blob: 265c4cee6857ed6818bece71b0e39f0f7108380e [file] [log] [blame]
Pierre Ossmanf256a1a2014-09-17 14:09:58 +02001.TH X0VNCSERVER 1 "" "TigerVNC" "TigerVNC Manual"
Constantin Kaplinskyb30ae7f2006-05-25 05:04:46 +00002.SH NAME
Peter Åstrand4eacc022009-02-27 10:12:14 +00003x0vncserver \- TigerVNC Server for X displays
Constantin Kaplinskyb30ae7f2006-05-25 05:04:46 +00004.SH SYNOPSIS
5.B x0vncserver
Constantin Kaplinskya9ec0e82008-01-07 13:57:01 +00006.RI [ options ]
Constantin Kaplinsky2039d7b2008-06-04 10:43:10 +00007.br
8.B x0vncserver -version
Constantin Kaplinskyb30ae7f2006-05-25 05:04:46 +00009.SH DESCRIPTION
10.B x0vncserver
Peter Åstrand4eacc022009-02-27 10:12:14 +000011is a TigerVNC Server which makes any X display remotely accessible via VNC,
12TigerVNC or compatible viewers. Unlike \fBXvnc\fP(1), it does not create a
Constantin Kaplinsky59740082008-01-08 10:42:22 +000013virtual display. Instead, it just shares an existing X server (typically,
14that one connected to the physical screen).
Pierre Ossmande0f8322014-09-17 15:43:14 +020015
16XDamage will be used if the existing X server supports it. Otherwise
17.B x0vncserver
18will fall back to polling the screen for changes.
Constantin Kaplinskya9ec0e82008-01-07 13:57:01 +000019.SH OPTIONS
20.B x0vncserver
21interprets the command line as a list of parameters with optional values.
22Running \fBx0vncserver -h\fP will show a list of all valid parameters with
Constantin Kaplinsky59740082008-01-08 10:42:22 +000023short descriptions. All parameters are optional, but normally you would have
Constantin Kaplinskycef45772008-01-07 14:52:51 +000024to use the \fBPasswordFile\fP parameter (see its description below).
Constantin Kaplinskya9ec0e82008-01-07 13:57:01 +000025.PP
26There are several forms of specifying parameters in the command line (here we
27use `\fISomeParameter\fP' as an example parameter name):
28.TP
29.B -\fISomeParameter\fP
Constantin Kaplinsky59740082008-01-08 10:42:22 +000030Enable the parameter, turn the feature on. This form can be used with
Constantin Kaplinskya9ec0e82008-01-07 13:57:01 +000031parameters that simply enable or disable some feature.
32.TP
33.B -\fISomeParameter\fP=0
34Disable the parameter, turn the feature off.
35.TP
36.B -\fISomeParameter\fP=\fIvalue\fP
Constantin Kaplinsky59740082008-01-08 10:42:22 +000037Assign the specified \fIvalue\fP to the parameter. The leading dash can be
38omitted, or it can be doubled if desired (like in GNU-style long options).
Constantin Kaplinskya9ec0e82008-01-07 13:57:01 +000039.PP
40Parameter names are case-insensitive, their order in the command line can be
41arbitrary.
Constantin Kaplinskycef45772008-01-07 14:52:51 +000042.SH PARAMETERS
43.TP
Constantin Kaplinsky8d61d0d2008-01-07 16:10:37 +000044.B display
Constantin Kaplinsky59740082008-01-08 10:42:22 +000045The X display name. If not specified, it defaults to the value of the
46DISPLAY environment variable.
Constantin Kaplinsky8d61d0d2008-01-07 16:10:37 +000047.TP
48.B rfbport
Constantin Kaplinsky59740082008-01-08 10:42:22 +000049TCP port to listen for incoming VNC connections (RFB protocol). The default
50port is 5900.
Constantin Kaplinsky8d61d0d2008-01-07 16:10:37 +000051.TP
52.B Log
53Specifies which log output should be directed to which target logger, and the
Constantin Kaplinsky59740082008-01-08 10:42:22 +000054level of output to log. Format is \fIlog\fP:\fItarget\fP:\fIlevel\fP.
55Default is \fB*:stderr:30\fP (log everything to stderr, set log level to 30).
56Log level should be a value between 0 and 100, higher levels produce more
57output.
Constantin Kaplinsky8d61d0d2008-01-07 16:10:37 +000058.TP
59.B HostsFile
Constantin Kaplinskyb8363be2008-01-08 13:48:19 +000060This parameter allows to specify a file name with IP access control rules.
61The file should include one rule per line, and the rule format is one of the
62following: +\fIaddress\fP/\fInetmask\fP (accept connections from the
63specified address group), -\fIaddress\fP/\fInetmask\fP (reject connections)
64or ?\fIaddress\fP/\fInetmask\fP (query the local user). The first rule
65matching the IP address determines the action to be performed. Rules that
66include only an action sign (+, - or ?) will match any IP address.
67\fINetmask\fP is optional and can be specified either in dotted format
68(e.g. /255.255.255.0), or as a single number of bits (e.g. /24). Default is
69to accept connections from any IP address.
Constantin Kaplinsky8d61d0d2008-01-07 16:10:37 +000070.TP
71.B SecurityTypes
Constantin Kaplinsky59740082008-01-08 10:42:22 +000072Specify which security scheme to use for incoming connections. Valid values
Pierre Ossmande0f8322014-09-17 15:43:14 +020073are a comma separated list of \fBNone\fP, \fBVncAuth\fP, \fBPlain\fP,
74\fBTLSNone\fP, \fBTLSVnc\fP, \fBTLSPlain\fP, \fBX509None\fP, \fBX509Vnc\fP
75and \fBX509Plain\fP. Default is \fBVncAuth,TLSVnc\fP.
Constantin Kaplinsky8d61d0d2008-01-07 16:10:37 +000076.TP
Pierre Ossmande0f8322014-09-17 15:43:14 +020077.B rfbauth, PasswordFile
Constantin Kaplinsky59740082008-01-08 10:42:22 +000078Password file for VNC authentication. There is no default, you should
79specify the password file explicitly. Password file should be created with
80the \fBvncpasswd\fP(1) utility.
Constantin Kaplinsky8d61d0d2008-01-07 16:10:37 +000081.TP
82.B Password
83Obfuscated binary encoding of the password which clients must supply to
Constantin Kaplinsky59740082008-01-08 10:42:22 +000084access the server. Using this parameter is insecure, use \fBPasswordFile\fP
85parameter instead.
Constantin Kaplinsky8d61d0d2008-01-07 16:10:37 +000086.TP
Pierre Ossmande0f8322014-09-17 15:43:14 +020087.B PlainUsers
88A comma separated list of user names that are allowed to authenticate via
89any of the "Plain" security types (Plain, TLSPlain, etc.). Specify \fB*\fP
90to allow any user to authenticate using this security type. Default is to
91deny all users.
92.TP
93.B pam_service
94PAM service name to use when authentication users using any of the "Plain"
95security types. Default is \fBvnc\fP.
96.TP
97.B x509cert
98Path to a X509 certificate in PEM format to be used for all X509 based
99security types (X509None, X509Vnc, etc.).
100.TP
101.B x509key
102Private key counter part to the certificate given in \fBx509cert\fP. Must
103also be in PEM format.
104.TP
Constantin Kaplinsky8d61d0d2008-01-07 16:10:37 +0000105.B BlacklistThreshold
106The number of unauthenticated connection attempts allowed from any individual
Constantin Kaplinsky59740082008-01-08 10:42:22 +0000107host before that host is black-listed. Default is 5.
Constantin Kaplinsky8d61d0d2008-01-07 16:10:37 +0000108.TP
109.B BlacklistTimeout
Constantin Kaplinsky59740082008-01-08 10:42:22 +0000110The initial timeout applied when a host is first black-listed. The host
111cannot re-attempt a connection until the timeout expires. Default is 10.
Constantin Kaplinsky8d61d0d2008-01-07 16:10:37 +0000112.TP
113.B QueryConnect
Constantin Kaplinsky59740082008-01-08 10:42:22 +0000114Prompt the local user to accept or reject incoming connections. Default is
115off.
Constantin Kaplinsky8d61d0d2008-01-07 16:10:37 +0000116.TP
117.B QueryConnectTimeout
118Number of seconds to show the Accept Connection dialog before rejecting the
Constantin Kaplinsky59740082008-01-08 10:42:22 +0000119connection. Default is 10.
Constantin Kaplinsky8d61d0d2008-01-07 16:10:37 +0000120.TP
121.B AlwaysShared
122Always treat incoming connections as shared, regardless of the
Constantin Kaplinsky59740082008-01-08 10:42:22 +0000123client-specified setting. Default is off.
Constantin Kaplinsky8d61d0d2008-01-07 16:10:37 +0000124.TP
125.B NeverShared
126Never treat incoming connections as shared, regardless of the
Constantin Kaplinsky59740082008-01-08 10:42:22 +0000127client-specified setting. Default is off.
Constantin Kaplinsky8d61d0d2008-01-07 16:10:37 +0000128.TP
129.B DisconnectClients
Constantin Kaplinsky59740082008-01-08 10:42:22 +0000130Disconnect existing clients if an incoming connection is non-shared. If
131combined with \fBNeverShared\fP then new connections will be refused while
132there is a client active. Default is on.
Constantin Kaplinsky8d61d0d2008-01-07 16:10:37 +0000133.TP
134.B AcceptKeyEvents
Constantin Kaplinsky59740082008-01-08 10:42:22 +0000135Accept key press and release events from clients. Default is on.
Constantin Kaplinsky8d61d0d2008-01-07 16:10:37 +0000136.TP
137.B AcceptPointerEvents
Constantin Kaplinsky59740082008-01-08 10:42:22 +0000138Accept pointer events from clients. Default is on.
Constantin Kaplinsky8d61d0d2008-01-07 16:10:37 +0000139.TP
140.B RemapKeys
Constantin Kaplinsky59740082008-01-08 10:42:22 +0000141Comma-separated list of incoming keysyms to remap. Mappings are expressed as
142two hex values, prefixed by \fB0x\fP, and separated by \fB->\fP (`dash' and
143`greater than' characters).
Constantin Kaplinsky8d61d0d2008-01-07 16:10:37 +0000144.TP
145.B Protocol3.3
Constantin Kaplinsky59740082008-01-08 10:42:22 +0000146Always use RFB protocol version 3.3 for backwards compatibility with
147badly-behaved clients. Default is off.
Constantin Kaplinskycef45772008-01-07 14:52:51 +0000148.TP
149.B Geometry
Constantin Kaplinskyb8363be2008-01-08 13:48:19 +0000150This option specifies the screen area that will be shown to VNC clients. The
151format is
Constantin Kaplinsky59740082008-01-08 10:42:22 +0000152.B \fIwidth\fPx\fIheight\fP+\fIxoffset\fP+\fIyoffset\fP
Constantin Kaplinskyf32f8852008-12-23 07:44:39 +0000153, where `+' signs can be replaced with `\-' signs to specify offsets from the
Constantin Kaplinskyb8363be2008-01-08 13:48:19 +0000154right and/or from the bottom of the screen. Offsets are optional, +0+0 is
155assumed by default (top left corner). If the argument is empty, full screen
156is shown to VNC clients (this is the default).
Constantin Kaplinskycef45772008-01-07 14:52:51 +0000157.TP
Constantin Kaplinskycef45772008-01-07 14:52:51 +0000158.B MaxProcessorUsage
Constantin Kaplinsky59740082008-01-08 10:42:22 +0000159Maximum percentage of CPU time to be consumed when polling the
160screen. Default is 35.
Constantin Kaplinskycef45772008-01-07 14:52:51 +0000161.TP
162.B PollingCycle
Constantin Kaplinsky59740082008-01-08 10:42:22 +0000163Milliseconds per one polling cycle. Actual interval may be dynamically
164adjusted to satisfy \fBMaxProcessorUsage\fP setting. Default is 30.
Constantin Kaplinskycef45772008-01-07 14:52:51 +0000165.TP
Constantin Kaplinskyf32f8852008-12-23 07:44:39 +0000166.B VideoArea
167This option specifies the screen area that will be handled as video. The
168format is
169.B \fIwidth\fPx\fIheight\fP+\fIxoffset\fP+\fIyoffset\fP
170, where `+' signs can be replaced with `\-' signs to specify offsets from the
171right and/or from the bottom of the screen. Offsets are optional, +0+0 is
172assumed by default (top left corner). Video area is not checked for actual
173changes, it is assumed to be changing continuously and is sent in each screen
174update. Normally, video area is compressed with JPEG (if allowed by the
Peter Åstrand4eacc022009-02-27 10:12:14 +0000175client). Note that this setting can be overriden by TigerVNC clients
Constantin Kaplinskyf32f8852008-12-23 07:44:39 +0000176supporting VideoRectangleSelection protocol extension. In other words,
177clients may choose video selection themselves, but if they do not, then the
178\fBVideoArea\fP parameter will take effect. If the argument is empty, no
179video area is set (this is the default).
180.TP
Pierre Ossmande0f8322014-09-17 15:43:14 +0200181.B DeferUpdate
182x0vncserver uses a "deferred update" mechanism which enhances performance in
183many cases. After any change to the framebuffer, x0vncserver waits for this
184number of milliseconds (default 1) before sending an update to any waiting
185clients. This means that more changes tend to get coalesced together in a
186single update. Setting it to 0 results in the same behaviour as earlier
187versions of x0vncserver, where the first change to the framebuffer causes an
188immediate update to any waiting clients.
189.TP
190.B AlwaysSetDeferUpdateTimer
191Keep delaying sending the screen update to the client(s) each time the
192screen is updated. Otherwise the delay is from the first update. Default
193is off.
Constantin Kaplinsky3fed47c2008-12-23 07:21:02 +0000194.TP
Constantin Kaplinskycef45772008-01-07 14:52:51 +0000195.B CompareFB
Pierre Ossmande0f8322014-09-17 15:43:14 +0200196Perform pixel comparison on framebuffer to reduce unnecessary updates. Can
197be either \fB0\fP (off), \fB1\fP (always) or \fB2\fP (auto). Default is
198\fB2\fP.
Constantin Kaplinskycef45772008-01-07 14:52:51 +0000199.TP
Constantin Kaplinsky8d61d0d2008-01-07 16:10:37 +0000200.B UseSHM
Constantin Kaplinskyb8363be2008-01-08 13:48:19 +0000201Use MIT-SHM extension if available. Using that extension accelerates reading
202the screen. Default is on.
Constantin Kaplinskycef45772008-01-07 14:52:51 +0000203.TP
Constantin Kaplinsky8d61d0d2008-01-07 16:10:37 +0000204.B OverlayMode
Constantin Kaplinskyb8363be2008-01-08 13:48:19 +0000205Use overlay mode in IRIX or Solaris (does not have effect in other systems).
206This enables system-specific access to complete full-color version of the
207screen (the default X visual often provides 256 colors). Also, in overlay
208mode, \fBx0vncserver\fP can show correct mouse cursor. Default is on.
Constantin Kaplinskycef45772008-01-07 14:52:51 +0000209.TP
Constantin Kaplinsky8d61d0d2008-01-07 16:10:37 +0000210.B ZlibLevel
Constantin Kaplinsky59740082008-01-08 10:42:22 +0000211Zlib compression level for ZRLE encoding (it does not affect Tight encoding).
212Acceptable values are between 0 and 9. Default is to use the standard
213compression level provided by the \fBzlib\fP(3) compression library.
Constantin Kaplinsky8d61d0d2008-01-07 16:10:37 +0000214.TP
215.B ImprovedHextile
216Use improved compression algorithm for Hextile encoding which achieves better
Constantin Kaplinsky59740082008-01-08 10:42:22 +0000217compression ratios by the cost of using slightly more CPU time. Default is
218on.
Constantin Kaplinskycef45772008-01-07 14:52:51 +0000219.TP
220.B IdleTimeout
221The number of seconds after which an idle VNC connection will be dropped
Constantin Kaplinsky59740082008-01-08 10:42:22 +0000222(zero means no timeout). Default is 0.
Constantin Kaplinskycef45772008-01-07 14:52:51 +0000223.TP
Constantin Kaplinsky8d61d0d2008-01-07 16:10:37 +0000224.B MaxDisconnectionTime
Constantin Kaplinsky59740082008-01-08 10:42:22 +0000225Terminate when no client has been connected for \fIN\fP seconds. Default is
2260.
Constantin Kaplinskycef45772008-01-07 14:52:51 +0000227.TP
Constantin Kaplinsky8d61d0d2008-01-07 16:10:37 +0000228.B MaxConnectionTime
Constantin Kaplinsky59740082008-01-08 10:42:22 +0000229Terminate when a client has been connected for \fIN\fP seconds. Default is
2300.
Constantin Kaplinskycef45772008-01-07 14:52:51 +0000231.TP
Constantin Kaplinsky8d61d0d2008-01-07 16:10:37 +0000232.B MaxIdleTime
Constantin Kaplinsky59740082008-01-08 10:42:22 +0000233Terminate after \fIN\fP seconds of user inactivity. Default is 0.
Constantin Kaplinskycef45772008-01-07 14:52:51 +0000234.TP
Constantin Kaplinsky8d61d0d2008-01-07 16:10:37 +0000235.B ClientWaitTimeMillis
Constantin Kaplinsky59740082008-01-08 10:42:22 +0000236The number of milliseconds to wait for a client which is no longer
237responding. Default is 20000.
Pierre Ossmande0f8322014-09-17 15:43:14 +0200238.TP
239.B AcceptCutText
240.TQ
241.B SendCutText
242.TQ
243.B MaxCutText
244Currently unused.
Constantin Kaplinskyb30ae7f2006-05-25 05:04:46 +0000245.SH SEE ALSO
Constantin Kaplinskya9ec0e82008-01-07 13:57:01 +0000246.BR Xvnc (1),
Constantin Kaplinskyb30ae7f2006-05-25 05:04:46 +0000247.BR vncpasswd (1),
Constantin Kaplinskyb30ae7f2006-05-25 05:04:46 +0000248.br
Peter Åstrand4eacc022009-02-27 10:12:14 +0000249http://www.tigervnc.org/
Constantin Kaplinskyb30ae7f2006-05-25 05:04:46 +0000250.SH AUTHOR
Pierre Ossmane37a1442014-09-17 14:08:16 +0200251Constantin Kaplinsky and others.
252
253VNC was originally developed by the RealVNC team while at Olivetti
254Research Ltd / AT&T Laboratories Cambridge. TightVNC additions were
255implemented by Constantin Kaplinsky. Many other people have since
256participated in development, testing and support. This manual is part
257of the TigerVNC software suite.