VNC to PC

I have a new MacBook and am trying to control my Windows XP pc. The XP box has Tight VNC server running and I downloaded Chicken of the VNC for my MacBook. The connection works and I can see the XP desktop, but it is super super slow. The mouse is about 10 seconds behind. This is over a local network, not over the internet.
Anyone know what I need to do? Is it a compatibility problem between COTVNC and Tight VNC? I have seen posts like this but they are going the other way, from the PC to the mac. I'm going from the Mac to the PC. Do I need a different server on the PC besides Tight VNC? I had Ubuntu on a laptop for a long time and it worked fine.
Thanks in advance

Very nice. It works much better than COTVNC. There is a bit of lag but for what I need to do it will work just fine. I noticed that it's an alpha release so I'm thinking it might get a little better over time.
Thanks for the advice.

Similar Messages

How To Install A (Almost) Working Lion Server With Profile Management/SSL/OD/Mail/iCal/Address Book/VNC/Web/etc.

I recently installed a fresh version of Lion Server after attempting to fix a broken upgrade. With some help from others, I've managed to get all the new features working and have kept notes, having found that many or most of the necessary installation steps for both the OS and its services are almost entirely undocumented. When you get them working, they work great, but the entire process is very fragile, with simple setup steps causing breaks or even malicious behaviors. In case this is useful to others, here are my notes.
Start with an erased, virgin, single guid partitioned drive. Not an upgrade. Not simply a repartitioned drive. Erased. Clean. Anything else can and probably will break the Lion Server install, as I discovered myself more than once. Before erasing my drive, I already had Lion and made a Lion install DVD from instructions widely available on the web. I suppose you could also boot into the Lion recovery partition and use disk utility to erase the OS X partition then install a new partition, but I cut a DVD. The bottom line is to erase any old OS partitions. And of course to have multiple, independent backups: I use both Time Machine with a modified StdExclusions.plist and Carbon Copy Cloner.
Also, if you will be running your own personal cloud, you will want to know your domain name ahead of time, as this will be propagated everywhere throughout server, and changing anything related to SSL on Lion Server is a nightmare that I haven't figured out. If you don't yet have a domain name, go drop ten dollars at namecheap.com or wherever and reserve one before you start. Soemday someone will document how to change this stuff without breaking Lion Server, but we're not there yet. I'll assume the top-level domain name "domain.com" here.
Given good backups, a Lion Install DVD (or Recovery Partition), and a domain name, here are the steps, apparently all of which must be more-or-less strictly followed in this order.
DVD>Disk Utility>Erase Disk [or Recovery Partition>Disk Utility>Erase Partition]
DVD>Install Lion
Reboot, hopefully Lion install kicks in
Update, update, update Lion (NOT Lion Server yet) until no more updates
System Preferences>Network>Static IP on the LAN (say 10.0.1.2) and Computer name ("server" is a good standbye)
Terminal>$ sudo scutil --set HostName server.domain.com
App Store>Install Lion Server and run through the Setup
Download install Server Admin Tools, then update, update, update until no more updates
Server Admin>DNS>Zones [IF THIS WASN'T AUTOMAGICALLY CREATED (mine wasn't): Add zone domain.com with Nameserver "server.domain.com." (that's a FQDN terminated with a period) and a Mail Exchanger (MX record) "server.domain.com." with priority 10. Add Record>Add Machine (A record) server.domain.com pointing to the server's static IP. You can add fancier DNS aliases and a simpler MX record below after you get through the crucial steps.]
System Prefs>Network>Advanced>Set your DNS server to 127.0.0.1
A few DNS set-up steps and these most important steps:
A. Check that the Unix command "hostname" returns the correct hostname and you can see this hostname in Server.app>Hardware>Network
B. Check that DNS works: the unix commands "host server.domain.com" and "host 10.0.1.2" (assuming that that's your static IP) should point to each other. Do not proceed until DNS works.
C. Get Apple Push Notification Services CA via Server.app>Hardware>Settings><Click toggle, Edit... get a new cert ...>
D. Server.app>Profile Manager>Configure... [Magic script should create OD Master, signed SSL cert]
E. Server.app>Hardware>Settings>SSL Certificate> [Check to make sure it's set to the one just created]
F. Using Server.app, turn on the web, then Server.app>Profile Manager> [Click on hyperlink to get to web page, e.g. server.domain.com/profilemanager] Upper RHS pull-down, install Trust Profile
G. Keychain Access>System>Certificates [Find the automatically generated cert "Domain", the one that is a "Root certificate authority", Highlight and Export as .cer, email to all iOS devices, and click on the authority on the device. It should be entered as a trusted CA on all iOS devices. While you're at it, highlight and Export... as a .cer the certificate "IntermediateCA_SERVER.DOMAIN.COM_1", which is listed an an "Intermediate CA" -- you will use this to establish secure SSL connections with remote browsers hitting your server.]
H. iOS on LAN: browse to server.domain.com/mydevices> [click on LHS Install trust cert, then RHS Enroll device.
I. Test from web browser server.domain.com/mydevices: Lock Device to test
J. ??? Profit
12. Server Admin>DNS>Zones> Add convenient DNS alias records if necessary, e.g., mail.domain.com, smtp.domain.com, www.domain.com. If you want to refer to your box using the convenient shorthand "domain.com", you must enter the A record (NOT alias) "domain.com." FQDN pointing to the server's fixed IP. You can also enter the convenient short MX record "domain.com." with priority 11. This will all work on the LAN -- all these settings must be mirrored on the outside internet using the service from which you registered domain.com.
You are now ready to begin turning on your services. Here are a few important details and gotchas setting up cloud services.
Firewall
Server Admin>Firewall>Services> Open up all ports needed by whichever services you want to run and set up your router (assuming that your server sits behind a router) to port forward these ports to your router's LAN IP. This is most a straightforward exercise in grepping for the correct ports on this page, but there are several jaw-droppingly undocumented omissions of crucial ports for Push Services and Device Enrollment. If you want to enroll your iOS devices, make sure port 1640 is open. If you want Push Notifications to work (you do), then ports 2195, 2196, 5218, and 5223 must be open. The Unix commands "lsof -i :5218" and "nmap -p 5218 server.domain.com" (nmap available from Macports after installing Xcode from the App Store) help show which ports are open.
SSH
Do this with strong security. Server.app to turn on remote logins (open port 22), but edit /etc/sshd_config to turn off root and password logins.
PermitRootLogin no
PasswordAuthentication no
ChallengeResponseAuthentication no
I'm note sure if toggling the Allow remote logins will load this config file or, run "sudo launchctl unload -w /System/Library/LaunchAgents/org.openbsd.ssh-agent.plist ; sudo launchctl load -w /System/Library/LaunchAgents/org.openbsd.ssh-agent.plist" to restart the server's ssh daemon.
Then use ssh-keygen on remote client to generate public/private keys that can be used to remotely login to the server.
client$ ssh-keygen -t rsa -b 2048 -C client_name
[Securely copy ~/.ssh/id_rsa.pub from client to server.]
server$ cat id_rsa.pub > ~/.ssh/known_hosts
I also like DenyHosts, which emails detected ssh attacks to [email protected]. It's amazing how many ssh attacks there are on any open port 22. Not really an added security feature if you've turned off password logins, but good to monitor. Here's a Lion Server diff for the config file /usr/share/denyhosts:
$ diff denyhosts.cfg-dist denyhosts.cfg
12c12
< SECURE_LOG = /var/log/secure
> #SECURE_LOG = /var/log/secure
22a23
> SECURE_LOG = /var/log/secure.log
34c35
< HOSTS_DENY = /etc/hosts.deny
> #HOSTS_DENY = /etc/hosts.deny
40a42,44
> #
> # Mac OS X Lion Server
> HOSTS_DENY = /private/etc/hosts.deny
195c199
< LOCK_FILE = /var/lock/subsys/denyhosts
> #LOCK_FILE = /var/lock/subsys/denyhosts
202a207,208
> LOCK_FILE = /var/denyhosts/denyhosts.pid
> #
219c225
< ADMIN_EMAIL =
> ADMIN_EMAIL = [email protected]
286c292
< #SYSLOG_REPORT=YES
> SYSLOG_REPORT=YES
Network Accounts
User Server.app to create your network accounts; do not use Workgroup Manager. If you use Workgroup Manager, as I did, then your accounts will not have email addresses specified and iCal Server WILL NOT COMPLETELY WORK. Well, at least collaboration through network accounts will be handled clunkily through email, not automatically as they should. If you create a network account using Workgroup Manager, then edit that account using Server.app to specify the email to which iCal invitations may be sent. Server.app doesn't say anything about this, but that's one thing that email address entry is used for. This still isn't quite solid on Lion Server, as my Open Directory logs on a freshly installed Lion Server are filled with errors that read:
2011-12-12 15:05:52.425 EST - Module: SystemCache - Misconfiguration detected in hash 'Kerberos':
     User 'uname' (/LDAPv3/127.0.0.1) - ID 1031 - UUID 98B4DF30-09CF-42F1-6C31-9D55FE4A0812 - SID S-0-8-83-8930552043-0845248631-7065481045-9092
Oh well.
Email
Email aliases are handled with the file /private/etc/postfix/aliases. Do something like this
root:           myname
admin:          myname
sysadmin:       myname
certadmin:      myname
webmaster:      myname
my_alternate:   myname
Then run "sudo newaliases". If your ISP is Comcast or some other large provider, you probably must proxy your outgoing mail through their SMTP servers to avoid being blocked as a spammer (a lot of SMTP servers will block email from Comcast/whatever IP addresses that isn't sent by Comcast). Use Server.app>Mail to enter your account information. Even then, the Lion Server default setup may fail using this proxy. I had to do this with the file /private/etc/postfix/main.cf:
cd /etc/postfix
sudo cp ./main.cf ./main.cf.no_smtp_sasl_security_options
sudo echo 'smtp_sasl_security_options = noanonymous' >> ./main.cf
sudo serveradmin stop mail
sudo serveradmin start mail
Finally, make sure that you're running a blacklisting srevice yourself! Server Admin>Mail>Filter> Use spamhaus.org as a blacklister. Finally, set up mail to use strong Kerberos/MD5 settings under on Server Admin>Mail>Advanced. Turn off password and clear logins. The settings should be set to "Use" your SSL cert, NOT "Require". "Require" consistently breaks things for me.
If you already installed the server's Trust Certificate as described above (and opened up the correct ports), email to your account should be pushed out to all clients.
iCal Server
Server.app>Calendar>Turn ON and Allow Email Invitations, Edit... . Whatever you do, do NOT enter your own email account information in this GUI. You must enter the account information for local user com.apple.calendarserver, and the password for this account, which is stored in the System keychain: Keychain Access>System> Item com.apple.servermgr_calendar. Double-click and Show Password, copy and paste into Server.app dialog. This is all described in depth here. If you enter your own account information here (DO NOT!), the iCal Server will delete all Emails in your Inbox just as soon as it reads them, exactly like it works for user com.apple.calendarserver. Believe me, you don't want to discover this "feature", which I expect will be more tightly controlled in some future update.
Web
The functionality of Server.app's Web management is pretty limited and awful, but a few changes to the file /etc/apache2/httpd.conf will give you a pretty capable and flexible web server, just one that you must manage by hand. Here's a diff for httpd.conf:
$ diff httpd.conf.default httpd.conf
95c95
< #LoadModule ssl_module libexec/apache2/mod_ssl.so
> LoadModule ssl_module libexec/apache2/mod_ssl.so
111c111
< #LoadModule php5_module libexec/apache2/libphp5.so
> LoadModule php5_module libexec/apache2/libphp5.so
139,140c139,140
< #LoadModule auth_digest_apple_module libexec/apache2/mod_auth_digest_apple.so
< #LoadModule encoding_module libexec/apache2/mod_encoding.so
> LoadModule auth_digest_apple_module libexec/apache2/mod_auth_digest_apple.so
> LoadModule encoding_module libexec/apache2/mod_encoding.so
146c146
< #LoadModule xsendfile_module libexec/apache2/mod_xsendfile.so
> LoadModule xsendfile_module libexec/apache2/mod_xsendfile.so
177c177
< ServerAdmin [email protected]
> ServerAdmin [email protected]
186c186
< #ServerName www.example.com:80
> ServerName domain.com:443
677a678,680
> # Server-specific configuration
> # sudo apachectl -D WEBSERVICE_ON -D MACOSXSERVER -k restart
> Include /etc/apache2/mydomain/*.conf
I did "sudo mkdir /etc/apache2/mydomain" and add specific config files for various web pages to host. For example, here's a config file that will host the entire contents of an EyeTV DVR, all password controlled with htdigest ("htdigest ~uname/.htdigest EyeTV uname"). Browsing to https://server.domain.com/eyetv points to /Users/uname/Sites/EyeTV, in which there's an index.php script that can read and display the EyeTV archive at https://server.domain.com/eyetv_archive. If you want Apache username accounts with twiddles as in https://server.domain.com/~uname, specify "UserDir Sites" in the configuration file.
Alias /eyetv /Users/uname/Sites/EyeTV
<Directory "/Users/uname/Sites/EyeTV">
    AuthType Digest
    AuthName "EyeTV"
    AuthUserFile /Users/uname/.htdigest
    AuthGroupFile /dev/null
    Require user uname
    Options Indexes MultiViews
    AllowOverride All
    Order allow,deny
    Allow from all
</Directory>
Alias /eyetv_archive "/Volumes/Macintosh HD2/Documents/EyeTV Archive"
<Directory "/Volumes/Macintosh HD2/Documents/EyeTV Archive">
    AuthType Digest
    AuthName "EyeTV"
    AuthUserFile /Users/uname/.htdigest
    AuthGroupFile /dev/null
    Require user uname
    Options Indexes MultiViews
    AllowOverride All
    Order allow,deny
    Allow from all
</Directory>
I think you can turn Web off/on in Server.app to relaunch apached, or simply "sudo apachectl -D WEBSERVICE_ON -D MACOSXSERVER -k restart".
Securely copy to all desired remote clients the file IntermediateCA_SERVER.DOMAIN.COM_1.cer, which you exported from System Keychain above. Add this certificate to your remote keychain and trust it, allowing secure connections between remote clients and your server. Also on remote clients: Firefox>Advanced>Encryption>View Certificates>Authorities>Import...> Import this certificate into your browser. Now there should be a secure connection to https://server.domain.com without any SSL warnings.
One caveat is that there should be a nice way to establish secure SSL to https://domain.com and https://www.domain.com, but the automagically created SSL certificate only knows about server.domain.com. I attempted to follow this advice when I originally created the cert and add these additional domains (under "Subject Alternate Name Extension"), but the cert creation UI failed when I did this, so I just gave up. I hope that by the time these certs expire, someone posts some documentation on how to manage and change Lion Server SSL scripts AFTER the server has been promoted to an Open Directory Master. In the meantime, it would be much appreciated if anyone can post either how to add these additional domain names to the existing cert, or generate and/or sign a cert with a self-created Keychain Access root certificate authority. In my experience, any attempt to mess with the SSL certs automatically generated just breaks Lion Server.
Finally, if you don't want a little Apple logo as your web page icon, create your own 16×16 PNG and copy it to the file /Library/Server/Web/Data/Sites/Default/favicon.ico. And request that all web-crawling robots go away with the file /Library/Server/Web/Data/Sites/Default/robots.txt:
User-agent: *
Disallow: /
Misc
VNC easily works with iOS devices -- use a good passphrase. Edit /System/Library/LaunchDaemons/org.postgresql.postgres.plist and set "listen_addresses=127.0.0.1" to allow PostgreSQL connections over localhost. I've also downloaded snort/base/swatch to build an intrusion detection system, and used Macports's squid+privoxy to build a privacy-enhanced ad-blocking proxy server.

Privacy Enhancing Filtering Proxy and SSH Tunnel
Lion Server comes with its own web proxy, but chaining Squid and Privoxy together provides a capable and effective web proxy that can block ads and malicious scripts, and conceal information used to track you around the web. I've posted a simple way to build and use a privacy enhancing web proxy here. While you're at it, configure your OS and browsers to block Adobe Flash cookies and block Flash access to your camera, microphone, and peer networks. Read this WSJ article series to understand how this impacts your privacy. If you configure it to allow use for anyone on your LAN, be sure to open up ports 3128, 8118, and 8123 on your firewall.
If you've set up ssh and/or VPN as above, you can securely tunnel in to your proxy from anywhere. The syntax for ssh tunnels is a little obscure, so I wrote a little ssh tunnel script with a simpler flexible syntax. This script also allows secure tunnels to other services like VNC (port 5900). If you save this to a file ./ssht (and chmod a+x ./ssht), example syntax to establish an ssh tunnel through localhost:8080 (or, e.g., localhost:5901 for secure VNC Screen Sharing connects) looks like:
$ ./ssht 8080:[email protected]:3128
$ ./ssht 8080:alice@:
$ ./ssht 8080:
$ ./ssht 8018::8123
$ ./ssht 5901::5900 [Use the address localhost:5901 for secure VNC connects using OS X's Screen Sharing or Chicken of the VNC (sudo port install cotvnc)]
$ vi ./ssht
#!/bin/sh
# SSH tunnel to squid/whatever proxy: ssht [-p ssh_port] [localhost_port:][user_name@][ip_address][:remotehost][:remote_port]
USERNAME_DEFAULT=username
HOSTNAME_DEFAULT=domain.com
SSHPORT_DEFAULT=22
# SSH port forwarding specs, e.g. 8080:localhost:3128
LOCALHOSTPORT_DEFAULT=8080      # Default is http proxy 8080
REMOTEHOST_DEFAULT=localhost    # Default is localhost
REMOTEPORT_DEFAULT=3128         # Default is Squid port
# Parse ssh port and tunnel details if specified
SSHPORT=$SSHPORT_DEFAULT
TUNNEL_DETAILS=$LOCALHOSTPORT_DEFAULT:$USERNAME_DEFAULT@$HOSTNAME_DEFAULT:$REMOT EHOST_DEFAULT:$REMOTEPORT_DEFAULT
while [ "$1" != "" ]
do
case $1
in
    -p) shift;                  # -p option
        SSHPORT=$1;
        shift;;
     *) TUNNEL_DETAILS=$1;      # 1st argument option
        shift;;
esac
done
# Get local and remote ports, username, and hostname from the command line argument: localhost_port:user_name@ip_address:remote_host:remote_port
shopt -s extglob                        # needed for +(pattern) syntax; man sh
LOCALHOSTPORT=$LOCALHOSTPORT_DEFAULT
USERNAME=$USERNAME_DEFAULT
HOSTNAME=$HOSTNAME_DEFAULT
REMOTEHOST=$REMOTEHOST_DEFAULT
REMOTEPORT=$REMOTEPORT_DEFAULT
# LOCALHOSTPORT
CDR=${TUNNEL_DETAILS#+([0-9]):}         # delete shortest leading +([0-9]):
CAR=${TUNNEL_DETAILS%%$CDR}             # cut this string from TUNNEL_DETAILS
CAR=${CAR%:}                            # delete :
if [ "$CAR" != "" ]                     # leading or trailing port specified
then
    LOCALHOSTPORT=$CAR
fi
TUNNEL_DETAILS=$CDR
# REMOTEPORT
CDR=${TUNNEL_DETAILS%:+([0-9])}         # delete shortest trailing :+([0-9])
CAR=${TUNNEL_DETAILS##$CDR}             # cut this string from TUNNEL_DETAILS
CAR=${CAR#:}                            # delete :
if [ "$CAR" != "" ]                     # leading or trailing port specified
then
    REMOTEPORT=$CAR
fi
TUNNEL_DETAILS=$CDR
# REMOTEHOST
CDR=${TUNNEL_DETAILS%:*}                # delete shortest trailing :*
CAR=${TUNNEL_DETAILS##$CDR}             # cut this string from TUNNEL_DETAILS
CAR=${CAR#:}                            # delete :
if [ "$CAR" != "" ]                     # leading or trailing port specified
then
    REMOTEHOST=$CAR
fi
TUNNEL_DETAILS=$CDR
# USERNAME
CDR=${TUNNEL_DETAILS#*@}                # delete shortest leading +([0-9]):
CAR=${TUNNEL_DETAILS%%$CDR}             # cut this string from TUNNEL_DETAILS
CAR=${CAR%@}                            # delete @
if [ "$CAR" != "" ]                     # leading or trailing port specified
then
    USERNAME=$CAR
fi
TUNNEL_DETAILS=$CDR
# HOSTNAME
HOSTNAME=$TUNNEL_DETAILS
if [ "$HOSTNAME" == "" ]                # no hostname given
then
    HOSTNAME=$HOSTNAME_DEFAULT
fi
ssh -p $SSHPORT -L $LOCALHOSTPORT:$REMOTEHOST:$REMOTEPORT -l $USERNAME $HOSTNAME -f -C -q -N \
    && echo "SSH tunnel established via $LOCALHOSTPORT:$REMOTEHOST:$REMOTEPORT\n\tto $USERNAME@$HOSTNAME:$SSHPORT." \
    || echo "SSH tunnel FAIL."

Custom Resolution when VNC'ing with no monitor

Hi,
I've got my mac-mini wired up to my tv in the front room for use as a media player etc.. This works well with my tv.
However I also want to write iPhone applications, which involves VNC'ing from my windows computer.
When my TV is off, it gives me a choice of about 4 resolutions, none of which match the resolution of my windows computer.
I tried downloading 'switchresx', to add a custom resolution, but it just says 'invalid' next to the entry I added.
Is there some other way of setting a custom resolution for when I want to control my MM from another computer ?
Cheers
Rich.

Hah, wow. You're right. pacman overwrote the file, and I wasn't paying attention. A quick
cp /etc/resolv.conf.pacorig /etc/resolv.conf
fixed it. Thanks!

How do I connect with a webbased VNC client to a dual-monitor Lion machine?

I'm using a webapplication to manage a narrowcasting system.
For this I use an installation of XAMPP on a dedicated Mac Mini hooked up to some monitors.
This software is accessible through a webinterface on the local Mac Mini. With this software people can arrange video's and send them to the monitors connected to the Mac Mini.
This works very well, but know I also want to build a feature where people can see what the Mac Mini's are sending to the monitors. For this I want to use a webbased (now it is Java) vnc viewer build into the webinterface.
I've tried a setup with the TightVNC Java viewer and the build-in OSX VNC server. This gives me the problem that when I try to connect to the Mini I always encounter the Lion login screen. This seems to be new Lion behaviour that can't be disabled. I know that there are some vnc clients that support OSX authentication (like Mocha), but at this point I haven't found a webbased solution for this.
If I use the Wine vnc server I don't have this problem (when I access the Mac Mini I go straight to the active desktop). Unfortunately Wine doesn't support multiple monitors.
I use two monitors on the Mac Mini (one for showing the video playback and one for admin work). I want to setup the vnc client in a way where the user only sees the second screen.
Is there a solution out there that eliminates both of these problems (so connecting without the Lion login screen and only giving a view of the second monitor?).
Any help would be much appreciated.

No one? Seems I want something that can't be done. To bad.

A stable, fast reliable VNC connection to Lion or Lion server

I hope this post help people with VNC setup from non Mac machines to a Mac running Lion or Lion Server 10.7.4.
Apple has changed quite a few things in Lion regrading VNC and screen sharing. As a consequence many VNC viewers are no longer compatible until the VNC software is upgraded to be Lion compatible. You will find many posts about this topic in this forum, eg
https://discussions.apple.com/thread/3289794?start=0&tstart=0
Often, the result is that the user can't proceed beyond the gray login screen (screen locks up etc).
This post describes how configure Real VNCs VNC server on Lion Server 10.7.4 to work in conjunction! with ARD, thus allowing you to keep screen sharing enabled and still use ARD from client if that is desired)
Download the VNC server at (Version 5! necessary)
http://www.realvnc.com/download/vnc/latest/
and install the VNC server on the host (the computer you want to login to via VNC)
Single User Host setup
==================
- Install the VNC server and follow the intsruction
(If you your Mac is configured for remote management, screen sharing, remote apple events the installation may complete with error stating to contact the manufacturer....ignore the error as it most likely caused by a port conflict because VNC server and ARD (or apple scrren sgaring both use port 5900 per default), the software was still completely and correctly installed.
- start VNC Server by opening Finder -> Applications -> Real VNC -> VNC Server (User Mode)
You will see a small VNC icon in the top tsak bar of the screen.
(if you open the "information Center" the issues tab will show a port 5900 conflict)
- open VNCserver Options and select the connections tab:
+Change the default port from 5900 to 5901 and serve Java viewer on Port from 5800 to 5801
+ Change Authetication to "Mac password"
+ Select Encryption "always on"
- Selct the expert tab
+scroll down to the bottom of the list and change "StopUserModeOnSwitchOut" to "no"
(this settings prevents the VNC server to be stopped automatically if you have Fast Switching User Mode enabled on the host.)
- select "Apply"
(now if you open the Information Center" again, the port conflict problem should be solved.
- select "open" from the VNC server menu:
If the configuration was succesful, thw window will show a check mark in a green box stating everything is ok.
- In addition you will find the address that the client user will need to connect to the VNC server on the host
it will say something like "VNC viewer user can connect using the address 192.168.x.y:1"
Note: If you start several VNC servers, each session will need a dedicated port (like 5902, 5903 etc)
Router/Firewall Settings:
===================
Depending on the router/firewall you use your ports may have been automatically configured for you (airPort extreme for example).
You need to open port 5901 and 5801 and forward these ports to the IP address of the host. If ARD was alredy working in your setup, you can copy the port coniguration for ports 5900, 3283 and 3306 that are used by ARD and implement the same rules for the new port used by VNC 5901.
Review the settings of your firewall/router.
VNC client
========
- download the VNC client for your OS from
http://www.realvnc.com/download/viewer/
and follow the install instructions.
- Start the VNC client on your client PC (Windows for example) and enter the address that the VNC server reported to you earlier (192.168.x.y:1)
- Encryption : "Let VNC Server choose"
- select "connect"
- enter your Mac username and password that was setup on your host
you are now connected via VNC to your host.
You can also configure the VNC server to allow other users to login to the same! VNC session using their user credentials (friends/family or serverAdmins that want to share access to the host)
To do this open the options dialog box on the VNC server host computer and select "configure" next to authentication.
- add the users that are supposed to get access to your VNC session using their own credentials. (make sure this is what you really want, otherwise read on in the multi user section of this post)
Multi User Host Setup
=================
If multiple users are supposed to access the host computer using their own credentials logging into their own! desktop, follow these instructions:
- first enable Fast User Switching on your host computer by going to
System preferences -> User/Groups -> Login Options and select the check box "show fast user switching menu as..."
- For each user on the host that should be reached via a VNC session start VNC server (user) as described before and assign a new port number to the new user like 5902 etc.
- repeat the configuration outlined above for each user (eg. "StopUserModeOnSwitchOut" to "no")
(note initilally when you start the VNC server for the first time again, you will get notified that a port conflict exists again....this disappears as soon as the new port is configured)
now another user can login via VNC into his own desktop using the server address : "191.168..x.y.:2"
Final notes:
=========
I spent hours trying to get a variety of VNC viewers to work with the new screen sharing/VNC implementation in Lion and finally gave up. I called Apple Enterprise support and they confirmed that "a majority of the existing VNC products are not compatible with the new VNC implementation in Lion yet and that Apple recommends ARD". The discussion on what other non Mac users (Windows, Linux) should do did not go anywhere....
I have tested the above configuration with the free version VNC server 5 on the host and the free version VNC viewer 5 on a client. It worked flawlessly, fast, reproducable and very stable. You need to be aware that depending on the features you want (number of desktops, users etc) that you may have to purchase the personal or enterprise edition for the server.
The featurs are described here:
http://www.realvnc.com/products/vnc/
I personally installed the enterprise edition after I verified that the free editions worked stable and reliably as I needed them to work.
I hope you now have a stable VNC link into your Lion host from the platform of your choice !

I'm using the free VNC edition from RealVNC on Mt. Lion (10.8.5) and the basic information is in this article for Lion is confirmed for the VNC Server 5.0.6 (r113416) on Mt. Lion.
The main Options... window shows the Connections tab and I just changed my port to something other than 5900 and the port conflict went away.
The Free edition does not allow Mac password and encryption can't be enabled. (Ya gotta pay for that.)
Connected to it from my iPod Touch using Mocha VNC with no problems.

How to use VNC with AirPort?

Hi,
I used to have an old iMac G3 DV at home, and I always used VNC to access it from my work computer. No problem.
Now, I recently bought a brand new MacBook and a brand new AirPort Extreme base station, and I can't connect using VNC anymore. I tried every single configuration I could, using the AirPort Utility, but it was no use.
I am not really an expert though, as this is my first time using wireless. So, please, anybody there, with greater experience about configuring AirPort for it to allow VNC connection, if you could please help me solve this problem, I would really appreciate it!
I've been told that I should make the gateway IP redirect all VNC requests to my MacBook, but I have no idea of how to do that.
I'm using Vine Server 2.1 at home (former OSXvnc) and VNC Dimension 0.7.1 at work, as the client. My MacBook is the only computer connected wirelessly to that AirPort station back home. At work, I use an older iMac G3 Indigo, with 384 MB RAM and Mac OS X (10.1.5).
Any ideas? I'm sure it should be easy to do...
MacBook 13" 1.83 GHz 512 MB RAM Mac OS X (10.4.9) AirPort Extreme 802.11n

Hello Duane!
Thanks for the quick response, and thanks for the PDF document you provided.
I remember I tried out a lot of different configurations using port mapping under NAT, and none of them worked. But I believe the problem was precisely that my local IP address for my MacBook was not static, it was always changing between that range 10.0.1.201-10.0.1.255.
So I will try setting up a static IP address and see if it works. Now, how do I do that? I can just go to somewhere in AirPort Utility and type in an address outside the default range (let's say, 10.0.1.300) and it will remain static? Where is the place I can change that?
Sorry if I sound too much of a newbie, hehe! And thanks again for your help.

How can I set up a screen screen sharing VNC at a resolution higher than display?

I have a mid 2010 MacBook Pro 13in, and i have set up screen sharing to access over VNC. I want to view my mac on my 1920x1080 display hooked up to my PC. But when i do it is not full screen, it is the same resolution as my MBP. how can i run it at a higher resolution only over VNC?

As Cvid suggests, I create my "frames" in Photoshop. Not sure about all versions, but my PS has several Actions, just for frames, and I have made a few more, with a different "look."
I Save_As PSD, and just Import those as Footage (I do not need the capability to work with the individual Layers).
Good luck,
Hunt

How to connect to a guest-VM using VNC/tightVNC

I have a guest-VM installed in OVM Server. OVM Server is running on top of VirtualBox. From the HOST-OS, I can ping to the guest-VM. I attempted vncviewer into the guest-VM, however no luck. I did 192.168.1.51:5900
However, I can launch through the console via OVMM and can see the guest-VM.
I have turn off firewall in guest-VM (linux). I was able to use vncviewer the day before.
Any ideas?
Thanks.

Dude.... The VM console feature using VNC is proxied through the VM Manager. The VNC viewer connects through the VM Manager. You can't connect directly to the VM guest using VNC... unless.... You have VNC Server installed on that guest. Even then, it might not be running on 5900 unless you're running a windows VM guest. In which case, 5900 is the default port. On many linux distributions, you have define the port in the setup and no one I know runs VNC on port 5900 in Linux. If its a Linux guest with rpm based packaging do a
rpm -qa | grep vnc
This will tell if the package is at least installed.

Switching between multiple desktops while using VNC

Hi All,
Encountering a minor inconvenience with switching between desktops while VNC-ing. I frequently telecommute and VNC into my work imac, which has parallels + windows 7 installed. My personal machine is a retina macbook pro, and both my macbook and the imac have the newest mavericks installed. I will frequently have multiple desktops open on my imac, but I find that when I am VNC-ing into the imac and then open up parallels in a full window that I am then unable to switch back to my other OS X desktops unless I completely shutdown my windows VM. Normally hotkeys works for me to switch between desktops (and still works when switching from OS X window to OS X window), but it just doesn't do the trick here. I know could just configure my imac so that parallels doesn't open up in full screen mode, which would solve the issue, but I feel like there's gotta be a way to switch desktops while VNC-ing! All tips appreciated!
Thanks,
KP

Hi,
This is possible using access restrictions in Universe designer based on user login.
For eg. there is user A,B and C and three connections C1,C2 and C3.
In Manage access restrictions you have to create a three restrictions(R1,R2 and R3): one using C1,second C2 and third C3.
Apply these three restrictions to corresponding to the users. i.e. R1-->A,R2-->B and R3-->C.
So based on user login the instance will be used for same report.
In IDT , I think this can be done using Data Level Security, but the concept wil be same.
Thanks
Gaurav

Screen sharing and vnc not working

OSX Lion Screen Sharing
I was using screen sharing on OSX Leopard using VNC Viewer. Even after upgrading to OSX Lion this worked ok. But then the other day there was an update to screen sharing which I applied. This first, switced screen sharing off, so I have switched it back on.
However now my VNC client no longer works with Screen Sharing. I get the new login screen but at that point all keyboard and mouse input is ignored and is therefore unusable.
This was working ok before the screen sharing update.
Anyone else had this issue?

Thanks but that is talking about using VNC on a Mac rather than connecting to a Mac with a VNC, my VNC client is running on windows. Also, since my original post, TightVNC has also experienced the same issues with OSX Lions Screen Sharing so its not just a RealVNC issue.
I did manage to connect once, just after rebooting OSX and that session worked fine, subsequent sessions exhibited the same issue though.

Can't screen share on one computer on LAN; strange vnc settings?

While troubleshooting problems using FaceTime on Mac on one of four computers on my LAN, I discovered several strange things about the Mac in question.
Though the Mac's name shows up on all the other computers on the LAN under the "Shared" area of the finder window, none of the computers can connect for file sharing or screen sharing even though these are turned on in the system prefs.
Even seemingly stranger, it is impossible to connect to this computer using VNC. Under the Screen Sharing section of "Sharing" it states, "Other users can access your computer at vnc://thebmac.comcast.net/ or browse for "beckyiMac"'. The odd thing here is the vnc address. It seems to be using an old name for the computer. The current name of the computer is "beckyiMac".
On other computers on my LAN some are listed with their local ip numeric address in the vnc address and others are listed with terms such as "homemacproethernet.comcast.net".
I guess one of my questions is how does the computer assign the vnc address seen on the Screen Sharing set up page? Is there a way to change this?
Thanks.
John

Have you tried Bonjour for screen sharing on your local network?
It works without problems on my local network, these are the settings that work for me:
Enable Bonjour messaging in iChat preferences>select use Bonjour instant messaging.
With iChat open select "enable screen sharing" from the top menu>video
In order to get it to work on my local network I had to disable screen sharing in Apple menu>System preferences>sharing.
The firewall settings are set to specifically allow the iChat application.
These settings should be set on all Mac's on your local network you wish to use iChat screen sharing with.
It might not work with a mac that has the file vault feature enabled.
My router settings are in default.

Is there a way to have a Chicken of the vnc type GUI over internet in ARD3?

Hello, to whoever reads this question, thanks in advance if you can help.
My need is this. I regularly use Chicken of the VNC for multiple administration over the internet, but what I like is the possibility to have same IP but Multiple clients with fixed IP (local) behind Firewall, i.e. x.x.x.x:5910 x.x.x.x:5920, x.x.x.x:5930, etc. and i can connect at the same time to the different machines to admin them.
Question: Is there any possibility to have the multiple connections with ARD 3 or even ARD 2 over the internet with same IP?
At one point ARD 3 did work for me like that for about an hour and then it stopped, blocking out 2 of 3 machines in the same IP. I mean, it acutally let me have 2 windows open on the same IP with different ports over internet and was flabbergasted, but then it stopped! when I quitted and restarted, I could do it no more…
I really like ARD, but if I got to manually change the port everytime I log in… yikes…!! I admin 20 machines in 10 different locations, so everytime i gotta log in to machine 'a' then change ports to machine 'b' for 10 locations everyday… well I hope you get the idea.
BTW i tried looking all over the forum, but could not find this info specifically.
PS thank you for your time

I, too, was a bit bummed out by the lack of this feature. I wondered if ARD 3 had some sort of mode Apple themselves used "silently".
There IS a way to make it work, however -- via VPN. I discovered that once I used VPN into my company's intranet, ARD 3's scanner could see EVERY Mac in the company.
Setting up a VPN nowadays is pretty simple -- many routers handle the support for you. OS X's Internet Connect feature makes it trivial to connect to the VPN, once it is properly set up from the inside of the company.

Is there a way to change the VNC password thru unix command in ARD2?

In a local network, I get access denied errors from macs that have the vnc password different than the Administrative login user password. I needed to change the Admistrator password which I did thru the Unix command in ARD2.
Now.
Is there a way to change the VNC password thru unix command in ARD2?
Example:
remote computer setup
Panther 10.3.9
vnc password - gopher
user ID - testARD with admin rights
user password - backdoor
ARD2 Computer setup
10.4.10
login ID - testARD
password - backdoor
I get the blue icon but get an 'access denied' error.
I change the password from backdoor to gopher.
I get the red with dash icon but, can get access to the computer.
What is going on? Is ARD2 using the VNC resource instead of ARDs resources?

A quick search of Google finds this <http://www.macgeekery.com/tips/cli/settingremote_desktops_vnc_password_interminal>. I have not tested this myself.
bill

How would I load a DE/WM (Openbox?) only for use in VNC?

tl;dr:
How can I make a segregated virtual display that can only be viewed through a VNC connection?
I have a computer that I'm using as a server (Files, Downloads, IRC bouncer), and soon as an XBMC front end for the living room computer to replace the original XBox.
With the TV it will be attached to: I want to be able to watch videos, play music, look at pictures, and possibly run an emulator or two, and that's it. No access to virtual terminals, no other programs at all. I can figure this out on my own, I found a few guides, though if you have a particularly good resource, I'd love to see it.
Here's what I do want suggestions on:
I also want it to start, say, Openbox, with just a file manager, JDownloader, and maybe a VERY light IM client for sending links to the server. (Taking suggestions, I use IRC, Google Talk, and XFire already, but on my laptop and my phone I use multiprotocol clients.)
I want the IM client and JDownloader to always be running, and I want to only be able to access them (and my entire Openbox session) through VNC. I will be using VNC clients on either a 15' or 22' monitor from Windows 7, Linux (Arch and Ubuntu) and OS X Snow Leopard, as well as from an iPhone.
I would love for the VNC session to, like Virtual Box, automatically resize itself according to window size (or the iPhone's resolution) but I'd have no problems with a single resolution.
I searched, but I suspect I'm using the wrong keywords, I've seen something about this before... I'll be doing this in about two days, but I figured I'd ask for help now rather than later.

Set up an appropriate ~/.vnc/xstartup file - syntax is the same ~/.xinitrc, but it's for the vnc session only.
Details on the wiki's tightvnc page.

How to configure a Windows machine with any vnc server software for ARD

I need someone to direct me in the right direction to configure and install any vnc server software so that I can control a windows machine with ARD like I control the rest of my macs in the lab. I need some suggestions as to the best and easiest software to configure and the correct settings to get the machine to be able to show in ARD. Thanks

Sort of. I found this article below that helped me to connect to the remote CF server using MXML. It seems that you have to create a regular project in Flex with Aplication Server Type set to None and connect to CF using the endpoint attribute of the RemoteObject MXML tag or via AS.
http://www.aliaspooryorik.com/blog/index.cfm/e/posts.details/post/200
However I found out after getting error using the AS3 code to use the endpoint property that
mx.rpc.remoting.RemoteObject does not support the "endpoint" property
whereas mx.rpc.remoting.mxml.RemoteObject does. See link below
http://www.mail-archive.com/[email protected]/msg101439.html//www.mail-archive.com/[email protected]/msg101439.html
So I had to change my AS3 code by adding a new channel to my RemoteObject using a code similar to the one on the link below (Note that this code uses PHP, when I instantiate myRemoteObject, I do so informing that the destination is "ColdFusion" [new RemoteObject("ColdFusion")], so no need to set destination as in the code on the link below
http://tech.groups.yahoo.com/group/flexcoders/message/120115
I hope that helps you.

Checking status of Remote Management (VNC).

Hi there
We use puppet in our business to manage our Macs as well as other machines.
I'm currently looking at sending a command to force enable VNC on our OS X machines:
/System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/ki ckstart -configure -access -on -privs -all -users administrator,root -activate -restart -agent -console
What I'm having trouble with is checking on the status of VNC - I want to first check that it is disabled before running the kickstart command.
I ended up writing a script which reads every plist file in the following directories:
/Library/Preferences/
/Library/Preferences/SystemConfiguration/
/Library/LaunchDaemons/
/Library/LaunchAgents/
/System/Library/LaunchDaemons/
/System/Library/LaunchAgents/
~/Library/Preferences/
~/Library/LaunchDaemons/
~/Library/LaunchAgents/
It outputs the contents to a file. I did this with VNC enabled then with VNC disabled. I then do a diff on the files and nothing shows up relevant to VNC.
Does anyone know how to check if VNC is enabled via command line?
Many thanks,
Luke
Message was edited by: servicefromeveleigh
Apologies I just realised I posted this in the iMac discussions.. Really its just a general OS X query. Not sure how to change that.

Send it some data. If there's no listener you will get an error. You could try sending an empty datagram if your application protocol doesn't have some sort of PING or ECHO command, which IMHO it should have ...

VNC to PC

Similar Messages

Maybe you are looking for