Update: UltraVNC 1.4.3.6 and UltraVNC SC 1.4.3.6: viewtopic.php?t=37885
Important: Please update to latest version before to create a reply, a topic or an issue: viewtopic.php?t=37864

Join us on social networks and share our announcements:
- Website: https://uvnc.com/
- GitHub: https://github.com/ultravnc
- Mastodon: https://mastodon.social/@ultravnc
- Facebook: https://www.facebook.com/ultravnc1
- X/Twitter: https://twitter.com/ultravnc1
- Reddit community: https://www.reddit.com/r/ultravnc
- OpenHub: https://openhub.net/p/ultravnc

VNCVIEWER.EXE and MS authentication

Should you have problems with the MS logon plugin, here's the place to look for help or report issues
Post Reply
sbostedor
100
100
Posts: 273
Joined: 2005-02-02 19:30
Location: Jackson, MI, USA
Contact:

VNCVIEWER.EXE and MS authentication

Post by sbostedor »

Is there a way to pass the domain\username and password to the VNC viewer on a command line or .vnc file?
Marscha
Former moderator
Former moderator
Posts: 464
Joined: 2004-05-14 06:48

Post by Marscha »

I don't think it's possible with a .vnc file.
To me it seems not to be a good idea to have a Windows username and password in a text file.
sbostedor
100
100
Posts: 273
Joined: 2005-02-02 19:30
Location: Jackson, MI, USA
Contact:

LS login

Post by sbostedor »

I agree. I wouldn't do it myself but there have been numerous VNCScan users that have requested that their password be saved in VNCScan.

I could encrypt their login information so that it's not easily hacked so the security problem that you're talking about wouldn't be an issue.

Here's what I'd like to do:

The user puts his/her password into VNCScan.

VNCScan encrypts the user/pass into the XML file with a key tied to that computer. If someone grabs their XML file, it will be pretty much useless on another computer.

If they double-click on a computer, I'd like VNCScan to write the .vnc file, launch the viewer against it, then immediately delete the .vnc file. This would prevent the password from just hanging around on the computer.

I think that these measures would make this feature safe enough for anyone not working for the DOD. ;)
TechFan
Former moderator
Former moderator
Posts: 47
Joined: 2004-05-03 10:34

Post by TechFan »

I could see how it could be useful to have for at least the command line options (at least username). . .even RDP and ICA clients allow this. . .though I don't like the idea of a password being in clear text at any time. . .I think it is Citrix that allows you to pass an encrypted password to the command line. . .
Marscha
Former moderator
Former moderator
Posts: 464
Joined: 2004-05-14 06:48

Post by Marscha »

I thought about taking the domainname and username of the logged on user and fill the username field with that.
TechFan
Former moderator
Former moderator
Posts: 47
Joined: 2004-05-03 10:34

Post by TechFan »

That would probably work in most cases. . .though I don't always connect with my logged in user. It does seem that it would be good to have a way to pass that info via a command line. . .
Volleyknaller

Username

Post by Volleyknaller »

Is it possible to put only the windows username for
MS Logon into the -vnc file.
It would be great, because its strange to type
about 20 characters of my username every time
i log in.

Best regaRDS
Post Reply