remote access via VNC

[Rick Stevens]

On 05/29/2012 01:26 PM, Rick Stevens wrote:
> On 05/29/2012 12:00 PM, Tommy Pham wrote:
>> On Tue, May 29, 2012 at 11:18 AM, Rick Stevens<ricks at alldigital.com>
>> wrote:
>>> On 05/29/2012 10:26 AM, Tommy Pham wrote:
>>>>
>>>> Hi,
>>>>
>>>> Is it possible to have remote access via VNC without having the user
>>>> to be logged in (automatically, especially on a system reboot)?
>>>
>>>
>>> You could share the display in the X configs, e.g.:
>>>
>>> cat /etc/X11/xorg.conf.d/00-system-setup-vnc.conf
>>> # This file is to share the root screen via VNC
>>> Section "Module"
>>> Â Â Load "vnc"
>>> EndSection
>>>
>>> Section "Screen"
>>> Â Â Identifier "Screen0"
>>> Â Â Device "Videocard0"
>>> Â Â Option "SecurityTypes" "VncAuth"
>>> Â Â Option "UserPasswdVerifier" "VncAuth"
>>> Â Â Option "passwordfile" "/root/.vnc/passwd"
>>> EndSection
>>>
>>> You may have to refresh the display after connecting when the user
>>> login screen is shown. I have to on occasion...something with the
>>> way the login mechanism (gdmgreeter?) updates the screen.
>> Hi Rick,
>>
>> I just tried it why your suggested configuration but I'm still unable
>> to access via VNC.
>>
>> [root at fedora17 ~]# find / -type f -name 'passwd'
>> /sys/fs/selinux/class/passwd/perms/passwd
>> find: `/run/user/dlp/gvfs': Permission denied
>> /usr/share/bash-completion/completions/passwd
>> /usr/bin/passwd
>> /etc/pam.d/passwd
>> /etc/passwd
>>
>> I've rebooted the system with no effect.
>
> If you look, you'll see that I used a password file, /root/.vnc/passwd
> to hold the VNC passwords. You must create that file using "vncpasswd"
> on the VNC server and give the root user a password. When you
> authenticate VNC, you must give the root user's VNC password.
>
> You don't need to use the authentication, I guess (I always do). I also
> believe that, for selinux to like it, you have to change the SELinux
> context of the file:
>
> [root at golem4 .vnc]# ls -lZ /root/.vnc/passwd
> -rw-------. root root unconfined_u:object_r:admin_home_t:s0
> /root/.vnc/passwd
>
> To access the machines, I have been using vncviewer over an SSH tunnel:
>
> # vpnc -via golem4 golem4

Whoops!  Sorry, that should read:

# vncviewer -via golem4 golem4

(yes, I use vpnc a lot, hence my mistake)

> I get a dialog box asking for root's VNC password. I put it in and the
> desktop shows up.
>
> You probably want to look at the /var/log/Xorg.0.log file on the VNC
> server machine to verify that the vnc module is actually being loaded.
----------------------------------------------------------------------
- Rick Stevens, Systems Engineer, AllDigital    ricks at alldigital.com -
- AIM/Skype: therps2        ICQ: 22643734            Yahoo: origrps2 -
-                                                                    -
-    When you don't know what to do, walk fast and look worried.     -
----------------------------------------------------------------------