The VNC Manager - SmartCode Solutions Forum
Home       Members    Calendar    Who's On
Welcome Guest ( Login | Register )
        


12»»

"Too many security failures" with RealVNC 4.1... Expand / Collapse
Author
Message
Posted 3/21/2005 12:36:29 PM
Junior Member

Junior MemberJunior MemberJunior MemberJunior MemberJunior MemberJunior MemberJunior MemberJunior Member

Group: Forum Members
Last Login: 5/23/2008 9:42:51 AM
Posts: 13, Visits: 25

I've downloaded RealVNC v 4.1 Free Ed. and installed it on a Win2000(sp5) server to test it. Initially everything worked fine but then I started getting the error message "Too many sercurity  failures. Do you wish to attempt to reconnect to 172.16.1.20?  Yes/No". I found that it never works to answer yes, regardless of how long you wait for the security block to time-out. The only thing that does work is killing the VNC service and then restarting it.

I finally removed v4.1 and re-installed v4.0 and the problem stopped entirely.

The reason I'm posting this problem to this forum is that I am using VNC Manager v2.5.73 and I have VNC set to check for server status every 15 minutes. I'm also using VNC authentication for access. Is there a chance that VNC Manager's status checking is somehow triggering RealVNC 4.1's tighter security?

For reference, here's a reply regarding the problem when I posted a question regarding this to the RealVNC discussion group. In particular, the last paragraph suggesting non-authenticated communication between my PC and the targer server.

 

Bob,

"Too many security failures" indicates that the IP address from which you
are connecting has been making lots of connections to the VNC Server that
didn't end up being successfully authenticated.

This is a security feature designed to prevent dictionary attacks on
servers, by preventing machines from making large numbers of connections to
a server over a short period of time.

The message is triggered by 5 failed authentication attempts, at which point
a 10 second lockout is applied before the next attempt is permitted.  The
next failed attempt causes the timeout to be doubled.

Given that (I assume) you are seeing this message in spite of supplying
correct credentials each time you try to log in, and that once you see the
message you never again get the chance to enter a password, it sounds like
something is connecting to the server from the same IP address as your
viewer machine and is not authenticating, hence causing the failures.

VNC 4.0 was less secure in this respect, by default, hence the different
behaviour.

Cheers,

Wez @ RealVNC Ltd.

Post #284
Posted 3/21/2005 4:12:37 PM


Junior Member

Junior MemberJunior MemberJunior MemberJunior MemberJunior MemberJunior MemberJunior MemberJunior Member

Group: Forum Members
Last Login: 8/10/2005 5:33:46 PM
Posts: 22, Visits: 2
Have you tried unchecking it to see if there is a difference?



--------

Adam Moore
Public Relations Coordinator
SmartCode Solutions
adam_moore@s-code.com
Post #285
Posted 3/21/2005 6:42:07 PM


Supreme Being

Supreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme Being

Group: Administrators
Last Login: Today @ 8:51:03 AM
Posts: 824, Visits: 1,332
Bob,
yes this could be caused by Status updates feature. Because when it checks for a VNC server status, it establishes a connection to it. So from the server point of view, it looks like a connection attempt, which was terminated before VNC session has been established.
We will increase default status update interval, and put an information tip on a page with settings.



Kindest Regards,
SmartCode Solutions Support
Post #286
Posted 3/22/2005 1:45:02 PM
Junior Member

Junior MemberJunior MemberJunior MemberJunior MemberJunior MemberJunior MemberJunior MemberJunior Member

Group: Forum Members
Last Login: 5/23/2008 9:42:51 AM
Posts: 13, Visits: 25

For testing purposes, I un-installed RealVNC v4.0 and re-installed v4.1 on the server having the problem. I then removed this server from VNC Manager and left everything connected overnight. In the morning, I was able to log into the server directly through RealVNC.

Now here's a strange development. I added the server  back into VNC Manager with updates still happening every 15 minutes. I have been running that for about 6 hours now and no "security failures". I plan to install RealVNC 4.1 on a couple other systems and see how they work.

Post #288
Posted 3/22/2005 9:02:31 PM
Junior Member

Junior MemberJunior MemberJunior MemberJunior MemberJunior MemberJunior MemberJunior MemberJunior Member

Group: Forum Members
Last Login: 5/23/2008 9:42:51 AM
Posts: 13, Visits: 25
Well, the "too many security failures" finally started on my original Win2000 server. I installed v4.1 on a Windows XP Pro PC and another Win2000 server and the problem appeared on them as well. Prior to this, all of them had v3.3.7 on them with no problems.
Post #289
Posted 3/22/2005 9:23:03 PM


Supreme Being

Supreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme Being

Group: Administrators
Last Login: Today @ 8:51:03 AM
Posts: 824, Visits: 1,332

Bob,
could you please send config.xml and vnc_servers.xml to support@s-code.com ? The files are located at:
%USERPROFILE%\Application Data\Smart Code\VNC\Manager

PS: I need the files from the PC, on which you able to reproduce the problem.





Kindest Regards,
SmartCode Solutions Support
Post #290
Posted 3/23/2005 6:25:02 AM


Supreme Being

Supreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme Being

Group: Administrators
Last Login: Today @ 8:51:03 AM
Posts: 824, Visits: 1,332

Bob,
I have an idea what might cause this behavior. In case if you have a server with the same IP added to a different folders, when during status update the server will be updated several times. Hence VNC Manager, will establish several connections to the VNC server within short time interval. What might cause security protection mechanism to trigger.

Let me know if that's so.





Kindest Regards,
SmartCode Solutions Support
Post #291
Posted 3/23/2005 7:42:54 AM
Junior Member

Junior MemberJunior MemberJunior MemberJunior MemberJunior MemberJunior MemberJunior MemberJunior Member

Group: Forum Members
Last Login: 5/23/2008 9:42:51 AM
Posts: 13, Visits: 25
No, the units I installed RealVNC 4.1 on are only members of one group in VNC Manager. I also checked the Application Event Log on each of the systems and the error associated with VNC is "Connections: Blacklisted: 172.16.3.50". The IP address is of my PC running VNC Manager.
Post #292
Posted 5/9/2005 4:40:00 PM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum Newbie