Update: UltraVNC 1.4.3.6 and UltraVNC SC 1.4.3.6: viewtopic.php?t=37885
Important: Please update to latest version before to create a reply, a topic or an issue: viewtopic.php?t=37864

Join us on social networks and share our announcements:
- Website: https://uvnc.com/
- GitHub: https://github.com/ultravnc
- Mastodon: https://mastodon.social/@ultravnc
- Facebook: https://www.facebook.com/ultravnc1
- X/Twitter: https://twitter.com/ultravnc1
- Reddit community: https://www.reddit.com/r/ultravnc
- OpenHub: https://openhub.net/p/ultravnc

If machine loses connection to DC, won't authenticate login

Should you have problems with the MS logon plugin, here's the place to look for help or report issues
Post Reply
AKL-MFCU
Posts: 2
Joined: 2006-08-12 14:55

If machine loses connection to DC, won't authenticate login

Post by AKL-MFCU »

Hi everyone,

I recently moved over to utlravnc from realvnc and wow, what a difference. However, we have around 550 computers we would like to have this on and i currently have been using aroun 30 of those as a test environment. There is just one severe problem that i have run into when using the MS-Login II schema.

If the Domain Controller that provides login credentials is not found (lets say the server has crashed), the ultravnc servers deny access to any login attempts. As all of our MIS guys are on call, we need to be sure that if the worse case scenario of a domain controller crashes (which the machines get authentication from through AD) that they are still able to connect remotely. Could there be a switch that if it cannot find the sever for authentication that it can default back to a simple local vncserver password authentication?

Don't know if anyone else has had this problem or not so let me know. Thanks.

ADDED: We are working in a win server 2003 environment, with all machines running win xp pro sp2. this is a T1 MPLS network with standard cisco routers and switches. No firewalls are up and we are currently not utilizing the dsm plugin.
Last edited by AKL-MFCU on 2006-08-12 15:06, edited 1 time in total.
AKL-MFCU
Posts: 2
Joined: 2006-08-12 14:55

Re: If machine loses connection to DC, won't authenticate lo

Post by AKL-MFCU »

is there no answer to this? -BUMP
Ares
Former moderator
Former moderator
Posts: 183
Joined: 2005-03-16 18:42

Re: If machine loses connection to DC, won't authenticate lo

Post by Ares »

As far as I know, you either use the MS-Login or the VNC authentication. If such a "fall-back" authentication was in place, it may defeat the extra security that using MS-Login provides, in my opinion.

From what (little) I've heard, MS-Login is still being tweaked. You might add something about this in the feature requests section. Sorry, that's about all I can think of for you to do right now.

As of lately, I can only say that I've heard other mods say they recommend just using plain vnc authentication to begin with - that the MS-Login doesn't seem quite ready for prime time. But that is just what I've heard. Just figured you'd rather hear that instead of nothing at all. I can assure you that the mods / devs are reading your messages, and if anyone knew exactly what you could do, they would have probably told you by now. It's just as of right now, there's not much (that I know of, anyway) that you can do other than revert to vnc-authentication altogether.


-Ares
Last edited by Ares on 2006-09-06 14:37, edited 4 times in total.
Marscha
Former moderator
Former moderator
Posts: 464
Joined: 2004-05-14 06:48

Re: If machine loses connection to DC, won't authenticate lo

Post by Marscha »

If your single DC is down, then not only the MIS guys but also the users cannot log in, so there is a bigger problem.

You can create a local account on each machine and configure this in addition in UltraVNC.
Then have a policy for your supporters that they can use this account as a fallback if the DC is not available.

Be aware that this might severely reduce security since a lot of people have to know the same password.
Post Reply