{
	"id": "280a478f-c4bf-4806-ba48-746753d3ff8f",
	"created_at": "2026-04-06T00:10:42.472446Z",
	"updated_at": "2026-04-10T13:12:30.476829Z",
	"deleted_at": null,
	"sha1_hash": "fb98416d0049b9f77e620b8279b162613e604999",
	"title": "Setting up System Authentication",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 88191,
	"plain_text": "Setting up System Authentication\r\nBy Tegan\r\nPublished: 2025-07-17 · Archived: 2026-04-05 20:26:17 UTC\r\nUpdated July 17, 2025 at 12:35 PM\r\nWhat is System Authentication?\r\nSystem Authentication means that RealVNC Viewer users can authenticate to RealVNC Server using the same\r\ncredentials they normally use to log on to their user account on the RealVNC Server computer.\r\nThe system authentication scheme (labelled Windows password, Mac password or UNIX password) is both\r\nsecure and convenient:\r\n1. System administrators often implement rules such as password complexity and ageing in enterprise\r\nenvironments to meet organisational security policies\r\n2. Users can authenticate using already-familiar credentials, and don’t have to remember yet another\r\npassword.\r\n*You can combine this authentication scheme with others in order to specify multi-factor authentication for\r\nRealVNC Server.\r\nSetting up System Authentication\r\nhttps://help.realvnc.com/hc/en-us/articles/360002250097-Setting-up-System-Authentication\r\nPage 1 of 3\n\nThe user account of each prospective RealVNC Viewer user must be registered with RealVNC Server. Certain\r\nadmin groups are pre-registered, to enable connectivity out-of-the-box. This may mean no set up is required,\r\nespecially under Windows and macOS.\r\nTo authenticate to RealVNC Server, a RealVNC Viewer user can supply the credentials:\r\nUnder any platform, of a local user account (that is, one set up directly on the computer).\r\nUnder Windows and macOS, providing the computer is joined to a domain, of a domain user account (one\r\nthat is managed by a network service such as Active Directory). Note that prior configuration is required\r\nunder Linux; see below.\r\nUnder Windows 8 or later, if the local user account is linked to a Microsoft account, the email address and\r\npassword of the linked Microsoft account.\r\nIf you are unsure of the username to use, please see this article.\r\nSetting up domain accounts under Linux\r\nWhen RealVNC Server is installed on Linux platforms, a suitable PAM library checking credentials against the\r\nlocal database store only is automatically referenced. \r\nTo configure RealVNC Server to allow authentication with domain accounts, the below steps will enable a basic\r\nconfiguration to achieve this:\r\n1. Create /etc/pam.d/vncserver.custom with the below contents, depending on your operating system:\r\nUbuntu\r\n@include common-auth\r\n@include common-account\r\n@include common-session\r\nRHEL / CentOS\r\nauth include password-auth\r\naccount include password-auth\r\nsession include password-auth\r\n2. Create/edit /etc/vnc/config.d/common.custom and add the line:\r\nPamApplicationName=vncserver.custom\r\n3. Restart RealVNC Server.\r\nFor Service Mode, run the command: sudo systemctl restart vncserver-x11-serviced\r\n4. Connect with RealVNC Viewer and try authenticating with domain credentials. Note: you may need to\r\nqualify usernames with the domain name, for example DEV.ACMECORP.COM\\johndoe\r\nhttps://help.realvnc.com/hc/en-us/articles/360002250097-Setting-up-System-Authentication\r\nPage 2 of 3\n\nIf you are unable to authenticate with domain credentials after following these steps, please contact Support.\r\nRegistering domain accounts with RealVNC Server\r\nIf the domain accounts you are using are not part of any built-in or local groups on the computer running\r\nRealVNC Server, domain accounts must be registered with RealVNC Server in the standard way, either by:\r\nSetting the RealVNC Server Permissions parameter.\r\nOpening RealVNC Server’s Options \u003e Users \u0026 Permissions page and following these instructions.\r\nYou may need to qualify usernames with the domain name, for example DEV.ACMECORP.COM\\johndoe . Note that\r\nconnecting users may also need to supply the user name qualified in this way too.\r\nSource: https://help.realvnc.com/hc/en-us/articles/360002250097-Setting-up-System-Authentication\r\nhttps://help.realvnc.com/hc/en-us/articles/360002250097-Setting-up-System-Authentication\r\nPage 3 of 3",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"MITRE"
	],
	"origins": [
		"web"
	],
	"references": [
		"https://help.realvnc.com/hc/en-us/articles/360002250097-Setting-up-System-Authentication"
	],
	"report_names": [
		"360002250097-Setting-up-System-Authentication"
	],
	"threat_actors": [],
	"ts_created_at": 1775434242,
	"ts_updated_at": 1775826750,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/fb98416d0049b9f77e620b8279b162613e604999.pdf",
		"text": "https://archive.orkl.eu/fb98416d0049b9f77e620b8279b162613e604999.txt",
		"img": "https://archive.orkl.eu/fb98416d0049b9f77e620b8279b162613e604999.jpg"
	}
}