[TurboVNC-Users] guacamole says: Unsupported VeNCrypt version

Discussion:

Dieter Blaas

2017-05-08 04:35:16 UTC

Hi,

to connect to my sever from a browser on any PC (where
download/install of java is not possible/allowed) I am trying to provide
VNC over html5 by using guacamole (Ubuntu-16.04 Mate). I can connect via
ssh but when trying to connect over VNC (turbovncserver 2.1.1) syslog
issues the below error message and the connection does not work:

-----------------------------------------------------------------------------------------

May 2 08:23:13 ubuntu guacd[3224]: Protocol "vnc" selected
May 2 08:23:13 ubuntu guacd[3224]: VNC server supports protocol version
3.8 (viewer 3.8)
May 2 08:23:13 ubuntu guacd[3224]: We have 3 security types to read
May 2 08:23:13 ubuntu guacd[3224]: 0) Received security type 19
May 2 08:23:13 ubuntu guacd[3224]: Selecting security type 19 (0/3 in
the list)
May 2 08:23:13 ubuntu guacd[3224]: 1) Received security type 2
May 2 08:23:13 ubuntu guacd[3224]: 2) Received security type 16
May 2 08:23:13 ubuntu guacd[3224]: Selected Security Scheme 19
May 2 08:23:13 ubuntu guacd[3224]: GnuTLS initialized.
May 2 08:23:13 ubuntu guacd[3224]: Got VeNCrypt version 2.0 from
server.
May 2 08:23:13 ubuntu guacd[3224]: *Unsupported VeNCrypt version. *
May 2 08:23:13 ubuntu guacd[3224]: Error instantiating client: UNKNOWN

---------------------------------------------------------------------------------------------

Is there a parameter to change the security type in turbovncserver?

Thanks, Dieter

------------------------------------------------------------------------
Dieter Blaas,
Max F. Perutz Laboratories
Medical University of Vienna,
Inst. Med. Biochem., Vienna Biocenter (VBC),
Dr. Bohr Gasse 9/3,
A-1030 Vienna, Austria,
Tel: 0043 1 4277 61630,
Fax: 0043 1 4277 9616,
e-mail: ***@meduniwien.ac.at
------------------------------------------------------------------------

DRC

2017-05-08 13:00:42 UTC

Permalink

I generally recommend noVNC over Guacamole for HTML 5 viewing, and I'm
trying to secure funding to add the RFB flow control extensions to noVNC
so that it will perform better on high-latency connections (it will
still never be as fast as Java or native, however.)

As far as Guac, I'm not sure why it's reporting 2.0 as the VeNCrypt
version. It may mean 0.2, which is the version of VeNCrypt that we
support (also the version that TigerVNC supports.) To globally disable
VeNCrypt in the server, edit /etc/turbovncserver-security.conf and set
permitted-security-types such that it only allows non-VeNCrypt security
types. Example:

permitted-security-types = VNC, OTP, UnixLogin, None

will make the server behave like TurboVNC 2.0.x. If you want to do this
just for one instance of the server, then you can start it with an
appropriate -SecurityTypes argument, such as:

-SecurityTypes VNC,OTP,UnixLogin,None

Post by Dieter Blaas
Hi,
to connect to my sever from a browser on any PC (where
download/install of java is not possible/allowed) I am trying to provide
VNC over html5 by using guacamole (Ubuntu-16.04 Mate). I can connect via
ssh but when trying to connect over VNC (turbovncserver 2.1.1) syslog
-----------------------------------------------------------------------------------------
May 2 08:23:13 ubuntu guacd[3224]: Protocol "vnc" selected
May 2 08:23:13 ubuntu guacd[3224]: VNC server supports protocol version
3.8 (viewer 3.8)
May 2 08:23:13 ubuntu guacd[3224]: We have 3 security types to read
May 2 08:23:13 ubuntu guacd[3224]: 0) Received security type 19
May 2 08:23:13 ubuntu guacd[3224]: Selecting security type 19 (0/3 in
the list)
May 2 08:23:13 ubuntu guacd[3224]: 1) Received security type 2
May 2 08:23:13 ubuntu guacd[3224]: 2) Received security type 16
May 2 08:23:13 ubuntu guacd[3224]: Selected Security Scheme 19
May 2 08:23:13 ubuntu guacd[3224]: GnuTLS initialized.
May 2 08:23:13 ubuntu guacd[3224]: Got VeNCrypt version 2.0 from
server.
May 2 08:23:13 ubuntu guacd[3224]: *Unsupported VeNCrypt version. *
May 2 08:23:13 ubuntu guacd[3224]: Error instantiating client: UNKNOWN
---------------------------------------------------------------------------------------------
Is there a parameter to change the security type in turbovncserver?
Thanks, Dieter
------------------------------------------------------------------------
Dieter Blaas,
Max F. Perutz Laboratories
Medical University of Vienna,
Inst. Med. Biochem., Vienna Biocenter (VBC),
Dr. Bohr Gasse 9/3,
A-1030 Vienna, Austria,
Tel: 0043 1 4277 61630,
Fax: 0043 1 4277 9616,
------------------------------------------------------------------------
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
TurboVNC-Users mailing list
https://lists.sourceforge.net/lists/listinfo/turbovnc-users

Dieter Blaas

2017-05-08 15:42:35 UTC

Permalink

Thank you very much! It is working....

------------------------------------------------------------------------
Dieter Blaas,
Max F. Perutz Laboratories
Medical University of Vienna,
Inst. Med. Biochem., Vienna Biocenter (VBC),
Dr. Bohr Gasse 9/3,
A-1030 Vienna, Austria,
Tel: 0043 1 4277 61630,
Fax: 0043 1 4277 9616,
e-mail: ***@meduniwien.ac.at
------------------------------------------------------------------------

Post by DRC
I generally recommend noVNC over Guacamole for HTML 5 viewing, and I'm
trying to secure funding to add the RFB flow control extensions to noVNC
so that it will perform better on high-latency connections (it will
still never be as fast as Java or native, however.)
As far as Guac, I'm not sure why it's reporting 2.0 as the VeNCrypt
version. It may mean 0.2, which is the version of VeNCrypt that we
support (also the version that TigerVNC supports.) To globally disable
VeNCrypt in the server, edit /etc/turbovncserver-security.conf and set
permitted-security-types such that it only allows non-VeNCrypt security
permitted-security-types = VNC, OTP, UnixLogin, None
will make the server behave like TurboVNC 2.0.x. If you want to do this
just for one instance of the server, then you can start it with an
-SecurityTypes VNC,OTP,UnixLogin,None

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
TurboVNC-Users mailing list
https://lists.sourceforge.net/lists/listinfo/turbovnc-users