Related

• Remote Desktop 7 Client Download
• Remote Desktop Client Windows Vista

With the Microsoft Remote Desktop app, you can connect to a remote PC and your work resources from almost anywhere.Experience the power of a Mac, Linux Server, other Windows OS with Microsoft’s very own Remote Desktop client designed to help you get your work done wherever you are. Any client machine running any VNC compatible client can now connect to the Linux CentOS 7 Remote Desktop. With mRemoteNG it is very easy. It’s just a matter of creating a new connection and specify the VNC as connection protocol on port 5901. More Ports can be configured as per steps above. How do I install VNC® Viewer? Just run the installer on the device you want to control from and follow the instructions, or there's MSIs for remote deployment under Windows. If you don't have permission to install VNC® Viewer on desktop platforms, choose the standalone option. Jun 09, 2019  TightVNC Download Free Remote Desktop Windows 7/10 Features: The TightVNC is a lightweight and reliable virtual network computer tool. The free VNC requires a low bandwidth connection to connect remotely.

Introduction

Jun 05, 2019  12 Free VNC Client And Viewer For Windows, Mac And Linux. Updated: June 5, 2019 / Home » Freeware and Software Reviews » Data Recovery, Backup And Cloud Storage. Undeniably, TeamViewer is the best VNC in the market. Virtual Network Connection software, also known as remote desktop software allows you to control a client’s device, be it an.

VNC or Virtual Network Computing is a platform-independent protocol that enables users to connect to a remote computer system and use its resources from a Graphical User Interface (GUI).

It’s like remote controlling an application: the client computer’s keystrokes or mouse clicks are transmitted over the network to the remote computer. VNC also allows clipboard sharing between both computers. If you come from a Microsoft Windows server background, VNC is much like the Remote Desktop Service, except it’s also available for OS X, Linux, and other operating systems.

Like everything else in the networking world, VNC is based on the client server model: VNC server runs on a remote computer — your Droplet — which serves incoming client requests.

Goals

In this tutorial we will learn how to install and configure a VNC server on CentOS 7. We will install the TigerVNC server which is freely available from the TigerVNC GitHub repository.

To demonstrate how VNC works, we will also install the GNOME desktop on your CentOS server. We will create two user accounts and configure VNC access for them. We will then test their connectivity to the remote desktop, and finally, learn how to secure the remote connection through an SSH tunnel.

Prerequisites

The commands, packages, and files shown in this tutorial were tested on a minimal installation of CentOS 7. We would recommend the following:

• Distro: CentOS 7, 64-bit
• Resource Requirements: A Droplet with 2 GB RAM
• To follow this tutorial, you should use a sudo user. To understand how sudo privileges work, you can refer to this DigitalOcean tutorial

Warning: You should not run any commands, queries, or configurations from this tutorial on a production Linux server. This could result in security issues and downtime.

Step 1 — Creating Two User Accounts

First, we will create two user accounts. These accounts will remotely connect to our CentOS 7 server from VNC clients.

• joevnc
• janevnc

Run the following command to add a user account for joevnc:

Then run the passwd command to change joevnc’s password:

The output will ask us for new password. Once supplied, the account will be ready for login:

Next, create an account for janevnc:

Set the password for janevnc:

Top 4 Download periodically updates software information of kindle drm removal full versions from the publishers,but some information may be slightly out-of-date.Using warez version, crack, warez passwords, patches, serial numbers, registration codes, key generator, pirate key, keymaker or keygen forkindle drm removal license key is illegal.

Step 2 — Installing GNOME Desktop

Now we will install GNOME desktop. GNOME is a collaborative effort: it’s a collection of free and open source software that makes up a very popular desktop environment. There are other desktop environments like KDE, but GNOME is more popular. Our VNC users will use GNOME to interact with the server from its desktop:

Depending on the speed of your network, this can take a few minutes.

Once the package group is installed, reboot the server:

Troubleshooting — Server Stuck at Boot Phase

Depending on how your server has been set up, when the machine starts up it may remain in the boot phase showing a message like this:

To get past this, press 1 (license read), then 2 (accept licence), and then C (to continue). You may have to press C two or more times. The image below shows this:

If you don’t see this error and the boot process is smooth, all the better – you can move on to the next step.

Step 3 — Installing TigerVNC Server

TigerVNC is the software that will allow us to make a remote desktop connection.

Install the Tiger VNC server:

This should show output like the following:

Now we have VNC server and the GNOME desktop installed. We have also created two user accounts for connecting through VNC.

Step 4 — Configuring VNC Service for Two Clients

VNC server doesn’t start automatically when it’s first installed. To check this, run the following command:

The output will be like this:

You can also run this command:

This should show output like this:

So why is it disabled? That’s because each user will start a separate instance of the VNC service daemon. In other words, VNC doesn’t run as one single process that serves every user request. Each user connecting via VNC will have to start a new instance of the daemon (or the system administrator can automate this).

CentOS 7 uses the systemd daemon to initiate other services. Each service that natively runs under systemd has a service unit file that’s placed under the /lib/systemd/system directory by the yum installer. Processes that get started automatically at boot time have a link to this service unit file placed in the /etc/systemd/system/ directory.

In our case, a generic service unit file was created in the /lib/systemd/system/ directory, but no link was made under /etc/systemd/system/. To test this, run the following commands:

You should see:

Then check under /etc/systemd/system/:

This one doesn’t exist:

So, the first step is to start two new instances of VNC server for our two users. To do this, we will need to make two copies of the generic VNC service unit file under /etc/system/system. In the code snippet below, you’re making two copies with two different names:

So why did we add two numbers (along with the colon) in the copied file names?

Again, that comes back to the concept of individual VNC services. VNC by itself runs on port 5900. Since each user will run their own VNC server, each user will have to connect via a separate port. The addition of a number in the file name tells VNC to run that service as a sub-port of 5900. So in our case, joevnc’s VNC service will run on port 5904 (5900 + 4) and janevnc’s will run on 5905 (5900 + 5).

Next edit the service unit file for each client. Open the /etc/systemd/system/vncserver@:4.service file with the vi editor:

A look at the “Quick HowTo” section tells us we have already completed the first step. Now we need to go through the remaining steps. The comments also tell us that VNC is a non-trusted connection. We will talk about this later.

For now, edit the [Service] section of the file, replacing instances of <USER> with joevnc. Also, add the -geometry 1280x1024 clause at the end of the ExecStart parameter. This just tells VNC the screen size it should start in. You will modify two lines in total. Here’s what the edited file should look like (note that the entire file is not shown):

Save the file and exit vi.

Similarly, open the /etc/systemd/system/vncserver@:5.service file in vi and make the changes for user janevnc:

Here’s just the [Service] section with the changes marked:

Next, run the following commands to reload the systemd daemon and also to make sure VNC starts up for two users at boot time.

Enable the first server instance:

Output:

Enable the second server instance:

Output:

Now you’ve configured two VNC server instances.

Step 5 — Configuring Your Firewall

Next, we will need to configure the firewall to allow VNC traffic through ports 5904 and 5905 only. CentOS 7 uses Dynamic Firewall through the firewalld daemon; the service doesn’t need to restart for changes to take effect.

The firewalld service should start automatically at system boot time, but it’s always good to check:

This should show:

If the state is “not running” for any reason, execute the following command to make sure it’s running:

Now add the rules for ports 5904 and 5905:

Output:

Reload the firewall:

Output:

Step 6 — Setting VNC Passwords

We are one step away from seeing VNC in action. In this step, the users will need to set their VNC passwords. These are not the users’ Linux passwords, but the passwords to log in to the VNC sessions.

Open another terminal connection to the CentOS 7 server, and this time log in as joevnc.

Execute the following command:

As shown in the output below, the server will ask joevnc to set up a VNC password. After typing in the password, the program also shows a number of files being created in the user’s home directory:

Let’s look at the line New 'localhost.localdomain:1 (joevnc)' desktop is localhost.localdomain:1. localhost.localdomain was the server name in our example; in your case it could be different. Note the number after the server name: (1, separated by a colon). It’s not the number in joevnc’s service unit file (which was 4). That’s because this is the display numberjoevnc’s session will run on in this server, not the port number of the service (5904) itself.

Remote Desktop 7 Client Download

Next open a new terminal session and log in as janevnc. Here as well, start the VNC server and set a password for janevnc:

You should see similar output showing that janevnc’s session will run on display 2.

Finally, reload the services from the main terminal session:

Step 7 — Connecting to Remote Desktops with a VNC Client

For this tutorial, we will assume users joevnc and janevnc are trying to connect to the CentOS 7 server from their Windows computers.

They will each need a VNC client for Windows to log into the remote desktop. This client is just like a terminal client like PuTTY, except it shows graphical output. There are various VNC client available, but the one we will use is RealVNC, available here. VNC Viewer for Mac OS X is available for download on the same page, and the Mac version is fairly similar to the Windows one.

When VNC Viewer is started, it shows a dialogue box like this:

In the VNC Server field, add the IP address of your CentOS 7 server. Specify the port number 5904 after the server’s IP, separate by a colon (:). We used 5904 because that’s the VNC service port for joevnc.

We have also decided to let VNC Viewer choose the encryption method. This option will only encrypt the password sent across the network. Any subsequent communication with the server will be unencrypted. (We’ll set up a secure SSH tunnel in the final step.)

In fact, a warning message shows just that:

Accept the warning for now. A password prompt is displayed:

Enter joevnc’s VNC password that you set earlier.

A new window opens showing the GNOME desktop for our remote CentOS server:

Accept the default welcome message.

Now joevnc can start a graphical tool like the GNOME calculator:

You can leave this desktop connection open.

Now janevnc can also start another VNC session with the CentOS server. The IP address is the same, and the port is 5905:

When janevnc logs in via VNC Viewer, an empty desktop with a welcome message is shown, just like it was shown for joevnc. In other words, the two users are not sharing the desktop instances. joevnc’s desktop should still be showing the calculator.

To close the remote desktop session, simply closing the window will do. However, this doesn’t stop the user’s VNC service in the background on the server. If the service is not stopped or restarted and the machine had no reboots, the same desktop session would be presented at the next logon.

Close the VNC Viewer windows for joevnc and janevnc. Close their terminal sessions, too. From the main terminal window, check to see if the VNC services are still running:

The output shows that the remote desktop is still running:

Check the second service:

This one is running, too:

Remote Desktop Client Windows Vista

If you wanted to log back into joevnc’s desktop at this point, you’d see the same calculator app open.

This presents some interesting challenges for system administrators. If you have a number of users connecting to the server via VNC, you may want to devise some way to stop their VNC services when no longer needed. This may save some valuable system resources.

Troubleshooting — VNC Service Crashes

As you test and play around with VNC, you may sometimes find the service has crashed and is unrecoverable. When you try to check the status:

This long error message may come up:

Trying to start the service doesn’t work:

Failed startup:

Usually the reason is simple enough. Check /var/log/messages:

The related error will look like this:

The remedy is to delete the file under /tmp folder:

Output:

Then start the VNC service:

General Troubleshooting

Although relatively rare, you may encounter other errors when working with VNC. For example, your remote desktop screen can go blank or hang, the session might crash with a cryptic error message, VNC Viewer may not connect properly or transmit commands to the GUI to launch applications, etc.

We recommend checking the /var/log/messages file to get a better understanding. At times you may need to reboot your server, or in extreme cases recreate the VNC service.

System resources can also be a culprit; you may have to add extra RAM to your Droplet, etc.

Step 8 — Securing VNC Sessions through SSH Tunneling

So far both joevnc and janevnc have been accessing their remote desktops through unencrypted channels. As we saw before, VNC Viewer warns us about this at connection time; only the password is encrypted as the sessions begins. Any subsequent network traffic and data transfer is open for anyone to intercept in the middle.

About SSH Tunnelling

This is where Secure Shell (SSH) sessions can help. With SSH, VNC can run within the context of an SSH encrypted session. This is known as tunnelling. In effect, VNC traffic piggybacks on the SSH protocol, resulting in all of its communication with the server being encrypted. It’s called tunnelling because SSH is providing wraparound protection over VNC and VNC is running as if in a tunnel within SSH. SSH tunnelling can be used for other protocols like POP, X, or IMAP as well.

SSH tunnelling works with port forwarding which is basically a means of translating access from one particular port to a different port on another machine. With port forwarding, when a client application connects to Port A running on machine A, it’s transparently forwarded to port B running on machine B. The client application is unaware of this translation and thinks it’s connecting to the original port. Port forwarding is one of the features of SSH protocol.

For more detailed information about SSH tunneling, read this tutorial.

In this tutorial we have configured VNC to run on ports 5904 (for joevnc) and 5905 (for janevnc).

With port forwarding, we can set our local VNC client to connect to port 5900 on the local client computer, and this can be mapped to port 5905 on the remote server. This is example is for janevnc’s connection, but you could easily follow the same steps for any other clients.

When the VNC client application starts, it can be pointed to port 5900 on localhost, and our port forwarding will transparently transport it to port 5905 on the remote server.

Note: You’ll have to start an SSH section each time to make the connection secure.

OS X

On your Mac, open Terminal.

Enter the following connection information, being sure to replace your_server_ip with your remote server’s IP address:

Enter janevnc’s UNIX password. The connection will appear to hang; you can keep it running for as long as you use the remote desktop.

Now skip ahead to the VNC Viewer instructions.

Windows

For securing janevnc’s VNC session, we will assume the local Windows computer has PuTTY installed. PuTTY is free and can be downloaded from here.

If janevnc’s VNC and terminal sessions are not closed already, close them now.

Start PuTTY. In the session screen, ensure you specify the server IP address and give a descriptive name to the connection, then click the Save button to save the connection details. Note how we have specified username@your_server_ip in the Hostname field:

Next, expand the SSH menu item in the left navigation pane, and select the X11 item. This shows the X11 forwarding properties for the session. Ensure the checkbox for Enable X11 forwarding is checked. This ensures that SSH encrypts X Windows traffic that flows between the server and client:

Finally, select SSH > Tunnels. Type 5900 in the Source port field. In the Destination field, specify your server’s name or IP address, followed by a colon and the VNC port number for the intended user. In our case, we have specified your_server_ip:5905.

Alternately, you could use port 5902. The 2 in this case would be the display number for janevnc (remember the message displayed when janevnc ran the vncserver command).

Click the Add button and the mapping will be added under Forwarded ports. This is where we are adding port forwarding for the SSH session; when the user connects to localhost at port 5900, the connection will be automatically tunnelled through SSH to the remote server’s port 5905.

Go back to the Sessions items and save the session for janevnc. Click the Open button and a new terminal session will open for janevnc. Log in as janevnc with the appropriate UNIX password:

VNC Viewer

Next start VNC Viewer again. This time, in the VNC Server address, type <^> and let VNC server choose the encryption method:

Click the Connect button.

You will still get the dialogue box warning you about an unencrypted session, but this time you can safely ignore it. VNC Viewer doesn’t know about the port it’s being forwarded to (this was set in the SSH session just started) and assumes you are trying to connect to the local machine.

Accepting this warning will show the familiar password prompt. Enter janevnc’s VNC password to access the remote desktop.

So how do you know the session was encrypted? If you think about it, we had set port forwarding in the SSH session. If an SSH session wasn’t established, port forwarding wouldn’t have worked. In fact, if you close the terminal window and log out of the PuTTY session then try to connect with VNC Viewer alone, a connection attempt to localhost:5900 would show the following error message:

So, if the localhost:5900 connection works, you can be confident that the connection is encrypted.

Remember that you will want to establish the SSH connection first every time you use VNC, to make sure your connection is always encrypted.

Conclusion

Accessing your CentOS Linux system from a GUI front end can make system administration much simpler. You can connect from any client operating system and don’t have to depend on web-based hosting control panels. VNC has a much smaller footprint compared to most control panels.

Although we have shown how two ordinary users can connect with their VNC clients, that’s hardly practical in serious production environments. In reality, users will have customized applications or browsers for accessing the server. Running a number of VNC services for each user also creates an unnecessary burden on system resources, not to mention the inherent risks associated with it.

If you decide to install and run VNC on your production Linux server, we strongly recommend using it for administrative purposes only.