Can VncViewer.jar be used on Cisco ASA

Should you have problems with the JavaViewer, here's the place to look for help or report issues.

Can VncViewer.jar be used on Cisco ASA

Postby Witto » 2011-11-20 23:16

On a Cisco ASA, in the "Clientless SSL VPN" or "WebVPN", a TightVNC plug-in can be used.
http://www.cisco.com/en/US/docs/security/asa/asa80/configuration/guide/webvpn.html#wp1292902
This TightVNC Java plug-in does not support the UltraVNC "MS-Logon II" or the "New MS-Logon".
I installed UltraVNC 1.0.9.6.1 on a pc "MyVNCServer" and I downloaded the Java VncViewer via http://MyVNCServer:5800/VncViewer.jar/.
Can VncViewer.jar be used on a Cisco ASA as replacement fot the TightVNC java plug-in on a Cisco ASA?
Witto
 
Posts: 4
Joined: 2011-11-19 10:00

Re: Can VncViewer.jar be used on Cisco ASA

Postby B » 2011-11-21 18:09

What a great question -- I didn't even know the ASA's "SSL VPN" support included 3rd party stuff.

However, as I said in your other thread,

viewtopic.php?f=34&t=29064

as far as I know the Java viewer doesn't (yet) support MSLogon or DSM plugins. I hope I'm wrong.
B
Super-Mod
Super-Mod
 
Posts: 2347
Joined: 2009-09-09 14:05

Re: Can VncViewer.jar be used on Cisco ASA

Postby Witto » 2011-11-21 23:17

Dear B,
B wrote:the Java viewer doesn't (yet) support MSLogon... I hope I'm wrong.

I think you're wrong. Like I said, I configured "MS-Logon II" or "New MS-Logon" on my server.
If Ibrowse to http://MyVNCServer:5800/, I do get a VNC Authentication Window asking for both Username and Password.
Witto
 
Posts: 4
Joined: 2011-11-19 10:00

Re: Can VncViewer.jar be used on Cisco ASA

Postby B » 2011-11-21 23:32

And it works, you authenticate, and get remote control? That's great. The last I remembered the javaviewer development was a bit stalled.

http://forum.ultravnc.info/viewtopic.php?t=27736

Ah, here we go, from a changelog for 1.0.9.6.1 at FileHippo:

# javaviewer
* mslogon fixed


So yup, I was wrong, thank you. Of course this doesn't help answer your question at all. :(

It certainly appears that the javaviewer in your command line test is simply defaulting to standard userid-less VNC behavior. You might want to PM Rudi to ask. Maybe there are some command line arguments for the javaviewer... have you checked the code?
B
Super-Mod
Super-Mod
 
Posts: 2347
Joined: 2009-09-09 14:05

Re: Can VncViewer.jar be used on Cisco ASA

Postby B » 2011-11-21 23:41

From this code snippet, it seems it detects by itself based on the authentication protocol returned by the server...

Code: Select all
// mslogon support
    //
    // Detect Auth Protocol (Ultr@VNC or the standard One)
    // To know if we must show the username box
    //


......


// mslogon support
  //
  // Detect Server rfb Protocol to know the auth Method
  // Perform a connexion to detect the Serverminor
  //

  void prologueDetectAuthProtocol() throws Exception {

    rfb = new RfbProto(host, port, this, null, 0); // Modif: troessner - sf@2007: not yet used

    rfb.readVersionMsg();

    System.out.println("RFB server supports protocol version " +
             rfb.serverMajor + "." + rfb.serverMinor);

    // Mslogon support
    if (rfb.serverMinor == 4) {
       mslogon = true;   
       System.out.println("Ultr@VNC mslogon detected");
    }
   
    rfb.writeVersionMsg();

  }
 
  // mslogon support end
B
Super-Mod
Super-Mod
 
Posts: 2347
Joined: 2009-09-09 14:05


Return to JavaViewer

Who is online

Users browsing this forum: No registered users and 4 guests