Changes for page Remote Desktop Zugang

Last modified by Aysegül Omus on 2024/05/14 12:33

From version 1.1

edited by wikibot
on 2023/02/06 10:17

Change comment: Imported from foswiki

To version 5.1

edited by Aysegül Omus
on 2024/05/14 12:33

Change comment: There is no comment for this version

Raw
Rendered

Summary

Page properties (3 modified, 0 added, 0 removed)

Details

Page properties

Title

@@ -1,1 +1,1 @@
--RemoteDesktop
++Remote Desktop Access

Author

@@ -1,1 +1,1 @@
--XWiki.wikibot
++XWiki.kahraman

Content

@@ -1,144 +1,130 @@
--= Remote Desktop Access =
++{{toc/}}
  You can access the BlackBox Workplace via xrdp and the Remote Desktop Protocols (RDP).
--You just need a RDP client. Those are available for all usuall operating systems. You can find a list down below.
++You just need a RDP client. Those are available for all usual operating systems. You can find a list down below.
--The client needs to be late enough to support certificate based authentification and modern cypher suites. (##ciphers AES+aRSA:AES+aECDH:AES+aECDSA##)
++The client needs to be late enough to support certificate-based authentification and modern cipher suites. (##ciphers AES+aRSA:AES+aECDH:AES+aECDSA##)
--Because of this a ssh tunel is not further needed.
--== Access Server ==
++Because of this a ssh tunnel is not further needed.
++= Access Server =
++
  You can access the informatic workplace, as it is accessible in the RechnerHallen, via
++{{code}}
--{{html wiki="true"}}
--<blockquote>
--
  lxhalle.in.tum.de</blockquote>
--{{/html}}
++{{/code}}
--
--
  To access the mathematics workplace, as it is available on the BlackBox systems, is accessible via
++{{code}}
++ssh.ma.tum.de
++{{/code}}
--{{html wiki="true"}}
--<blockquote>
++== Fingerprints ==
--ssh.ma.tum.de</blockquote>
--{{/html}}
--
--
--=== Fingerprints ===
--
  Depending on your client a visible certificate check is possible.
++|=Zugangsserver|=Fingerprint
++|lxhalle.in.tum.de|{{code language="none"}}4c:ee:c1:05:58:96:8f:8c:66:e6:42:5e:1a:b7:95:d2:c1:88:63:98{{/code}}
++|ssh.ma.tum.de|{{code language="none"}}80:79:07:56:2f:c6:0b:67:a0:62:a6:f5:93:a8:5f:ac:09:3e:2a:93{{/code}}
++= Session =
--{{html wiki="true"}}
--<table rules='none'> <thead> <tr><th>[[Zugangsserver>>https://xwiki.rbg.tum.de/bin/view/Informatik/Benutzerwiki/RemoteDesktop?sortcol=0;table=1;up=0#sorted_table]]</th><th>[[Fingerprint>>https://xwiki.rbg.tum.de/bin/view/Informatik/Benutzerwiki/RemoteDesktop?sortcol=1;table=1;up=0#sorted_table]]</th></tr> </thead> <tbody> <tr> <td>lxhalle.in.tum.de</td> <td> ##4c:ee:c1:05:58:96:8f:8c:66:e6:42:5e:1a:b7:95:d2:c1:88:63:98##</td></tr> <tr> <td>ssh.ma.tum.de</td> <td>
++After verification of the server, you have to provide your username and password to establish a session with your account.
--##80:79:07:56:2f:c6:0b:67:a0:62:a6:f5:93:a8:5f:ac:09:3e:2a:93##</td></tr></tbody></table>
--{{/html}}
++This can either happen after connecting or if your client asks for it before that.
++== Session restore ==
--== Session ==
++A session can be held alive even if you aren't connected.
--After verification of the server you have to provide your username and password to establish a session with you account.
++To achieve this use the xrdp-dis command or just close the window, please do not try to log out through menu {{html wiki="true"}}<span                  > Apllication -> logout</span>{{/html}} (Sometimes it's just closing it).
--This can either happen after connecting or your client ask for before that.
--=== Session restore ===
++When you reconnect to your session it will be revived. This can happen from a completely different computer and also the resolution of the connection window will be adjusted.
--A session can be hold alive even if you aren't connected.
++= Executing applications multiple times =
--To achieve this use the xrdp-dis command or just close the window, please do not try to log out through menu {{html wiki="true"}}
--<span                  > Apllication -> logout</span>
--{{/html}} (Sometimes it's just closing it).
++You can execute software multiple times, like in different rdp sessions or if you are logged into your account directly and have a rdp session open. Be aware that not all applications support this. If you receive a notification that your application is already open you need to close it in the other user session so you can reopen it in the wanted session.
--When you reconnect to your session it will be revived. This can happen from a completly different computer and also the resolution of the connection window will be adjusted.
--== Executing applications multiple times ==
++== Know problematic software ==
--You can execute software multiple times, like in different rdp session or if you are logged into your account directly and have a rdp session open. Be aware that not all applications support this. If you receive a notification that your application is already open you need to close it in the other user session so you can reopen it in the wanted session.
--=== Know problematic software ===
  * Firefox
  * Thunderbird
  * Chromium
  * Vivaldi
--* !LibreOffice
--Those - and other - applications warn you if you want to open them multiple times as the same user. This warnings can be correct(if you have multiple sessions open) but can also be the result of a incomplete shutdown of the program. Some software also offers to clean up the program folders so the program can be started again.
++* LibreOffice
--Care: This can result to severe loss of data if the application is actually running!!
++Those - and other - applications warn you if you want to open them multiple times as the same user. These warnings can be correct(if you have multiple sessions open) but can also be the result of a incomplete shutdown of the program. Some software also offers to clean up the program folders so the program can be started again.
--For Firefox and Thunderbird you can execute the scripts //repair//firefox.sh// and //repair//thunderbrid.sh.// Those clean up the locks that prohibit these to run multiple times.
++Care: This can result to severe loss of data if the application is running!!
--== Troubleshooting ==
++For Firefox and Thunderbird you can execute the scripts {{code}}repair_firefox.sh{{/code}} and {{code}}repair_thunderbrid.sh{{/code}}. Those clean up the locks that prohibit these to run multiple times.
--=== thinclinet_drives ===
++= Troubleshooting =
--Occasionally the Filemanager can show an error message when you try to find the home directory: Failed to open directory ... thinclient_drives: <>Transport endpoint is not connected<>
++== thinclinet_drives ==
--This could happen when you have connected and disconnted the xrdp Server too often and does not release the directory thinclient_drives correctly. This Error could be fixed by giving the following command in the terminal:
++Occasionally the Filemanager can show an error message when you try to find the home directory: {{code language="none"}}Failed to open directory ... thinclient_drives: Transport endpoint is not connected{{/code}}
--{{{
++This could happen when you have connected and disconnected the xrdp Server too often and do not release the directory thinclient_drives correctly. This Error could be fixed by giving the following command in the terminal:
--
++{{code}}
  $ fusermount -u ~/thinclient_drives
++{{/code}}
++The directory thinclient_drives will be used as File- and clipboard share with the local computer (which is supported by the rdp client).
--}}}
++The directory thinclient_drives also needs to be accessible for everyone, which means execution rights have to be given to unmount this. Please note this, when the home directory is protected. This could be the reason that the error message first occurred.
--The directory thinclient_drives will be used as File- and clipboardshare with the local computer (which is supported by the rdp client).
++== immediately Log out from the application ==
--The directory thinclient_drives also need to be acceseable for everyone, which means execution right has to be given in order to unmount this. Please note this, when the home directory is protected. This could be the reason that the error message first occurred.
++If your application terminates immediately despite the correct password, you can log in to the remote desktop Server via ssh and the Session with killall Xorg manually terminate.
--=== immediately Log out from the application ===
--
--If your application terminate immediately in spite of the correct password, you can log in to the remote desktop Server via ssh and the Sesion with killall Xorg manual terminate.
--
--{{{
--
--
++{{code}}
  $ ssh <Remote Desktop Server>
  ---
  <remote Desktop Server>$ killall Xorg
++{{/code}}
++= Safety measures =
--}}}
++The RDP server authenticates itself by certificate to the client.
--== Safety measures ==
--
--The RDP server authentificates itself by certificate to the client.
--
  {{html wiki="true"}}
  <span class='WYSIWYG_COLOR          ' style='color:Red'>Care:</span>
  {{/html}}
  Notifications about an errand certificate should never be ignored. Check the fingerprint (look above)!
--</span>
--For access only TLSv1.1 and TLSv1.2 with following ciphers are allowed:
++For access only TLSv1.1 and TLSv1.2 with the following ciphers are allowed:
--##openssl ciphers AES+aRSA:AES+aECDH:AES+aECDSA##
++{{code language="none"}}
++openssl ciphers AES+aRSA:AES+aECDH:AES+aECDSA
++{{/code}}
  Be sure the version of your RDP client support those.
--== RDP Clients ==
++= RDP Clients =
--=== macOS ===
++== macOS ==
-- [[Microsoft Remote Desktop>>https://apps.apple.com/de/app/microsoft-remote-desktop/id1295203466?l=en&mt=12]]
--** Version 10 doesn't show fonts in the login window. Not further problematic since it does need your account data in the config. The login window just gets shown if your data is wrong. You can also use the login without fonts. No other problems known.
++[[Microsoft Remote Desktop>>https://apps.apple.com/de/app/microsoft-remote-desktop/id1295203466?l=en&mt=12]]
--=== Linux ===
++ Version 10 doesn't show fonts in the login window. Not further problematic since it does need your account data in the config. The login window just gets shown if your data is wrong. You can also use the login without fonts. No other problems are known.
-- [[KRDC>>http://www.kde.org/applications/internet/krdc/]]
++== Linux ==
++
++[[KRDC>>http://www.kde.org/applications/internet/krdc/]]
++
  * [[Vinagre>>https://wiki.gnome.org/Apps/Vinagre/]]
  * [[Remmina>>https://www.remmina.org/]] (Installed on the BlackBox)
--** For best performance configure ##RemoteFX (32 bpp)## as Color depth.
++* For best performance configure ##RemoteFX (32 bpp)## as Color depth.
--=== Windows ===
++== Windows ==
  The RDP client is preinstalled on Windows. Just search for **Remotedesktop connection** or **Remotedesktopverbindung**

Changes for page Remote Desktop Zugang

Summary

Details

Navigation