Will Real VNC Server work with Authentication Services (QAS)? (4263271)

Real VNC Server is in use and is reported to support Kerberos, LDAP and Pam authentication.

This is possible with the below steps. This was tested on Real VNC Server version "realvnc-vnc-server-5.0.4.43666-1" on RHEL 5 with SeLinux and the Firewall turned off.

Requirements -

You need a version of Real VNC that supports local pam authentication on that machine. Please contact Real VNC to ensure you meet this requirement. Then the following steps need to be taken.

Create this file
/etc/vnc/config.d/common.custom

Put in this entry.
PamApplicationName=vncserver.custom

Then populate this file by coping /etc/pam.d/system-auth-ac.
/etc/pam.d/vncserver.custom
An example system-auth-ac is attached to this article.

At this point you should be getting successful authentication messages in my /var/log/secure file but Real VNC msy still be denying access to your user.
Real VNC provided a GUI for adding users or groups to their allowed list. In VNC Server Options ensure 'Authentication' is set to 'Unix Password'. Then Click 'Configure'. Here you can add users or groups and set their VNC permissions. For additional assistance with this step please contact Real VNC for support.

Once this is configured you should be able to access the machine remotely using Unix Enabled AD users and groups.