[
https://issues.apache.org/jira/browse/GUACAMOLE-1346?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17489922#comment-17489922
]
Nick Couchman commented on GUACAMOLE-1346:
------------------------------------------
[~skogan]: The issue appears to be that, even if you enable password-only
("legacy") VNC authentication in MacOS (which is security level 2), the Mac VNC
server is still advertising security type 30 (Apple Remote Display), and so
Guacamole (well, libvncclient, really) and ARD negotiate to that
security/authentication level rather than the lower one.
I suspect the best route to go will be to have a drop-down box that allows you
to select/force an authentication level on the Guacamole side (similar to how
the RDP support let's you choose between NLA, TLS, and RDP security levels),
and then, if the server advertises that level forcibly use it, else exit the
connection with an error.
> Legacy VNC connections to MacOS remote access prompt for username
> -----------------------------------------------------------------
>
> Key: GUACAMOLE-1346
> URL: https://issues.apache.org/jira/browse/GUACAMOLE-1346
> Project: Guacamole
> Issue Type: Bug
> Affects Versions: 1.3.0
> Environment: CentOS Linux release 7.7.1908
> guacd-1.3.0-1.el7.x86_64
> libguac-client-vnc-1.3.0-1.el7.x86_64
> guacamole-1.3.0.war
> Reporter: Stanislav Kogan
> Priority: Minor
>
> Since the introduction of the prompt for username/password feature in 1.3.0,
> when connecting to MacOS hosts configured for legacy VNC (password only
> mode), Guacamole blocks on username prompt. Connections to other VNC
> password-only or non-auth servers work properly.
--
This message was sent by Atlassian Jira
(v8.20.1#820001)
