|
|
@ -1,5 +1,5 @@
|
|
|
|
[Globals]
|
|
|
|
[Globals]
|
|
|
|
# xrdp.ini file version number
|
|
|
|
; xrdp.ini file version number
|
|
|
|
ini_version=1
|
|
|
|
ini_version=1
|
|
|
|
|
|
|
|
|
|
|
|
bitmap_cache=true
|
|
|
|
bitmap_cache=true
|
|
|
@ -8,35 +8,35 @@ port=3389
|
|
|
|
allow_channels=true
|
|
|
|
allow_channels=true
|
|
|
|
max_bpp=32
|
|
|
|
max_bpp=32
|
|
|
|
fork=true
|
|
|
|
fork=true
|
|
|
|
# minimum security level allowed for client
|
|
|
|
; minimum security level allowed for client
|
|
|
|
# can be 'none', 'low', 'medium', 'high', 'fips'
|
|
|
|
; can be 'none', 'low', 'medium', 'high', 'fips'
|
|
|
|
crypt_level=high
|
|
|
|
crypt_level=high
|
|
|
|
# security layer can be 'tls', 'rdp' or 'negotiate'
|
|
|
|
; security layer can be 'tls', 'rdp' or 'negotiate'
|
|
|
|
# for client compatible layer
|
|
|
|
; for client compatible layer
|
|
|
|
security_layer=negotiate
|
|
|
|
security_layer=negotiate
|
|
|
|
# X.509 certificate and private key
|
|
|
|
; X.509 certificate and private key
|
|
|
|
# openssl req -x509 -newkey rsa:2048 -nodes -keyout key.pem -out cert.pem -days 365
|
|
|
|
; openssl req -x509 -newkey rsa:2048 -nodes -keyout key.pem -out cert.pem -days 365
|
|
|
|
certificate=
|
|
|
|
certificate=
|
|
|
|
key_file=
|
|
|
|
key_file=
|
|
|
|
# disable SSlv3
|
|
|
|
; disable SSlv3
|
|
|
|
#disableSSLv3=true
|
|
|
|
#disableSSLv3=true
|
|
|
|
# set TLS cipher suites
|
|
|
|
; set TLS cipher suites
|
|
|
|
#tls_ciphers=HIGH
|
|
|
|
#tls_ciphers=HIGH
|
|
|
|
|
|
|
|
|
|
|
|
# regulate if the listening socket use socket option tcp_nodelay
|
|
|
|
; regulate if the listening socket use socket option tcp_nodelay
|
|
|
|
# no buffering will be performed in the TCP stack
|
|
|
|
; no buffering will be performed in the TCP stack
|
|
|
|
tcp_nodelay=true
|
|
|
|
tcp_nodelay=true
|
|
|
|
|
|
|
|
|
|
|
|
# regulate if the listening socket use socket option keepalive
|
|
|
|
; regulate if the listening socket use socket option keepalive
|
|
|
|
# if the network connection disappear without close messages the connection will be closed
|
|
|
|
; if the network connection disappear without close messages the connection will be closed
|
|
|
|
tcp_keepalive=true
|
|
|
|
tcp_keepalive=true
|
|
|
|
|
|
|
|
|
|
|
|
#tcp_send_buffer_bytes=32768
|
|
|
|
#tcp_send_buffer_bytes=32768
|
|
|
|
#tcp_recv_buffer_bytes=32768
|
|
|
|
#tcp_recv_buffer_bytes=32768
|
|
|
|
|
|
|
|
|
|
|
|
#
|
|
|
|
;
|
|
|
|
# colors used by windows in RGB format
|
|
|
|
; colors used by windows in RGB format
|
|
|
|
#
|
|
|
|
;
|
|
|
|
|
|
|
|
|
|
|
|
blue=009cb5
|
|
|
|
blue=009cb5
|
|
|
|
grey=dedede
|
|
|
|
grey=dedede
|
|
|
@ -51,66 +51,66 @@ grey=dedede
|
|
|
|
|
|
|
|
|
|
|
|
#hidelogwindow=true
|
|
|
|
#hidelogwindow=true
|
|
|
|
|
|
|
|
|
|
|
|
# when true, userid/password *must* be passed on cmd line
|
|
|
|
; when true, userid/password *must* be passed on cmd line
|
|
|
|
# require_credentials=true
|
|
|
|
# require_credentials=true
|
|
|
|
|
|
|
|
|
|
|
|
# Section name to use for automatic login if the client sends username
|
|
|
|
; Section name to use for automatic login if the client sends username
|
|
|
|
# and password
|
|
|
|
; and password
|
|
|
|
autorun=X11rdp
|
|
|
|
autorun=X11rdp
|
|
|
|
|
|
|
|
|
|
|
|
bulk_compression=true
|
|
|
|
bulk_compression=true
|
|
|
|
|
|
|
|
|
|
|
|
# You can set the PAM error text in a gateway setup (MAX 256 chars)
|
|
|
|
; You can set the PAM error text in a gateway setup (MAX 256 chars)
|
|
|
|
#pamerrortxt=change your password according to policy at http://url
|
|
|
|
#pamerrortxt=change your password according to policy at http://url
|
|
|
|
new_cursors=true
|
|
|
|
new_cursors=true
|
|
|
|
allow_multimon=true
|
|
|
|
allow_multimon=true
|
|
|
|
|
|
|
|
|
|
|
|
# fastpath - can be set to input / output / both / none
|
|
|
|
; fastpath - can be set to input / output / both / none
|
|
|
|
use_fastpath=both
|
|
|
|
use_fastpath=both
|
|
|
|
#
|
|
|
|
;
|
|
|
|
# configure login screen
|
|
|
|
; configure login screen
|
|
|
|
#
|
|
|
|
;
|
|
|
|
|
|
|
|
|
|
|
|
# Login Screen Window Title
|
|
|
|
; Login Screen Window Title
|
|
|
|
#ls_title=My Login Title
|
|
|
|
#ls_title=My Login Title
|
|
|
|
|
|
|
|
|
|
|
|
# top level window background color in RGB format
|
|
|
|
; top level window background color in RGB format
|
|
|
|
ls_top_window_bg_color=009cb5
|
|
|
|
ls_top_window_bg_color=009cb5
|
|
|
|
|
|
|
|
|
|
|
|
# width and height of login screen
|
|
|
|
; width and height of login screen
|
|
|
|
ls_width=350
|
|
|
|
ls_width=350
|
|
|
|
ls_height=430
|
|
|
|
ls_height=430
|
|
|
|
|
|
|
|
|
|
|
|
# login screen background color in RGB format
|
|
|
|
; login screen background color in RGB format
|
|
|
|
ls_bg_color=dedede
|
|
|
|
ls_bg_color=dedede
|
|
|
|
|
|
|
|
|
|
|
|
# optional background image filename (bmp format).
|
|
|
|
; optional background image filename (bmp format).
|
|
|
|
#ls_background_image=
|
|
|
|
#ls_background_image=
|
|
|
|
|
|
|
|
|
|
|
|
# logo
|
|
|
|
; logo
|
|
|
|
# full path to bmp-file or file in shared folder
|
|
|
|
; full path to bmp-file or file in shared folder
|
|
|
|
ls_logo_filename=
|
|
|
|
ls_logo_filename=
|
|
|
|
ls_logo_x_pos=55
|
|
|
|
ls_logo_x_pos=55
|
|
|
|
ls_logo_y_pos=50
|
|
|
|
ls_logo_y_pos=50
|
|
|
|
|
|
|
|
|
|
|
|
# for positioning labels such as username, password etc
|
|
|
|
; for positioning labels such as username, password etc
|
|
|
|
ls_label_x_pos=30
|
|
|
|
ls_label_x_pos=30
|
|
|
|
ls_label_width=60
|
|
|
|
ls_label_width=60
|
|
|
|
|
|
|
|
|
|
|
|
# for positioning text and combo boxes next to above labels
|
|
|
|
; for positioning text and combo boxes next to above labels
|
|
|
|
ls_input_x_pos=110
|
|
|
|
ls_input_x_pos=110
|
|
|
|
ls_input_width=210
|
|
|
|
ls_input_width=210
|
|
|
|
|
|
|
|
|
|
|
|
# y pos for first label and combo box
|
|
|
|
; y pos for first label and combo box
|
|
|
|
ls_input_y_pos=220
|
|
|
|
ls_input_y_pos=220
|
|
|
|
|
|
|
|
|
|
|
|
# OK button
|
|
|
|
; OK button
|
|
|
|
ls_btn_ok_x_pos=142
|
|
|
|
ls_btn_ok_x_pos=142
|
|
|
|
ls_btn_ok_y_pos=370
|
|
|
|
ls_btn_ok_y_pos=370
|
|
|
|
ls_btn_ok_width=85
|
|
|
|
ls_btn_ok_width=85
|
|
|
|
ls_btn_ok_height=30
|
|
|
|
ls_btn_ok_height=30
|
|
|
|
|
|
|
|
|
|
|
|
# Cancel button
|
|
|
|
; Cancel button
|
|
|
|
ls_btn_cancel_x_pos=237
|
|
|
|
ls_btn_cancel_x_pos=237
|
|
|
|
ls_btn_cancel_y_pos=370
|
|
|
|
ls_btn_cancel_y_pos=370
|
|
|
|
ls_btn_cancel_width=85
|
|
|
|
ls_btn_cancel_width=85
|
|
|
@ -121,15 +121,15 @@ LogFile=xrdp.log
|
|
|
|
LogLevel=DEBUG
|
|
|
|
LogLevel=DEBUG
|
|
|
|
EnableSyslog=true
|
|
|
|
EnableSyslog=true
|
|
|
|
SyslogLevel=DEBUG
|
|
|
|
SyslogLevel=DEBUG
|
|
|
|
# LogLevel and SysLogLevel could by any of: core, error, warning, info or debug
|
|
|
|
; LogLevel and SysLogLevel could by any of: core, error, warning, info or debug
|
|
|
|
|
|
|
|
|
|
|
|
[Channels]
|
|
|
|
[Channels]
|
|
|
|
# Channel names not listed here will be blocked by XRDP.
|
|
|
|
; Channel names not listed here will be blocked by XRDP.
|
|
|
|
# You can block any channel by setting its value to false.
|
|
|
|
; You can block any channel by setting its value to false.
|
|
|
|
# IMPORTANT! All channels are not supported in all use
|
|
|
|
; IMPORTANT! All channels are not supported in all use
|
|
|
|
# cases even if you set all values to true.
|
|
|
|
; cases even if you set all values to true.
|
|
|
|
# You can override these settings on each session type
|
|
|
|
; You can override these settings on each session type
|
|
|
|
# These settings are only used if allow_channels=true
|
|
|
|
; These settings are only used if allow_channels=true
|
|
|
|
rdpdr=true
|
|
|
|
rdpdr=true
|
|
|
|
rdpsnd=true
|
|
|
|
rdpsnd=true
|
|
|
|
drdynvc=true
|
|
|
|
drdynvc=true
|
|
|
@ -138,11 +138,11 @@ rail=true
|
|
|
|
xrdpvr=true
|
|
|
|
xrdpvr=true
|
|
|
|
tcutils=true
|
|
|
|
tcutils=true
|
|
|
|
|
|
|
|
|
|
|
|
# for debugging xrdp, in section xrdp1, change port=-1 to this:
|
|
|
|
; for debugging xrdp, in section xrdp1, change port=-1 to this:
|
|
|
|
# port=/tmp/.xrdp/xrdp_display_10
|
|
|
|
#port=/tmp/.xrdp/xrdp_display_10
|
|
|
|
|
|
|
|
|
|
|
|
# for debugging xrdp, add following line to section xrdp1
|
|
|
|
; for debugging xrdp, add following line to section xrdp1
|
|
|
|
# chansrvport=/tmp/.xrdp/xrdp_chansrv_socket_7210
|
|
|
|
#chansrvport=/tmp/.xrdp/xrdp_chansrv_socket_7210
|
|
|
|
|
|
|
|
|
|
|
|
[X11rdp]
|
|
|
|
[X11rdp]
|
|
|
|
name=X11rdp
|
|
|
|
name=X11rdp
|
|
|
@ -217,7 +217,7 @@ port=ask3389
|
|
|
|
username=ask
|
|
|
|
username=ask
|
|
|
|
password=ask
|
|
|
|
password=ask
|
|
|
|
|
|
|
|
|
|
|
|
# You can override the common channel settings for each session type
|
|
|
|
; You can override the common channel settings for each session type
|
|
|
|
#channel.rdpdr=true
|
|
|
|
#channel.rdpdr=true
|
|
|
|
#channel.rdpsnd=true
|
|
|
|
#channel.rdpsnd=true
|
|
|
|
#channel.drdynvc=true
|
|
|
|
#channel.drdynvc=true
|
|
|
|