| Anchor | ||||
|---|---|---|---|---|
|
| Include Page | ||||
|---|---|---|---|---|
|
...
| Table of Contents | ||||
|---|---|---|---|---|
|
Overview
The X11 feature is supported across a VPN, but not across a NAT connection.
The Charon-SSP Manager can set up an X11 login session using Xephyr and the XDMCP protocol.
...
# apt-get update# apt-get install xserver-xephyr
| Div | ||
|---|---|---|
| ||
Firewall Considerations
The Xephyr nested X-server listens for connections on port range 6001-6100 depending on the X11 Server configuration in Charon-SSP Manager. The configured ports must be allowed if a firewall (e.g. iptables on Linux) is used. For a quick assessment, in case the X-server does not show the dtlogin screen, the following commands on the Linux system running Xephyr can be used to turn off the firewall temporarily (depending on what firewall is being used).
...
| X11 server configuration parameters | |
| Parameter | Description |
|---|---|
Profile name | Name to identify a specific set of configuration parameters in the list of saved configurations. |
IP address | IP address of the guest Solaris system. If you are using an SSH VPN tunnel to the AWS instance, enter the address the Solaris system has in the VPN network. The X protocol is not encrypted. So it should not be run over a public network without proper protection by a VPN. |
Keyboard | Select the required keyboard from the drop-down list. You can select from the layouts provided by the system on which the Charon-SSP manager runs. |
From | If the system running the X-server has only one IP address, this parameter can be left at default. If there is more than one IP address configured on the X-Server host, select the address that is on the same subnet as the Solaris guest or at least reachable from Solaris. This parameter prevents older Solaris versions from choosing a random (potentially unreachable) address from multiple IP addresses available on the host running the X-Server. |
Port | Values 6001 - 6100. The port number determines on which display the X-server is started. For example, port 6001 results in the X-server running on display “:1”. |
Display | Read-only field. Shows the display number based on the port number selected. |
Resolution | This parameter can be adapted to specific requirements of applications with respect to the X-server capabilities (“VISUALS”). One example would be the 256-bit indexed color visual, which requires a display depth of 8 bits. It also allows users to set the X display to full screen mode. |
Stopping the X11 Server
To stop the X-server, follow the instructions below:
...