Login Issues (Cygwin sshd, UltraVNC 1.0.0 RC18, Putty)

[netrix37]

I have about 16 2000/XP machines I have setup with Cygwin sshd server, UltraVNC 1.0 RC 18. I've got VNC setup with loopback and I'm tunnelling the connection through ssh. Of the 16 locations 3 seem to be randomly resetting the password for both VNC and Cygwin sshd. Sometimes both will be reset and sometimes one or the other will be reset. Most of the systems are setup on DynDNS with a dynamic IP NAT'd to a local box within the network (theres 14 locations). The only firewall setup is on the router itself. I DO get prompted for a password but when I enter the correct password it denies me. Any clues as to what is causing this? I'm using NTSEC authentication.

On a related note I see that you can import registry entries (via reg with cygwin) and have attempted to reset the password from the command line by exporting the entire "CURRENT_USER\Software\ORL\WinVNCe" branch and then importing on the remote side but that doesn't seem to reset the password. What am I missing?

[ipsec]

I have about 16 2000/XP machines I have setup with Cygwin sshd server, UltraVNC 1.0 RC 18. I've got VNC setup with loopback and I'm tunnelling the connection through ssh. Of the 16 locations 3 seem to be randomly resetting the password for both VNC and Cygwin sshd. Sometimes both will be reset and sometimes one or the other will be reset. Most of the systems are setup on DynDNS with a dynamic IP NAT'd to a local box within the network (theres 14 locations). The only firewall setup is on the router itself. I DO get prompted for a password but when I enter the correct password it denies me. Any clues as to what is causing this? I'm using NTSEC authentication.

On a related note I see that you can import registry entries (via reg with cygwin) and have attempted to reset the password from the command line by exporting the entire "CURRENT_USER\Software\ORL\WinVNCe" branch and then importing on the remote side but that doesn't seem to reset the password. What am I missing?

The only thing that seems to make sense is that at those 3 locations something isnt set up properly or isnt working right? Not sure what but unfortunately you are the lucky one to find out.

As far as why it denies you access thorugh ntsec... The only thing that makes sense is either the account isnt a part of the authorized group ect. Does it ever let you in with this user name otherwise? If it doesnt It only makes sense that the account isnt in the group.

Lastly if the VNC is set up as a service rather than being run as an app you may want to look at the HKLM-Software-WinVNC3-Default-Password reg setting rather than the current user. If it is being run as an app then current user is right.

[netrix37]

The only thing that seems to make sense is that at those 3 locations something isnt set up properly or isnt working right? Not sure what but unfortunately you are the lucky one to find out.

As far as why it denies you access thorugh ntsec... The only thing that makes sense is either the account isnt a part of the authorized group ect. Does it ever let you in with this user name otherwise? If it doesnt It only makes sense that the account isnt in the group.

Lastly if the VNC is set up as a service rather than being run as an app you may want to look at the HKLM-Software-WinVNC3-Default-Password reg setting rather than the current user. If it is being run as an app then current user is right.

Well all three of those locations worked for nearly three weeks before having any issues (And the locations didn't die at the same time either). Both cygwin-sshd and vnc would let me in without hitch. Can you recommend any alternative authentication methods? Also any experience with the MSRC4Plugin.dsm plugin?

I'm looking for something to make the whole process easier and while generating plublic/private keys at each location doesn't thrill me in the long run it will take cygwin out of the picture.

Thanks VNC IS being run as a service so I'll use that registry key instead.

[niv]

Funny that after getting it to work in half a dozen pcs, IT DOESNT WORK on MY PC.

I am running OpenSSH on the Host PC Under win 2000.
It is behind a Linksys Router with the SSH port forward to it.
I can connect using Putty.
I have forward the VNC ports via Putty. I run VNC Viewer and GET the login window asking for a password.
I enter the password and it disapears - without establishing a connection.
No firewall are involved.
Any idea?

Niv

[ipsec]

no error message right?

[niv]

VNC authentication failed!
in a Ultr@VNC Info window
with the OK button

After clicking OK the viewer disappears.
any clue?

[niv]

Seems the SSH tunel is terminated at the router.
ok let me simplify this:
I am establishing a ssh connection to the router (say IP 1.1.1.1)
PC A (say 192.168.0.1) is behind the router and has the SSH port forward to it.

I want to reach the VNC server on PC A, via ssh tunneling.
PC B (say 192.168.0.2) which is behind the router also runs a VNC server.
Both PC A and PC B use port 5900 for VNC.
I forward port 5900 to PC B in the router.
after establishing a ssh connection to PC A I run UVNC.
althogh I call loaclhost:5900 I reach PC B.

Y?
Y is the SSH terminaded at the router?

Niv

[ipsec]

Seems the SSH tunel is terminated at the router.
ok let me simplify this:
I am establishing a ssh connection to the router (say IP 1.1.1.1)
PC A (say 192.168.0.1) is behind the router and has the SSH port forward to it.

I want to reach the VNC server on PC A, via ssh tunneling.
PC B (say 192.168.0.2) which is behind the router also runs a VNC server.
Both PC A and PC B use port 5900 for VNC.
I forward port 5900 to PC B in the router.
after establishing a ssh connection to PC A I run UVNC.
althogh I call loaclhost:5900 I reach PC B.

Y?
Y is the SSH terminaded at the router?

Niv

It may not be terminated but somehow it realizes the packets are destined for 5900. Then grabs those packets and re-routes them not knowingly screwing up your ssh??

That doesnt sound good either.

Obviously you can test by doing 5900 for computer b
and 5901 for computer a and see if you can get in that way? This way the router just allows the packets to route properly through the ssh and then resides on your internal network.?