Update: UltraVNC 1.4.3.6 and UltraVNC SC 1.4.3.6: viewtopic.php?t=37885
Important: Please update to latest version before to create a reply, a topic or an issue: viewtopic.php?t=37864

Join us on social networks and share our announcements:
- Website: https://uvnc.com/
- GitHub: https://github.com/ultravnc
- Mastodon: https://mastodon.social/@ultravnc
- Facebook: https://www.facebook.com/ultravnc1
- X/Twitter: https://twitter.com/ultravnc1
- Reddit community: https://www.reddit.com/r/ultravnc
- OpenHub: https://openhub.net/p/ultravnc

Automatic windows credentials login

Any features you would like to see in UltraVNC? Propose it here
Post Reply
xerces8
8
8
Posts: 15
Joined: 2004-08-27 08:22

Automatic windows credentials login

Post by xerces8 »

(forwarded from the mail list, as suggested)

Is it possible that VNC Viewer automatically logs-in the user to a server ?

Like this :

- server : I add COMPANY\john into the access list

- client :
- john logs into his Windows PC as COMPANY\john
- he runs VNC Viewer to connect to the server
- VNC automatically sends "this is COMPANY\john" to the server,
without asking for this info to be typed by the user

Regards,
xerces8
Guest

Post by Guest »

I was going to ask for the same, it would be great if also worked for the Java viewer

pleeeeaase 0:-)
User avatar
Oliver
Site-Admin
Site-Admin
Posts: 532
Joined: 2004-04-21 23:04
Location: Frankfurt am Main
Contact:

Post by Oliver »

Do you mean all credentials (including password) or just the domain\username?
Oliver

How to Report Bugs Effectively
My homepage | WinDirStat
PGP-keys:
  • Forum or UltraVNC-related: 0xA2DD1DBD, E18B 2E2F 4F3E D143 4ED4 3E2B E172 FB55 A2DD 1DBD
  • Other matters: 0x0E88590F, 38B5 5EBA A470 C0F7 0942 81B8 C779 D829 0E88 590F
xerces8
8
8
Posts: 15
Joined: 2004-08-27 08:22

Post by xerces8 »

user + pass ( and domain of course )

as in : if I connect to a windows network drive, where I am on the ACL, I don't need to re-enter my username and password, ItJustWorks(TM) ;)
User avatar
Oliver
Site-Admin
Site-Admin
Posts: 532
Joined: 2004-04-21 23:04
Location: Frankfurt am Main
Contact:

Post by Oliver »

xerces8 wrote:user + pass ( and domain of course )

as in : if I connect to a windows network drive, where I am on the ACL, I don't need to re-enter my username and password, ItJustWorks(TM) ;)
The magic is a different one. And without going deeply into the system you will hardly achieve this with UVNC.

Windows only sends something like an hash over "domain\username+password" over the network and this is compared in the destination machine. That's the whole trick. If you are in a real domain things are a little more complicated, but the above trick is responsible for the fact that if you have the same username and password an machines A and B you can easily authenticate (i.e. transparently without entering passwords) from A to B or vice versa.
Oliver

How to Report Bugs Effectively
My homepage | WinDirStat
PGP-keys:
  • Forum or UltraVNC-related: 0xA2DD1DBD, E18B 2E2F 4F3E D143 4ED4 3E2B E172 FB55 A2DD 1DBD
  • Other matters: 0x0E88590F, 38B5 5EBA A470 C0F7 0942 81B8 C779 D829 0E88 590F
xerces8
8
8
Posts: 15
Joined: 2004-08-27 08:22

Post by xerces8 »

Are you sure there is no (simple) way ?

I understand, that the server might need a patch too.

( and I did some work on windows authentication in Java, so I know the pain ;) )

(besides RealVNC already has this, so maybe someone from there can give a clue)
User avatar
Oliver
Site-Admin
Site-Admin
Posts: 532
Joined: 2004-04-21 23:04
Location: Frankfurt am Main
Contact:

Post by Oliver »

xerces8 wrote:Are you sure there is no (simple) way ?
Quite sure.
xerces8 wrote:I understand, that the server might need a patch too.
Maybe a replacement GINA could help ...
xerces8 wrote:( and I did some work on windows authentication in Java, so I know the pain ;) )

(besides RealVNC already has this, so maybe someone from there can give a clue)
We'll have a look into the source of RealVNC. Are you talking of the free flavor of RealVNC?
Oliver

How to Report Bugs Effectively
My homepage | WinDirStat
PGP-keys:
  • Forum or UltraVNC-related: 0xA2DD1DBD, E18B 2E2F 4F3E D143 4ED4 3E2B E172 FB55 A2DD 1DBD
  • Other matters: 0x0E88590F, 38B5 5EBA A470 C0F7 0942 81B8 C779 D829 0E88 590F
xerces8
8
8
Posts: 15
Joined: 2004-08-27 08:22

Post by xerces8 »

No, the enterprise version.

Maybe we have a misunderstanding here.

What I am talking about is : VNC client <-> VNC Server authentication

It appears you are talking about : VNC server <-> windows authentication (at the login screen of the remote PC, where VNC server is running ) ?
Last edited by xerces8 on 2005-06-30 08:26, edited 1 time in total.
User avatar
Oliver
Site-Admin
Site-Admin
Posts: 532
Joined: 2004-04-21 23:04
Location: Frankfurt am Main
Contact:

Post by Oliver »

xerces8 wrote:It appears you are talking about : VNC server <-> windows authentication (at the login screen of the remote PC, where VNC server is running ) ?
This is how I understood it. Then what exactly is missing in the VNC authentication process.

BTW: We don't have access to the Enterprise version source.
Oliver

How to Report Bugs Effectively
My homepage | WinDirStat
PGP-keys:
  • Forum or UltraVNC-related: 0xA2DD1DBD, E18B 2E2F 4F3E D143 4ED4 3E2B E172 FB55 A2DD 1DBD
  • Other matters: 0x0E88590F, 38B5 5EBA A470 C0F7 0942 81B8 C779 D829 0E88 590F
xerces8
8
8
Posts: 15
Joined: 2004-08-27 08:22

Post by xerces8 »

Oliver wrote:Then what exactly is missing in the VNC authentication process.
What I said :

Currently, when I run VNC viewer and connect to a server that uses MS Logon auth,
I must type in :
- username
- password


What I request is :
- VNC viewer takes the username anmd password that I used to log into my PC. Without typing them.


Long version :
- the admin sets up VNC server on host 'moon'
- he activates MS Logon
- he enters the user 'joe' into the ACL

- Joe logs into his work PC ('earth') with his username 'joe' (and password 'shmoe')
- Joe runs VNC viewer and tries to contact the 'moon' server

Current behavior :
- Joe must type 'joe' and 'shmoe' into VNC viewers dialog

Desired behavior :
- VNC viewer sees that it is run by user 'joe' and sends that info to VNC server automatically (Joe does not need to type his username)

[mod=2,1120128229]Corrected quote-tag-level[/mod]
User avatar
Oliver
Site-Admin
Site-Admin
Posts: 532
Joined: 2004-04-21 23:04
Location: Frankfurt am Main
Contact:

Post by Oliver »

xerces8 wrote:What I request is :
- VNC viewer takes the username anmd password that I used to log into my PC. Without typing them.
Let's see how and whether this will be possible. As I said, you will never know the password. The password is being hashed and the hash is compared. So the plain text password is not known (except on some very old flavors of NT).

Will be considered at least!
Oliver

How to Report Bugs Effectively
My homepage | WinDirStat
PGP-keys:
  • Forum or UltraVNC-related: 0xA2DD1DBD, E18B 2E2F 4F3E D143 4ED4 3E2B E172 FB55 A2DD 1DBD
  • Other matters: 0x0E88590F, 38B5 5EBA A470 C0F7 0942 81B8 C779 D829 0E88 590F
xerces8
8
8
Posts: 15
Joined: 2004-08-27 08:22

Post by xerces8 »

Yes, I know that. But :
- just autofilling the username would also be a helpful feature (just prefill the username text filed, so the user can edit it, just as in current version)
- sending the hash and adding support for it in the VNC server might also work
Last edited by xerces8 on 2005-06-30 10:59, edited 1 time in total.
redge
1000
1000
Posts: 6797
Joined: 2004-07-03 17:05
Location: Switzerland - Geneva

Post by redge »

like Oliver speak

Marscha, creator of UltravNC MS-Logon, was proposed "Gina" as solution
I remember he warning impact credential and can lock OS usability if something fail at logon screen.
(i did'nt find with search option the text of Marscha about this issue)

I believe to GINA (there not asking again same user/password) single sign on
A must have for V2 to connecto to UltraVNC server. (that make windows login really friendly from any place)
no need vnc authentication othervise only for compatibility with other VNC flavors.
UltraVNC 1.0.9.6.1 (built 20110518)
OS Win: xp home + vista business + 7 home
only experienced user, not developer
User avatar
Rudi De Vos
Admin & Developer
Admin & Developer
Posts: 6831
Joined: 2004-04-23 10:21
Contact:

Post by Rudi De Vos »

A GINA replacement also allow to start winvnc.....

+
I experimented with this as replacing for the service...(interactive service problems)

You just tell the GINA to start winvnc before he show the logon window.
Works on NT,XP,W2K
Works with individual RDP session
Longhorn....solve the service issue

PCanywhere has it own GINA

-
GINA replacenment is dangerous, if it fails you need a boot cd.
Can break compatibility, if custom gina's are already installed
FUS logon screen seems to be broken
redge
1000
1000
Posts: 6797
Joined: 2004-07-03 17:05
Location: Switzerland - Geneva

Post by redge »

xerces8 wrote: just autofilling the username would also be a helpful feature (just prefill the username text filed, so the user can edit it, just as in current version)
That would enough workaround othervise than strong safe solution if there too dangerous about "Gina" development. (I believe the futur devs fix bug Gina)

sorry for was confusing Rudi and Marscha about Gina issue.
UltraVNC 1.0.9.6.1 (built 20110518)
OS Win: xp home + vista business + 7 home
only experienced user, not developer
Marscha
Former moderator
Former moderator
Posts: 464
Joined: 2004-05-14 06:48

Post by Marscha »

Automatic windows credentials logon:
- It is possible
- You don't need a different GINA
- In principle I know how to do it

The solution would be again based on SSPI (same as MSLogon II).
It requires a RFB protocol change.
I.e. you cannot mix MSLogon I or II with the new authentication method.
I assume it will require a considerable amount of time to implement it.
mellerbeck
8
8
Posts: 8
Joined: 2005-09-22 21:19
Contact:

Autologon using windows credentials

Post by mellerbeck »

So... be kind to me. Anyways I was thinking about logging on with windows credentials and I noticed that with exchange server 2003 when you access it through the web browser it automatically logs you in. This is because Internet Explorer browser can be configured to pass the credentials you logged onto your computer with to any Web site that requests ‘Integrated’ authentication. I was wondering if you could somehow copycat this somehow to allow for ULtravnc integrated authentication.

Cheers
redge
1000
1000
Posts: 6797
Joined: 2004-07-03 17:05
Location: Switzerland - Geneva

Post by redge »

FlexLM like used with xrdp and rdesktop sourceforge ?
is'nt free and ready to use ?
UltraVNC 1.0.9.6.1 (built 20110518)
OS Win: xp home + vista business + 7 home
only experienced user, not developer
TKD
20
20
Posts: 32
Joined: 2005-04-15 12:44
Location: U.S.

similar to logmein?

Post by TKD »

logmein let's you click through w/a cached id and pw to login or unlock the remote pc...

do you want a feature similar to that?

try www.logmein.com and you'll see what i'm talking about.

it's perty good!
Johnson
Posts: 3
Joined: 2017-04-12 06:43

Re: Automatic windows credentials login

Post by Johnson »

I know that this thread is very old, but I'm looking exactly for the functionality describe by xerces8. Maybe this feature was implemented since this topic was created?
User avatar
Rudi De Vos
Admin & Developer
Admin & Developer
Posts: 6831
Joined: 2004-04-23 10:21
Contact:

Re: Automatic windows credentials login

Post by Rudi De Vos »

Sorry, that's hard to implement and it would only be possible if server and viewer are in the the same domain.
Johnson
Posts: 3
Joined: 2017-04-12 06:43

Re: Automatic windows credentials login

Post by Johnson »

Thank you very much for answer. In my case, all server and viewer are in the same domain. I understand that it is difficult to implement. I am asking about it because it would be comfortable but nothing will happen to me if I type credential every time.

One more time thank you.
User avatar
averkiev
40
40
Posts: 121
Joined: 2005-06-12 06:40
Location: Singapore
Contact:

Re: Automatic windows credentials login

Post by averkiev »

It seems that this request is about support for SSO (Single Sign-on) capability in UltraVNC. In my experience it is a fairly complicated functionality. Some software have built-in implementation for it, other relies on installation of an optional SSO plug-in modules. It would
Yury Averkiev
SmartCode VNC Manager - Manage, control and monitor computers from anywhere
Post Reply