DSM (without key) and MSLOGON in 1.0.5

[pcperfect]

I have just set up an 1.0.5 install, but i can't get DSM and MSLOGON to work (both MSLOGON I or II).

When i only configure MSLOGON, i can connect. If i then configure DSM without a keyfile (but using password) and try to connect i only get a password box for the DSM.

Enter incorrect DSM password = DSM error (invalid protocol)
Enter correct DSM password = Connection rejected

This proves that the DSM part is working.

Also with mslogon debug enabled there is a failed attempt logged without any user info (logical since it never asked for a user/pass): Invalid attempt (not authenticated) from client x.x.x.x using account
(notice the double space between using and account)

Is this still posible with 1.0.5? had it working with 1.0.2 and was used to first get a password box for DSM and then a user/pass box for mslogon. Yes i know this is double but i don't care. I like it :)

[YY]

Is this still posible with 1.05? had it working with 1.02 and was used to first get a password box for DSM and then a user/pass box for mslogon. Yes i know this is double but i don't care. I like it

I try the 1.0.2 viewer to connect to a 1.0.5 server.
YES, it still can work exactly as what you said.

I never realise the 1.0.2 can work in such way.

[pcperfect]

Hmm never tried to connect with the 1.0.2 viewer, i'll try that when i have the chance.
So it's actually a viewer problem then? But is it smart to use the 1.0.2 viewer with 1.0.5 server seeing the security issues ?
Would there be some code missing in the 1.0.5 viewer ?

[YY]

I'm not a qualified person to provide the answer.

In my memory, there are one or two serious vulnerabilities found on vncviewer 1.0.2, the most recent reported one is [topic=14654]here[/topic]

However, the vulnerabilities only exists when viewer running on listening mode. If you don't use it in such way, I suppose it is still safe.