VNCServer shows grey screen on port 1, but desktop environment works on other ports

Abstract: Fix VNCServer grey screen on port 1 by correcting xstartup scripts and resetting .Xauthority permissions to resolve X server authentication failures.

Created: 2026-09-24 by
A grey screen on VNCServer port 1 typically indicates that the Xvnc process cannot authenticate with the X server or fails to initialize the display environment properly. This issue often stems from incorrect authorization files, missing display variables, or conflicts between the display manager and the VNC service. By verifying the ~/.Xauthority permissions and ensuring the correct DISPLAY variable is set in the startup script, you can restore full graphical functionality.

Understanding the Grey Screen Symptom

When a VNC client connects to a Linux system via TightVNC or similar software and receives a grey screen instead of a desktop, it means the connection was established at the network level, but the graphical session failed to render. Unlike a black screen which might indicate no display server is running, a grey screen suggests the X server is active but cannot draw content due to authentication errors or missing resources. This is particularly common when the VNC server attempts to attach to an existing X session (like :0) rather than creating its own virtual display. The underlying cause is usually related to how Xorg handles security. Modern versions of Xorg use MIT-MAGIC-COOKIE-1 for local authentication. If the VNC server does not have access to the correct cookie file stored in the user's home directory, it will connect but be denied drawing privileges, resulting in the blank interface. This behavior is distinct from issues seen in other display protocols like Wayland, where compositor crashes might lead to different failure modes as discussed in SDDM on Wayland Crashes in Test Mode.

Verifying Display Variables and Startup Scripts

The most immediate step is to inspect the startup script used by your VNC server. In Ubuntu systems using TightVNC, this is often located at ~/.vnc/xstartup. If this file is missing or contains only comments, the server may default to a minimal shell or fail to launch a window manager. You must ensure the script explicitly sets the DISPLAY variable and launches a desktop environment. For a standard Ubuntu setup, the xstartup file should contain commands to source the system-wide profile and start a desktop environment like GNOME or XFCE. For example:
#!/bin/bash
xrdb $HOME/.Xresources
startxfce4 &
Ensure the file is executable by running chmod +x ~/.vnc/xstartup. Without execute permissions, the VNC daemon will silently fail to load the desktop components, leading to the grey screen. Additionally, check if the VNC server is configured to listen on the correct display number. Port 1 often corresponds to display :1, so verify that the vncserver command was invoked with -geometry and -depth parameters that match your client's capabilities.

Checking Xauthority Permissions

Authentication failures are the primary culprit for grey screens. The X server relies on the .Xauthority file in the user's home directory to grant access to the display. If this file has incorrect ownership or permissions, the VNC server cannot read the magic cookie required for authentication. Run the following commands to reset permissions:
sudo chown $USER:$USER ~/.Xauthority
sudo chmod 600 ~/.Xauthority
If the file is corrupted or missing, deleting it allows the system to regenerate a fresh one upon the next login. Note that modifying these files requires care; improper changes can lock you out of the local console. This approach differs significantly from network interface configurations, where authentication is handled by PAM modules as detailed in How do allow Linux PAM Authentication for non-local users, but here we are dealing with local X11 socket security.

Resolving Auth File Conflicts

In some cases, the VNC server tries to use the auth file associated with the main display (:0) instead of generating its own. This can happen if the vncserver command is run without specifying a unique display ID or if the configuration forces attachment to the primary session. To resolve this, you can stop any running VNC instances and restart them with explicit display numbers. Use vncserver -kill :1 to terminate the current instance, then start a new one with vncserver :1. This forces the creation of a new virtual display and a corresponding .Xauthority entry for that specific session. If you continue to experience issues, consider reviewing how Xorg handles authentication tokens, especially in older Ubuntu versions where legacy auth methods were more prevalent, as seen in discussions about Ubuntu 20.04: Eliminating '-auth' in Xorg process list.

Testing with a Minimal Window Manager

To isolate whether the issue lies with your full desktop environment or the VNC infrastructure itself, try launching a lightweight window manager like openbox or fluxbox. Modify your xstartup to launch only this minimal WM. If the grey screen disappears and you see a basic desktop, the problem is likely resource-heavy or incompatible packages in your full DE. This diagnostic step helps determine if the issue is systemic or application-specific.

Frequently Asked Questions

Why does my VNC show a grey screen instead of connecting?

A grey screen indicates that the network connection succeeded but the graphical rendering failed due to authentication errors or missing window managers. It is rarely a network blockage but rather an X11 permission issue preventing the VNC server from drawing to the display.

How do I fix Xauthority permission errors for VNC?

You can fix this by ensuring the .Xauthority file is owned by the user and has mode 600 permissions. Use chown and chmod commands to correct ownership, or delete the file to force regeneration on the next login.

Can I use VNC on the same display as my local monitor?

Yes, but it requires careful configuration to avoid locking the local session. Attaching to display :0 shares the session, which can cause input conflicts. Creating a separate virtual display like :1 is safer and prevents interference with the physical monitor.

What is the difference between a black screen and a grey screen in VNC?

A black screen usually means the X server is not running or the VNC client cannot establish a connection to the display server. A grey screen implies the server is running but cannot render graphics due to auth failures or missing desktop environments.

Does Wayland support VNC directly?

Standard VNC protocols are designed for X11 and do not work natively with Wayland compositors. You may need to use a Wayland-compatible remote desktop solution or switch to Xorg if VNC compatibility is critical for your workflow.

Latest News

How to Display Output of xterm Command in Terminal Screen using Cron

Resolve the inability to display xterm output in a terminal screen from cron by redirecting logs or using wall instead of insecure X11 workarounds.

Read More
Expose Local Server on VPS Preserving Real Client IPs (OS Level)

Resolve VPS logging showing only gateway IPs by configuring reverse proxies to forward real client addresses via X-Forwarded-For headers.

Read More
How to Clear Recent Files History in Linux without Deleting Actual Files?

Clear recent files history in Linux by deleting ~/.local/share/recently-used.xbel without removing the actual files.

Read More
Best HDD Copy Strategy: Manually Syncing and Rewriting Scratch

Resolve data drift between two 4TB hard drives by using rsync with the --delete flag to manually sync and rewrite scratch data for an exact mirror.

Read More
Understanding Bash Prompt Abbreviations: An Overview

Resolve repetitive typing errors by creating and persisting Bash aliases in the .bashrc file for improved command-line efficiency.

Read More
Free Tools and Methods to Log Real-Time Performance Details in Task Manager

Log real-time CPU and memory metrics to CSV files using Windows Performance Monitor Data Collector Sets to troubleshoot system slowness.

Read More
Contact Qatar Airways Customer Service: Phone Number, Help Center, and More

Resolve urgent Qatar Airways reservation issues like flight changes and baggage claims using the US phone number +1801-855-5905 or online self-service tools.

Read More
Windows 11: Alt Codes Displaying Wrong Characters - Solutions

Resolve Windows 11 Alt codes showing wrong characters by verifying the US keyboard layout and enabling Num Lock.

Read More
Run Programs with Elevated Privileges: A Comprehensive Guide

Eliminates the need to type sudo for frequent administrative tasks by configuring .bashrc aliases or functions.

Read More
Dynamically Changing Dates in Excel Formulas Using Cells

Eliminate manual date updates in Excel by using cell references to create dynamic formulas that automatically adjust calculations when input dates change.

Read More
Granting Edit Access to a Specific Excel Sheet in an Office 365 User Email ID-Based Login

Excel Online lacks native sheet-level permissions, so users must split workbooks or use worksheet protection to isolate edit access for specific tabs.

Read More
Creating Network Load on Local Wi-Fi from One PC

Generate sustained Wi-Fi bandwidth load from a single PC using a VM SFTP server to test router stability and throughput.

Read More
Changing the Default Editor for Batch Files in Windows 11's File Explorer

Resolve the issue of batch files opening in Notepad by changing the default editor to a preferred application like VS Code.

Read More
Gain WiFi Connection Minutes Before Losing it by Changing MAC Address

Bypass MAC address filtering to restore WiFi connectivity temporarily when a device is blocked by network administrators.

Read More
Photos Folders Turned Black: Troubleshooting Picture Applications on Windows

Resolve black screens in Windows Photos by resetting the app, updating graphics drivers, and repairing system files.

Read More
Troubleshooting High CPU Temperature Values: A Step-by-Step Guide

Resolve high CPU temperatures and thermal throttling by monitoring with Speedfan, cleaning dust from cooling components, and replacing degraded thermal paste.

Read More
Make cURL establish TLS connection with CA unknown

Resolve cURL TLS connection failures with unknown or self-signed certificates by using the --insecure flag to bypass CA validation.

Read More
Troubleshooting Incorrect Network Metrics Values in Grafana, Prometheus, InfluxDB, and Telegraf

Fix incorrect network metrics in Grafana, Prometheus, InfluxDB, and Telegraf by verifying interface selection, resolving unit mismatches, and handling counter resets.

Read More
Start Another Terminal Window (cmd.exe) Windows Repair/Troubleshoot

Provides step-by-step instructions to access the Windows Command Prompt via bootable media for advanced system repair and troubleshooting.

Read More
Thinkpad P1 Gen 6: Sudden Thunderbolt 3 Dock USB-C Charging Stopped Working

Resolve sudden Thunderbolt 3 dock USB-C charging and internet failure on ThinkPad P1 Gen 6 by updating firmware, resetting the dock, and adjusting power settings.

Read More
ASUS Windows 11 Laptop: Internet Connection Issue with Hotspot

Resolve ASUS Windows 11 laptop spinning wheel issue when connecting to mobile hotspot by resetting network stack, disabling IPv6, and adjusting power settings.

Read More
Developing iOS Project with Firebase: Logging in and Sending Push Notifications

Integrates Firebase to enable secure user authentication and push notifications in iOS applications.

Read More
Troubleshooting Bash Script with Suspected Issues of Spaces, Dashes, Filenames and Quoting

Resolve Bash script failures caused by word splitting, globbing, and special characters in filenames by applying proper quoting techniques.

Read More
Populating OneDrive Folder for Local Backup without Affecting Remote Files

Prevent OneDrive from deleting remote files during Windows reinstallation by unlinking the account or using symbolic links to isolate local data.

Read More
Force First Frame as Keyframe Without Re-encoding: A Quick Solution

Resolve inaccurate seeking and playback glitches by re-encoding video to ensure the first frame is a valid keyframe.

Read More
Find Information in Database Using WSL (Ubuntu) on Windows-10

Resolve database connection issues from WSL Ubuntu on Windows 10 by configuring client tools and network access to query remote or local servers.

Read More
Configuring a New Router with Different Networks: One Family, One Guest

Resolve IP conflicts and isolate guest traffic by configuring a second router with a distinct subnet via its WAN port.

Read More
Quickly Open Multiple Stock Websites with a Single Command

Solve the problem of manually opening multiple stock research websites by creating a single command to launch them simultaneously on Windows, macOS, or Linux.

Read More
Improved Adobe Acrobat Search Experience: Access Advanced Search with Ease

Access advanced search filters like case sensitivity and regex in Adobe Acrobat by clicking More Options in the Find bar.

Read More
Port Forwarding VM via OpenVPN: A Comprehensive Guide

Configure OpenVPN server and iptables to forward specific ports from VPN clients to a virtual machine's internal IP address.

Read More
Understanding Partitions in the 1980s: A Look Back at MS-DOS and Master Boot Record

Explains how the Master Boot Record and partition table enabled MS-DOS to manage multiple disk volumes on a single physical drive.

Read More
Windows 10 Enterprise: Keyboard Not Detected in Managed Organization with Admin Privileges

Resolve Windows 10 Enterprise keyboard detection failures caused by Group Policy restrictions, driver corruption, or USB enumeration errors.

Read More
Can't Find x86_64 Versions of Applications on MacOS arm64 (M1)

Resolve missing x86_64 app issues on M1 Macs by installing Rosetta 2 and reinstalling apps as universal binaries.

Read More
How to Hide Installation Source for an Android App

Manage Android app installation source visibility by using USB transfers or file managers to reduce browser traces and isolate data via work profiles.

Read More
Connecting Momentus 4200.2 ST9808210A Hard Drive via USB Cable

Resolve inability to access Seagate Momentus 4200.2 ST9808210A hard drive by connecting it via USB using a compatible SATA-to-USB adapter and configuring the disk in Windows.

Read More