Document new XRDP

docs/admin-guide/configuration/desktop/xrdp.md

@@ -27,7 +27,7 @@ Often you may not want the user to keep their desktop sessions open forever, so
 xrdp::disconnected_session_timeout: 3600
 ```
 
-If you want to allow the same user to be able to open in parallel a local and a remote session then you can enable the systemd nest feature:
+If you want to allow the same user to be able to open in parallel a local and a remote session then you can enable the systemd nest feature. Note that this is a hack and goes against the systemd design and thus this can lead to unexpected problems.
 
 ```
 xrdp::nest_systemd::enable: true
@@ -49,3 +49,42 @@ Check with `loginctl` for such a session of given user and terminate it with
 loginctl kill-session $SESSION_NUMBER
 ```
 After Gnome should start properly again.
+
+
+# XRDP Overhaul (Alpha Stage)
+
+_At the moment you can access the new features within puppet with_
+
+```
+puppet agent -t --environment xrdp_ng
+```
+_and to really activate it for a maybe already running XRDP server with a reboot or `systemctl restart xrdp`._
+
+The basic configuration in Hiera is:
+
+```
+xrdp::enable: true
+```
+This allow to access the currently running desktop (primary screen only in multi-monitor setups) or, if none exists, creates automatically a virtual desktop. 
+Note that you should log out of the virtual desktop before logging in again on the physical desktop.
+But it is fine to have multiple different users running own virtual desktops as long as they are different to the one useing the physical desktop.
+
+
+Some more details could be ajusted when needed:
+
+To disallow access the physical desktop:
+```
+xrdp::shared_physical_desktop::enable: false
+```
+
+whereas to disallow virtual desktop sessions there is
+
+```
+xrdp::virtual_desktop::enable: false
+```
+
+Maybe your use case wants that everyone who can log into the machine can automatically view the physical desktop (e.g. GAC user on machine console):
+
+```
+xrdp::shared_physical_desktop::owner_only: false
+```