CentOS - Oct 2009 - vnc for non-root

At work I've been asked to set up vnc for a remote user (a vendor
sysadmin to install 3d party software we've purchased).  Of course I'm a
bit skittish about allowing root access to this.  Is there a way to
configure vnc so that root cannot log in through it...?  Or do I have to
use some other utility to deny root access (e.g., securetty).

Thanks, folks.


-- 
War is a failure of the imagination.
        --William Blake

From: ken <gebser at mousecar.com>
> At work I've been asked to set up vnc for a remote user (a vendor
> sysadmin to install 3d party software we've purchased).  Of course
I'm a
> bit skittish about allowing root access to this.  Is there a way to
> configure vnc so that root cannot log in through it...?  Or do I have to
> use some other utility to deny root access (e.g., securetty).
Maybe check the wiki: http://wiki.centos.org/HowTos/VNC-Server
I would guess you just don't give root's vnc password?

JD

Ken:

You can set the machine up to use VNC for the
console.

Then, give the person a normal login which they will
use to login to the machine from the console interface.
Basically, it will be just like they are sitting at
the machine a logging in with a user account.

I would also require the VNC to be tunneled through
SSH for encryption since VNC does not do that internally.

	Neil

--
Neil Aggarwal, (281)846-8957, http://www.JAMMConsulting.com
CentOS 5.4 KVM VPS $55/mo, no setup fee, no contract, dedicated 64bit CPU
1GB dedicated RAM, 40GB RAID storage, 500GB/mo premium BW, Zero downtime 
> -----Original Message-----
> From: centos-bounces at centos.org 
> [mailto:centos-bounces at centos.org] On Behalf Of ken
> Sent: Wednesday, October 28, 2009 3:57 AM
> To: CentOS Mailing List
> Subject: [CentOS] vnc for non-root
> 
> At work I've been asked to set up vnc for a remote user (a vendor
> sysadmin to install 3d party software we've purchased).  Of 
> course I'm a
> bit skittish about allowing root access to this.  Is there a way to
> configure vnc so that root cannot log in through it...?  Or 
> do I have to
> use some other utility to deny root access (e.g., securetty).
> 
> Thanks, folks.
> 
> 
> -- 
> War is a failure of the imagination.
>         --William Blake
> 
> _______________________________________________
> CentOS mailing list
> CentOS at centos.org
> http://lists.centos.org/mailman/listinfo/centos