Monday, September 04, 2006

VPN for Palm checklist

1. Allow Users to Connect Remotely to This Computer

2. routing and remore access

3. allow incoming connections

posted by Surinder at 1:37 PM | 0 comments links to this post
Routing and Remote Access (VPN 4)

Routing and Remote Access (VPN problem # 4)

Error 711:


When attempting to start the Routing and Remote Access Service, you may receive "The Routing and Remote Access service terminated with service-specific error 711" and Event ID: 7024 in the System Event log of the server shows.

This behavior may occur because the Routing and Remote Access Service is unable to start if the Remote Access Connection Manager service, Remote Access Auto Connection Manager, and the Telephony service are disabled.


RESOLUTION: to resolve this behavior, you must use the Services Administrative tool to set the Startup Type of all the Remote Access Connection Manager service, Remote Access Auto Connection Manager, and the Telephony service to Manual.. After you have made these settings, you can restart the Routing and Remote Access Service.

Softick PPP & HotSync Manager

If you do not add HotSync Manager or Softick PPP in the Startup, you need to make sure that you first start the HotSync Manager and then Softick PPP. You would need to Soft Reset if you start PPP first as it captures the port. If you have Hotsync Manager in your startup, you won't have to worry about not being able to HotSync. This is the reason why they warn you in Softick PPP settings that "You will not be able to use HotSync until clicking Shutdown PPP" if you activate Softick PPP at startup.

My RND

There are two main VNC clients for Palm- Free one called PalmVNC and Shareware micro-VNC $19.95 USD by Hitachi Systems & Services, a member of the Hitachi Group: one of the largest providers of systems integration services in Japan.

I had used PalmVNC in the past without major complaints and later uninstalled it because I was over it. Now i need a VNC client on my palm to monitor my night unlimited Internet connection from MTNL. I need it coz at times I have to get out of bed, go near the PC and verify if everything is downloading fine! Makes it hard to fall back to sleep again. Now I can use the same VNC to monitor it from my bed.

It didnt work, so I tried to start the VNC Service in Services. It said could not start the VNC Service on the local computer- error 2, the system cannot find the file specified.

I had earlier tried to instal WinVNC server on my PC and it says: The WinVNC server could not be installed.

The I started Workstation service by this didnt have effect on both the errors.

WinVNC can now be made to run as a service process under both Windows NT and Windows 95/98, by following the instructions outlined below. This allows you to connect to a machine which has nobody logged in to it, for example. On NT, you can also send Ctrl-Alt-Del to the server when it's running as a service, allowing you to unlock a locked workstation, f

so no need to install it as a service!! love u!

************!!!!! just make sure that a password is set and that it is able to take incoming connection hint!!


no need to install 2- If you would like to have TightVNC start automatically and run even if there is no active user, you should install it as a service using the corresponding menu item from the TightVNC Administration section. Note that installing the WinVNC service is the only way to make Ctrl-Alt-Del work remotely (applicable only to Windows NT/2000/XP systems).


i clicked on remove as i wanted to try if ultra vnc was workin asnd it gave me an error saying it could not remove a particular entry from registr.. then i clikcekd on install services and it automtically installed it!! kya pagal pan hai!!



maybe it wasnt workin because it had some old preferences which were not deleted - my dyndns for example!

also i realizewd tht i had installed an older verison of vnc- i installed 3.3.3.

also read somewhere that if u try to access ur own pc thru vncviewer , it wont work.. sounds so obvious now! i tried using the dyndns hostname with vnc viewer!










PalmVNC will not use SSS if scaling is set to 1:1 VNC server does not support SSS(Server Side Scaling). We recommend you to upgrade your VNC server because SSS is important in low-power device or low-bandwidth. But you can also use old VNC server in this mode. Notice that Scaing and Fuzzy drawing disable in this mode. It's freeware, so I know I can't "officially" complain, but it does have a few issues with it. The first one I noticed 30 seconds after installing it, was that scaling at any factor other than 1:1 does not work at all, from the my Tungsten T2 Palm handheld to any vnc server, OSX, Windows, or Linux. Any attempt to scroll when selecting any scaling factor other than 1:1 causes an immediate server disconnect. Also, setting the scaling factor in the Details form to anything other than 1:1 causes the same problem.

Overall, it's a great application, but still requires a LOT of scrolling to move around a standard 1024x768 desktop screen.

I've tried the "newer" version (non-free), and it too has some lingering issues, the most annoying of which is the constant refreshing of data, which takes 3-5x longer than the refreshing rate of this (free) version.

A few features I'd love to see would include selectable bpp levels, which would speed up refresh, a properly-working scaling factor (perhaps with hires support for screens larger than 160x160), and macros for launching certain applications from certain x,y coords on the screen. [VNC host] is not specified(the field is emptied.),you can connect to SSH terminal instead of VNC server.

# SSH port] ... When using SSH, Specify the port number of a SSH server. The digits of less than 4 characters can be used.
Usually, the value of this field is 22. However, since this value can be changed by setup of a SSH server, you need to specify this value so that it may be suitable for a SSH server's setup.
The value of this field is ignored when a [SSH host] is empty.
# [SSH user] ... When using SSH, Specify user name for logging in to a SSH server.
The alphanumeric and symbolic characters of less than 31 characters can be used.
The value of this field is ignored when a [SSH host] is empty.
# [SSH password] ... When using SSH, Specify password for logging in to a SSH server.
The alphanumeric and symbolic characters of less than 31 characters can be used.
When not specifying here, a password is asked at each connection time.
In addition, SSH password is stored without encryption in an Palm OS machine. Probably, those who have worries in security had better not specify here.
The value of this field is ignored when a [SSH host] is empty.

TightVNC will work only if TightVNC is used on both sides of the connection. gr8 site-= http://mywebpages.comcast.net/SupportCD/VNCGuide.html

Bullet-proof VNC remote access

By: Darren Kitchen

Securely access your home computer while on the road

To many road worriers accessing a home computer while on the go is a blessing. Many solutions exist but non are as secure as tunneling VNC traffic through an SSH session. With the advent of free WiFi in hotels, airports, and restaurants securing ones traffic is ever more important. Let's take a look at the technology that will enable us to do this, and then get right into setting it all up.

Explanation of SSH, VNC, and Tunneling

SSH, or Secure Shell, is a protocol that enables secure communication between clients and servers through strong encryption. Typically it is used to access a command shell like BASH on UNIX and Linux or CMD on Windows. Using SSH for shell access is much more secure than the traditional Telnet protocol since data, including your password, is not transferred in "plain text", thus protecting you from eavesdroppers.

More information: http://en.wikipedia.org/wiki/Secure_shell

VNC is a protocol that enables remote desktop access to another computer. When a VNC client connects to a VNC server it is fed the server's desktop display while the server accepts the client's keyboard and mouse input. Using this software is virtually like sitting at the remote computer. VNC is open source and available under the General Public License with many variants to choose from. While VNC does not transmit passwords in "plain text" like Telnet it is simple to crack passwords using free tools. For this reason we will be using VNC through a SSH, which brings us to tunneling.

More information: http://en.wikipedia.org/wiki/VNC

Tunneling is a network protocol that allows one protocol to be encapsulated inside another. This is very similar to how corporate VPNs work but on a much simpler level. We will be encapsulating our VNC protocol traffic over our SSH protocol traffic by port forwarding TCP 5900 on the home PC to TCP 5900 on our remote PC using an SSH client.

More information: http://en.wikipedia.org/wiki/Tunneling_protocol

Prepping your home network for SSH traffic

In most cases home PCs are connected to a router which is in turn connected to a broadband Internet connection like Cable or DSL. Our first step in this instance is to port forward TCP port 22 from the router to the PC we wish to remotely and securely access. This process varies among router manufacturers but the basic principal remains the same. Login to the router (which can typically be found at http://192.168.1.1 or http://192.168.0.1) and find the port-forwarding menu. Enable TCP port 22 traffic to point to the IP address of your computer and click save.

Next we will need to open TCP port 22 in the firewall on your computer. If you are running Windows XP SP2 click Start, then Run, enter the following command and click OK.

NETSH FIREWALL ADD PORTOPENING TCP 22 SSH

Setting up your home PC

Setting up the PC is a pretty simple task split into two parts. First we need to install the VNC server, then the SSH server.

The VNC server I recommend is called Tight VNC and it can be downloaded at www.tightvnc.com. Download the latest version and install, choosing the default settings. Tight VNC will register itself as a service, meaning it will startup on its own. Once installation is complete we need to give VNC a password to accept. Next click the Advanced button and check the box labeled Allow loopback connections. Click ok on both menus and the server is setup.

Now we need to setup the SSH server. There are many freely available SSH servers but I recommend the light weight and simple freeSSHd. It can be downloaded from www.freesshd.com. Download and install the latest version choosing the default settings. Once installation is complete the SSH server should already be running. From here we just need to add a user account. To do so just double click the freeSSHd icon in the system tray and click the Users tab. Click the Add button and fill out the fields for login and password. Authorization should be set to "Password stored as SHA1 hash". Click Apply to create the user, then Apply & Save, and then Hide.

From here the home PC is all set, ready to accept remote desktop connections from the road. Let's take a look at how we do that.

Connecting to your home PC from afar

Just like setting up the home PC, connecting to it is done in two steps. First we will need to connect to the SSH server at home, then we will connect to the VNC server. Once both are complete you will be able to see you're desktop and interact with it as if you were sitting at home.

We'll start by connecting to the SSH server at home. To do this we'll need an SSH client. I recommend Putty. It's simple, secure, and gets the job done well. Putty can be downloaded from http://www.chiark.greenend.org.uk/~sgtatham/putty/. There is no installation necessary, just run the Putty program. Once in Putty we'll need to enter just a few parameters. First we'll need to enter our home IP address in the Host Name (or IP address) field. If you don't know your home IP address you can find it by going to the website www.whatismyip.com from your home computer.

With your home IP entered click the Tunnels menu at the bottom left. In the Source Port field enter 5800, and in the Destination field enter 127.0.0.1:5800. To make life a lot easier you might want to save this session so you don't have to enter all this information every time you want to connect. To do so click the Sessions menu at the top left, enter a session name like "Home Computer" and click Save. Now to connect click the Open button.

A warning might appear if this is your first time connecting. This is simply asking you if you trust the computer you are connecting to. Click Yes and the warning will not appear again. You should now be at a command window being prompted for your username and password. Enter the username and password you created in freeSSHd and you will be greeted by a DOS prompt.

From here we have successfully connected to our computer at home and we can open the VNC remote desktop session by opening http://127.0.0.1:5800 in a web browser. You will be prompted for a password. This is the password you assigned in tightVNC. Once you have entered your password and clicked OK you will be greeted by your home computer's desktop. From here you can interact with it as if you were sitting right there at the keyboard and mouse!

RELATED WEBSITE LINKS
SSH Server http://freesshd.com/
SSH Client: http://www.chiark.greenend.org.uk/~sgtatham/putty/
VNC Server and Client: http://www.tightvnc.com/

ABOUT THE GUEST
Darren Kitchen has been hacking around with computers since the days of the 1200 baud modem. He is currently the producer and co-host of the Internet TV show Hak.5, a variety tech show for hackers and do-it-yourselfers, and a co-host on The War Room, an online radio show about World of Warcraft with Jenn Cutter.

Opera Mini on Tungsten T2

I used opera-mini.prc file for Tungsten C on my T2. When I try to launch Mini Opera, it says - "Missing IBM Java VM- Please ensure that IBM's WebSphere Micro Environment Java VM is installed". I installed Websphere Micro Environment which had the following three files: j9_vm_bundle.prc, javademo.prc, midp21.prc (MIDP= Mobile Information Device Profile =Java runtime environment). The demo works on T2 but Opera still gives the same error message!

I then installed J9JavaVMMidpNG.prc and the demo. The demo doesnt run and gives a fatal alert. The Opera, on the other hand, gives the same error!

One problem I need to look into later is I havent HotSynched these files but have used the Card Reader and Resco Explorer instead (File Manager for Palm). The Palm isn't synching at the moment so need to try that later.

Since T2 has just 800k of dynamic heap memory, Fargo Heap Resizer maybe required. The program enlarges dynamic heap on Tungsten T and T2 devices from 800KB up to 1.8 MB. This program is a MUST for T2 as it helps in multitasking pTunes etc.

Another solution would be to find the older Websphere which was compatible with T2. This can also be developed by using the following help page. WebSphere Micro Environment Toolkit will be required which is free for developers. Or else I may try WAPUniverse: an robust opensource WAP browser for PalmOS powered devices.

"There are 10 types of people in the world, those that understand binary and those that don't" -Anonymous

Saturday, September 02, 2006

apr 18- 2006- read palm book.

i have mentioned that i MUST instal and enable a new network connection "accept incoming connection" but i have connected my palm to the internet without these steps by just installing softik ppp!!

i had used this page in april-
http://www.winthrop.dk/zire/index.htm

Unable to start routing and remote access

I started accept remote connection in system properties but was unable to start the service of routing and remote access as i was getting Error 711

Rinku-

From Internet-

Error 711: When attempting to start the Routing and Remote Access Service, you may receive "The Routing and Remote Access service terminated with service-specific error 711" and Event ID: 7024 in the System Event log of the server shows. This behavior may occur because the Routing and Remote Access Service is unable to start if the Remote Access Connection Manager service, Remote Access Auto Connection Manager, and the Telephony service are disabled.

RESOLUTION: to resolve this behavior, you must use the Services Administrative tool to set the Startup Type of all the Remote Access Connection Manager service, Remote Access Auto Connection Manager, and the Telephony service to Manual.. After you have made these settings, you can restart the Routing and Remote Access Service.

After I solved Error 711, I got error code 1717

1717 error after starting remote access connection manager, telphone etc. remore remote and routhibng still dint work!! it only started working after i started event log service in adminitsatve services!!

Remote control your PC through your Palm

check
1. Allow Users to Connect Remotely to This Computer

2. routing and remore access

3. allow incoming connections


There are two main VNC clients for Palm- Free one called PalmVNC and Shareware micro-VNC $19.95 USD by Hitachi Systems & Services, a member of the Hitachi Group: one of the largest providers of systems integration services in Japan.

I had used PalmVNC in the past without major complaints and later uninstalled it because I was over it. Now i need a VNC client on my palm to monitor my night unlimited Internet connection from MTNL. I need it coz at times I have to get out of bed, go near the PC and verify if everything is downloading fine! Makes it hard to fall back to sleep again. Now I can use the same VNC to monitor it from my bed.

It didnt work, so I tried to start the VNC Service in Services. It said could not start the VNC Service on the local computer- error 2, the system cannot find the file specified.

I had earlier tried to instal WinVNC server on my PC and it says: The WinVNC server could not be installed.

The I started Workstation service by this didnt have effect on both the errors.

WinVNC can now be made to run as a service process under both Windows NT and Windows 95/98, by following the instructions outlined below. This allows you to connect to a machine which has nobody logged in to it, for example. On NT, you can also send Ctrl-Alt-Del to the server when it's running as a service, allowing you to unlock a locked workstation, f

so no need to install it as a service!! love u!

Next day- Now I know that VNC wasnt installed properly hence I was unable to start it in Administrative tools> Services.

I think we need to make sure that we are connected to the computer by Softick PPP (or any other way). So I started Softick PPP. It connects but still no connection with Palm VNC. It says error cannot connect to 192.168.1.3:5900

5900 is the port used by VNC.

************!!!!! just make sure that a password is set and that it is able to take incoming connection hint!!


no need to install 2- If you would like to have TightVNC start automatically and run even if there is no active user, you should install it as a service using the corresponding menu item from the TightVNC Administration section. Note that installing the WinVNC service is the only way to make Ctrl-Alt-Del work remotely (applicable only to Windows NT/2000/XP systems).


i clicked on remove as i wanted to try if ultra vnc was workin asnd it gave me an error saying it could not remove a particular entry from registr.. then i clikcekd on install services and it automtically installed it!! kya pagal pan hai!!



maybe it wasnt workin because it had some old preferences which were not deleted - my dyndns for example!

also i realizewd tht i had installed an older verison of vnc- i installed 3.3.3.

also read somewhere that if u try to access ur own pc thru vncviewer , it wont work.. sounds so obvious now! i tried using the dyndns hostname with vnc viewer!










PalmVNC will not use SSS if scaling is set to 1:1 VNC server does not support SSS(Server Side Scaling). We recommend you to upgrade your VNC server because SSS is important in low-power device or low-bandwidth. But you can also use old VNC server in this mode. Notice that Scaing and Fuzzy drawing disable in this mode. It's freeware, so I know I can't "officially" complain, but it does have a few issues with it. The first one I noticed 30 seconds after installing it, was that scaling at any factor other than 1:1 does not work at all, from the my Tungsten T2 Palm handheld to any vnc server, OSX, Windows, or Linux. Any attempt to scroll when selecting any scaling factor other than 1:1 causes an immediate server disconnect. Also, setting the scaling factor in the Details form to anything other than 1:1 causes the same problem.

Overall, it's a great application, but still requires a LOT of scrolling to move around a standard 1024x768 desktop screen.

I've tried the "newer" version (non-free), and it too has some lingering issues, the most annoying of which is the constant refreshing of data, which takes 3-5x longer than the refreshing rate of this (free) version.

A few features I'd love to see would include selectable bpp levels, which would speed up refresh, a properly-working scaling factor (perhaps with hires support for screens larger than 160x160), and macros for launching certain applications from certain x,y coords on the screen. [VNC host] is not specified(the field is emptied.),you can connect to SSH terminal instead of VNC server.

# SSH port] ... When using SSH, Specify the port number of a SSH server. The digits of less than 4 characters can be used.
Usually, the value of this field is 22. However, since this value can be changed by setup of a SSH server, you need to specify this value so that it may be suitable for a SSH server's setup.
The value of this field is ignored when a [SSH host] is empty.
# [SSH user] ... When using SSH, Specify user name for logging in to a SSH server.
The alphanumeric and symbolic characters of less than 31 characters can be used.
The value of this field is ignored when a [SSH host] is empty.
# [SSH password] ... When using SSH, Specify password for logging in to a SSH server.
The alphanumeric and symbolic characters of less than 31 characters can be used.
When not specifying here, a password is asked at each connection time.
In addition, SSH password is stored without encryption in an Palm OS machine. Probably, those who have worries in security had better not specify here.
The value of this field is ignored when a [SSH host] is empty.

TightVNC will work only if TightVNC is used on both sides of the connection. gr8 site-= http://mywebpages.comcast.net/SupportCD/VNCGuide.html

Different Routers have different ways of enabling these Ports, commonly known as Port Forwarding.