github/xrdp
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Merge pull request from GHSA-7w22-h4w7-8j5j

Browse Source 
Enforce no login screen if require_credentials is set
This commit is contained in:
metalefty
2024-07-11 09:37:12 +09:00
committed by GitHub
parent 10c4700e9a 8ac2f6db34
commit 19c111c74c
4 changed files with 36 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/man/xrdp.ini.5.in
+6 -3
View File
@@ -156,9 +156,12 @@ by \fBseparator\fP.
.TP
\fBrequire_credentials\fP=\fI[true|false]\fP
If set to \fB1\fP, \fBtrue\fP or \fByes\fP, \fBxrdp\fP requires clients to include username and
password initial connection phase. In other words, xrdp doesn't allow clients to show login
screen if set to true. If not specified, defaults to \fBfalse\fP.
If set to \fB1\fP, \fBtrue\fP or \fByes\fP, \fBxrdp\fP requires clients
to include username and password initial connection phase. In other
words, xrdp doesn't allow clients to show login screen if set to true.
It follows that an incorrect password will cause the login to immediately
fail without displaying the login screen. If not specified, defaults
to \fBfalse\fP.
.TP
\fBsecurity_layer\fP=\fI[tls|rdp|negotiate]\fP