== Changes to TurboVNC. ==
We have a specially compiled version for TurboVNC that is installed with the standard procedure.  The changes removes the automatic lockout after 5 tries, which is hardcoded into the server. Without this change, a 3rd party can lock out a user as the program does not care where the connection is coming from.

We changed line 1652-1653  to set rfbAuthTooManyTries to FALSE, and to always return FALSE.
The file is in /root/rpmbuild/BUILD/turbovnc-2.2.5/unix/Xvnc/programs/Xserver/hw/vnc

{{{
1644   rfbAuthTries++;
1645
1646   if (rfbAuthTries >= MAX_AUTH_TRIES) {
1647     CARD32 delay = AUTH_TOO_MANY_BASE_DELAY;
1648
1649     for (i = MAX_AUTH_TRIES; i < rfbAuthTries; i++)
1650       delay *= 2;
1651     timer = TimerSet(timer, 0, delay, rfbAuthReenable, NULL);
1652     rfbAuthTooManyTries = FALSE;
1653     return FALSE;
1654   }
1655
1656   return FALSE;
1657 }
1658
}}}
To recompile:

{{{
#cd /root/rpmbuild/SPECS
#rpmbuild --ba ./turbovnc.spec
}}}
The files are stored in

/root/rpmbuild/RPMS/i686/