This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
vnc [2018/03/12 15:35] – [See also] jansen | vnc [2023/10/13 14:50] (current) – jansen | ||
---|---|---|---|
Line 5: | Line 5: | ||
===== Configuration ===== | ===== Configuration ===== | ||
- | You don't have to configure much, but you can control what applications to run in yout VNC session. The startup script for VNC is **'' | + | You don't have to configure much, but you can control what applications to run in yout VNC session. The startup script for VNC is **'' |
\\ | \\ | ||
- | Note: if you want to run KDE in your vnc session, this is the setup: | + | Note: if you want to run KDE Plasma |
#!/bin/sh | #!/bin/sh | ||
unset SESSION_MANAGER | unset SESSION_MANAGER | ||
vncconfig -iconic & | vncconfig -iconic & | ||
- | | + | |
For Gnome, replace the last line with '' | For Gnome, replace the last line with '' | ||
Line 27: | Line 27: | ||
===== Starting a session ===== | ===== Starting a session ===== | ||
---- | ---- | ||
- | A VNC session is started using the command **'' | + | A VNC session is started using the command **'' |
Suppose your desktop is named **'' | Suppose your desktop is named **'' | ||
Line 49: | Line 49: | ||
There is a graphical interface to start the viewer and set options, this is calles tsclient (or Terminal Service Client in the menu). This same program can also interface to Windows terminal services so make sure to select " | There is a graphical interface to start the viewer and set options, this is calles tsclient (or Terminal Service Client in the menu). This same program can also interface to Windows terminal services so make sure to select " | ||
- | For accessing a VNC session running on another computer (either at the observatory, | + | For accessing a VNC session running on another computer (either at the observatory, |
* vncviewer: the basic commandline viewer (part of TigerVNC) | * vncviewer: the basic commandline viewer (part of TigerVNC) | ||
Line 57: | Line 57: | ||
There are of course also VNC viewers for other operating systems, eg MacOS and Windows: | There are of course also VNC viewers for other operating systems, eg MacOS and Windows: | ||
* Mac OS X has a built-in VNC viewer, named '' | * Mac OS X has a built-in VNC viewer, named '' | ||
+ | * [[https:// | ||
* [[http:// | * [[http:// | ||
* WinVNC | * WinVNC | ||
Line 64: | Line 65: | ||
---- | ---- | ||
- | You cannot directly connect to a vncserver from outside the institute, since VNC itself is only minimally encrypted, and not secure enough to be exposed to the net. The solution is then to combine VNC with a SSH tunnel. | + | You cannot directly connect to a vncserver from outside the institute, since VNC itself is only minimally encrypted, and not secure enough to be exposed to the net. The solution is then to combine VNC with a SSH tunnel. And since many of our servers and compute nodes and clusters are not directly reachable from outside, you may need to set up a ssh ProxyJump (see [[ssh: |
Now we could try to describe how to set up such a tunnel, but the mechanism is know to vncviewer, so usually it is as easy as adding '' | Now we could try to describe how to set up such a tunnel, but the mechanism is know to vncviewer, so usually it is as easy as adding '' | ||
Line 84: | Line 85: | ||
The other important thing to know is, what a tunnel actually does: it creates an encrypted connection between a local '' | The other important thing to know is, what a tunnel actually does: it creates an encrypted connection between a local '' | ||
- | Example for commandline ssh on Mac OS X or Linux: | + | Example for commandline ssh on Mac OS X or Linux, in the example where your vnc runs on a computer called eendracht, and you have to connect through the ssh gateway ssh.strw.leidenuniv.nl (and your vnc is on :1 so the port is 5901): |
- | ssh -NfL 5901:127.0.0.1:5901 user@remote.host.domain | + | ssh -NfL 5901:eendracht:5901 username@ssh.strw.leidenuniv.nl |
- | This forwards local port 5901 to port 5901 on the remote computer | + | This forwards local port 5901 to port 5901 on the remote computer. So now you can connect locally with: |
+ | vncviewer :1 | ||
+ | |||
+ | ==== Setting up port forwarding through a graphical user interface ==== | ||
+ | If you would like to configure port forwarding through a gui, good choices are: '' | ||