diff --git a/docs/admin-guide/configuration/desktop/xrdp.md b/docs/admin-guide/configuration/desktop/xrdp.md index 8d9f60e7..dcaa73ce 100644 --- a/docs/admin-guide/configuration/desktop/xrdp.md +++ b/docs/admin-guide/configuration/desktop/xrdp.md @@ -27,7 +27,7 @@ Often you may not want the user to keep their desktop sessions open forever, so xrdp::disconnected_session_timeout: 3600 ``` -If you want to allow the same user to be able to open in parallel a local and a remote session then you can enable the systemd nest feature: +If you want to allow the same user to be able to open in parallel a local and a remote session then you can enable the systemd nest feature. Note that this is a hack and goes against the systemd design and thus this can lead to unexpected problems. ``` xrdp::nest_systemd::enable: true @@ -49,3 +49,42 @@ Check with `loginctl` for such a session of given user and terminate it with loginctl kill-session $SESSION_NUMBER ``` After Gnome should start properly again. + + +# XRDP Overhaul (Alpha Stage) + +_At the moment you can access the new features within puppet with_ + +``` +puppet agent -t --environment xrdp_ng +``` +_and to really activate it for a maybe already running XRDP server with a reboot or `systemctl restart xrdp`._ + +The basic configuration in Hiera is: + +``` +xrdp::enable: true +``` +This allow to access the currently running desktop (primary screen only in multi-monitor setups) or, if none exists, creates automatically a virtual desktop. +Note that you should log out of the virtual desktop before logging in again on the physical desktop. +But it is fine to have multiple different users running own virtual desktops as long as they are different to the one useing the physical desktop. + + +Some more details could be ajusted when needed: + +To disallow access the physical desktop: +``` +xrdp::shared_physical_desktop::enable: false +``` + +whereas to disallow virtual desktop sessions there is + +``` +xrdp::virtual_desktop::enable: false +``` + +Maybe your use case wants that everyone who can log into the machine can automatically view the physical desktop (e.g. GAC user on machine console): + +``` +xrdp::shared_physical_desktop::owner_only: false +```