A "Portable" viewer with dsm plugin

sijgs · Post by **sijgs** » 2004-05-07 05:03

Can someone suggest what the best way to "install" the viewer into a USB memory flash drive?

I don't want to use IE because of the lack of encryption, so I figure since I carry that little plug everywhere I go, I can just plug it into someone's port and execute it from there using the rc4.key

Questions in my mind are:

Will it execute that way? What about the "hook" drivers? yada...

Thanks for any suggestions.

Regards,
JGS

Post by **UltraSam** » 2004-05-07 06:21

Hook driver is needed only on the server (WinVNC).

vncviewer.exe need no other dll or driver.

If you want to use an encryption DSMPlugin, simply copy vncviewer.exe + MSRC4plugin.dsm + rc4.key onto your USB key and run the viewer from this USB key.

All the remote machine you want to connect to must have the same rc4.key file.

Furthermore, if you don't want to have to reconfigure the key file path in vncviewer each time you execute the viewer on a different machine, 2 possibilities:
- Keep the default rc4.key file locations in the plugin config.
- Create a .reg file with the plugin config params, copy it on your USB key and execute this .reg file on each new machine you plug your USB key.

sijgs · Post by **sijgs** » 2004-05-07 08:00

THANKS!

Now THAT'S USEFUL INFO!!!!

I will code it up and try it ASAP and give a "status" back when I see what happens.

Regards,
JGS

akaidiot · Post by **akaidiot** » 2005-02-11 12:49

But what about computers where you don't have access to the registry. I'm trying to get the dsm encryption plugin to work on the public library computers where I have low permissions, but how ever I try I get "DSMPlugin cannot be configured"

EDIT: On the library computer in the DSMplugin configuration the "Server Key Location(Service)" box is empty but the others have the "rc4.key" which is the path of the key file. What does that mean?

Basically how do you connect from a computer, with dsm encryption, without having to install/edit anything on the client computer?

redge · Post by **redge** » 2005-02-11 17:40

akaidiot

Basically how do you connect from a computer, with dsm encryption, without having to install/edit anything on the client computer?

you can use file "MSRC4Plugin_noreg.dsm" that good solution on computer has limited rights.
http://home.comcast.net/~msrc4plugin/ms ... noreg.html

limited user access, no registry permission, but i can copy and start software like ultravnc +dsm_plugin_no_reg

only need on USB key storage

vncviewer.exe (=>RC19.5)
rc4.key (must be same rc4.key as is on the server side)
MSRC4Plugin_noreg.dsm (ver. 1.1.4)

akaidiot · Post by **akaidiot** » 2005-02-13 15:23

Ok, I've now got it set up! Will be trying it out on monday probably! Thanks!

akaidiot · Post by **akaidiot** » 2005-02-14 09:23

I'm sitting right now on the public library and it infact does............not work

I still get the DSMPlugin cannot be configured..

What can be the cause of this error?

Guest · Post by **Guest** » 2005-02-14 14:16

I use UltraVNC 19.5 and the DSM Plugin that came with it (version 1.1.2). On the server side, the key has to be in the folder "program files" and on the client (aka viewer) side it has to be in the folder where the viewer is or, if you use saved sessions, in the folder with the *.vnc file.

For me, that worked great!

After I configured the server to utilize the plugin I restarted the machine it is hosted on. I had several problems restarting the server after choosing the plugin option therefore I consider a restart the most convenient way to make the service use encryption. My latest test with the DSM Plugin version 1.1.4 caused the UltraVNC server service to be killed instantly!

akaidiot · Post by **akaidiot** » 2005-02-14 18:22

Anonymous wrote:I use UltraVNC 19.5 and the DSM Plugin that came with it (version 1.1.2). On the server side, the key has to be in the folder "program files" and on the client (aka viewer) side it has to be in the folder where the viewer is or, if you use saved sessions, in the folder with the *.vnc file.

For me, that worked great!

After I configured the server to utilize the plugin I restarted the machine it is hosted on. I had several problems restarting the server after choosing the plugin option therefore I consider a restart the most convenient way to make the service use encryption. My latest test with the DSM Plugin version 1.1.4 caused the UltraVNC server service to be killed instantly!

On my server, the rc4.key file is in this folder: "C:\Program Files\UltraVNC", which is where the winvnc.exe is also and in the plugin config the path for the key is just rc4.key in all 3(4) fields, and they are all grayed out and can't be edited.

On the viewer the rc4.key is in the same folder as the viewer.exe(<USB drive letter>:\VNC\)

It works when I try on the three computers at home! Could one of the programmer that can check when this error("DSMPlugin cannot be configured") is displayed.. I really need this, please help me find a solution, I want to VNC securely.. without the plugin it works great!

cobratbq · Post by **cobratbq** » 2005-02-14 19:14

Hey! don't forget the unzip and zip dlls! (unzip32.dll & zip32.dll)
That is... if you want to be able to transfer whole directories across your remote-control-connection...
(And I'm sure because I've just tested it to be sure

)

Sergio · Post by **Sergio** » 2005-02-14 21:21

And, if I am not wrong, you need also lang.dll

HTH

redge · Post by **redge** » 2005-02-14 23:55

cobratbq

don't forget the unzip and zip dlls! (unzip32.dll & zip32.dll)

right, but is not necessary , OK, is more slowly

but is possible remote control without now.

Sergio

you need also lang.dll

only need lang.dll with previous release of vncviewer
if you don't need another language than english, lang.dll is for nothing

akaidiot
it is possible your key is corrupt on server side !?
this tools "keypal" below can fix it !
http://www.jensign.com/JavaScience/dotnet/keypal/

check with tools, delete container and find every rc4.txt or key.txt (if you used an older release)
rename the new rc4.txt --> rc4.key !place it in the folder of ultravnc.

maybe... problem one side use plugin_reg and another side there use plugin_noreg ?

akaidiot · Post by **akaidiot** » 2005-02-15 01:42

redge wrote:akaidiot
it is possible your key is corrupt on server side !?
this tools "keypal" below can fix it !
http://www.jensign.com/JavaScience/dotnet/keypal/

check with tools, delete container and find every rc4.txt or key.txt (if you used an older release)
rename the new rc4.txt --> rc4.key !place it in the folder of ultravnc.

maybe... problem one side use plugin_reg and another side there use plugin_noreg ?

I tdeleted with keypal. Then when I entered "Admin properties" on the serverit said that it couldn't find "C:\Program Files\ORL\Ultra VCN\rc4.key" Then when I try to gen file. The file is disappeared!

But I really don't think this is the problem. More like a permissions issue. Because when I run the exact same vncviewer.exe and rc4.key from the usb-drive file it works from my home computers.

akaidiot · Post by **akaidiot** » 2005-02-15 13:46

I'm sitting once again at the public library and yes, once again: "cannot configure DSMPlugin".

So I'm forced to use Real VNC Enterprise edition 4.0. Which seam to have quiet a neat solution. I just tap in the ip/address:port and it asks me to generate secure key. I press ok. Enter my password.

And voilá, I'm in there, controling my computer with 128-bit AES encryption from the public library computer with abosulte minimal permissions, usb-key access though..

But of course without all the great advantages of ultr@vnc

akaidiot · Post by **akaidiot** » 2005-02-15 22:48

redge wrote:akaidiot
but i can copy and start software like ultravnc +dsm_plugin_no_reg

only need on USB key storage

vncviewer.exe (=>RC19.5)

rc4.key (must be same rc4.key as is on the server side)

MSRC4Plugin_noreg.dsm (ver. 1.1.4)

Where do you run the vncviewer.exe file from? I have no harddrive access. I can oly run the viewer fdirectly from the usb drive.. Does it work for you when you run it from the usb-drive?

redge · Post by **redge** » 2005-02-15 22:56

akaidiot

Where do you run the vncviewer.exe file from? I have no harddrive access. I can oly run the viewer fdirectly from the usb drive.. Does it work for you when you run it from the usb-drive?

I never try this way, :x
i use USB storage only and copy them on 2nd physical harddrive, i try again tomorrow start vncviewer from USB storage

akaidiot · Post by **akaidiot** » 2005-02-15 23:50

Great, thanks!

I managed to duplicate the error at home. Running on a win 2000 and activating and logging in to the guest account..

"Cannot configure DSMPlugin", what does that mean?!

redge · Post by **redge** » 2005-02-16 16:14

akaidiot
I was started vnviewer+dsmplugin_noreg+rc4.key from my USB storage with success !

"Cannot configure DSMPlugin", what does that mean?!

did you send message with detail from
http://home.comcast.net/~msrc4plugin/ms ... noreg.html
detail bottom website

akaidiot · Post by **akaidiot** » 2005-02-16 21:07

redge wrote:akaidiot
I was started vnviewer+dsmplugin_noreg+rc4.key from my USB storage with success !

"Cannot configure DSMPlugin", what does that mean?!
did you send message with detail from
http://home.comcast.net/~msrc4plugin/ms ... noreg.html
detail bottom website

Thanks! I just mailed him!

scovel · Post by **scovel** » 2005-02-17 17:24

I have reproduced the problem. Its due to the account having a "temporary profile." Its trying to create the key-store so it can import and use the key. It can't create the key-store, so it fails.

By the way, this only occurs with the actual "Guest" account, not an account that is in the "Users" group. There must be some additional permissions taken away from "Guest".

I'm using the Microsoft Crypto API. It creates the key-store in a secure location in your user profile. Even though I only use it temporarily, it still needs to be created so I can import your key (rc4.key) so that the API can use it.

Here's what I found on Microsoft's site...:

http://support.microsoft.com/default.as ... -us;265357

All the way at the bottom you'll see it's "By Design" that guest accounts can't create key containers. Microsoft can be SO frustrating!

Looks like I can't make it work with a Guest account. Sorry.

Sean

akaidiot · Post by **akaidiot** » 2005-02-17 17:33

Ooh, that's to bad

As mentioned earlier. RealVNC 4.0 enterprise edition works with encryption. Whe I try to connect directly from the usb-drive. It asks me to generate a secure key. I press ok and right there, I'm remote controlling my home computer securly from the public library.

But without all the supernice features of Ultr@VNC

Porhaps Ultr@VNC can adopt that solution or similar..?

scovel · Post by **scovel** » 2005-02-17 17:51

This particular problem is a limitation of how I chose to implement the encryption in the plugin. Its not an UltraVNC problem.

I chose to use the Microsoft Crypto API rather than write the crypto routines from scratch (or use a third-party library...). This was way back when DSM was untried and I didn't want to spend a lot of effort if it wasn't going to work. It was supposed to be a proof-of-concept plugin. (actually a buddy dared me to do it)

Its the Crypto API that is stopping the key-store from getting created. This is the first time I've seen this problem, and it is only documented in an obscure Microsoft KnowledgeBase article.

Someday, if someone decides to write another plugin using a different Crypto library, it probably won't have this limitation.

(Got any $$$? I'll write you a new one...)

scovel · Post by **scovel** » 2005-02-18 18:45

I talked with a Crypto buddy of mine today. Long story short: There will be a 1.1.5 out soon. It WILL work with Guest accounts.

sean

scovel · Post by **scovel** » 2005-02-18 20:19

Version 1.1.5 is out.

http://home.comcast.net/~msrc4plugin/

akaidiot · Post by **akaidiot** » 2005-02-20 14:53

I'm now home, after being away for the weekend. And I've now gotten it setup. And I can't wait until monday(that doesn't sound right) to test this out!

akaidiot · Post by **akaidiot** » 2005-02-21 13:15

I'm sitting at the library right now and it's....(drum-roll).....working!

Thanks for all the great work, now I can conenct securly to my home pc's. Truely from anywhere!

scovel · Post by **scovel** » 2005-02-21 15:45

Truely COOL!!!! Doesn't get much better than that!!!

Thanks for the push to get it to work!

Sean

Guest · Post by **Guest** » 2005-02-22 06:12

akaidiot wrote:I'm sitting once again at the public library and yes, once again: "cannot configure DSMPlugin".

So I'm forced to use Real VNC Enterprise edition 4.0. Which seam to have quiet a neat solution. I just tap in the ip/address:port and it asks me to generate secure key. I press ok. Enter my password.

And voilá, I'm in there, controling my computer with 128-bit AES encryption from the public library computer with abosulte minimal permissions, usb-key access though..

But of course without all the great advantages of ultr@vnc

Why do you care so much if its encrypted or not? You're most likely not transferring super secret documents or personal info...

akaidiot · Post by **akaidiot** » 2005-02-22 09:40

Well I don't want people to get my password and vnc into my computers..

And I want to feel haxx0zZz

UltraVNC