Using Inetd on a UPUX I am stumped

Larry Brigman larry.brigman "at" gmail.com
Tue Oct 24 23:04:01 2006


On 10/24/06, Matt Di Paola (mdipaola) <mdipaola "at" cisco.com> wrote:
> Anyone who can help,
>
> I have been trying to get VNC working with inetd the last few days and I
> am having issues.  We having been using VNC by SSHing in and starting
> the vncserver without any problem but we are getting collisions with
> session number and I would like to use the inetd to stop that (I am
> admin to 23 users).  I am able to open session through VNC with some
> options but not all.
>
> when I try to use below by typing hostname:3 in VNC
>
> johnvnc stream tcp wait jmalian /usr/bin/Xvnc Xvnc -inetd -query
> 127.0.0.1 -auth -once
> passwordFile=/net/mfgnet-fs2/vol/vol2/ict/jmalian/.vnc/passwd -cc 3
> -geometry 1265x960
>
> I get nothing.  By nothing I mean I get no message from VNC stating
> anything and no windows open.
> when I try to use below by typing hostname:5 in VNC
>
> chuckvnc stream tcp nowait ccasale /usr/bin/Xvnc Xvnc -inetd -query
> 127.0.0.1  -cc 3 -geometry 1265x960
>
> The VNC session opens and I get my CDE login like normal.  The problem
> here is the VNC window is labeled ccasale's x11 desktop (hostname:1).
> If I close the VNC window and try to reopen the same session by entering
> hostname:5 in VNC I get the CDE login again and ccasale's x11 desktop
> (hostname:2).  This is where the main problem is.  I want to be able to
> when I close the window log back into the same session.  I can do this
> when I start the vncserver manually.  I also noticed on the server (the
> HPUX machine) that before I open the session through the PC there are no
> processes running.  When I start the session with the PC I get the
> following
>
> #  ps -aef | grep vnc
>  ccasale  9280  6987  0 13:50:56 ?         0:05 Xvnc -inetd -query
> 127.0.0.1 -cc 3 -geometry 1265x960
>
> When I close the VNC window (click on the X in the top right corner) and
> look on the server there are no processes running again.
>
> I hope this is enough information ( and not to much) to get some help
> with my problem.  I am highly frustrated at this point and would much
> appreciate any help.  As a side not once I get the session problem fixed
> I would love some pointers on how to get the security issue fixed.  I
> can not get it working so that the VNC asks for a password before
> opening the CDE login.

You have to pass something like
   -rfbauth=/home/user/.vnc/passwd
because Xvnc defaults to
   securitytypes=none
>
>
> etc/services
> johnvnc     5903/tcp                 # VNC for John
> chuckvnc    5905/tcp                 # VNC for Chuck
> donvnc      5906/tcp                 # VNC for Don
>
>
> etc/inetd.conf
> #johnvnc stream tcp wait jmalian /usr/bin/Xvnc Xvnc -inetd -query
> 127.0.0.1 -auth -once
> passwordFile=/net/mfgnet-fs2/vol/vol2/ict/jmalian/.vnc/pa
> sswd -cc 3 -geometry 1265x960
> #chuckvnc stream tcp nowait ccasale /usr/bin/Xvnc Xvnc -inetd -query
> 127.0.0.1  -cc 3 -geometry 1265x960
> #donvnc stream tcp wait dole /usr/bin/Xvnc Xvnc -inetd -query 127.0.0.1
> -cc 3 -geometry 1265x960
> #5900 stream tcp nowait nobody /usr/bin/Xvnc Xvnc -inetd -query
> 127.0.0.1 -once
> #5960 stream tcp wait mdipaola /usr/bin/Xvnc Xvnc -inetd -query
> 127.0.0.1 -once
> passwordFile=/net/mfgnet-fs2/vol/vol2/ict/jmalian/.vnc/passwd
> #5955 stream tcp wait ccasale /usr/bin/Xvnc Xvnc -inetd -query 127.0.0.1
> -once passwordFile=/net/mfgnet-fs2/vol/vol2/ict/ccasale/.vnc/passwd
> #5950 stream tcp nowait nobody /usr/local/bin/Xvnc Xvnc -inetd -query
> 127.0.0.1 -once securitytypes=none
>
>
> Notes:
>
> HPUX rev -- 3070 05.21pb 0103 UX
> PC VNC -- Windows XP with tightVNC
>
> Thanks for taking a look and lending a hand.
>
> MD
> _______________________________________________
> VNC-List mailing list
> VNC-List "at" realvnc.com
> To remove yourself from the list visit:
> http://www.realvnc.com/mailman/listinfo/vnc-list
>
Here is my xinetd file for both a public and a private vnc session.
The public session
terminates the X session when the vnc session terminates.
The private session does what you want.  You connect and can
re-connect to the session.
It will only terminate the session when you logout.

cat vnc
# if you close the VNC session, this will terminate your X session on this
# connection
#Note: this only seems to work IF you don't use the
#       default port of 5901 -- vncviewers make an assumption if on the
#       default port about how things work instead or querying the server

#for either of these to work correctly (ie gdm login) you must
# modify /etc/X11/gdm/gdm-config
# section [Xdmcp]
# Enable=true

service vnc-public
{
        disable = no
        type = unlisted
        socket_type = stream
        protocol = tcp
        port = 5903
        wait = no
        user = gdm
#Note: -fp option needs the last line of /etc/X11/fs/config modified
#       to read: #no-listen = tcp
#       run "chkconfig xfs on"
#       if trying without rebooting "service xfs restart"
        server = /usr/bin/Xvnc
        server_args = -inetd -query localhost -geometry 1024x768
-depth 16  -once securitytypes=none -fp tcp/localhost:7100
        log_on_failure += USERID
}


service vnc-private
{
# this is a persistent vnc/X11 session. Killed only by killing Xvnc or logout
# only vnc password protects this session.
        disable = no
#type unlisted allow this to work without having an entry in /etc/services
        type = unlisted
        socket_type = stream
        protocol = tcp
# port 5902 == host:2
        port = 5902
        wait = yes
        user = lbrigman
        server = /usr/bin/Xvnc
        server_args = -inetd :2 -desktop rouge.convergedaccess.com:2
-query localhost -once -auth /home/lbrigman/.Xauthority -geometry
1280x1024 -depth 16 -rfbwait 30000 -rfbauth=/home/lbrigman/.vnc/passwd
        log_on_failure += USERID

}