I spend a BRANDNEW 300 GB Maxtor HD for the Zebedee plugin

Elmar · Post by **Elmar** » 2004-11-19 14:49

hi,
as i described below, we need a powerfull plugin for encription, authorisation and authentification witch can run as a service at windows.

Sorry, but "C" is not one of my professions, so I spend to the progger of the "zebedee" plugin for ultravnc a Harddrive.

This one is 200 € worth and I hope that we will find somebody who can do the codeadaption for this.

Zebedee:
http://www.winton.org.uk/zebedee/download.html

You can contact me, if you are intrested.

-cya Elmar

Andy Parkinson · Post by **Andy Parkinson** » 2004-11-19 15:04

You can just install openssh server on the windows box. I do this for lots of servers that I look after . It can be downloaded from http://www.itefix.no/phpws/ this version is called copssh and appears to be kept up to date and is very easy to install. Use putty at the client end and set up tunnels to wherever on the remote lan you need to access. This can be set up to give 256 bit encryption so is very secure and gives end to end encryption.

Andy Parkinson

Elmar · Post by **Elmar** » 2004-11-19 15:20

Ok you are right - we can use some kind of SSH.

But this is not a lightweight solution. Most of them a using the cygwin enviroment and they all need a separat installation. Especially if I want to run this as a service.

The solution with a plugin to Ultravnc will solv this.

And I hope that we can adapt the "fastpush" script for an automatic rollout.

-cya

byteboon · Post by **byteboon** » 2004-11-19 18:01

The current UltraVNC plugin mechanism does not support dynamic key exchange or direct access to the socket connection. The plugin can only modifiy the stream of data as it passes through.

It would be very difficult to force ZeeBeeDee into a plugin. You'll have better luck running the loopback through an externally running ZeeBeeDee or similar program.

Elmar · Post by **Elmar** » 2004-11-19 18:41

Hi again,
there are still some ZeBeDee enabled VNCs.

But I understand that the communication between the Ultravnc and zebedee can only be stream-based.

This should be possible and if the administration of zebedee couldn't be done via the plugin, what about the normal INI-File from ZeBeDee - this should be possible.

cya

byteboon · Post by **byteboon** » 2004-11-19 19:21

This is how the Data Stream Modification plugin interfaces:
VNC <-> DSMPlugin <-> VNC <-> SocketConnection

You are asking for:
VNC <-> DSMPlugin <-> ZeBeDee <-> SocketConnetion

But, you cannot remove the last VNC <-> SocketConnection part of the process with the current plugin mechanism.

VNC *itself* needs to connect to something and handle the sending and receiving of packets. The plugin mechanism as it is *cannot* do this.

You *can* ZeBeDee enable Ultra like ZVNC has done by changing the source. The plugin mechanism *will not* allow what you want.

Additional barriers:
- the plugin cannot decide when to send anything, so it cannot negotiate
- the datastream is modified by VNC *after* the plugin in ways that are VNC specific, so you can't send non-VNC data

Elmar · Post by **Elmar** » 2004-11-19 20:10

hi,
ok - i see....

So it is impossible to use zebedee.

But than it looks like any high-level security cannot me implemented with the existing plugin structure.

Is it right, that also SSH with PGP-keys couldn't be implemented as a plugin?

-cya

byteboon · Post by **byteboon** » 2004-11-19 20:18

Correct that the current *plugin* design would not support a key exchange mechanism *in stream*. Using a loopback interface, it is very possible to use any external system (SSH, ZeBeDee) to encapsulate the stream securely.

If you could do a key exchange external to the plugin, then the plugin could use the resulting stream encryption key to encode/decode.

See Also:
[post=4380][/post]

cerb · Post by **cerb** » 2004-11-19 20:39

Sorry if this seems too easy. But if you really need ultravnc+zebedee, why don't you use the two separately?

You just need someone to write you a setup script if you want to distribute them on many computers and the two work perfectly together. There is no need for any plug-in to get them working. Simply wrap ultravnc inside zebedee, using the predefined zebedee initialisation scripts.

Alternatievely o not use Ultravnc, but directly zvnc:
http://home.comcast.net/~davedyer/znc/zvnc.html

hakre · Post by **hakre** » 2004-12-01 08:17

Andy Parkinson wrote:You can just install openssh server on the windows box. I do this for lots of servers that I look after . It can be downloaded from http://www.itefix.no/phpws/ this version is called copssh and appears to be kept up to date and is very easy to install. Use putty at the client end and set up tunnels to wherever on the remote lan you need to access. This can be set up to give 256 bit encryption so is very secure and gives end to end encryption.

Andy Parkinson

i checked out the SSH thingy and it worked as intended.