vnc的配置和vnc配合ssh.doc

1.首先要确定被控机器是否已经安装VNCserver,一般都是安装了的。可以用命令查询： #rpm -q vnc vnc-server 2.把用户名加入到配置文件中：rootlocalhost # vi /etc/sysconfig/vncservers# VNCSERVERARGS2=-geometry 800x600 -nolisten tcp -nohttpd -localhostVNCSERVERS=1:root #新增部分3.防火墙端口设置在使用防火墙的情况下来连接到一个远程系统,需要打开端口5901，然后重启iptables服务。rootlocalhost # vi /etc/sysconfig/iptables# Firewall configuration written by system-config-securitylevel# Manual customization of this file is not recommended.*filter:INPUT ACCEPT 0:0:FORWARD ACCEPT 0:0:OUTPUT ACCEPT 0:0:RH-Firewall-1-INPUT - 0:0-A INPUT -j RH-Firewall-1-INPUT-A FORWARD -j RH-Firewall-1-INPUT-A RH-Firewall-1-INPUT -i lo -j ACCEPT-A RH-Firewall-1-INPUT -p icmp -icmp-type any -j ACCEPT-A RH-Firewall-1-INPUT -p 50 -j ACCEPT-A RH-Firewall-1-INPUT -p 51 -j ACCEPT-A RH-Firewall-1-INPUT -p udp -dport 5353 -d 51 -j ACCEPT-A RH-Firewall-1-INPUT -p udp -m udp -dport 631 -j ACCEPT-A RH-Firewall-1-INPUT -p tcp -m tcp -dport 631 -j ACCEPT-A RH-Firewall-1-INPUT -m state -state ESTABLISHED,RELATED -j ACCEPT-A RH-Firewall-1-INPUT -m state -state NEW -m tcp -p tcp -dport 21 -j ACCEPT-A RH-Firewall-1-INPUT -m state -state NEW -m tcp -p tcp -dport 22 -j ACCEPT-A RH-Firewall-1-INPUT -m state -state NEW -m udp -p udp -dport 137 -j ACCEPT-A RH-Firewall-1-INPUT -m state -state NEW -m udp -p udp -dport 138 -j ACCEPT-A RH-Firewall-1-INPUT -m state -state NEW -m tcp -p tcp -dport 139 -j ACCEPT-A RH-Firewall-1-INPUT -m state -state NEW -m tcp -p tcp -dport 445 -j ACCEPT-A RH-Firewall-1-INPUT -m state -state NEW -m tcp -p tcp -dport 23 -j ACCEPT-A RH-Firewall-1-INPUT -m state -state NEW -m tcp -p tcp -dport 80 -j ACCEPT-A RH-Firewall-1-INPUT -m state -state NEW -m tcp -p tcp -dport 5901 -j ACCEPT #新增部分-A RH-Firewall-1-INPUT -j REJECT -reject-with icmp-host-prohibitedCOMMIT4.重启iptables服务rootlocalhost # /sbin/service iptables restart清除防火墙规则： 确定把 chains 设置为 ACCEPT 策略：nat filter 确定正在卸载 Iiptables 模块： 确定应用 iptables 防火墙规则： 确定载入额外 iptables 模块：ip_conntrack_netbios_ns ip_conntrac确定5.启动vncserver，这时候通过VNC Viewer只能看到终端窗口rootlocalhost # vncserverYou will require a password to access your desktops.Password: #123456Verify: #123456New localhost.localdomain:1 (root) desktop is localhost.localdomain:1Creating default startup script /root/.vnc/xstartupStarting applications specified in /root/.vnc/xstartupLog file is /root/.vnc/localhost.localdomain:1.log5.设置图形界面登录rootlocalhost # vi /root/.vnc/xstartup#!/bin/sh# Uncomment the following two lines for normal desktop:unset SESSION_MANAGER #去掉注释符号#exec /etc/X11/xinit/xinitrc #去掉注释符号# -x /etc/vnc/xstartup & exec /etc/vnc/xstartup -r $HOME/.Xresources & xrdb $HOME/.Xresourcesxsetroot -solid greyvncconfig -iconic &xterm -geometry 80x24+10+10 -ls -title $VNCDESKTOP Desktop &#twm & #注释掉gnome-session & #新增6.重启vncserver rootlocalhost # service vncserver restart关闭 VNC 服务器：1:root 确定启动 VNC 服务器：1:root xauth: creating new authority file /root/.XauthorityNew localhost.localdomain:1 (root) desktop is localhost.localdomain:1Starting applications specified in /root/.vnc/xstartupLog file is /root/.vnc/localhost.localdomain:1.log 确定rootlocalhost #7.这时再通过客户端就可以登录图形界面了. 在配置完之后我只能打开一个界面，界面上之后什么图标也没有，什么操作也不能做。后来经过尝试发现，每次登录都要将用户当前的vncserver打开，并且会提示端口号，在windows下用vncview登录时将提示的端口号加在ip地址后面就可以了如：6：5902VNC 配合putty 安全连接linux1. 运行putty,输入服务器的ip地址,输入一个名字,这里以vmsup1(主机名)作为session的名字，按save保存。见下图2. 单击对话框左边的tunnels来选择相关设置，在source port里输入5901(本地vpc客户端连接的端口，可任意修改)，在Destination里输入lo