- This topic has 5 replies, 4 voices, and was last updated 16 years, 2 months ago by
Allister Banks.
-
AuthorPosts
-
August 27, 2010 at 2:23 pm #379343
nobrainer
ParticipantIs it possible to use the password hash script from Createuser pkg to encrypt a password and pass through a kickstart script for VNC?
August 27, 2010 at 3:15 pm #379344foilpan
Participanti think the password required for vnc access is encrypted differently.
try this:
http://www.macgeekery.com/tips/cli/setting_remote_desktops_vnc_password_in_terminal
August 27, 2010 at 3:19 pm #379345nobrainer
ParticipantYeah, I saw the perl script, fought with it for about 2 weeks before I realized the encrypted PW was being sent as clear text (first 8 characters of the output of that file) rather than converting back to the actual PW.
wasn’t sure if I tried a different encryption method if it would work…August 27, 2010 at 3:43 pm #379346dead2sin
Participantnobrainer wrote:
Yeah, I saw the perl script, fought with it for about 2 weeks before I realized the encrypted PW was being sent as clear text (first 8 characters of the output of that file) rather than converting back to the actual PW.
wasn’t sure if I tried a different encryption method if it would work…Now when you say VNC, are you using the compatibility mode VNC so non-Macs can connect to the screen, or will it be mac to mac, just no ARD?
Nate
August 27, 2010 at 4:41 pm #379347nobrainer
ParticipantVNC – so a Windows system can connect.
August 28, 2010 at 3:37 am #379359Allister Banks
ParticipantI don’t think these are the droids you’re looking for. shadowhash is a php script that converts passwords to a format DSLocal can work with, which createUser then renames it as it shoves it in the right place for the system to utilize. Yes, I’m oversimplifying(and probably not fully understanding), but ARD is accessing that same DB, and kickstart is just an enabler app for its features.
I decided to fire up FSeventer, and two files are in play when you turn on this feature in the GUI. They’re in /Library/Prefs, and only one makes obvious sense:
com.apple.RemoteManagement.plst has the key “VNCLegacyConnectionsEnabled” set to true
com.apple.VNCSettings.txt may just be a 32-bit hex(and only the first 16 are in play on my system, it seems) but I think thats your answer: distribute these files, with the right perms, to your systems. Please give it a try and let us know?Allister
-
AuthorPosts
- You must be logged in to reply to this topic.