Advertisement
meplerLabs

/etc/xrdp/xrdp.ini

Sep 5th, 2018
363
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 5.04 KB | None | 0 0
  1. [Globals]
  2. ; xrdp.ini file version number
  3. ini_version=1
  4.  
  5. ; fork a new process for each incoming connection
  6. fork=true
  7. ; tcp port to listen
  8. port=3389
  9. ; 'port' above should be connected to with vsock instead of tcp
  10. use_vsock=false
  11. ; regulate if the listening socket use socket option tcp_nodelay
  12. ; no buffering will be performed in the TCP stack
  13. tcp_nodelay=true
  14. ; regulate if the listening socket use socket option keepalive
  15. ; if the network connection disappear without close messages the connection will be closed
  16. tcp_keepalive=true
  17. #tcp_send_buffer_bytes=32768
  18. #tcp_recv_buffer_bytes=32768
  19.  
  20. ; security layer can be 'tls', 'rdp' or 'negotiate'
  21. ; for client compatible layer
  22. security_layer=negotiate
  23. ; minimum security level allowed for client
  24. ; can be 'none', 'low', 'medium', 'high', 'fips'
  25. crypt_level=high
  26. ; X.509 certificate and private key
  27. ; openssl req -x509 -newkey rsa:2048 -nodes -keyout key.pem -out cert.pem -days 365
  28. certificate=
  29. key_file=
  30. ; set SSL protocols
  31. ; can be comma separated list of 'SSLv3', 'TLSv1', 'TLSv1.1', 'TLSv1.2'
  32. ssl_protocols=TLSv1, TLSv1.1, TLSv1.2
  33. ; set TLS cipher suites
  34. #tls_ciphers=HIGH
  35.  
  36. ; Section name to use for automatic login if the client sends username
  37. ; and password. If empty, the domain name sent by the client is used.
  38. ; If empty and no domain name is given, the first suitable section in
  39. ; this file will be used.
  40. autorun=sesman-any
  41.  
  42. allow_channels=true
  43. allow_multimon=true
  44. bitmap_cache=true
  45. bitmap_compression=true
  46. bulk_compression=true
  47. #hidelogwindow=true
  48. max_bpp=16
  49. new_cursors=true
  50. ; fastpath - can be 'input', 'output', 'both', 'none'
  51. use_fastpath=both
  52. ; when true, userid/password *must* be passed on cmd line
  53. #require_credentials=true
  54. ; You can set the PAM error text in a gateway setup (MAX 256 chars)
  55. #pamerrortxt=change your password according to policy at http://url
  56.  
  57. ;
  58. ; colors used by windows in RGB format
  59. ;
  60. blue=009cb5
  61. grey=dedede
  62. #black=000000
  63. #dark_grey=808080
  64. #blue=08246b
  65. #dark_blue=08246b
  66. #white=ffffff
  67. #red=ff0000
  68. #green=00ff00
  69. #background=626c72
  70.  
  71. ;
  72. ; configure login screen
  73. ;
  74.  
  75. ; Login Screen Window Title
  76. #ls_title=My Login Title
  77.  
  78. ; top level window background color in RGB format
  79. ls_top_window_bg_color=009cb5
  80.  
  81. ; width and height of login screen
  82. ls_width=350
  83. ls_height=430
  84.  
  85. ; login screen background color in RGB format
  86. ls_bg_color=dedede
  87.  
  88. ; optional background image filename (bmp format).
  89. #ls_background_image=
  90.  
  91. ; logo
  92. ; full path to bmp-file or file in shared folder
  93. ls_logo_filename=
  94. ls_logo_x_pos=55
  95. ls_logo_y_pos=50
  96.  
  97. ; for positioning labels such as username, password etc
  98. ls_label_x_pos=30
  99. ls_label_width=60
  100.  
  101. ; for positioning text and combo boxes next to above labels
  102. ls_input_x_pos=110
  103. ls_input_width=210
  104.  
  105. ; y pos for first label and combo box
  106. ls_input_y_pos=220
  107.  
  108. ; OK button
  109. ls_btn_ok_x_pos=142
  110. ls_btn_ok_y_pos=370
  111. ls_btn_ok_width=85
  112. ls_btn_ok_height=30
  113.  
  114. ; Cancel button
  115. ls_btn_cancel_x_pos=237
  116. ls_btn_cancel_y_pos=370
  117. ls_btn_cancel_width=85
  118. ls_btn_cancel_height=30
  119.  
  120. [Logging]
  121. LogFile=xrdp.log
  122. LogLevel=DEBUG
  123. EnableSyslog=true
  124. SyslogLevel=DEBUG
  125. ; LogLevel and SysLogLevel could by any of: core, error, warning, info or debug
  126.  
  127. [Channels]
  128. ; Channel names not listed here will be blocked by XRDP.
  129. ; You can block any channel by setting its value to false.
  130. ; IMPORTANT! All channels are not supported in all use
  131. ; cases even if you set all values to true.
  132. ; You can override these settings on each session type
  133. ; These settings are only used if allow_channels=true
  134. rdpdr=true
  135. rdpsnd=true
  136. drdynvc=true
  137. cliprdr=true
  138. rail=true
  139. xrdpvr=true
  140. tcutils=true
  141.  
  142. ; for debugging xrdp, in section xrdp1, change port=-1 to this:
  143. #port=/tmp/.xrdp/xrdp_display_10
  144.  
  145. ; for debugging xrdp, add following line to section xrdp1
  146. #chansrvport=/tmp/.xrdp/xrdp_chansrv_socket_7210
  147.  
  148.  
  149. ;
  150. ; Session types
  151. ;
  152.  
  153. ; Some session types such as Xorg, X11rdp and Xvnc start a display server.
  154. ; Startup command-line parameters for the display server are configured
  155. ; in sesman.ini. See and configure also sesman.ini.
  156. [Xorg]
  157. name=Xorg
  158. lib=libxup.so
  159. username=ask
  160. password=ask
  161. ip=127.0.0.1
  162. port=-1
  163. code=20
  164.  
  165. [X11rdp]
  166. name=X11rdp
  167. lib=libxup.so
  168. username=ask
  169. password=ask
  170. ip=127.0.0.1
  171. port=-1
  172. xserverbpp=24
  173. code=10
  174.  
  175. [Xvnc]
  176. name=Xvnc
  177. lib=libvnc.so
  178. username=ask
  179. password=ask
  180. ip=127.0.0.1
  181. port=-1
  182. #xserverbpp=24
  183. #delay_ms=2000
  184.  
  185. [console]
  186. name=console
  187. lib=libvnc.so
  188. ip=127.0.0.1
  189. port=5900
  190. username=na
  191. password=ask
  192. #delay_ms=2000
  193.  
  194. [vnc-any]
  195. name=vnc-any
  196. lib=libvnc.so
  197. ip=ask
  198. port=ask5900
  199. username=na
  200. password=ask
  201. #pamusername=asksame
  202. #pampassword=asksame
  203. #pamsessionmng=127.0.0.1
  204. #delay_ms=2000
  205.  
  206. [sesman-any]
  207. name=sesman-any
  208. lib=libvnc.so
  209. ip=127.0.0.1
  210. port=-1
  211. username=ask
  212. password=ask
  213. #delay_ms=2000
  214.  
  215. [neutrinordp-any]
  216. name=neutrinordp-any
  217. lib=libxrdpneutrinordp.so
  218. ip=ask
  219. port=ask3389
  220. username=ask
  221. password=ask
  222.  
  223. ; You can override the common channel settings for each session type
  224. #channel.rdpdr=true
  225. #channel.rdpsnd=true
  226. #channel.drdynvc=true
  227. #channel.cliprdr=true
  228. #channel.rail=true
  229. #channel.xrdpvr=true
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement