test is runnning as application and not a service
------------------------
------------------------
Logonuser: balubeto .
based on authlogonuser.dll user has NO access
Trying auth.dll
------------------------
------------------------
Client NT4 or later
No domain controler found
Checking Local groups for user: BALUBETO
group: USERS
INTERACTIVE
AUTHENTICATED USERS
SANDRA
ASPNET
ALDO
BALUBETO
Local: User found in group
Domain password check OK
Local password check OK
Acces to vnc OK
based on auth.dll user has access
-------------------------
For testing we cont, but access was already granted
-------------------------

Trying authaddll
------------------------
------------------------
Client NT4 or later
No domain controler found
user: BALUBETO
group: USERS
WinNT://./BALUBETO,userlocal account not found
Account not found
based on authad.dll user has NO access Enter to quit

Marscha · Post by **Marscha** » 2004-11-16 07:53

balubeto,

thank you for the tests you did.
testauth.exe is a tool to test the "old" ms-logon.
The output from testauth.exe indicates that you do have access with the "old" ms-logon:
"based on auth.dll user has access"

With the New MS-Logon there is currently no test tool available.
You can see entries in the Event Viewer (application log).
In addition you can see if the user is authenticated and authorized in C:\Windows\system32\WinVNC-authSSP.log.

Martin

balubeto · Post by **balubeto** » 2004-11-16 11:40

HI

The only error in the Event Viewer (application log), that it could disturb, could be this:

Tipo evento: Avviso
Origine evento: Userenv
Categoria evento: Nessuno
ID evento: 1524
Data: 15/11/2004
Ora: 17.33.54
Utente: PLUTO\Ajhghdf Mkjhffi
Computer: PLUTO
Descrizione:
Impossibile scaricare il file di registro delle classi perché è utilizzato da altre applicazioni o servizi. Il file sarà scaricato quando non è più in uso.

Instead, the WinVNC-authSSP.log file is:

CUPSD2: Access is 0, user "Ajhghdf Mkjhffi" is authenticated, access granted is 0x0
CUPSD2: Access is 0, user "Ajhghdf Mkjhffi" is authenticated, access granted is 0x0
CUPSD2: Access is 0, user Ajhghdf Mkjhffi is authenticated, access granted is 0x0
CUPSD2: Access is 0, user balubeto is authenticated, access granted is 0x0

Therefore, now, than what I can make?

THANKS

HI

lenisham · Post by **lenisham** » 2004-11-16 12:39

Marscha wrote:"TEST19 installer-test online" does include the latest MS-Logon.
I just wasn't aware of the new installer when I posted my reply.

Fantastic tool suite!

There are so many options that it gets confusing at times.

Marscha · Post by **Marscha** » 2004-11-16 14:39

@lenisham:
sorry it's confusing sometimes, I'm working on more documentation for MS-Logon

.

@balubeto:
I don't know where the "Ajhghdf Mkjhffi" entries come from.
But the last line in your WinVNC-authSSP.log indicates that the "balubeto" account is authenticated but not authorized (no access granted).
For authorization, you have to open "Configure MS-Logon groups" in the WinVNC Admin Properties page.
This should look like this: [topic=917][/topic].
Here you have to add either the account "balubeto" or a group the account is a member of, for instance "Users".
Make sure that permissions are set to "allow" "Full Control".
Now you should be able to connect successfully.

The line "user "Ajhghdf Mkjhffi" is authenticated" indicates that the ForceGuest registry setting is enabled:
Under Windows XP, the ForceGuest registry value is set to 1 by default in the following registry key:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa
On a Windows XP computer you must check:
If the Guest account is enabled, an SSPI logon will succeed as Guest for any (!) user credentials.
If ForceGuest is disabled (set to 0), SSPI will log on as the specified user.
So set ForceGuest to 0.

balubeto · Post by **balubeto** » 2004-11-16 17:55

I don't know where the "Ajhghdf Mkjhffi" entries come from.

The account of the administrator is Ajhghdf Mkjhffi .

But the last line in your WinVNC-authSSP.log indicates that the "balubeto" account is authenticated but not authorized (no access granted).

I do not succeed to understand because you say to me that balubeto is not authorized in how much the WinVNC-authSSP.log indicates to me that balubeto is authorized:

[pre]CUPSD2: Access is 0, user balubeto is authenticated, access granted is 0x0[/pre]

Therefore, Ajhghdf Mkjhffi belong to Administrators group and balubeto it belongs to the Users group.

My Configure MS-Logon groups is Configured in this way:

Ajhghdf Mkjhffi ---> Full control

balubeto ---> Full control

Therefore, I do not succeed to understand why I do not succeed to make the remote control on Ajhghdf Mkjhffi and balubeto. For case, I must Configured the Firewall of my router (OfficeConnect ADSL Wireless 11g Firewall/Router - Cod 3CRWE754G72-A)? If yes, like?

THANKS

HI

balubeto · Post by **balubeto** » 2004-11-17 15:34

HI

Finally I have understood that what you wanted to say yesterday. In fact, when I have changed the value of ForceGuest from 1 to 0, I succeed to enter in remote.

THANKS

HI

UltraVNC

"VNCViewer BMPFlasher" window blocked

"VNCViewer BMPFlasher" window blocked

Re: "VNCViewer BMPFlasher" window blocked