Tight VNC and ARD 2.2

I am trying to understand ARD's support for VNC. I have serveral Windows, and SGI machines that have tight VNC set up with it. I know the clients are set up correctly I could use any VNC to go into these machines, but ARD will not authenticate. I am able to go through the standard VNC port of 5900. What am I missing? Are there any tutorial sites someone could point me to?
Thanks

Just out of curiosity, does no one have an answer to this issue? I can't believe out of this entire forum of experts nobody has a suggetion.
Phil Hanna

Similar Messages

Trouble w/VNC and Bonjour

Having trouble using vnc on my home (AExpress) network. I've tried chicken of the vnc and vine viewer, but both give me the same problem. I have two macs running 10.4, and I set up one of them as a vnc server using ARD, but when I try to connect to it from the other one, it can't connect. Chicken of the vnc says "can't connect:()", and Vine viewer just spins for a while and then reports a timeout.
AGain, this is from one machine into the other inside my home network. I'm not trying to access anything from the internet. Both machines have internet access via airport cards through the AE, they both show up in each other's networks, etc.
What's strange to me is that when I try to open a connection, the target computer does show up via Bonjour. So why doesn't the connection occur? The vnc client seems to 'know' it's there, right??
From doing some so-far fruitless research on this it looks like assigning static ip addresses is something I'll have to (reluctantly) try. Reluctantly because I fear I'll mess up their internet connections or something. Any ideas on why I can't connect?

Bump.

Kerberos, vnc, and ssh

Hi, I was wondering if anyone had seen these problems trying to enable vnc and ssh support on a Mavericks server (latest OS and Server versions).
In particular, I get errors when I attempt to use sso_util:o_util -
sso_util configure -R MYSERVER.MYDOMAIN.COM -a diradmin ssh
/Local/Default
/LDAPv3/127.0.0.1
Creating the service list
Creating the service principals
OSStatus CreateKerberosPrincipals(CFStringRef, CFStringRef, const char *, CFMutableDictionaryRef, Boolean): Error adding principal to keytab: kadmin: ext vnc/[email protected]: Principal does not exist
Creating the keytab file
Configuring services
WriteSetupFile: setup file path = /temp.NOKc/setup
$ sso_util configure -r MYSERVER.MYDOMAIN.COM -a diradmin ssh
Password:
/Local/Default
/LDAPv3/127.0.0.1
Creating the service list
Creating the service principals
OSStatus CreateKerberosPrincipals(CFStringRef, CFStringRef, const char *, CFMutableDictionaryRef, Boolean): Error adding principal to keytab: kadmin: ext host/[email protected]: Principal does not exist
Creating the keytab file
Configuring services
WriteSetupFile: setup file path = /temp.KZUY/setup
I get the same errors if I use "kadmin -l" and attempt to create the principals using "add -r host/myserver.mydomain.com" and "add -r vnc/myserver.mydomain.com". The principals don't exist if I try to list them.
Kerberos is working fine for some other services, like imap and smtp. The principals exist.
Does anyone knwo why I can't create these? Thanks!

Check your TCP segment size. To find out what it should be you can try the following.
From a PC at site A, ping a PC at Site B. You need to set some ICMP switches though.
C:\>ping 10.10.2.100 -f -l 1500
The -f is set the Do Not Fragment flag, the -l is the send buffer size. Continue to do this each time decreasing the packet size until you have a successful ping. When you find that number, that is your maximum TCP segment size. You can then set that on the router. Any packet that is too big, the router will respond to the sending device saying it is too big, send a smaller size. It will do that until the packet is less than or equal to the number you set. In most routers the largest size you can set is 1460, so that might save you some time. To set it in the router, go to the tunnel interface and enter "ip tcp adjust-mss
HTH and please rate.

ARD 3 and ARD 2.x and an 87 year old mother!

Here is the deal. My 87 year old mother has an eMac and a DSL connection, no router. Before we moved her to a new city and different DSL provider, I could control her Mac with my G5 and ARD 2.2. Now, I have a new G5 and a MacBook Pro with ARD 3.0 and mom still has her eMac. I can see her name, and get the ip address, but that is it. We have all the settings on both machines on (but would like to have a checklist to be sure we are accurate), and the ARD timesout and won't connect. I know this has to be something very simple, but I have no idea and my mom isn't getting any younger! We are about to buy two more Macs, one for each of her sisters (ages 70 and 90) so they can all iChat. But guess who gets to watchover all three?
We are all at the end of our ropes with this problem as I have tried since spring to get this fixed. Certainly appreciate any step-by-step advice.
Thanks in advance for your help.
Phil

Just out of curiosity, does no one have an answer to this issue? I can't believe out of this entire forum of experts nobody has a suggetion.
Phil Hanna

ARD 3.1 and ARD Not Active on Clients

I have ARD 3.1 installed on a PPX X-serve running 10.4.8. The client I am managing are core duo minis also running version 3.1 and 10.4.8.
Lately when ever I try to see the clients throuh ARD I get the message that ARD isn't active on the client or the client is offline.
I tesetd this on site and ADR is enabled on all the clients and all had working ip connections.
Any ideas where to start?
Thanks,
Eric

Yea same here....our machines (250) can be sitting at the login windows and ARD is running and I can do pretty much anything with them that I want using ARD on them. Thats on a local network though....not using wireless, not that should matter though. Also using ARD 3.1.
When you have users logging off at the clients ARD Agent or something with ARD shutsdown for a moment until the machine gets back to the login window and then the Agent should restart and be waiting for ARD like normal again.
Thanks,
Dan

Tightly coupled and Loosely coupled scenarios

Hi Experts,
Could you please provide a example for Tightly coupled and Loosely coupled scenarios from SAP Platform?
How to do the below scenarios from SAP platform?
1. Tightly coupled (Non-SOA):
Business Services : I have to create RPC encoded style webservices.
Business Process : I have to call other platform RPC encoded style webservices (More than 2 webservices).
2. Loosley coupled (SOA):
Business Service : I have to create Document literal style webserivces
Business Process : I have to call other platform Document literal style webservices ( More than 2 webservices)
Please provide the input to do the above scenarios from SAP platform and please inform me which tool/component I have to use do the scenarios.
Thanks & Regards
Sara

Hi Sara,
Can you please elaborate your question in detail .
1) Web Services are always examples of loosely couples architecture, either its document style or RPC style and whether you are creating WS or consuming WS.
Tightly coupled architectures were those whose business logic layer and presentation layer were tightly coupled and reusability or scalability was a problem
If you have user interfaces involved in your business process, then you should go for CAF( Composite Application Framework) to define a business process using VC, WebDynPro or Adobe Forms as UI.
If it doesn't involve any user interaction, then you can go for ccBPM of Netweaver-PI to automate the process.
Regards,
Piyush

Unable to connect to linux server though tight VNC server

Hi!
I have configured VNC server 4.1 for my Linux Red hat server. VNC server is working on port 5903 and user "oracle" is allowed to connect (It means he is vncuser). while i try to connect to server using VNC it prompts to enter password. It means server is reachable. But When I enter correct password it returns Authentication Failed even though password is 100% . To confirm password I changed it using "vncpasswd" command and then I restart the vnc service by $ service vncserver start command. The service started successfully but couldn't access the server through VNC.
I checked in /etc/sysconfig/iptables and it contains entry as
-A RH-Firewall-1-INPUT -p udp -m udp --dport 53 -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m tcp --dport 53 -j ACCEPT
So what anything else i m missing ? What should I do ?
Thanks & Regards
Tushar

Thanks
My remote server OS is Red Hat 5.2 . And I am trying to connect to my remote host server (Red hat 5.2 ) through VNC which is installed on my local system Windows XP. I usually use putty to get command base access of my remote server. I have also configured SSH tunnel in putty so that i can connect to VNC and get GUI access of my server.
What action will taken if i run command given by you. Do I have to reboot my server, if yes then it is not possible.
$ service iptables stop
I think there is no issue of firewall. Because it asks me to enter password .That means ping to server is reachable on port 5903.
My /etc/sysconfig/vncservers file contains following entry
VNCSERVERS = "3:oracle"
And one line for display resolution.

VNC and RDP problems with 1800W

I have two 1800W routers, one in the main office the other at the secondary office. If I VNC or RDP from a PC in the main office to a PC in the secondary through the GRE tunnel I do not see the other screen, the mouse moves okay but no picture. If however, I do the same from the secondary office to the main office it works fine. I have tried changing the access-list, the NAT, everything, but nothing seems to work.
I have the original network still going. It consists of (main) a 2600 and secondary a 1700. To setup the 1800 routers I copied the conf from the originals. The origianl network works fine both ways with both VNC and RDP.
Any help would be greatly appreciated.

Check your TCP segment size. To find out what it should be you can try the following.
From a PC at site A, ping a PC at Site B. You need to set some ICMP switches though.
C:\>ping 10.10.2.100 -f -l 1500
The -f is set the Do Not Fragment flag, the -l is the send buffer size. Continue to do this each time decreasing the packet size until you have a successful ping. When you find that number, that is your maximum TCP segment size. You can then set that on the router. Any packet that is too big, the router will respond to the sending device saying it is too big, send a smaller size. It will do that until the packet is less than or equal to the number you set. In most routers the largest size you can set is 1460, so that might save you some time. To set it in the router, go to the tunnel interface and enter "ip tcp adjust-mss
HTH and please rate.

ARD 3.2 and ARD 1.2 Mac OS 9.22

Hi I have got an Intel iMac running ARD 3.2 and want to remote control an old iMac G3 running Mac OS 9.22 and ARD 1.2. It recognises the G3 and when I try to authenticate it says the password is invalid when it should work. Is it just not possible to connect the two or is there some other way of controlling my G3 from my intel iMac?
Nick

It sounds so complicated. I'll try it later and let you know how it went.
Dealing with networks from outside (whether from the Internet or dealing with wireless) often is indeed complicated. If you are indeed trying to connect to this system from the Internet (and hence from some other location and having to connect through a router), take a look at this web page:
http://www.starkpr.com/ard.htm
It may help.
If I'd posted a new topic, someone would've told me I should've searched for previous threads/posts before I posted!
Suggesting that you search for previous posts doesn't mean that you have to, or should, tag your question onto another thread. You're free to start a new topic, and in fact it's recommended that you do so rather than tagging a new issue/question onto another poster's topic. What people mean by such recommendations is that you try and see if the question has already been addressed before you post. In probably the vast majority of the issues that arise, the subject has already been addressed, so if you can find a previous thread, you save yourself time waiting for an answer and others from going over the same ground yet again. It's not always possible - sometime your issue is different, and sometimes it's just not easy to find previous posts - but it's always worth trying (and if you say you tried when you do post, it should keep people off your back). In any case, posting to a thread that's so old (as this one is) often won't get your post seen at all, and we don't want your issue to go unaddressed just because no one sees it.
Regards.

10.6.8, ARD admin 3.5 and ARD 3.5.1 REPORTING BROKEN

Dear all,
Have just upgraded to ARD admin 3.5 on our admin machines (10.6.8) and ARD 3.5.1 on our client machines (10.6.8).
We are able to control and observe all client computers, send Unix commands but none of the reporting (software versions, file search) methods are working - the report for the client computer never gets past 'Transferring report'.
This was all working just fine using ARD admin 3.4 and 3.4 client.
Have tried deleting plist files (server and client), rebuilding prefs, re-adding client computers but nothing has resolved the issue we are having (same on a number of admin machines).
It looks like Apple haven't done enough testing with this version of Apple Remote Desktop.
Jason

Hi Dave,
While I appreciate your response, it is thoroughly unhelpful to the people like myself who are having this problem. It almost sounds like you're a salesman for other products. I know that's not the case (considering how many "points" you have). However, I'm under the impression that ARD does get updates, and even if a single developer is working on the product, that doesn't change the fact that apple advertises the ability to Generate Reports.
If Apple advertises the ability, then I don't suggest anyone give up on the issue by throwing up your hands, as you suggest.
Let me first say that I've been using ARD to generate reports for ~40 computers without problems for quite a long time. It has become an integral part of my workflow.
Anyway, enough of me taking out my frustration on you, here is what I've tried (to no avail... yet. I'm going to solve this if it kills me or I have to reformat my computer) :
1. Repairing permissions on the clients and the server using diskutilty. This would have been a solution since I could have rolled it out via the command line. But no dice.
2. Uninstalling & reinstalling ARD admin (http://support.apple.com/kb/HT2577). I'm unable to fully install , however, since my user list is automatically repopulated.
3. Restarting the service on clients using kickstart (http://support.apple.com/kb/HT2370). This changes nothing.
I've checked the console, and I did (before removing ARD via KBHT2577) get the error "Encryption key not found for client." I no longer get that error. I've got clients on 10.6, 10.5, and 10.4. So I've tried generating reports for each to see if it affects only certain versions. When connecting to 10.5 and below, I get the error "legacy packet not allowed 111 from 127.0.0.1."
The weird thing is that prior to uninstalling the ARD Admin program, clients were hanging on "transferring report" and I was seeing "Encryption key not found for client." in the console.
Now, after reinstalling, clients are hanging on "generating report." There is no error in the console.
Just giving my input of what I've tried, and what I'm seeing. Sorry if I came off as rude to you, Dave.

Chicken of the VNC and conneting to multiple computers on a single LAN

I've successfully got Chicken of the VNC operating so that I can reach my iMac (running Leopard) from outside my LAN using my iBooks (running Tiger). And I can also connect to all computers inside my LAN by using Bonjour in chicken of the VNC.
What I cannot figure out is how to setup Chicken of the VNC and port forwarding to access my other three computers from outside of my LAN.
I suppose it is simply configuring the port forwarding correctly and apparently I'm not doing that.
I've got each Mac configured with a fixed IP as follows...
iMac is at 192.168.0.100
iBook is at 192.168.0.102
iBook2 is at 192.168.0.103
Acer is at 192.168.0.120
Right now the port forwarding on my Linksys WRT54G looks like this...
VNC1 5500 to 5500 Both 192.168.0.100 enable
VNC2 5800 to 5800 Both 192.168.0.100 enable
VNC3 5900 to 5900 Both 192.168.0.100 enable
VNC-iBook 5502 to 5502 Both 192.168.0.102 enable
VNC-iBook2 5503 to 5503 Both 192.168.0.103 enable
VNC-Acer 5504 to 5504 Both 192.168.0.120 enable
Enabling Bonjour in Chicken of the VNC lets me connect to all computers on my LAN. And I can connect to my iMac outside of my LAN using the WAN-IP:5900
But I cannot connect to any of the others except the iMac (at internal IP address 192.168.0.100 or outside IP of xx.xx.xxx.xx:5900) outside of my LAN.
Any quick tips?

If you have all of your Macs inside the LAN operating okay with remote access by CotVNC, then 3/4 of the battle is done. But first thing I would do is tunnel your VNC through an encrypted ssh tunnel, unless you don't mind the possibility of a sniffer outside your home network being able to intercept every one of your vnc packets in plain text and monitor your every vnc move.
The easy way to do it would be to connect via ssh to one of the computers inside the LAN with a bunch of ports tunneled through the encrypted ssh connection. I've got several posts that talk about tunneling vnc through ssh. Do a search on posts by me (j.v.) since last year with search terms "vnc ssh 5901". Port forward port 22 through your home router to, for example, your imac, and turn on remote login (ssh login) on your imac. You do not need 5900 port forwarded through the router, only port 22.
To access multiple computers, modify your ssh login command, that you type in Terminal on the computer outside your LAN, to add additional "-L" port forward switches, for example, "ssh -L 15900:127.0.0.1:5900 -L 15901:192.168.0.102:5900 -L 15902:192.168.0.103:5900 -L 15903:192.168.0.120:5900 [email protected] Then in CotVNC, you connect to 127.0.0.1:15900, 127.0.0.1:15901, 127.0.0.1:15902, or 127.0.0.1:15903, in order to connect to imac, ibook, ibook2, or acer. All the VNC traffic is encrypted and tunneled inside the ssh connection. All traffic to all computers is delivered to the imac's localhost interface, and depending on which port you specified in CotVNC, it goes to the computer specified in the "-L" switches for that port.

HT200259 Configuring adaptive firewall for VNC and RDP connections

Hello, I'm using Yosemite with OSX Server. Is there a way of configuring adaptive firewall for VNC and RDP connections?

Apple has never documented what the adaptive firewall really does, as far as I know. It seems that the built-in network services send it some kind of notification whenever there is a connection attempt. The Screen Sharing service is one of those, so it should be protected. There is no built-in RDP service, so if you somehow added one, it would not be protected.

Screen Sharing and ARD broken

Hi,
I have 10.9.4. I had remote management switched on and it was working fine.
I installed ARD 3.7 and started it up fine and it was running fine allowing me to do all what I needed.
I also need to remote to this Mac and so set the preference in ARD to allow control whilst the app was running. Thats when it went pear shaped.
It suddenly stopped allowing remote access to the machine.
I now have to be physically at the unit. I have removed ARD and all the files it has added and switched off all screen sharing and Remote Management in Sys Pref. Restarted and switched on Remote Management again.
I can still not access the machine remotely (i.e. screen sharing).
When trying to use screen sharing on the Mac itself to remote onto another machine I get the following in Console.
20/08/2014 15:08:23.459 Screen Sharing[1422]: unable to get server port
20/08/2014 15:08:23.459 Screen Sharing[1422]: *** -[__NSSetM addObject:]: object cannot be nil
20/08/2014 15:08:23.537 Screen Sharing[1422]: (
0   CoreFoundation                      0x00007fff93cd525c __exceptionPreprocess + 172
1   libobjc.A.dylib                     0x00007fff94276e75 objc_exception_throw + 43
2   CoreFoundation                      0x00007fff93bf4966 -[__NSSetM addObject:] + 790
3   ScreenSharing                       0x00007fff91f3a0e2 -[SSInputEventSourceCoordinator addSource:] + 69
4   CoreFoundation                      0x00007fff93ca3e0c __CFNOTIFICATIONCENTER_IS_CALLING_OUT_TO_AN_OBSERVER__ + 12
5   CoreFoundation                      0x00007fff93b9782d _CFXNotificationPost + 2893
6   Foundation                          0x00007fff905277ba -[NSNotificationCenter postNotificationName:object:userInfo:] + 68
7   AppKit                              0x00007fff96fb1cde -[NSApplication finishLaunching] + 440
8   AppKit                              0x00007fff96fb17f3 -[NSApplication run] + 128
9   AppKit                              0x00007fff96f9c783 NSApplicationMain + 940
10 libdyld.dylib                       0x00007fff8f5b55fd start + 1
20/08/2014 15:08:23.622 Screen Sharing[1422]: *** -[NSLock lock]: deadlock (<NSLock: 0x6000000ca330> '(null)')
20/08/2014 15:08:23.622 Screen Sharing[1422]: *** Break on _NSLockError() to debug.
I can ssh to the machine fine, just not screen share (VNC).
Any help to fix allowing VNC to the machine would be greatly appreciated.
Regards
Keith

Further,
I have run a port scan and confirmed that port 5900 is open.
When using COTVNC it sort of sits there trying to connect but doesn't show the screen. If whilst it is trying I switch off Remote Management then COTVNC instantly throws up the error that screen sharing is not enabled.
Thus I am deducing that the actual VNC server of the os is goosed.

Apple Remote Desktop, VNC, and port 5900 LAN weirdness

Hi all,
I am trying to share screens with a Mac Mini running ARD in OS X 10.3.9 over a LAN from my Macbook Pro (10.4.11). I have an Airport Extreme base station (7.2.1). The Mini is connected to the base station via wired Ethernet cable, the Macbook is wireless.
I'm using Chicken of the VNC (2.0b4) on the MacBook, but I can't get anything but Connection Refused.
* The software firewall on the mini is off (I'm behind NAT)
* I've turned on ARD in the Sharing prefs control panel, set up the users and checked all the "allow" checkboxes (and restarting the mini)
* I've tried connecting to port 5900, 5901, and 3283
* I've tried enabling port mapping on the Airport (which seems crazy, since this is all happening within the LAN)
I can SSH to the mini just fine from the Macbook. Using NetUtility, I can ping it, traceroute to it, you name it.
The only weird thing that I can find is that when I do a Port Scan on the Mini, it never returns port 5900 as open (which it seems like it should). Other ports return as open.
I've Googled my brains out looking for answers on this, and the best info that I can find points toward a network config. problem. But if that's the case, why can I SSH okay?
And yes...I could upgrade to Leopard on the MacBook. Or install OSXvnc on the Mini. But I can't see why I wouldn't have exactly the same problem. And, dadgum it, this should work!
I'm totally stumped (and have a sneaking suspicion that I'm missing something obvious). If anyone can shed light on this, or point me at a resource, I'd be very grateful.
thanks,
c

Thanks to the folks at macosxhints.com, I have discovered that ARD in OS X 10.3.x doesn't support VNC connections.

1 Mac, 1 PC, and ARD

Hey, I was wondering if it would be possible for me to use ARD 3 with a PC and a Mac. I have a Mac, a PC, and a wireless network, and I sometimes need to help the PC user in the house or do updates or something and it would be nice not to leave my iBook. :-D So, is it possible to get all of the functionality with the PC as if it were some other Mac on the network?
12" 1.07 GHz iBook G4 768MB RAM, AirPort Extreme Card Mac OS X (10.4.6) iPod [w/video], iSight, Leo Laporte Mousepad, iLife and iWork 2006

If you already have ARD, you could install a VNC host ont he PC and control or observe it that way. However, if all you need to do is remote control a PC, spending $300 for ARD is overkill. Just use VNC on the Mac also, which is free, or buy Timbuktu, which for two computers is a lot cheaper then ARD.

Tight VNC and ARD 2.2

Similar Messages

Maybe you are looking for