jocull's questions

I'm hitting a really annoying problem with IIS 7. I've setup my web.config by the books as follows:

<?xml version="1.0" encoding="UTF-8"?>
<configuration>
    <system.webServer>
        <handlers>
            <add name="Python" path="*.cgi" verb="*" modules="CgiModule" scriptProcessor="C:\Python27\python.exe -u &quot;%s&quot;" resourceType="Unspecified" requireAccess="Script" />
        </handlers>
        <security>
            <requestFiltering>
                <!-- maxAllowedContentLength is in bytes (B)  -->
                <requestLimits maxAllowedContentLength="1073741824" /> <!-- 1GB -->
            </requestFiltering>
        </security>
        <rewrite>
            <rules>
                <rule name="rewrite to hgwebdir" patternSyntax="Wildcard">
                    <match url="*" />
                    <conditions logicalGrouping="MatchAll" trackAllCaptures="false">
                        <add input="{REQUEST_FILENAME}" matchType="IsFile" negate="true" />
                    </conditions>
                    <action type="Rewrite" url="hgweb.cgi/{R:1}" />
                </rule>
            </rules>
        </rewrite>
    </system.webServer>
    <system.web>
        <!-- maxRequestLength is in kilobytes (KB)  -->
        <httpRuntime maxRequestLength="1048576" /> <!-- 1GB -->
    </system.web>
</configuration>

When I POST to the CGI script (it's hgweb for Mercurial via Python) via HTTP everything is fine - no problems whatsoever.

However, when I POST to the script via HTTPS (SSL) I'm still capped at the default upload limit of 30MB. This doesn't make any sense to me. What is going on?!

I am in the process of reverse engineering an existing system in an attempt to replace their existing TightVNC applet with something else (hopefully NoVNC if at all possible).

So far, here is what I know...

• Debian server
• OpenVZ linux VMs inside of it that runs apps on-demand for users
• Users connect to OpenVZ VMs via generated parameters (TightVNC uses these)

I've been able to connect using the TightVNC Java jar using connection params like this:

java -jar VncViewer-20070502-01.jar
    HOST myhost.com
    PORT 443
    ENCPASSWORD 234f92c02c3b128e
    CONNECT vncsession:0c5a727371e5d10e3147566e389b28c3
    DisableSSL No

I believe that this connects to the server using an HTTPS proxy and then reroutes to a specific OpenVZ session, but I cannot be 100% sure of the process. I am unable to ping vncsession from the Debian server or the OpenVZ instances, so I'm not exactly sure what it even is.

Some of these parameters are covered in the TightVNC README - but not all of them.

Right now I am facing two problems...

1. ENCPASSWORD is a non-standard parameter as far as I can tell. Through decompiling the TightVNC jar I can tell that this is simply decrypted back into plain text, so I have no idea what the purpose of this is... The passwords are randomly generated in the first place.
2. I have no idea how CONNECT works, or how to use it on any VNC client besides TightVNC. I believe it has something to do with the proxy routing.

Can anyone help me understand these parameters, especially the CONNECT parameter? Any additional help with using another VNC client in place of TightVNC would be appreciated as well. Thank you!

I've been trying to setup a VMware View connection server. I feel like I am getting it close to having it working, but haven't had success yet. The current issue is that the connection server tells me I am "not entitled" to use the system after logging in with my domain credentials. I don't know why this is the case, because I am explicitly set as an administrator to the system!

So my question is slightly two-fold I guess...

1. Where do user credentials come from? I am assuming they are from Active Directory, since that is what I am prompted to log into a domain.
2. How do I give a user privileges to access the system? I have looked all through the web admin interface of the connection server. There is a section to add users, but when I search for a domain user in here no users are returned. In fact, there are no users at all.

Thanks for any help you can provide!