From owner-freebsd-questions@freebsd.org Wed Nov 18 11:31:21 2015 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 4FBF6A317A5 for ; Wed, 18 Nov 2015 11:31:21 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from mx01.qsc.de (mx01.qsc.de [213.148.129.14]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 140D71459 for ; Wed, 18 Nov 2015 11:31:20 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from r56.edvax.de (port-92-195-76-245.dynamic.qsc.de [92.195.76.245]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mx01.qsc.de (Postfix) with ESMTPS id 718C33CE87; Wed, 18 Nov 2015 12:31:16 +0100 (CET) Received: from r56.edvax.de (localhost [127.0.0.1]) by r56.edvax.de (8.14.5/8.14.5) with SMTP id tAIBVGTD002655; Wed, 18 Nov 2015 12:31:16 +0100 (CET) (envelope-from freebsd@edvax.de) Date: Wed, 18 Nov 2015 12:31:15 +0100 From: Polytropon To: zep Cc: freebsd-questions@freebsd.org Subject: Re: Terminal mirror, mirror terminal Message-Id: <20151118123115.b9c7837e.freebsd@edvax.de> In-Reply-To: <564C5908.7030305@gmail.com> References: <20151117054859.18f085bc.freebsd@edvax.de> <564AB6AD.2060706@calorieking.com> <564C10F4.70703@corp.ssimicro.com> <20151118073317.c75dee2f.freebsd@edvax.de> <564C5908.7030305@gmail.com> Reply-To: Polytropon Organization: EDVAX X-Mailer: Sylpheed 3.1.1 (GTK+ 2.24.5; i386-portbld-freebsd8.2) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 18 Nov 2015 11:31:21 -0000 On Wed, 18 Nov 2015 05:55:04 -0500, zep wrote: > you already seem to have your solution and it sounds to be a pretty > 'thin' solution, but just to add on after - I would probably choose > vnc and set/give a readonly password. I would have used VNC if this specific setting required that much "remote desktopping", but actually it doesn't. Usually I tend to use "ssh -Y" (slow, but sufficiently secure) when there's an urgent need to display X applications, and for anything else, SSH CLI access will work. This is where "watch" is a good solution: The user can see what I'm doing, and with parallel phone explanation and comments, he can do things the next time on his own. In other settings, I'm using both classic X remote and VNC already, it works quite well when kept inside LANs. > it's notoriously insecure, > so it'd also (probably) need a ssh tunnel to run through, but I > still find it handy and it can do most anything an xsession can. This special user is on a very slow Internet line, so I'm interested in as few transmission overhead as possible. :-) -- Polytropon Magdeburg, Germany Happy FreeBSD user since 4.0 Andra moi ennepe, Mousa, ...