x11vnc password? - maemo.org

Active Topics

[HOWTO] Comprehensive Firmware Flashing Guide for N9 (1,580)
to Nokia N9 / N950 by aspergerguy - 15 hrs, 39 mins ago
Nokia N9-00 Prototype Build S1.12 (RM-680 codename "Dali") (250)
to Nokia N9 / N950 by en0s - 3 days, 12 hrs ago
[Announce] Maebble - Pebble support for Maemo (118)
to Applications by glo-worm - 4 days ago
Possible to flash Leste to eMMC? (6)
to Maemo 7 / Leste by Eri - 4 days, 14 hrs ago
more...

Thread Tools

drk529	2007-12-04 , 02:47
Posts: 11 \| Thanked: 0 times \| Joined on Nov 2007	#1

does the x11vnc port on the n800 support all the parameters as the x11vnc used on an x86 machine? More specifically, could i use

Code:

x11vnc -passwd ittforum

in xterm to password protect it with password ittforum?

Quote & Reply |

VerteX	2007-12-04 , 04:37
Posts: 1 \| Thanked: 0 times \| Joined on Dec 2007	#2

Yes, it does work. Remember tho, it's plain pass

Quote & Reply |

	free	2007-12-04 , 10:32
	Posts: 739 \| Thanked: 159 times \| Joined on Sep 2007 @ Germany - Munich	#3

On Linux I use
x11vnc -usepw

So that the password doesn't show up when you do a "ps"

I don't know if it's available on the IT version because I'm not using x11vnc but it's worth checking.

Quote & Reply |

Tragos	2007-12-04 , 13:07
Posts: 122 \| Thanked: 12 times \| Joined on Feb 2007 @ Helsinki, Finland	#4

The author of x11vnc maemo port tells that passwords are not working:

IMPORTANT
This initial release for the Nokia Internet Tablets provides no security whatsoever! Password files and other means of protection are implemented in x11vnc, it's just that I've not provided a means of using them.

http://mike.saunby.googlepages.com/x11vncfornokia7702

However, I have a 770 so I have no knowledge if they are now working with the latest OS2008 release. But at least switch "-localhost" is there, so you can set x11vnc allow connections only from localhost. Then you can connect your VNC viewer to the tablet over SSH tunnel.

Quote & Reply |

drk529	2007-12-04 , 23:21
Posts: 11 \| Thanked: 0 times \| Joined on Nov 2007	#5

Originally Posted by free

On Linux I use
x11vnc -usepw

So that the password doesn't show up when you do a "ps"

I don't know if it's available on the IT version because I'm not using x11vnc but it's worth checking.

i also use -usepw on linux, but i thought that was more for convenience than security. Then again, i don't know what a "ps" is (i'm a linux noob).

Quote & Reply |

	free	2007-12-04 , 23:26
	Posts: 739 \| Thanked: 159 times \| Joined on Sep 2007 @ Germany - Munich	#6

ps is used to give the list of process.
so using
x11vnc -password s3cr3t will probably show it if you list processes; but not if using x11vnc -usepw

Also using x11vnc -usepw sets the .vnc/password to a hash (haven't checked probably md5) so your password is not even written anywhere in clear. (and on top of this, .vnc directory is only readable by the user who created it).

But keep in mind that during authentication, the password is in cleartext on the network and that's why people usually tunnel it through ssh. Should be also possible on the IT, although the encryption layer is CPU consuming. I rely on the encryption of my wireless and have nothing sensitive anyway.

Quote & Reply |

	Benson	2007-12-05 , 00:11
	Posts: 4,930 \| Thanked: 2,272 times \| Joined on Oct 2007	#7

Agreed with free: Do NOT use VNC over unencrypted wireless.
If you've got wireless encryption, trusting that is a reasonable decision.
If not, you should consider tunneling over ssh mandatory.

To do it:

Change the line in /usr/bin/x11vnc:
Code:
```
exec /usr/bin/x11vnc ...
```
to
Code:
```
exec /usr/bin/x11vnc -localhost ...
```
Where ... represents whatever's on that line; all you do is insert "-localhost".
Now the N800 will listen only for connections from itself.
Connect with ssh from your other computer. Create a local port forward from some local port (I use 5901) to 127.0.0.1:5900. In OpenSSH, that looks like:
Code:
```
ssh -L localhost:5901:127.0.01:5900 user@n800s.fqdn
```
Now a connection to your machine on port 5901 will get caught by ssh, encrypted, and stuffed through to the sshd. On the tablet, sshd will shove the connection out to port 5900, where VNC is listening.
Finally, use your VNC client to connect to display 1 (port 5901) on the local machine. With vncviewer, that looks like:
Code:
```
vncviewer 127.0.0.1:5901
```

If you want to do this often, you may make a script on your system to combine steps 2 and 3:

Code:

@!/bin/sh
ssh -f -L localhost:5901:127.0.01:5900 user@n800s.fqdn sleep 10
exec vncviewer 127.0.0.1:5901

By running sleep 10 on the N800, the connection is held open for ten seconds, waiting for the VNC connection to start. As soon as the 10 seconds has elapsed, and there is no connection, ssh exits.

Quote & Reply |

The Following User Says Thank You to Benson For This Useful Post:
cHeXs7eR

	cmdowns	2008-04-06 , 23:22
	Posts: 100 \| Thanked: 13 times \| Joined on Mar 2008	#8

I'm trying to get VNC up and running through an SSH tunnel. I want to implement the directions given by Benson, but I can't seem to find x11vnc in the directory. I used sudo gainroot to become root, and there looked in usr/bin. But I didn't find x11vnc. I installed it, it's listed in my app manager, and I can run it from xterm. So it must be on the tablet somewhere.

Is there somewhere else it might be? Is there a way to determine it's location?

Quote & Reply |

	penguinbait	2008-04-07 , 01:18
	Posts: 3,096 \| Thanked: 1,525 times \| Joined on Jan 2006 @ Michigan, USA	#9

Originally Posted by cmdowns

I'm trying to get VNC up and running through an SSH tunnel. I want to implement the directions given by Benson, but I can't seem to find x11vnc in the directory. I used sudo gainroot to become root, and there looked in usr/bin. But I didn't find x11vnc. I installed it, it's listed in my app manager, and I can run it from xterm. So it must be on the tablet somewhere.

Is there somewhere else it might be? Is there a way to determine it's location?

which x11vnc

try usr/local

ls -l /usr/local/bin/x11vnc

__________________
To all my Maemo friends. I will no longer be monitoring any of my threads here on a regular basis. I am no longer supporting anything I did under maemo at maemo.org. If you need some help with something you can reach me at tablethacker.com or www.facebook.com/penguinbait. I have disabled my PM's here, and removed myself from Council email and Community mailing list. There has been some fun times, see you around.