Rev 208 | Blame | Compare with Previous | Last modification | View Log | RSS feed
;; See `man 5 sesman.ini` for details[Globals]ListenAddress=127.0.0.1ListenPort=3350EnableUserWindowManager=true; Give in relative path to user's home directoryUserWindowManager=startwm.sh; Give in full path or relative path to /etc/xrdpDefaultWindowManager=startwm-bash.sh; Give in full path or relative path to /etc/xrdpReconnectScript=reconnectwm.sh[Security]AllowRootLogin=trueMaxLoginRetry=4TerminalServerUsers=tsusersTerminalServerAdmins=tsadmins; When AlwaysGroupCheck=false access will be permitted; if the group TerminalServerUsers is not defined.AlwaysGroupCheck=false; When RestrictOutboundClipboard=all clipboard from the; server is not pushed to the client.; In addition, you can control text/file/image transfer restrictions; respectively. It also accepts comma separated list such as text,file,image.; To keep compatibility, some aliases are also available:; true: an alias of all; false: an alias of none; yes: an alias of allRestrictOutboundClipboard=none; When RestrictInboundClipboard=all clipboard from the; client is not pushed to the server.; In addition, you can control text/file/image transfer restrictions; respectively. It also accepts comma separated list such as text,file,image.; To keep compatibility, some aliases are also available:; true: an alias of all; false: an alias of none; yes: an alias of allRestrictInboundClipboard=none[Sessions];; X11DisplayOffset - x11 display number offset; Type: integer; Default: 10X11DisplayOffset=10;; MaxSessions - maximum number of connections to an xrdp server; Type: integer; Default: 0MaxSessions=50;; KillDisconnected - kill disconnected sessions; Type: boolean; Default: false; if 1, true, or yes, every session will be killed within DisconnectedTimeLimit; seconds after the user disconnectsKillDisconnected=false;; DisconnectedTimeLimit (seconds) - wait before kill disconnected sessions; Type: integer; Default: 0; if KillDisconnected is set to false, this value is ignoredDisconnectedTimeLimit=0;; IdleTimeLimit (seconds) - wait before disconnect idle sessions; Type: integer; Default: 0; Set to 0 to disable idle disconnection.IdleTimeLimit=0;; Policy - session allocation policy; Type: enum [ "Default" | "UBD" | "UBI" | "UBC" | "UBDI" | "UBDC" ]; "Default" session per <User,BitPerPixel>; "UBD" session per <User,BitPerPixel,DisplaySize>; "UBI" session per <User,BitPerPixel,IPAddr>; "UBC" session per <User,BitPerPixel,Connection>; "UBDI" session per <User,BitPerPixel,DisplaySize,IPAddr>; "UBDC" session per <User,BitPerPixel,DisplaySize,Connection>Policy=Default[Logging]; Note: Log levels can be any of: core, error, warning, info, debug, or traceLogFile=xrdp-sesman.logLogLevel=INFOEnableSyslog=true#SyslogLevel=INFO#EnableConsole=false#ConsoleLevel=INFO#EnableProcessId=false[LoggingPerLogger]; Note: per logger configuration is only used if xrdp is built with; --enable-devel-logging#sesman.c=INFO#main()=INFO;; Session definitions - startup command-line parameters for each session type;[Xorg]; Specify the path of non-suid Xorg executable. It might differ depending; on your distribution and version. Find out the appropreate path for your; environment. The typical path is known as follows:;; Fedora 26 or later : param=/usr/libexec/Xorg; Debian 9 or later : param=/usr/lib/xorg/Xorg; Ubuntu 16.04 or later : param=/usr/lib/xorg/Xorg; Arch Linux : param=/usr/lib/Xorg; CentOS 7 : param=/usr/bin/Xorg or param=Xorg; CentOS 8 : param=/usr/libexec/Xorg;param=/usr/libexec/Xorg; Leave the rest paramaters as-is unless you understand what will happen.param=-configparam=xrdp/xorg.confparam=-noresetparam=-nolistenparam=tcpparam=-logfileparam=.xorgxrdp.%s.log[Xvnc]param=Xvncparam=-bsparam=-nolistenparam=tcpparam=-localhostparam=-dpiparam=96[Chansrv]; drive redirection; See sesman.ini(5) for the format of this parameter#FuseMountName=/run/user/%u/thinclient_drives#FuseMountName=/media/thinclient_drives/%U/thinclient_drivesFuseMountName=thinclient_drives; this value allows only the user to acess their own mapped drives.; Make this more permissive (e.g. 022) if required.FileUmask=077; Can be used to disable FUSE functionality - see sesman.ini(5)#EnableFuseMount=false; Uncomment this line only if you are using GNOME 3 versions 3.29.92; and up, and you wish to cut-paste files between Nautilus and Windows. Do; not use this setting for GNOME 4, or other file managers#UseNautilus3FlistFormat=true[ChansrvLogging]; Note: one log file is created per display and the LogFile config value; is ignored. The channel server log file names follow the naming convention:; xrdp-chansrv.${DISPLAY}.log;; Note: Log levels can be any of: core, error, warning, info, debug, or traceLogLevel=INFOEnableSyslog=true#SyslogLevel=INFO#EnableConsole=false#ConsoleLevel=INFO#EnableProcessId=false[ChansrvLoggingPerLogger]; Note: per logger configuration is only used if xrdp is built with; --enable-devel-logging#chansrv.c=INFO#main()=INFO[SessionVariables]PULSE_SCRIPT=/etc/xrdp/pulse/default.pa