(Updated July 16, 2025)
Create a Remote Tunnel to the ADA Desktop
Overview
The Remote Desktop Protocol (RDP) from Microsoft is not considered secure. But, with some help and an additional step, we can make this a very safe process.
The use of xRDP requires two separate accounts. We will use one to establish the secure tunnel. Your account will be used for the desktop connection.
Please contact Professor Du (wdu@skidmore.edu) for the tunnel password.
We will use Secure Shell (SSH) to establish a secure tunnel through which our RDP traffic can pass safely.
Mac Additional Step
Download “Windows App” from the Mac Store. This is your RDP Client. Windows users already have a built-in RDP client available for use.
Establish the Tunnel
Creating a tunnel between your machine and ADA is easy. However, as noted earlier, we need a separate account for the tunnel. We will use stun (Student TUNnel) for this purpose.
Open a terminal/PowerShell window and run the following SSH command. Copy and paste is best here.
ssh -N -f -L 4000:127.0.0.1:3389 stun@141.222.36.142
All of the colons and dots are critical.
- You may be prompted the first time to accept the connection details as authentic. Please say YES.
- You will be prompted for
stun‘s password. Remember, this is just the tunnel account.
The command creates a private, secure tunnel between you and ADA. It also instructs the tunnel to redirect connections on local port 4000 to ADA over SSH and to connect the other end to 127.0.0.1:3389. This is where xRDP is listening for incoming RDP connections.
Running RDP
Now, open your Remote Desktop Client (Mac Users open Windows App and add a PC).
For the PC name or computer name, enter 127.0.0.1:4000.
Select Add or Connect, and that’s it. Open the connection, confirm, and enter your ADA credentials to log in.
You will be provided an Ubuntu Desktop that you will also need to log in to. Be sure to log out when you’ve completed your work.
Troubleshooting
If you experience problems connecting, it’s most likely related to establishing the SSH tunnel.
Please get in touch with CS help at wjojo@skidmore.edu