Re: password policies / length restriction

Matthias Heinrich <[email protected]> Mon, 15 Feb 2021 16:00:29 +0100
Newsgroups gmane.network.tight-vnc.general
Message-ID <[email protected]>
that seems to be right. I just now tried to connect only with the first 
eight chars of the thirteen-lenght password and it worked. Thank you for 
enlightening me! I still wonder why there was a difference between the 
two platforms (Win 7 and Win 10) by setting the password on 
server-side?! As I said before, I first used the same version of 
tightvnc (2.7.10).

Am 15.02.2021 um 15:41 schrieb Diego Carmona:
> The 8 character limit is part of the RFB protocol, it doesn't vary 
> from one version to the other, or one platform to the other.
>
> What might have happened with previous versions is that the server 
> might have allowed you to enter passwords longer than 8 characters, 
> but they will always get truncated to the first 8 characters when they 
> are actually used for authentication during the handshake process. So 
> anything past the first 8 characters might as well not exist.
>
>
> /Ing. Diego Carmona Salazar/
> /Desarrollador de Software  |  Ingeniería en Computación | ITCR
> [email protected] <mailto:[email protected]> | ~dcarmona 
> <https://ic-itcr.ac.cr/~dcarmona/>/
>
> <http://ic-itcr.ac.cr/~dcarmona/>
>
>
> El lun, 15 feb 2021 a las 8:35, Matthias Heinrich 
> (<[email protected] <mailto:[email protected]>>) 
> escribió:
>
>     When I started rolling out tightvnc 2.7.10 in 2016 I installed on
>     Windows 7-machines and I could set password-length far above eight
>     characters. As admin-password I chose thirteen characters f.e. When
>     starting installing new Windows-10 machines last year, I
>     recognized that
>     suddenly I could only set the first eight characters of the passwords
>     used on the old Windows 7-machines. I didn't see any option to
>     vary/change the password length. When I started reading this
>     mailing-list archive I wondered reading that I would be quite
>     normal to
>     only use 8 chars in order to maintain compatibility of all
>     vnc-products.
>     But the fact is, that on the machines installed in 2016 I could
>     use more
>     than eight chars using the same version 2.7.10. I tried the newest
>     version and the problem stayed the same. Is there any possibility
>     to "go
>     back" to more than eight chars on new installations? Does even anyone
>     had the same issue/phenomenon? Does it even has anything to do
>     with the
>     OS (Windows 7/10)? Thanks a lot!
>
>
>
>     ___________________________________________________________
>     TightVNC mailing list, [email protected]
>     <mailto:[email protected]>
>     To change your subscription or to UNSUBSCRIBE, please visit
>     https://lists.sourceforge.net/lists/listinfo/vnc-tight-list
>     <https://lists.sourceforge.net/lists/listinfo/vnc-tight-list>
>

___________________________________________________________
TightVNC mailing list, [email protected]
To change your subscription or to UNSUBSCRIBE, please visit
https://lists.sourceforge.net/lists/listinfo/vnc-tight-list