views:

231

answers:

2

The title says it all: Are there any secure alternatives to XDMCP (A Linux remote desktop protocol)?

I'd like to set up some thin clients -- UI heads (old computer + mouse + keyboard) connected to VMs on a fast server. ssh -Y doesn't quite cut it, since this would be for non-savvy computer users. I'd like it integrated with kdm/gdm if possible (this seems to rule out Nomachine NX, and I don't like closed source).

I am on a private network, so I guess I'll probably end up going with XDMCP, but it would seem kinda sorry if there aren't any secure open-source alternatives.

A: 

Why not use ssh -X ? You could auto-logon locally with a general user and then autorun a script displaying a form for entering user/passwd which connects to a session using ssh -X...

Atmocreations
That's a very ad-hoc solution. It's easy to manipulate (simply editing the startup script for the guest user, and make it log passwords), and undoubtedly confusing when things don't work right.Also, I think you really want to use ssh -Y; iirc ssh -X only forwards X11, not tunnels it.
gatoatigrado
Well I guess it's not easy to manipulate the startup script as the user has read-only access on it. But yes you're right, ssh -X only forwards X11. Didn't know it needs to be tunneled.
Atmocreations
+1  A: 

This seems like a question for serverfault, but couldn't you just setup a VPN between the client computer and the server? That way, all traffic will be encrypted between the two machines.

Dan
sounds good, I'm wondering why I didn't think of that... will take a look at strongswan (unless you know something better)?
gatoatigrado
I've always used OpenVPN, but it falls in the "it's what I know" category more than the "it's better than xyz" category
Dan