How to Use the VNC to Remotely Log In to SUSE Linux
Question
How do I use the VNC to remotely log in to SUSE Linux?
- The virtual network computing (VNC) is a component of SUSE Linux. It is a typical thin client software. The graphics processor service runs on the server and multiple instances can be created. The VNC advantage is that a remote computer can access the server using the Internet Explorer. When the VNC is used, the Tab key cannot be used for the path association function, and contents outside the VNC window cannot be copied and pasted into the VNC window.
- Ensure that the network environment is secure to prevent information leakage.
Answer
- Log in to the Linux operating system as the root user.
Remotely log in to the server as the ossuser and switch to the root user if the SUSE Linux is hardened.
- Run the following command to access the YaST2 Control Center page.
# yast2
- Select Network Services > Remote Administration(VNC).
- In the Remote Administration window, choose Allow Remote Administration and click OK.
- With Session Management, multiple users can interact with a single session, and the session may persist even if no one is connected.
- Without Session Management, only one user can be connected at a time to a session, and that session is terminated when the VNC client disconnects.
If the system displays a message prompting you to install vncmanager package, click install, and insert the operating system CD-ROM, and click Retry.
To disable remote administration, choose Do Not Allow Remote Administration and Finish.
- In the Warning dialog box that is displayed, click OK.
- Run the following command:
The command for restarting the VNCManager service will terminate logged in user sessions and processes. Ensure that important operations such as installation, upgrade, and restoration of the database are not performed when the command is executed.
rm /etc/vnc/tls.key /etc/vnc/tls.cert
openssl genrsa -out /etc/vnc/tls.key 2048
openssl req -new -x509 -extensions usr_cert -key /etc/vnc/tls.key -out /etc/vnc/tls.cert -days 7305 -subj "/CN=VNC service on `hostname`/"
chmod 644 /etc/vnc/tls.key
chmod 644 /etc/vnc/tls.cert
systemctl restart vncmanager.service
systemctl restart display-manager.service
- Verify that the 32-bit Java has been installed and configured on the PC where the client is installed. The configuration varies according to the Java version. It is recommended that JRE 8 be installed. In this topic, JRE 8 is used as an example.
- Access the Control Panel window on the local PC and choose Programs > Java (32–bit).
- Select Security tab page, in the Java Control Panel window.
- Choose Enable Java content in the browser, set Security level for applications not on the Exception Site list to High, and click Edit Site List.
- In the Exception Site List window, click Add, enter http://eSight server IP address:5801 in the new line, and click OK.
- On the Java Control Panel window that is displayed, click OK.
- If you have logged in to the server remotely through the iMana or iBMC maintenance network interface, log out.
- You can administer this machine remotely from another machine. Open a Java-capable web browser (Firefox 45 and Internet Explorer 11 are recommended), and enter https://eSight server IP address:5801 in the address box, and press Enter.
- If a security warning is displayed, click the continue button.
- If a Java blocking message is displayed, allow Java to run.
- If the Hostname Verification Failure dialog box is displayed, click YES.
- If the Certificate Issuer Unknown dialog box is displayed, click YES.
- If the VNC Viewer: Connection Details dialog box is displayed, enter eSight server IP address:1, where the server IP address must be the same as that in the address box, and click OK.
If you cannot use the browser to access, you can use the latest version of VncViewer.
- On the page for logging in to the server operating system, enter the user name and password to log in to the SUSE Linux operating system.