On 19 Sep 1999, in message <007b01bf0230$784de5c0$0100007f@localhost>
"Hawke" <[EMAIL PROTECTED]> wrote:
| I thought I recalled seeing on one of the mailing listsi'm on, someone who
| tried (andsuccessfully) combined VNC on top of SSH to solve the clear text
| login problem with using VNC. I went to the archive page and saw nothing.
| Any suggestions on this would be most appreciated (and problably save my
| employer thousands of dollars too). Thanks in advance for any help.
I do this from home to get at my work machine (sometimes).
The simplest way is probably ssh-with-a-port-forward.
For example, from the client host (vncviewer-end):
ssh -L 5905:localhost:5905 remotehost
This will get you a shell on the remote host (irrelevant to us) and a
forwarded port. If you fire up vncviewer pointing it at "localhost:5"
it should connect to port 5905 on the localhost, expecting a VNC server
there. That connection gets tunnelled through the ssh to remotehost,
and pops out the far end and connects to "localhost:5905" at remotehost
(the second two thirds of the "-L 5905:localhost:5905"). And that's
your vncserver on display :5 on remotehost.
So, the cleartext travels only across the local interfaces of the client and
the remotehost. All the stuff across the actual network is encrypted via ssh.
Make sense?
--
Cameron Simpson, DoD#743 [EMAIL PROTECTED] http://www.zip.com.au/~cs/
Maybe we can eventually make language a complete impediment to understanding.
- Matthew Austern <[EMAIL PROTECTED]>
