This shows you the differences between two versions of the page.
| Next revision | Previous revision | ||
| deb13:xrdp [2026/07/10 23:05] – created Bernard Condrau | deb13:xrdp [2026/07/11 22:49] (current) – [Windows 11 Client] Bernard Condrau | ||
|---|---|---|---|
| Line 1: | Line 1: | ||
| ====== XRDP ====== | ====== XRDP ====== | ||
| + | ===== Debian Host ===== | ||
| * Step 1: Install Xfce4 and xRDPFirst, open your terminal and install the desktop environment and xRDP packages (these examples use Debian/ | * Step 1: Install Xfce4 and xRDPFirst, open your terminal and install the desktop environment and xRDP packages (these examples use Debian/ | ||
| sudo apt install xfce4 xfce4-goodies xrdp -y</ | sudo apt install xfce4 xfce4-goodies xrdp -y</ | ||
| - | * Step 2: Configure the Desktop Session. You need to tell the xRDP server to load the Xfce desktop environment instead of the default Linux desktop. Set Xfce4 as the default for your active user by running:< | + | * Step 2: Configure the Desktop Session. You need to tell the xRDP server to load the Xfce desktop environment instead of the default Linux desktop. Set Xfce4 as the default for your active user, then make the file executable:< |
| - | * Make the file executable:< | + | chmod +x ~/ |
| - | * Step 3: Edit the xRDP Startup ScriptTo prevent session dropouts, update the global xRDP configuration file:Open the file with your preferred text editor | + | * Step 3: Edit the xRDP Startup ScriptTo prevent session dropouts, update the global xRDP configuration file:Open the file with your preferred text editor, |
| - | * Comment out the last two lines by adding a # at the beginning, so they look like this:< | + | # test -x / |
| - | # exec /bin/sh / | + | # exec /bin/sh / |
| - | * Add startxfce4 right before the last line of the file (usually exit 0), ensuring your file ends similarly to this:< | + | startxfce4 |
| exit 0</ | exit 0</ | ||
| + | * Step 4: Add the xRDP User to the SSL Cert Group. | ||
| + | * Step 5: Enable the Service:< | ||
| + | sudo ufw allow 3389</ | ||
| + | * Step 6: Restart the Service and open the Firewall. Restart the xRDP service to apply all configuration changes:< | ||
| + | sudo ufw allow 3389</ | ||
| + | * Step 7: You can now open the Remote Desktop Connection app on Windows or the Microsoft Remote Desktop app on Linux. Enter your Linux computer' | ||
| - | Use code with caution.Save and close the file (in nano, press Ctrl+O, Enter, then Ctrl+X).Step 4: Add the xRDP User to the SSL Cert GroupOn some systems (like newer Ubuntu versions), the xrdp user needs permission to read the SSL certificates, | + | ===== Windows 11 Client ===== |
| - | Use code with caution.Step 5: Restart | + | * Open the built-in //Remote Desktop Connection// |
| - | Use code with caution.If you are using a firewall | + | * Disable Persistent Bitmap Caching? |
| - | Use code with caution.Step 6: ConnectYou can now open the Remote Desktop Connection app on Windows or the Microsoft Remote Desktop app on macOS/Linux. Enter your Linux computer' | + | * Click //Show Options// at the bottom |
| + | * Switch | ||
| + | * Uncheck | ||
| + | * Log Out of the Local Machine. If you are logged into the physical Debian machine | ||
| + | * Create | ||
| + | ===== Self-signed certificates ===== | ||
| + | * If you get a //xrdp certificate mismatch// | ||
| - | | + | ==== Trust the Existing Self-Signed Certificate ==== |
| + | | ||
| + | * Click //View Certificate// | ||
| + | * Go to the Details tab and click //Copy to File//. | ||
| + | * Save the '' | ||
| + | * Double-click the saved .cer file, click //Install Certificate//, | ||
| + | |||
| + | ==== Hostname changed ==== | ||
| + | * If the hostname has changed you need to re-issue the self-signed | ||