On 2011-12-29 07:56, oldcpu wrote:
> In the first terminal I type:
>
> Code:
> --------------------
>
> ssh -t -L 5900:localhost:5900 mothercpu@mothercpu.accessmyhome.net ‘x11vnc -localhost -nolookup -nopw -display :0’
>
> --------------------
I’m attempting this using as “remote” a vmplayer session running 12.1 as
guest, from my 11.4 host. I noticed that “/etc/xinetd.d/vnc” doesn’t list
port 5900, it starts at 1901. Anyway, I try and I get:
ssh -t -L 5900:localhost:5900 cer@192.168.74.131 'x11vnc -localhost \
-nolookup -nopw -display :0'
Received disconnect from 192.168.74.131: 2: Too many authentication
failures for cer
This error I know, I have to change SSH_AUTH_SOCK. I don’t know why I
always have that error with my ssh sessions on this computer.
cer@Telcontar:~> SSH_AUTH_SOCK="" ssh -t -L 5900:localhost:5900 \
cer@192.168.74.131 'x11vnc -localhost -nolookup -nopw -display :0'
Password:
Password:
bash: x11vnc: command not found
Connection to 192.168.74.131 closed.
Ok, one package missing. I install it and try again:
cer@Telcontar:~> SSH_AUTH_SOCK="" ssh -t -L 5900:localhost:5900 \
cer@192.168.74.131 'x11vnc -localhost -nolookup -nopw -display :0'
Password:
29/12/2011 10:28:17 x11vnc version: 0.9.12 lastmod: 2010-09-09 pid: 23780
No protocol specified
29/12/2011 10:28:17 XOpenDisplay(":0") failed.
29/12/2011 10:28:17 Trying again with XAUTHLOCALHOSTNAME=localhost ...
No protocol specified
29/12/2011 10:28:17 ***************************************
29/12/2011 10:28:17 *** XOpenDisplay failed (:0)
*** x11vnc was unable to open the X DISPLAY: ":0", it cannot continue.
*** There may be "Xlib:" error messages above with details about the failure.
Some tips and guidelines:
** An X server (the one you wish to view) must be running before x11vnc is
started: x11vnc does not start the X server. (however, see the -create
option if that is what you really want).
** You must use -display <disp>, -OR- set and export your $DISPLAY
environment variable to refer to the display of the desired X server.
- Usually the display is simply ":0" (in fact x11vnc uses this if you forget
to specify it), but in some multi-user situations it could be ":1", ":2",
or even ":137". Ask your administrator or a guru if you are having
difficulty determining what your X DISPLAY is.
** Next, you need to have sufficient permissions (Xauthority)
to connect to the X DISPLAY. Here are some Tips:
- Often, you just need to run x11vnc as the user logged into the X session.
So make sure to be that user when you type x11vnc.
- Being root is usually not enough because the incorrect MIT-MAGIC-COOKIE
file may be accessed. The cookie file contains the secret key that
allows x11vnc to connect to the desired X DISPLAY.
- You can explicitly indicate which MIT-MAGIC-COOKIE file should be used
by the -auth option, e.g.:
x11vnc -auth /home/someuser/.Xauthority -display :0
x11vnc -auth /tmp/.gdmzndVlR -display :0
you must have read permission for the auth file.
See also '-auth guess' and '-findauth' discussed below.
** If NO ONE is logged into an X session yet, but there is a greeter login
program like "gdm", "kdm", "xdm", or "dtlogin" running, you will need
to find and use the raw display manager MIT-MAGIC-COOKIE file.
Some examples for various display managers:
gdm: -auth /var/gdm/:0.Xauth
-auth /var/lib/gdm/:0.Xauth
kdm: -auth /var/lib/kdm/A:0-crWk72
-auth /var/run/xauth/A:0-crWk72
xdm: -auth /var/lib/xdm/authdir/authfiles/A:0-XQvaJk
dtlogin: -auth /var/dt/A:0-UgaaXa
Sometimes the command "ps wwwwaux | grep auth" can reveal the file location.
Starting with x11vnc 0.9.9 you can have it try to guess by using:
-auth guess
(see also the x11vnc -findauth option.)
Only root will have read permission for the file, and so x11vnc must be run
as root (or copy it). The random characters in the filenames will of course
change and the directory the cookie file resides in is system dependent.
See also: http://www.karlrunge.com/x11vnc/faq.html
Connection to 192.168.74.131 closed.
I have tried adding “-auth /home/cer/.Xauthority”, “-auth guess” and
“-findauth”. All close the connection.
Ideas?
> yaloki (who is on the openSUSE board) taught me this technique many
> years ago … (and I think he is still a bit amused that I still find
> it essential for helping my 85+ year old mother on her openSUSE
> GNU/Linux PC).
I’m also interested in knowing why people use VNC instead of XDCMP which is
native to linux X client/server implementation. It occurs to me that
because it is not encrypted, but surely there must be tricks to tunnel it
through ssh.
–
Cheers / Saludos,
Carlos E. R.
(from 11.4 x86_64 “Celadon” at Telcontar)