Troubleshooting

Important

If you encounter interaction or connection problems between master and client computers you should always ensure that an identical Veyon configuration is used on all computers. To avoid problems in general it’s recommended to automate the configuration transfer during installation or via the Command line interface instead of importing the configuration manually using the Veyon Configurator. The configuration must also be transferred to all affected computers each time a change is made during troubleshooting.

Computers can’t be accessed

There are multiple causes which can prevent access to a computer using Veyon Master.

Networking problems

First of all the general network connectivity of the computer should be checked. Use the utility ping (which is usually included with every operating system) to diagnose connectivity problems.

Problems with the Veyon Service

If the computer can be pinged you should verify that the Veyon Service is running correctly. Open the Veyon Configurator and open the configuration page Service. In the section General the status of the service should be displayed with status Running. Otherwise the service can be started using the button Start service. If this is not successful you should try reinstalling Veyon. If a new installation does not help you can check the log files of the Veyon Service as well as the logging messages of the operating system for error messages and possible causes. Additionally you can find more hints or settings in the service management of your operating system.

Service and firewall settings

If the service is running you have to ensure that it is listening for incoming connections on the correct network port. You can verify that on the local computer using telnet:

telnet localhost 11100

Besides general program output the character string RFB 003.008 must be displayed. If the output does not contain these characters you should check the network port number settings and Miscellaneous network settings, especially the Veyon server port number. You should try to reset them to their default values.

Next the same access has to be possible from a different computer in the network. The utility telnet can be used again for the diagnosis. The program argument localhost has to be replaced with the name or IP address of the corresponding computer. If the access fails please ensure that the option Allow connections from localhost only in the Miscellaneous network settings is disabled. Additionally computer access control should be disabled initially as the service otherwise might listen on localhost only. This can happen if the external access would be denied because of currently matching rules. If both settings are correct the output of

netstat -a

has to indicate that the service is not (only) listening on localhost or 127.0.0.1 (status LISTEN or similar).

If the port access from remote computers still fails usually a firewall prevents the access and has to be reconfigured accordingly. On Linux this concerns settings of iptables, ufw etc. Consult the corresponding manuals of the used software. On Windows Veyon automatically configures the integrated Windows firewall if the option Enable firewall exception in the Miscellaneous network settings is set to its default value (enabled). If a 3rd party firewall solution is used it must be configured to allow external access to TCP ports 11100 (Veyon server port) and 11400 (demo server).

Authentication settings

Another cause of the error can be wrong or insufficient authentication settings. For first tests you should select logon authentication instead of key file authentication on both computers. As soon as the authentication test is successful on the local computer external access will also work.

If key file authentication is used the key files on master and client computers must match exactly. On client computers the public key file must have exactly the same content and the same name as on the master computer. If the access still fails the access permissions to the key files may be wrong. The Veyon Service needs to have read permissions on the public key file while the user of Veyon Master has to be able to read the private key file. If the problem persists the key file directories of the key files should be deleted on all computers and a new key pair generated on the master computer. The public key must then be imported again on all client computers.

Settings for computer access control

An incorrect configuration of computer access control can also lead to computers being inaccessible. Initially it’s recommended to disable computer access control completely using the Veyon Configurator. This allows you to determine which method of computer access control may be configured incorrectly.

If authorized user groups for computer access are used you should check whether the list of authorized user groups is complete and whether the accessing user is a member of one of these user groups.

Improperly configured access control rules can also cause problems with accessing computers. It is necessary to always specify at least one rule to allow access under certain conditions. If this is ensured, a temporary test rule can be inserted at the end of the list for further debugging. This rule should be configured so that the option Always process rule and ignore conditions is enabled and the action Allow access is selected. This rule can then be moved up in the rule list step by step until the test returns the desired positive results and the access works. The access rule located directly below the test rule is then the cause for the access denial and can be examined more closely and corrected accordingly. Don’t forget to remove the test rule afterwards to prevent unauthorized access.

Anti-virus software

It has been reported by some users that an installed anti-virus software caused problems with Veyon, especially regarding the Veyon Service. As part of the troubleshooting process you should temporarily disable the anti-virus software in order to figure out whether the anti-virus software is the cause of error. If so, try to add an exception for the Veyon Service after enabling the anti-virus software again. Alternatively contact the vendor of your anti-virus software for further assistance.

Time synchronization problems

When using logon authentication, Veyon requires the operating system to reliably perform user authentications on all remote computers. Especially in AD/Kerberos-based environments, authentication may not work reliably when the system clock is not synchronized with the domain controller or authentication server and differs significantly. Therefore make sure time synchronization is configured and working properly if you encounter sporadic connectivity problems when using Veyon.

Settings are not correctly saved/loaded

After updating to a new version of Veyon it may happen in rare cases that some configuration keys are inconsistent and need to be recreated. This can result in settings not being saved or reloaded correctly, such as the builtin location and computer information. In this case the configuration should be reset and rebuilt based on the default values.

Locations and computers from LDAP directory are not displayed in Veyon Master

Please make sure that:

  • the network object directory on configuration page General is set to LDAP Basic or LDAP Pro

  • LDAP integration tests List all entries of a location and List all locations are successful and return proper objects

  • on the configuration page Master all options for fine-tuning the behavior are set to their default values

Selecting current location automatically doesn’t work

If the option automatically selecting the current location is activated, but has no effect when starting Veyon Master, you should first make sure that the master computer is also listed as a computer for the respective room in the network object directory.

If the problem persists although all entries in the network object directory are correct, there is usually a problem with the DNS configuration in the network. Make sure that computer names can be resolved to IP addresses and reverse lookups of IP addresses return the corresponding computer names. On most operating systems, the DNS diagnostic tool nslookup is available for this purpose. Calling the program with the local computer name as an argument must return a valid IP address. A second call with the determined IP address must again return the computer name.

If the function does not work as desired despite correct DNS setup, in the second step the log level can be set to the highest value (Debug messages and everything else). After restarting Veyon Master, you can search the log file VeyonMaster.log in the log file directory for further error causes. The lines with the messages “initializing locations” and “found locations” indicate which host names and IP addresses were used to determine the location and which locations were eventually determined on the basis of these information.

Screen lock can be bypassed via Ctrl+Alt+Del

To completely block all keystrokes and keyboard shortcuts in screen lock mode, you must restart your computer after installing Veyon on Windows. Without a restart, the Veyon-specific driver for input devices is not yet active and keystrokes cannot be intercepted.

In demo mode, only a black screen or window is displayed on client computers

Please make sure that:

  • in the configuration page Service under network port numbers the demo server port is set to its default value 11400

  • on the configuration page Service the firewall exception is enabled on the master computer or a third party firewall is configured to allow incoming connections to TCP port 11400

  • the user of Veyon Master has access to its own computer (i.e. the local Veyon Service). In the access control ruleset there may exist a rule prohibiting access to the computer if a teacher is logged on. In this case you should create a rule with the condition Accessing computer is localhost enabled as far up the list of rules as possible. Otherwise the demo server is unable to access the teacher computer’s screen content and distribute it to the client computers.

Veyon Server crashes with XIO or XCB errors on Linux

There are known issues with specific KDE and Qt versions on Linux causing the Veyon Server to crash. This affects several other VNC server implementations as well. If you’re affected by such crashes consider upgrading KDE/Qt. As a last resort you can disable the X Damage extension in the VNC server configuration. This will however decrease overall performance and increase the CPU load.

Some features such as starting apps or opening websites do not work

It has been reported that problems arise if the username and the computer name are identical. When logging in a user called student on a computer with the hostname student, some features will fail to start when the user session is being controlled via Veyon Master.