Linux - SoftwareThis forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.
Notices
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here.
Having a problem logging in? Please visit this page to clear all LQ-related cookies.
Get a virtual cloud desktop with the Linux distro that you want in less than five minutes with Shells! With over 10 pre-installed distros to choose from, the worry-free installation life is here! Whether you are a digital nomad or just looking for flexibility, Shells can put your Linux machine on the device that you want to use.
Exclusive for LQ members, get up to 45% off per month. Click here for more info.
I'm unable to fully connect to my new Debian 9 machine (which is running XRDP) using Windows Remote Desktop. As I want to use this machine as a host for virtual machines and run it without display, keyboard or a mouse, I really need the remote desktop facility.
I installed xrdp with:
# apt-get install xrdp
then rebooted the machine. When I try to connect from my Windows 7 laptop using Windows Remote Desktop, I get the following "Connection Log":
connecting to sesman ip 127.0.0.1 port 3350
sesman connect ok
sending login info to session manager, please wait...
login successful for display 10
started connecting
connection problem, giving up
some problem
On the Debian 9 machine, /var/log/xrdp-sesman.log contains the following:
[20180208-18:37:13] [DEBUG] libscp initialized
[20180208-18:37:13] [INFO ] starting xrdp-sesman with pid 1064
[20180208-18:37:13] [INFO ] listening to port 3350 on 127.0.0.1
[20180208-18:38:57] [INFO ] A connection received from ::1 port 34726
[20180208-18:38:58] [INFO ] ++ created session (access granted): username xxxxxxxx, ip 0.0.0.0:51052 - socket: 12
[20180208-18:38:58] [INFO ] starting Xorg session...
[20180208-18:38:58] [DEBUG] Closed socket 9 (AF_INET6 :: port 5910)
[20180208-18:38:58] [DEBUG] Closed socket 9 (AF_INET6 :: port 6010)
[20180208-18:38:58] [DEBUG] Closed socket 9 (AF_INET6 :: port 6210)
[20180208-18:38:58] [DEBUG] Closed socket 8 (AF_INET6 ::1 port 3350)
[20180208-18:38:58] [DEBUG] Closed socket 7 (AF_INET6 ::1 port 3350)
[20180208-18:38:58] [INFO ] Xorg :10 -auth .Xauthority -config xrdp/xorg.conf -noreset -nolisten tcp
[20180208-18:39:08] [ERROR] X server for display 10 startup timeout
[20180208-18:39:08] [INFO ] starting xrdp-sessvc - xpid=1082 - wmpid=1081
[20180208-18:39:08] [ERROR] X server for display 10 startup timeout
[20180208-18:39:08] [ERROR] another Xserver might already be active on display 10 - see log
[20180208-18:39:08] [DEBUG] aborting connection...
[20180208-18:39:08] [INFO ] ++ terminated session: username xxxxxxxx, display :10.0, session_pid 1080, ip 0.0.0.0:51052 - socket: 12
It looks to me as though XRDP is trying to use display 10 twice?
FWIW, I can connect to the Debian machine via SSH without issues.
The Debian machine is a Gigabyte GB-BXBT-2807 with 4GB RAM and a 120GB SSD drive and is running Debian 9 64-bit.
Have you tried creating a file /etc/X11/Xwrapper.config containing
Code:
allowed_users = anybody
Many thanks -- much appreciated.
/etc/X11/Xwrapper.config contained the line "allowed_users = console". I changed the value to "anybody" and can now connect. However, I now get asked to authenticate to "create a color profile" and also to "create a color managed device". If I enter my password, I get another round of these authentication dialogs and then the session terminates. Clicking "Cancel" for both dialogs allows the session to continue and I get the same UI as I do when logged on at the physical console. I'll do some research to see if I can turn off those dialogs. In the meantime, I'd welcome any hints!
Update: turns out this is a known bug in Gnome 3 (at least in some versions of Fedora). Clicking Cancel in the color management dialogs allows the session to continue and so is a viable workaround.
Thanks again, Geoff
Last edited by Geoff_L; 02-09-2018 at 04:59 AM.
Reason: Provide update on secondary issue
Have you tried creating a file /etc/X11/Xwrapper.config containing
Code:
allowed_users = anybody
Hello.
Why is xrdp necessary to make the X server launch accessible to everyone? Is it possible to configure the xrdp service without allowing everyone to start X server ?
By default Xorg.wrap will only allow executing the real X server from login sessions on a physical console.
...
allowed_users = rootonly|console|anybody
Specify which users may start the X server through the wrapper. Use rootonly to only allow root, use console to only allow users logged into a physical console, and use anybody to allow anybody. The default is console.
Who can access xrdp can be controlled by settings in etc/xrdp/sesman.ini
Quote:
[Security]
AllowRootLogin=false
MaxLoginRetry=4
TerminalServerUsers=tsusers
TerminalServerAdmins=tsadmins
; When AlwaysGroupCheck=false access will be permitted
; if the group TerminalServerUsers is not defined.
AlwaysGroupCheck=false
So you can assign allowed users to a group (tsusers) and then set AlwaysGroupCheck=true.
LinuxQuestions.org is looking for people interested in writing
Editorials, Articles, Reviews, and more. If you'd like to contribute
content, let us know.