Re: problems with starting vnc using xinetd

[Corne Beerse]

Steven Dahlin wrote:


I have created a vnc startup/shutdown script in the /etc/init.d directory
and enabled it with insserv.  I have tried several variants but encounter a
couple problems which are not mentioned in various responses on the list.
First if I call vncserver directly like so:

case "$1" in
start)
  vncserver :2

Then it requests a password.

If instead I execute the following:

  su - root -c "vncserver :2"

Then I get back a message that there is no valid license.  However, when run
from the prompt it works perfectly fine.  I also added "vnclicense -list"
and it came back with a message that there were no licenses.  I have also
set it so the vnc script is called last by xinetd.

None of the examples seems to cover these possibilities.  Does anyone have
any suggestions?
 



If you want to start a vnc-session on boot of your machine, you can 
better peek in the `vncserver` script on how it starts `Xvnc`. With this 
information you can have this Xvnc started by your display-manager like 
CDE, KDE or Gnome: Find where that starts the X11 server and have it 
start an other X11 server on an other display number. This should be 
Xvnc with the vnc-specific options given but the X11 specific options 
filled out by the display manager.


The major advantage is that the display manager will handle the 
session,  just as on the console. If you donnot want a graphical 
console, you can just install as if you would and replace the X11-server 
with Xvnc.



Regards

Corni
___
VNC-List mailing list
VNC-List@realvnc.com
To remove yourself from the list visit:
http://www.realvnc.com/mailman/listinfo/vnc-list

VNC Help

[Craig Fitt]

Hi Guys

If anyone can help it would be much appreciated.

I had VNC free edition running on a server of one of my clients, about
1month ago, I noticed someone was logging in and running scripts getting
past all passwords, it was also happening to other clients of mine. The task
were like get wintask32.exe etc etc.

I know have a problem on the one server where when I startup windows after
about 5min a script runs that I cant even see, and every 3-4 hours a process
starts called vnc_bypath.exe which hogs my bandwidth and I either need to
restart the server or end the process and then everythings work on the
internet again.

Is there anyway to resolve this?

Thanks

Regards,
  Craig Fitt
  http://www.theoasis.co.za
Tel: 011 784 9167
Fax: 011 884 4052
Cell: 0828707664

[demime 1.01d removed an attachment of type image/gif which had a name of 
oasis.gif]
___
VNC-List mailing list
VNC-List@realvnc.com
To remove yourself from the list visit:
http://www.realvnc.com/mailman/listinfo/vnc-list

Re: VNC Help

[Alex Pelts]

Search trough archives of this list. This or similar to this problem was 
reported countless times. Your vnc server was exploited trough known 
security hole. Fix for this was posted over half year ago.


Regards,
Alex


Craig Fitt wrote:

Hi Guys

If anyone can help it would be much appreciated.

I had VNC free edition running on a server of one of my clients, about
1month ago, I noticed someone was logging in and running scripts getting
past all passwords, it was also happening to other clients of mine. The task
were like get wintask32.exe etc etc.

I know have a problem on the one server where when I startup windows after
about 5min a script runs that I cant even see, and every 3-4 hours a process
starts called vnc_bypath.exe which hogs my bandwidth and I either need to
restart the server or end the process and then everythings work on the
internet again.

Is there anyway to resolve this?

Thanks

Regards,
  Craig Fitt
  http://www.theoasis.co.za
Tel: 011 784 9167
Fax: 011 884 4052
Cell: 0828707664

[demime 1.01d removed an attachment of type image/gif which had a name of 
oasis.gif]
___
VNC-List mailing list
VNC-List@realvnc.com
To remove yourself from the list visit:
http://www.realvnc.com/mailman/listinfo/vnc-list

___
VNC-List mailing list
VNC-List@realvnc.com
To remove yourself from the list visit:
http://www.realvnc.com/mailman/listinfo/vnc-list

Re: VNC Help

[Robin Hill]

On Thu Nov 09, 2006 at 08:54:52PM +0200, Craig Fitt wrote:

> Hi Guys
>
> If anyone can help it would be much appreciated.
>
> I had VNC free edition running on a server of one of my clients, about
> 1month ago, I noticed someone was logging in and running scripts getting
> past all passwords, it was also happening to other clients of mine. The
task
> were like get wintask32.exe etc etc.
>
Presumably this was on version 4.1 or 4.1.1?

> I know have a problem on the one server where when I startup windows after
> about 5min a script runs that I cant even see, and every 3-4 hours a
process
> starts called vnc_bypath.exe which hogs my bandwidth and I either need to
> restart the server or end the process and then everythings work on the
> internet again.
>
> Is there anyway to resolve this?
>
Well, to be quite frank, the only way you can be sure you've got rid of
any malware on there is to backup, wipe & reinstall.  You can then
restore any needed files (making sure to virus scan them!).

If this is not an option, then you'll have to boot from CD or another
disk (to prevent any malware loading at bootup), then run whatever virus
scanners, rootkit checkers, spyware removers, etc. you can find.

HTH,
Robin

--
 ___
( ' } |   Robin Hill<[EMAIL PROTECTED]> |
   / / )  | Little Jim says |
  // !!   |  "He fallen in de water !!" |

[demime 1.01d removed an attachment of type application/pgp-signature]
___
VNC-List mailing list
VNC-List@realvnc.com
To remove yourself from the list visit:
http://www.realvnc.com/mailman/listinfo/vnc-list

RE: read: connection reset by peer (10054)

[Kozlowski, Stephen]

Still unable to resolve.  Anybody have any ideas on what I should be looking
at?

I still am stumped on why it no longer asks me for the VNC password I have
set.

-Original Message-
From: James Weatherall [mailto:[EMAIL PROTECTED]
Sent: Monday, November 06, 2006 1:55 PM
To: 'Kozlowski, Stephen'
Cc: vnc-list@realvnc.com
Subject: RE: read: connection reset by peer (10054)


Hi Stephen,

The Connection Details dialog is the dialog that pops up when you run VNC
Viewer, into which you enter the server to which you wish to connect.  What
are you entering into that?

Regards,

Wez @ RealVNC Ltd.
 

> -Original Message-
> From: Kozlowski, Stephen [mailto:[EMAIL PROTECTED] 
> Sent: 06 November 2006 18:17
> To: 'James Weatherall'
> Subject: RE: read: connection reset by peer (10054)
> 
> I do not know what the Connection Details Dialog is.  I 
> looked at the config
> on the viewer, user and server and the configuration just has 
> the ports to
> use and the access.  This is set to +.  I am assuming that + 
> means everyone.
> 
> -Original Message-
> From: James Weatherall [mailto:[EMAIL PROTECTED]
> Sent: Monday, November 06, 2006 12:32 PM
> To: 'Kozlowski, Stephen'; vnc-list@realvnc.com
> Subject: RE: read: connection reset by peer (10054)
> 
> 
> Hi Stephen,
> 
> Are you sure that you're connecting to the RFB port for your 
> VNC server, and
> not to the HTTP port?  What are you entering into the Server 
> box in the
> Connection Details dialog?
> 
> Regards,
> 
> Wez @ RealVNC Ltd.
>  
> 
> > -Original Message-
> > From: [EMAIL PROTECTED] 
> > [mailto:[EMAIL PROTECTED] On Behalf Of Kozlowski, Stephen
> > Sent: 06 November 2006 15:54
> > To: 'vnc-list@realvnc.com'
> > Subject: read: connection reset by peer (10054)
> > 
> > I use to be able to VNC to my computer at work from home.  It 
> > would first
> > ask for my viewer password and I would be golden. 
> > 
> > It stopped working and when I start the viewer, It never asks for my
> > password, then after a few minutes...
> > 
> > read: connection reset by peer (10054)
> > 
> > I have found some hits on the Internet for this problem and 
> > from VNC users,
> > but never seen the solution.
> > 
> > I am guessing the wait is a timeout, but not sure why it is 
> > never asking to
> > validate the password.  Changed the password on server and 
> > user without any
> > success.  
> > 
> > Running VNC Free Edition 4.1.2
> > 
> > Any ideas?
> > 
> > Stephen J. Kozlowski
> > Project Leader - UNIX Administrator
> > CITSS
> > 1121 Highway 74 South
> > Peachtree City, GA  30269
> > 
> > (770) 486-4161
> > [EMAIL PROTECTED]
> > ___
> > VNC-List mailing list
> > VNC-List@realvnc.com
> > To remove yourself from the list visit:
> > http://www.realvnc.com/mailman/listinfo/vnc-list
> > 
> The preceding e-mail message (including any attachments) contains
> information that may be confidential, or constitute 
> non-public information.
> It is intended only for the designated recipient.  If you are 
> not the named
> addressee, you should not disseminate, distribute or copy this e-mail.
> If you have received this e-mail by mistake,  please notify the sender
> immediately by replying to this message and delete this 
> e-mail from your
> system.
> Use, dissemination, distribution or reproduction of this message by
> unintended recipients is not authorized and may be unlawful.
> 
The preceding e-mail message (including any attachments) contains
information that may be confidential, or constitute non-public information.
It is intended only for the designated recipient.  If you are not the named
addressee, you should not disseminate, distribute or copy this e-mail.
If you have received this e-mail by mistake,  please notify the sender
immediately by replying to this message and delete this e-mail from your
system.
Use, dissemination, distribution or reproduction of this message by
unintended recipients is not authorized and may be unlawful.
___
VNC-List mailing list
VNC-List@realvnc.com
To remove yourself from the list visit:
http://www.realvnc.com/mailman/listinfo/vnc-list

RE: vnc-server-3.3.3r2-28.2: "connection refused" or "end of stream"

[Calvin Webster]

Hi Wez,

I tried connecting to the console display using "vncviewer winggear:0"
early this morning and it didn't freeze. I played around for a couple of
minutes to be sure, then logged out of my X session at which point the
VNC viewer closed (usually it stays open on console displays). I was
able to log back in again, though, and could not get it to fail.

Next I tried connecting to one of the virtual displays that are
configured as xinetd services exactly as they are on the RHEL 4, FC 5,
and RHL 9 machines. This time it locked up the vnc server system just as
the connection to the console display had done before. I can still ping
it but all network services are unavailable and the physical console is
unresponsive. After this I disabled the xinetd vnc services until I get
a handle on what may be causing it. Each service represents a different
combination of geometry and color depth to which multiple connections
can be made.

Here is a sample of the 8 different services configured, each with a
corresponding entry in /etc/services.

Excerpt from /etc/xinetd.d/vnc
--
## [72] Color Depth: 24-bit Geometry: 1024x768
service vnc1024x768x24
{
disable = yes
flags   = REUSE
protocol= tcp
socket_type = stream
wait= no
user= nobody
server  = /usr/bin/Xvnc
server_args = -inetd -query localhost -once -geometry
1024x768 -depth 24 -desktop Pegasus
}
--

Corresponding entry in /etc/services:
--
vnc1024x768x24  5972/tcp# VNC Service 1024x768, 24-bit color
depth
--

I found these warnings in /var/log/XFree86.0.log
All but the frame buffer warning are listed in logs of working servers
too.
--
(WW) Open APM failed (/dev/apm_bios) (No such device)
(WW) ATI(0): Cannot shadow an accelerated frame buffer.
(WW) ATI(0): Option "SecurityTypes" is not used
(WW) ATI(0): Option "UserPasswdVerifier" is not used
(WW) ATI(0): Option "PasswordFile" is not used
--

I found this in /var/log/messages:
--
Nov  9 08:01:24 winggear gdm[3376]: gdm_slave_xioerror_handler: Fatal X
error - Restarting :0
--

More in-line comments below

Any further insights would be appreciated.

Thanks!

--Cal


On Wed, 2006-11-08 at 07:40, James Weatherall wrote:
[snip]
> The only instance we've ever seen of vnc.so causing hangs when loaded into
> the console X server was with a RedHat 7.3 test system with a particular
> model of graphics card for which the console X server's drivers were rather
> ropey.  The current vnc.so has to grab the pixel data *back* from the
> graphics card, which is obviously not as well supported/tested as the more
> common task of putting pixels onto the graphics card.  Our card did also
> display some weird behaviours even without vnc.so installed, though, so we
> couldn't be sure that that was the cause.

The graphics card info taken from /etc/sysconfig/hwconf:

-
class: VIDEO
bus: PCI
detached: 0
device: fb0
driver: Card:ATI Mach64
desc: "ATI|3D Rage Pro 215GP"
vendorId: 1002
deviceId: 4750
subVendorId: 
subDeviceId: 
pciType: 1
-

Note: This is a PCI-based SuperSparc IIe (Ultra 5 clone I believe).

> One other thing to remember is that if you replace vnc.so while you have a
> console X server running, you must remember to move or rm the old one before
> copying the new one into place, otherwise you overwrite the library binary
> while it's still in use, which will either fail the copy, or cause the X
> server to hang.

There was never a vnc.so until I installed this one.

Is it possible that the custom Xvnc build still doesn't match the
XFree86 installed? 

Here's the version data from the top of /var/log/XFree86.0.log:
--
XFree86 Version 4.2.1 (Custom Build: 4.2.1-13.73.23sparc) / X Window
System (protocol Version 11, revision 0, vendor release 6600)
Release Date: 18 October 2002
...
Build Operating System: Linux 2.4.20-2.31sparc sparc [ELF]
Build Host: aurora-dev.cb.de

Module Loader present
OS Kernel: Linux version 2.4.20-2.31sparc ([EMAIL PROTECTED]) (gcc driver 
version
egcs-2.91.66 19990314/Linux (egcs-1.1.2 release) executing gcc version
egcs-2.92.11) #1 Wed Sep 24 15:39:05 EDT 2003
--
___
VNC-List mailing list
VNC-List@realvnc.com
To remove yourself from the list visit:
http://www.realvnc.com/mailman/listinfo/vnc-list

Re: VNC Help

[Mick]

On Thursday 09 November 2006 20:07, Robin Hill wrote:
> On Thu Nov 09, 2006 at 08:54:52PM +0200, Craig Fitt wrote:

> > I had VNC free edition running on a server of one of my clients, about
> > 1month ago, I noticed someone was logging in and running scripts getting
> > past all passwords, it was also happening to other clients of mine. The
> > task were like get wintask32.exe etc etc.

Google (who is your friend) shows that wintask32.exe is a worm that can be
cleaned automatically using different antivirus applications and remover
scripts, or even manually (if you have the patience).  In case this was a
typo, wintsk32.exe is a trojan which can be removed in a similar fashion.

> Presumably this was on version 4.1 or 4.1.1?
>
> > I know have a problem on the one server where when I startup windows
> > after about 5min a script runs that I cant even see, and every 3-4 hours
> > a process
> > starts called vnc_bypath.exe which hogs my bandwidth and I either need to
> > restart the server or end the process and then everythings work on the
> > internet again.

Google again, reveals this: http://www.securigo.com/VNC-advisory.htm

> > Is there anyway to resolve this?
>
> Well, to be quite frank, the only way you can be sure you've got rid of
> any malware on there is to backup, wipe & reinstall.  You can then
> restore any needed files (making sure to virus scan them!).
>
> If this is not an option, then you'll have to boot from CD or another
> disk (to prevent any malware loading at bootup), then run whatever virus
> scanners, rootkit checkers, spyware removers, etc. you can find.

If these were my machines I would definitely reformat and reinstall, then lock
down each computer before I connected them to the Internet.  I always use VNC
through ssh tunnel, with secure key authentication and to my knowledge have
not had any compromised cases to date.  The VNC documentation is the best
place to start.

Good luck.
--
Regards,
Mick

[demime 1.01d removed an attachment of type application/pgp-signature]
___
VNC-List mailing list
VNC-List@realvnc.com
To remove yourself from the list visit:
http://www.realvnc.com/mailman/listinfo/vnc-list

Connection closed unexpectedly

[Pikoro Daimaku]

I am still getting this error when attempting to connect from my laptop to the
server.
I am using free VNC4 on computers loaded with XP SP2, updated to the max.
I have enabled the application in the Windows firewall and set the router to
port forward to 5900, thus following all the suggestions presented by this
list.
Please I need to get this to work, what am I missing?
Thanks.
___
VNC-List mailing list
VNC-List@realvnc.com
To remove yourself from the list visit:
http://www.realvnc.com/mailman/listinfo/vnc-list