This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
vnc [2020/06/04 07:04] – [Setting up port forwarding manually] jansen | vnc [2023/10/13 14:50] (current) – jansen | ||
---|---|---|---|
Line 5: | Line 5: | ||
===== Configuration ===== | ===== Configuration ===== | ||
- | You don't have to configure much, but you can control what applications to run in yout VNC session. The startup script for VNC is **'' | + | You don't have to configure much, but you can control what applications to run in yout VNC session. The startup script for VNC is **'' |
\\ | \\ | ||
- | Note: if you want to run KDE in your vnc session, this is the setup: | + | Note: if you want to run KDE Plasma |
#!/bin/sh | #!/bin/sh | ||
unset SESSION_MANAGER | unset SESSION_MANAGER | ||
vncconfig -iconic & | vncconfig -iconic & | ||
- | | + | |
For Gnome, replace the last line with '' | For Gnome, replace the last line with '' | ||
Line 65: | Line 65: | ||
---- | ---- | ||
- | You cannot directly connect to a vncserver from outside the institute, since VNC itself is only minimally encrypted, and not secure enough to be exposed to the net. The solution is then to combine VNC with a SSH tunnel. | + | You cannot directly connect to a vncserver from outside the institute, since VNC itself is only minimally encrypted, and not secure enough to be exposed to the net. The solution is then to combine VNC with a SSH tunnel. And since many of our servers and compute nodes and clusters are not directly reachable from outside, you may need to set up a ssh ProxyJump (see [[ssh: |
Now we could try to describe how to set up such a tunnel, but the mechanism is know to vncviewer, so usually it is as easy as adding '' | Now we could try to describe how to set up such a tunnel, but the mechanism is know to vncviewer, so usually it is as easy as adding '' | ||
Line 85: | Line 85: | ||
The other important thing to know is, what a tunnel actually does: it creates an encrypted connection between a local '' | The other important thing to know is, what a tunnel actually does: it creates an encrypted connection between a local '' | ||
- | Example for commandline ssh on Mac OS X or Linux: | + | Example for commandline ssh on Mac OS X or Linux, in the example where your vnc runs on a computer called eendracht, and you have to connect through the ssh gateway ssh.strw.leidenuniv.nl (and your vnc is on :1 so the port is 5901): |
- | ssh -NfL 5901:127.0.0.1:5901 user@remote.host.domain | + | ssh -NfL 5901:eendracht:5901 username@ssh.strw.leidenuniv.nl |
- | This forwards local port 5901 to port 5901 on the remote computer | + | This forwards local port 5901 to port 5901 on the remote computer. So now you can connect locally with: |
+ | vncviewer :1 | ||
+ | ==== Setting up port forwarding through a graphical user interface ==== | ||
If you would like to configure port forwarding through a gui, good choices are: '' | If you would like to configure port forwarding through a gui, good choices are: '' | ||