VNC install Method 1 vs. Method 2

[clearwater715]

I was wondering the difference between the VNC server installation methods in the wiki.

http://wiki.amahi.org/index.php/VNC

Can anyone elaborate on the pros and cons of each?

I used Method 1 because I used it on a previous install.

Also, I noticed that some extra options have been added to the server session configuration file, /etc/sysconfig/vncservers.

Code: Select all

VNCSERVERS="2:username" VNCSERVERARGS[2]="-geometry 1024x768 -nolisten tcp -localhost"

What do the a -nolisten tcp and -localhost do? Are they needed?

The server would not accept a connection from my Windows Real VNC until I removed them and went with...

Code: Select all

VNCSERVERS="2:username" VNCSERVERARGS[2]="-geometry 1024x768"

This work just fine.

Thanks.

[rgmhtt]

I am the most recent editor for Method #1; adjusting it to what I have been doing for years of use of VNC on Centos and Fedora. I probably have a few donzen systems configured, over the years, this way. I have never used method #2.

Though I do NOT use the VNCSERVERARGS parameter, leaving it to the defaults; that was the previous author's contribution, and I left it stand. I do know that the -localhost prevents you from connecting to yourself (that is the server stops listening on 127.0.0.1).

[NeverSimple]

Hello,

Some more information:

http://stevejenkins.com/blog/2010/03/se ... -internet/


A small excerpt from it:

Edit the /etc/sysconfig/vncservers file and add the -localhost option to the VNCSERVERARGS line, so that it reads:

Code: Select all

VNCSERVERARGS[2]="-geometry 1024x768 -nolisten tcp -localhost"

This option tells the VNC server not to accept remote connections from VNC clients without a secure tunnel.

Richard

[rgmhtt]

OK. I got that a little wrong. the arg line only allows localhost connection, typically via a VPN directly to the host.

I will update the wiki to reflect this.

Note that there is NO security in the basic VNC protocol. Your login information is easy to intercept with tools like wireshark.