vino-server is a great idea!! Love it!! But...

VNC is rather insecure. I would love to use vino-server over ssh which has security, encryption and compression, but the problem is that vino-server is still listening to all network requests to port 5900.

I want to restrict vino-server to 127.0.0.1:5900 only. This way if forces someone to first SSH onto the workstation before controlling it.

I can find no documentation about vino nor can I find any configuration files!

Any ideas?

Bob

Maybe this will help: http://ubuntuforums.org/showthread.php?t=266981

I had seen that thread before. It is a great thread for telling you how to setup vino from the command line, but in SuSE they have a GUI command called vino-preferences for that.

I also learned that I can just used the vncviewer command like below:
vncviewer -via root@192.168.1.10 127.0.0.1:0
instead of:
ssh -X -C root@192.168.1.10 "vncviewer 127.0.0.1:0"

However I still have the problem that someone could still run the command:
vncviewer 192.168.1.10:0

I want to FORCE helpdesk users to use SSH when "remote controlling" a workstation. Problem is that I can not find a way to force vino-server to bind to the lo (loopback) interface!
Without this, lazy helpdesk personnel could just skip SSH authentication. Also smart end-users could figure out how to remote control co-workers workstations.

Apologies for resurrecting this thread but that feature has been added. See Ubuntu bug 54312.

You can force vino to bind to the loopback adapter with the "Remote Desktop" GUI or this incantation:

You can confirm the setting took effect with:

-Tyler