Hello everyone,
does anyone have an answer for me?
KR
Bartosz
These would be cached in memory.
Dan
Why is it called "Common Sense"? It doesn't seem all that common!
That is not what I had in mind. What I need to know is where the PNA client stores the users PW when checking save password.
Look for APPSRV.INI. I believe it is written in there in a hashed format. Not very secure.
Unfortunately I don't see anything inside the appsrv.ini that could be indentified as the username or pw. Any other ideas?
The client version is 12.1
BTW here is the appsrv.ini, it is not showing anything interessting:
; Copyright 1998-2008 Citrix Systems, Inc. ;**********************************************************************;**;** APPSRV.INI - Application Server Configuration File.;**;** This file contains user settings which define application;** servers and other preferences.;**;**********************************************************************[WFClient]Version=2LogFile=C:\Program Files\Citrix\ICA Client\wfclient.logLogFileWin16=wfcwin.logLogFileWin32=C:\Users\username.DOMAIN\AppData\Roaming\ICAClient\wfcwin32.logLogAppend=OffLogConnect=OnLogErrors=OnLogTransmit=OffLogReceive=OffLogKeyboard=OffHotkey1Char=F1Hotkey1Shift=ShiftHotkey2Char=F3Hotkey2Shift=ShiftHotkey3Char=F2Hotkey3Shift=ShiftHotkey4Char=F1Hotkey4Shift=CtrlHotkey5Char=F2Hotkey5Shift=CtrlHotkey6Char=F2Hotkey6Shift=AltHotkey7Char=plusHotkey7Shift=AltHotkey8Char=minusHotkey8Shift=AltHotkey9Char=F3HotKey10Shift=CtrlHotkey10Char=F5HotKey9Shift=CtrlHotkey11Char=plusHotkey11Shift=CtrlHotkey12Char=noneHotkey12Shift=noneHotkey13Char=noneHotkey13Shift=noneDisableSound=OffMouseTimer=0KeyboardTimer=0ColorMismatchPrompt_Have16_Want256=OnColorMismatchPrompt_Have64K_Want256=OnColorMismatchPrompt_Have16M_Want256=OnDosConnectTTY=OnConnectTTY=OffConnectTTYDelay=1000BrowserRetry=3BrowserTimeout=1000PersistentCacheEnabled=OffPersistentCacheSize=30000000PersistentCacheMinBitmap=8192PersistentCachePath=C:\Users\username.DOMAIN\AppData\Roaming\ICAClient\CacheUpdatesAllowed=OnCOMAllowed=OnCPMAllowed=OnVSLAllowed=OnCDMAllowed=OnMaximumCompression=OffXmlAddressResolutionType=DNS-PortICASOCKSProtocolVersion=-1ICASOCKSProxyHost=ICASOCKSProxyPortNumber=1080SSLEnable=OffSSLProxyHost=*:443SSLNoCACerts=0SSLCiphers=ALLDesiredColor=2ScreenPercent=0DesiredHRES=640DesiredVRES=480
I am quite sure that it is stored in the registry key HKCU\Software\Citrix\PNAgent. But I don't know which value it is.
Well, ahem *cough* *cough* this is something to bear in mind when designing security and the PNAgent Client, if you check the save password box on the PNA login it will save a hashed copy of the password in HKCU\Software\Citrix\PNAgent\Configuration Model and some stuff in the User model. For me this is a security risk (I tested this about a year ago (12.xx), so not sure on the latest Clients), you can export the PNagent Subkey and import it onto another client and you have UserName PASSWORD and Domain. Much better to use the Kerberos ticketed pass-through authentication.
An interesting exercise is to convert the Configuration Key to Plain text and see if you can find your password (in sequence). Have had some interesting results!
--Emil
Thanks the HKCU\Software\Citrix\PNAgent\User model 000 is the key needing to have the username removed from it.
Awesome answer and thanks.