matt335672
4d2c4ae8a5
Add an option to allow effectively disable file system space checks for some file managers before copying files to remote drives. This is a temporary solution. A better solution is to provide each remote drive with its own mountpoint, so that the xrdp FUSE filesystem becomes POSIX compliant.
245 lines
8.3 KiB
Plaintext
245 lines
8.3 KiB
Plaintext
;; See `man 5 sesman.ini` for details
|
|
|
|
[Globals]
|
|
; listening port
|
|
#ListenPort=sesman.socket
|
|
EnableUserWindowManager=true
|
|
; Give in relative path to user's home directory
|
|
UserWindowManager=startwm.sh
|
|
; Give in full path or relative path to @sesmansysconfdir@
|
|
DefaultWindowManager=startwm.sh
|
|
; Give in full path or relative path to @sesmansysconfdir@
|
|
ReconnectScript=reconnectwm.sh
|
|
; Set this to 'yes' if you wish to reconnect script to be run on
|
|
; the first connection to a session. Normally the script is
|
|
; only run on reconnections.
|
|
#AlwaysRunReconnect=no
|
|
|
|
[Security]
|
|
AllowRootLogin=true
|
|
MaxLoginRetry=4
|
|
XAuthorityInSystemDir=no
|
|
TerminalServerUsers=tsusers
|
|
TerminalServerAdmins=tsadmins
|
|
; When AlwaysGroupCheck=false access will be permitted
|
|
; if the group TerminalServerUsers is not defined, and the
|
|
; non-existence of TerminalServerAdmins will not be reported
|
|
AlwaysGroupCheck=false
|
|
; When RestrictOutboundClipboard=all clipboard from the
|
|
; server is not pushed to the client.
|
|
; In addition, you can control text/file/image transfer restrictions
|
|
; respectively. It also accepts comma separated list such as text,file,image.
|
|
; To keep compatibility, some aliases are also available:
|
|
; true: an alias of all
|
|
; false: an alias of none
|
|
; yes: an alias of all
|
|
RestrictOutboundClipboard=none
|
|
; When RestrictInboundClipboard=all clipboard from the
|
|
; client is not pushed to the server.
|
|
; In addition, you can control text/file/image transfer restrictions
|
|
; respectively. It also accepts comma separated list such as text,file,image.
|
|
; To keep compatibility, some aliases are also available:
|
|
; true: an alias of all
|
|
; false: an alias of none
|
|
; yes: an alias of all
|
|
RestrictInboundClipboard=none
|
|
; Set to 'no' to prevent users from logging in with alternate shells
|
|
#AllowAlternateShell=true
|
|
; On Linux systems, the Xorg X11 server is normally invoked using
|
|
; no_new_privs to avoid problems if the executable is suid. This may,
|
|
; however, interfere with the use of security modules such as AppArmor.
|
|
; Leave this unset unless you need to disable it.
|
|
#XorgNoNewPrivileges=true
|
|
; Specify the group which is to have read access to the directory where
|
|
; local sockets for the session are created.
|
|
; This should take one of the following values:-
|
|
; 1) For normal operation with sesman, set this to 'root' for
|
|
; maximum security
|
|
; 2) If you are using xrdp to connect to VNC sessions with X server
|
|
; sockets or chansrv sockets in the local sockets dir, set this to
|
|
; the runtime_group in xrdp.ini. If you do not do this, xrdp will not
|
|
; be able to connect to your sessions.
|
|
SessionSockdirGroup=root
|
|
#SessionSockdirGroup=xrdp
|
|
|
|
|
|
[Sessions]
|
|
;; X11DisplayOffset - x11 display number offset
|
|
; Type: integer
|
|
; Default: 10
|
|
X11DisplayOffset=10
|
|
|
|
;; MaxSessions - maximum number of connections to an xrdp server
|
|
; Type: integer
|
|
; Default: 0
|
|
MaxSessions=50
|
|
|
|
;; MaxDisplayNumer - maximum number considered for an X display
|
|
; Type: integer
|
|
; Default: 63
|
|
;
|
|
; IANA only allocates TCP ports up to 6063 for X servers. If you are not
|
|
; allowing TCP connections to your X servers you may safely increase this
|
|
; number.
|
|
#MaxDisplayNumber=63
|
|
|
|
;; KillDisconnected - kill disconnected sessions
|
|
; Type: boolean
|
|
; Default: false
|
|
; if 1, true, or yes, every session will be killed within DisconnectedTimeLimit
|
|
; seconds after the user disconnects
|
|
KillDisconnected=false
|
|
|
|
;; DisconnectedTimeLimit (seconds) - wait before kill disconnected sessions
|
|
; Type: integer
|
|
; Default: 0
|
|
; if KillDisconnected is set to false, this value is ignored
|
|
DisconnectedTimeLimit=0
|
|
|
|
;; IdleTimeLimit (seconds) - wait before disconnect idle sessions
|
|
; Type: integer
|
|
; Default: 0
|
|
; Set to 0 to disable idle disconnection.
|
|
IdleTimeLimit=0
|
|
|
|
;; Policy - session allocation policy
|
|
;
|
|
; Type: enum [ "Default" | "Separate" | Combination from {UBDI} ]
|
|
; "Default" Currently same as "UB"
|
|
; "Separate" All sessions are separate. Sessions can never be rejoined,
|
|
; and will need to be cleaned up manually, or automatically
|
|
; by setting other sesman options.
|
|
;
|
|
; Combination options:-
|
|
; U Sessions are separated per user
|
|
; B Sessions are separated by bits-per-pixel
|
|
; D Sessions are separated by initial display size
|
|
; I Sessions are separated by IP address
|
|
;
|
|
; The options U and B are always active, and cannot be de-selected.
|
|
;
|
|
; The "" in the text above are for readability. Do not include them in
|
|
; the string
|
|
Policy=Default
|
|
|
|
;; Startup wait time
|
|
; Milliseconds to wait to ensure the session has started
|
|
StartupWaitTime=1500
|
|
|
|
[Logging]
|
|
; Note: Log levels can be any of: core, error, warning, info, debug, or trace
|
|
LogFile=xrdp-sesman.log
|
|
LogLevel=INFO
|
|
EnableSyslog=true
|
|
#SyslogLevel=INFO
|
|
#EnableConsole=false
|
|
#ConsoleLevel=INFO
|
|
#EnableProcessId=false
|
|
|
|
[LoggingPerLogger]
|
|
; Note: per logger configuration is only used if xrdp is built with
|
|
; --enable-devel-logging
|
|
#sesman.c=INFO
|
|
#main()=INFO
|
|
|
|
;
|
|
; Session definitions - startup command-line parameters for each session type
|
|
;
|
|
|
|
[Xorg]
|
|
; Specify the path of non-suid Xorg executable. It might differ depending
|
|
; on your distribution and version. Find out the appropriate path for your
|
|
; environment. The typical path is known as follows:
|
|
;
|
|
; Fedora 26 or later : param=/usr/libexec/Xorg
|
|
; Debian 9 or later : param=/usr/lib/xorg/Xorg
|
|
; Ubuntu 16.04 or later : param=/usr/lib/xorg/Xorg
|
|
; Arch Linux : param=/usr/lib/Xorg
|
|
; CentOS 7 : param=/usr/bin/Xorg or param=Xorg
|
|
; CentOS 8 : param=/usr/libexec/Xorg
|
|
; FreeBSD (from 2022Q4) : param=/usr/local/libexec/Xorg
|
|
;
|
|
param=Xorg
|
|
; Leave the rest parameters as-is unless you understand what will happen.
|
|
param=-config
|
|
param=xrdp/xorg.conf
|
|
;param=xrdp/xorg_nvidia.conf
|
|
;param=xrdp/xorg_nvidia_grid.conf
|
|
param=-noreset
|
|
param=-nolisten
|
|
param=tcp
|
|
param=-logfile
|
|
param=.xorgxrdp.%s.log
|
|
|
|
[Xvnc]
|
|
param=Xvnc
|
|
param=-bs
|
|
param=-nolisten
|
|
param=tcp
|
|
param=-localhost
|
|
param=-dpi
|
|
param=96
|
|
|
|
[Chansrv]
|
|
; drive redirection
|
|
; See sesman.ini(5) for the format of this parameter
|
|
#FuseMountName=/run/user/%u/thinclient_drives
|
|
#FuseMountName=/media/thinclient_drives/%U/thinclient_drives
|
|
FuseMountName=thinclient_drives
|
|
#FuseMountNameColonCharReplacement=
|
|
; this value allows only the user to access their own mapped drives.
|
|
; Make this more permissive (e.g. 022) if required.
|
|
FileUmask=077
|
|
; Can be used to disable FUSE functionality - see sesman.ini(5)
|
|
#EnableFuseMount=false
|
|
; Can be used to enable direct I/O to FUSE open file calls. This is useful
|
|
; when open file handles need to immediately see changes made on the client
|
|
; side. There is a performance hit, so use with caution.
|
|
#FuseDirectIO=true
|
|
; Uncomment this line only if you are using GNOME 3 versions 3.29.92
|
|
; and up, and you wish to cut-paste files between Nautilus and Windows. Do
|
|
; not use this setting for GNOME 4, or other file managers
|
|
#UseNautilus3FlistFormat=true
|
|
; Uncomment this line if your file manager erroneously reports
|
|
; 'No free space' when trying to copy any files to remote drives.
|
|
#FuseRootReportMaxFree=true
|
|
; sound redirection
|
|
; workaround for Microsoft mstsc.exe to suppress noise.
|
|
; SoundNumSilentFramesAAC | SoundNumSilentFramesMP3 silent frames are sent before SNDC_CLOSE is sent.
|
|
; during SoundMsecDoNotSend mS after SNDC_CLOSE is sent, sound data is not send.
|
|
; depending on the environment, it might be necessary to increase values.
|
|
; Defaults: SoundNumSilentFramesAAC=4, SoundNumSilentFramesMP3=2, SoundMsecDoNotSend=1000
|
|
; If set to 0, this workaround is not applied.
|
|
#SoundNumSilentFramesAAC=4
|
|
#SoundNumSilentFramesMP3=2
|
|
#SoundMsecDoNotSend=1000
|
|
|
|
[ChansrvLogging]
|
|
; Note: one log file is created per display and the LogFile config value
|
|
; is ignored. The channel server log file names follow the naming convention:
|
|
; xrdp-chansrv.${DISPLAY}.log
|
|
;
|
|
; Note: Log levels can be any of: core, error, warning, info, debug, or trace
|
|
LogLevel=INFO
|
|
EnableSyslog=true
|
|
#SyslogLevel=INFO
|
|
#EnableConsole=false
|
|
#ConsoleLevel=INFO
|
|
#EnableProcessId=false
|
|
; Log file path
|
|
; Set this to move the log file away from its default location. You may want
|
|
; to do this for (e.g.) NFS-mounted home directories
|
|
; See sesman.ini(5) for the format of this parameter
|
|
#LogFilePath=/run/user/%u/xrdp
|
|
|
|
[ChansrvLoggingPerLogger]
|
|
; Note: per logger configuration is only used if xrdp is built with
|
|
; --enable-devel-logging
|
|
#chansrv.c=INFO
|
|
#main()=INFO
|
|
|
|
[SessionVariables]
|
|
PULSE_SCRIPT=@sesmansysconfdir@/pulse/default.pa
|
|
;XRDP_USE_ACCEL_ASSIST=1
|
|
;XRDP_NVIDIA_GRID=1
|