michelsr Absent Member.
Absent Member.
8565 views

Nrzviewer.exe

When using Nrzviewer from the command line, there's a documented switch called /zenrights, which uses rights instead of password authentication.

I can't get this to work.

I get the message "Ticket not provided for rights authentication."

The log looks like this:
Started and Winsock (v 2) initialised
Connected to 10.2.35.250 port 5950
RFB server supports protocol version 3.7
Connected to RFB server, using protocol version 3.7
Authentication scheme: Novell authentication
Sent console version information...
Novell Encryption: Can’t read certificate file
Novell Encryption: Verify mode:0
Novell Encryption: Finished initializing all the parameters
Initialized Novell TLS Encryption...
Novell Encryption: Performing SSL handshake...
Verification of server certificate returned: 20.
Initialized SSL Encryption...
Ticket not provided for Rights Authentication.
Deinitialized Novell Encryption for the session...
Exiting
VNC viewer closing down


Any ideas?

By the way, remoting from the ZCC works, and so does password-based authentication from the command line.
Labels (2)
0 Likes
12 Replies
shaunpond Absent Member.
Absent Member.

Re: Nrzviewer.exe

Michelsr,

looks to me like you may have forgotten this "Before you launch a Remote Management operation in standalone mode, ensure that the Allow connection when Remote Management Console does not have SSL certificate option in the security settings of the Remote Management policy is enabled."

--

Shaun Pond


0 Likes
michelsr Absent Member.
Absent Member.

Re: Nrzviewer.exe

Shaun,

Thank you for the advice. But I verified that "Allow connection when Remote Management Console does not have SSL certificate" was enabled, and even incremented the policy bundle and refreshed the Agents, to make sure it was applied.

Still the same error.

Any other ideas?
0 Likes
shaunpond Absent Member.
Absent Member.

Re: Nrzviewer.exe

Michelsr,

you earlier said
> and so does password-based authentication from the command line.

did you mean password-based remote control?

--

Shaun Pond


0 Likes
michelsr Absent Member.
Absent Member.

Re: Nrzviewer.exe

Yeah, that's what I meant, Sean -- using nrzviewer.exe without the Zenrights switch. That works okay.
0 Likes
shaunpond Absent Member.
Absent Member.

Re: Nrzviewer.exe

Michelsr,

I just thought, are you using an external CA?

--

Shaun Pond


0 Likes
Micro Focus Contributor
Micro Focus Contributor

Re: Nrzviewer.exe

Is it possible, when running this in standalone mode, to hard code the
port number so that you don't have to put it in every time?

Mine works okay but I was thinking of recommending that this be used by
my support techs because I figured that it would be 'configured' for
ZEN. It appears though that it is just another VNC viewer client and
most of them probably already have one on their thumb drives so this one
doesn't give me any added functionality as far as I can tell.

A

michelsr wrote:
> When using Nrzviewer from the command line, there's a documented switch
> called /zenrights, which uses rights instead of password
> authentication.
>
> I can't get this to work.
>
> I get the message "Ticket not provided for rights authentication."
>
> The log looks like this:
> -Started and Winsock (v 2) initialised
> Connected to 10.2.35.250 port 5950
> RFB server supports protocol version 3.7
> Connected to RFB server, using protocol version 3.7
> Authentication scheme: Novell authentication
> Sent console version information...
> Novell Encryption: Can’t read certificate file
> Novell Encryption: Verify mode:0
> Novell Encryption: Finished initializing all the parameters
> Initialized Novell TLS Encryption...
> Novell Encryption: Performing SSL handshake...
> Verification of server certificate returned: 20.
> Initialized SSL Encryption...
> Ticket not provided for Rights Authentication.
> Deinitialized Novell Encryption for the session...
> Exiting
> VNC viewer closing down-
>
> Any ideas?
>
> By the way, remoting from the ZCC works, and so does password-based
> authentication from the command line.
>
>
>


--Alisia
0 Likes
shaunpond Absent Member.
Absent Member.

Re: Nrzviewer.exe

Alisia,

> Is it possible, when running this in standalone mode, to hard code the
> port number so that you don't have to put it in every time?
>

batch file? 🙂

--

Shaun Pond


0 Likes
diveboy Absent Member.
Absent Member.

Re: Nrzviewer.exe

can someone please post an example command line ?

I'm trying nzrViewer.exe /noencrypt /zenrights <servername>:5950

I have disabled the encryption as Shaun mentioned.


in return, i'll provide some Auto-it code for a tool that sits on your taskbar that will launch it.

Thanks
0 Likes
diveboy Absent Member.
Absent Member.

Re: Nrzviewer.exe

just intecepted the launch from zcc

/pipe /zenrights /locale English servername~~5950 /collaborate

tried that and nope, removed the /pipe and put /noencrypt but still no connection.
0 Likes
JFRigot Absent Member.
Absent Member.

Re: Nrzviewer.exe

Well, I actually have a similar problem.

When I try to remote-control one pc from the ZCC, using the "rights" method, no problem.

But if I 'm using the command-line (nzrViewer.exe -zenrights -remotecontrol MACHINENAME~~5950 /logfile c:\VNCLOG.txt), it doesn't work.

I logged both methods and here's what I have :
-On the successful connection (ZCC)
Received a value from the Agent : value = 1
Authentication succeeded


-With the nzrviewer.exe command-line method
Ticket not provided for Rights Authentication.


I don't know what's wrong but I would like to integrate the RC into our Call registration program, so the command-line way is what i would like to use.

I could handle using the password-based method, but how could I automate and include the pwd into a script, avoiding me to re-type it @ every conncetion?

Thanks
0 Likes
rsterling1 Absent Member.
Absent Member.

Re: Nrzviewer.exe

It's been a while since you've posted but I'm wondering if you ever got this to work. I'm struggling with the same issues except I can't even get it to work with the passwordm anymore.

Here's my command line:

NZRVIEWER /noencrypt /zenrights /viewonly /loglevel 12 /logfile zen.txt 10.80.17.133:5950

Here's my log:

Started and Winsock (v 2) initialised
bufsize expanded to 4352
Registered connection with app
Connected to 10.80.17.133 port 5950
reading 12 bytes
RFB server supports protocol version 3.7
writing 12 bytes
Connected to RFB server, using protocol version 3.7
reading 1 bytes
reading 3 bytes
writing 1 bytes
Enabling TightVNC protocol extensions
Authentication scheme: Novell authentication
writing 16 bytes
Sent console version information...
reading 16 bytes
reading 4 bytes
reading 16 bytes
writing 4 bytes
Novell Encryption: Certificate not provided
writing 2 bytes
reading 2 bytes
Novell Encryption: Performing SSL handshake...
SSL handshake failed. Error: 0. Reason: 6. Details: sslv3 alert handshake failur
e
Initialization of encryption for the session failed. Unable to proceed.
writing 2 bytes
writing 119 bytes
Initialization of encryption for the session failed. Unable to proceed.
Deregistered connection from app
Exiting
VNC viewer closing down

JFRigot;1780473 wrote:
Well, I actually have a similar problem.

When I try to remote-control one pc from the ZCC, using the "rights" method, no problem.

But if I 'm using the command-line (nzrViewer.exe -zenrights -remotecontrol MACHINENAME~~5950 /logfile c:\VNCLOG.txt), it doesn't work.

I logged both methods and here's what I have :
-On the successful connection (ZCC)


-With the nzrviewer.exe command-line method


I don't know what's wrong but I would like to integrate the RC into our Call registration program, so the command-line way is what i would like to use.

I could handle using the password-based method, but how could I automate and include the pwd into a script, avoiding me to re-type it @ every conncetion?

Thanks
0 Likes
techmv Absent Member.
Absent Member.

Re: Nrzviewer.exe

Is there a way to insert zenpasswd throught command-line?
0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.