xrdp/sesman/sesman.ini

[Globals]
ListenAddress=127.0.0.1
ListenPort=3350
EnableUserWindowManager=1
UserWindowManager=startwm.sh
DefaultWindowManager=startwm.sh

[Security]
AllowRootLogin=1
MaxLoginRetry=4
TerminalServerUsers=tsusers
TerminalServerAdmins=tsadmins
# When AlwaysGroupCheck = false access will be permitted
# if the group TerminalServerUsers is not defined.
AlwaysGroupCheck = false

[Sessions]

## X11DisplayOffset - x11 display number offset
# Type: integer
# Default: 10
X11DisplayOffset=10

## MaxSessions - maximum number of connections to an xrdp server
# Type: integer
# Default: 0
MaxSessions=50

## KillDisconnected - kill disconnected sessions
# Type: integer
# Default: 0
# if 1, true, or yes, kill session after 60 seconds
KillDisconnected=0

## IdleTimeLimit - when to disconnect idle sessions
# Type: integer
# Default: 0
# if not zero, the seconds without mouse or keyboard input before disconnect
# not complete yet
IdleTimeLimit=0

## DisconnectedTimeLimit - when to kill idle sessions
# Type: integer
# Default: 0
# if not zero, the seconds before a disconnected session is killed
# min 60 seconds
DisconnectedTimeLimit=0

## Policy - session allocation policy
# Type: enum [ "Default" | "UBD" | "UBI" | "UBC" | "UBDI" | "UBDC" ]
# Default: Xrdp:<User,BitPerPixel> and Xvnc:<User,BitPerPixel,DisplaySize>
# "UBD" session per <User,BitPerPixel,DisplaySize>
# "UBI" session per <User,BitPerPixel,IPAddr>
# "UBC" session per <User,BitPerPixel,Connection>
# "UBDI" session per <User,BitPerPixel,DisplaySize,IPAddr>
# "UBDC" session per <User,BitPerPixel,DisplaySize,Connection>
Policy=Default

[Logging]
LogFile=xrdp-sesman.log
LogLevel=DEBUG
EnableSyslog=1
SyslogLevel=DEBUG

[X11rdp]
param0=X11rdp
param1=-bs
param2=-ac
param3=-nolisten
param4=tcp
param5=-uds

[Xvnc]
param0=Xvnc
param1=-bs
param2=-ac
param3=-nolisten
param4=tcp
param5=-localhost
param6=-dpi
param7=96

[Xorg]
param0=Xorg
param1=-config
param2=xrdp/xorg.conf
param3=-noreset
param4=-ac
param5=-nolisten
param6=tcp
param7=-logfile
param8=/dev/null

[Chansrv]
# drive redirection, defaults to xrdp_client if not set
FuseMountName=thinclient_drives

[SessionVariables]
PULSE_SCRIPT=/etc/xrdp/pulse/default.pa
added user specific window manager startup script and SIGUP to reload sesman configuration 2005-09-25 07:30:09 +04:00			`[Globals]`
added sessvc as session supervisor first code for password changing 2007-04-07 20:20:08 +04:00			`ListenAddress=127.0.0.1`
added user specific window manager startup script and SIGUP to reload sesman configuration 2005-09-25 07:30:09 +04:00			`ListenPort=3350`
			`EnableUserWindowManager=1`
			`UserWindowManager=startwm.sh`
			`DefaultWindowManager=startwm.sh`
Adding logging functions and adding log options in config files 2005-10-24 01:47:17 +04:00
new session list code added support for new [sessions] configuration options 2006-01-13 18:51:23 +03:00			`[Security]`
			`AllowRootLogin=1`
Adding MaxLoginRetry configuration option 2006-10-25 23:18:36 +04:00			`MaxLoginRetry=4`
new session list code added support for new [sessions] configuration options 2006-01-13 18:51:23 +03:00			`TerminalServerUsers=tsusers`
			`TerminalServerAdmins=tsadmins`
misc fixes for Xorg and compile 2014-03-14 23:23:12 +04:00			`# When AlwaysGroupCheck = false access will be permitted`
deny access if group is undefined 2013-01-31 18:19:58 +04:00			`# if the group TerminalServerUsers is not defined.`
			`AlwaysGroupCheck = false`
new session list code added support for new [sessions] configuration options 2006-01-13 18:51:23 +03:00
			`[Sessions]`
sesman: more options for session lookup from Fredy Paquet 2014-04-20 11:42:19 +04:00
			`## X11DisplayOffset - x11 display number offset`
			`# Type: integer`
			`# Default: 10`
added X11DisplayOffset sesman option 2010-04-24 10:41:55 +04:00			`X11DisplayOffset=10`
sesman: more options for session lookup from Fredy Paquet 2014-04-20 11:42:19 +04:00
			`## MaxSessions - maximum number of connections to an xrdp server`
			`# Type: integer`
			`# Default: 0`
o default login limit is now 50 users (instead of 10) o we now wait for 30 seconds for session connection (instead of 1) o if AUTO_LOGON flag is set but username is null, we force login dialog to show up 2014-03-01 07:28:31 +04:00			`MaxSessions=50`
sesman: more options for session lookup from Fredy Paquet 2014-04-20 11:42:19 +04:00
			`## KillDisconnected - kill disconnected sessions`
			`# Type: integer`
			`# Default: 0`
kill disconencted, make work like man page and update man page 2013-08-25 05:53:55 +04:00			`# if 1, true, or yes, kill session after 60 seconds`
new session list code added support for new [sessions] configuration options 2006-01-13 18:51:23 +03:00			`KillDisconnected=0`
sesman: more options for session lookup from Fredy Paquet 2014-04-20 11:42:19 +04:00
			`## IdleTimeLimit - when to disconnect idle sessions`
			`# Type: integer`
			`# Default: 0`
kill disconencted, make work like man page and update man page 2013-08-25 05:53:55 +04:00			`# if not zero, the seconds without mouse or keyboard input before disconnect`
			`# not complete yet`
new session list code added support for new [sessions] configuration options 2006-01-13 18:51:23 +03:00			`IdleTimeLimit=0`
sesman: more options for session lookup from Fredy Paquet 2014-04-20 11:42:19 +04:00
			`## DisconnectedTimeLimit - when to kill idle sessions`
			`# Type: integer`
			`# Default: 0`
kill disconencted, make work like man page and update man page 2013-08-25 05:53:55 +04:00			`# if not zero, the seconds before a disconnected session is killed`
			`# min 60 seconds`
new session list code added support for new [sessions] configuration options 2006-01-13 18:51:23 +03:00			`DisconnectedTimeLimit=0`

sesman: more options for session lookup from Fredy Paquet 2014-04-20 11:42:19 +04:00			`## Policy - session allocation policy`
			`# Type: enum [ "Default" \| "UBD" \| "UBI" \| "UBC" \| "UBDI" \| "UBDC" ]`
			`# Default: Xrdp:<User,BitPerPixel> and Xvnc:<User,BitPerPixel,DisplaySize>`
			`# "UBD" session per <User,BitPerPixel,DisplaySize>`
			`# "UBI" session per <User,BitPerPixel,IPAddr>`
			`# "UBC" session per <User,BitPerPixel,Connection>`
			`# "UBDI" session per <User,BitPerPixel,DisplaySize,IPAddr>`
			`# "UBDC" session per <User,BitPerPixel,DisplaySize,Connection>`
			`Policy=Default`

Adding logging functions and adding log options in config files 2005-10-24 01:47:17 +04:00			`[Logging]`
log: added path for when --prefix is used 2012-06-11 08:50:57 +04:00			`LogFile=xrdp-sesman.log`
Adding logging functions and adding log options in config files 2005-10-24 01:47:17 +04:00			`LogLevel=DEBUG`
Initial syslog support in XRDP 2012-05-27 19:17:39 +04:00			`EnableSyslog=1`
Adding logging functions and adding log options in config files 2005-10-24 01:47:17 +04:00			`SyslogLevel=DEBUG`
added ability to put extra Xserver parameters in sesman.ini 2006-09-18 08:40:43 +04:00
			`[X11rdp]`
sesman: do not hardcode Xorg/X11rdp/Xvnc executables In RHEL and its clones, /usr/bin/Xorg is set suid-root. To execute Xorg with user privileges, /etc/pam.d/xserver needs be edited [1], or suid bit of Xorg binary needs to be dropped. In order to keep Xorg and /etc/pam.d/xserver untouched, preparing non-suid version of Xorg as /usr/bin/Xorg.non-suid for example is the simplest solution. However, Xorg.non-suid cannot be executed since it is hardcoded to execute Xorg in sesman. This change makes more flexible to execute Xorg with non-standard name or not in PATH environment variable. [1] https://www.centos.org/forums/viewtopic.php?t=21185 2016-04-07 11:34:04 +03:00			`param0=X11rdp`
added ability to put extra Xserver parameters in sesman.ini 2006-09-18 08:40:43 +04:00			`param1=-bs`
			`param2=-ac`
add '-nolisten tcp' to X11rdp and Xvnc params 2009-09-04 07:57:43 +04:00			`param3=-nolisten`
			`param4=tcp`
use unix domain socket for xrdp-X11rdp connection 2012-03-16 08:42:39 +04:00			`param5=-uds`
added ability to put extra Xserver parameters in sesman.ini 2006-09-18 08:40:43 +04:00
			`[Xvnc]`
sesman: do not hardcode Xorg/X11rdp/Xvnc executables In RHEL and its clones, /usr/bin/Xorg is set suid-root. To execute Xorg with user privileges, /etc/pam.d/xserver needs be edited [1], or suid bit of Xorg binary needs to be dropped. In order to keep Xorg and /etc/pam.d/xserver untouched, preparing non-suid version of Xorg as /usr/bin/Xorg.non-suid for example is the simplest solution. However, Xorg.non-suid cannot be executed since it is hardcoded to execute Xorg in sesman. This change makes more flexible to execute Xorg with non-standard name or not in PATH environment variable. [1] https://www.centos.org/forums/viewtopic.php?t=21185 2016-04-07 11:34:04 +03:00			`param0=Xvnc`
added ability to put extra Xserver parameters in sesman.ini 2006-09-18 08:40:43 +04:00			`param1=-bs`
Adding MaxLoginRetry configuration option 2006-10-25 23:18:36 +04:00			`param2=-ac`
add '-nolisten tcp' to X11rdp and Xvnc params 2009-09-04 07:57:43 +04:00			`param3=-nolisten`
			`param4=tcp`
fixes for bell function 2010-11-19 08:05:32 +03:00			`param5=-localhost`
			`param6=-dpi`
			`param7=96`
added support for using Xorg driver model 2014-03-09 04:41:37 +04:00
fixed some connection issues when using xorg driver mode 2014-03-09 22:24:30 +04:00			`[Xorg]`
sesman: do not hardcode Xorg/X11rdp/Xvnc executables In RHEL and its clones, /usr/bin/Xorg is set suid-root. To execute Xorg with user privileges, /etc/pam.d/xserver needs be edited [1], or suid bit of Xorg binary needs to be dropped. In order to keep Xorg and /etc/pam.d/xserver untouched, preparing non-suid version of Xorg as /usr/bin/Xorg.non-suid for example is the simplest solution. However, Xorg.non-suid cannot be executed since it is hardcoded to execute Xorg in sesman. This change makes more flexible to execute Xorg with non-standard name or not in PATH environment variable. [1] https://www.centos.org/forums/viewtopic.php?t=21185 2016-04-07 11:34:04 +03:00			`param0=Xorg`
xorg driver module: we now access xorg driver module from /usr/lib/xorg 2014-03-10 02:50:16 +04:00			`param1=-config`
			`param2=xrdp/xorg.conf`
Move -logfile /dev/null option for easier commenting in debug scenarios. 2016-10-28 17:45:05 +03:00			`param3=-noreset`
			`param4=-ac`
			`param5=-nolisten`
			`param6=tcp`
			`param7=-logfile`
			`param8=/dev/null`
chansrv: make fuse mount directory configurable Conflicts: sesman/sesman.ini 2014-04-20 04:08:55 +04:00
			`[Chansrv]`
			`# drive redirection, defaults to xrdp_client if not set`
			`FuseMountName=thinclient_drives`
sesman: added SessionVariables to sesman.ini and some indent cleanup 2014-05-10 03:02:19 +04:00
			`[SessionVariables]`
sesman: change from using PULSE_CONFIG to PULSE_SCRIPT 2014-05-11 03:08:58 +04:00			`PULSE_SCRIPT=/etc/xrdp/pulse/default.pa`