Wiki source code of Remote Desktop Zugang

Last modified by Aysegül Omus on 2026/05/13 16:57
Show last authors
1 {{toc/}}
2
3 You can access the BlackBox Workplace via xrdp and the Remote Desktop Protocols (RDP).
4
5 You just need an RDP client. Those are available for all usual operating systems. You can find a list below.
6
7 The client needs to be late enough to support certificate-based authentication and modern cipher suites. (##ciphers AES+aRSA:AES+aECDH:AES+aECDSA##)
8
9 Because of this, an SSH tunnel is not further needed.
10
11 = Access Server =
12
13 You can access the informatics workplace, as it is accessible in the RechnerHallen, via
14
15 {{code}}
16
17 lxhalle.cit.tum.de</blockquote>
18 {{/code}}
19
20 To access the mathematics workplace, as it is available on the BlackBox systems, is accessible via
21
22 {{code}}
23 ssh.ma.tum.de
24 {{/code}}
25
26 == Fingerprints ==
27
28 Depending on your client, a visible certificate check is possible.
29
30 |=Zugangsserver|=Fingerprint
31 |lxhalle.in.tum.de|{{code language="none"}}4c:ee:c1:05:58:96:8f:8c:66:e6:42:5e:1a:b7:95:d2:c1:88:63:98{{/code}}
32 |ssh.ma.tum.de|{{code language="none"}}80:79:07:56:2f:c6:0b:67:a0:62:a6:f5:93:a8:5f:ac:09:3e:2a:93{{/code}}
33
34 = Session =
35
36 After verifying the server, you must provide your username and password to establish a session with your account.
37
38 This can either happen after connecting or, if your client asks for it, before then.
39
40 == Session restore ==
41
42 A session can be held alive even if you aren't connected.
43
44 To achieve this, use the xrdp-dis command or just close the window. Please do not try to log out through the menu (sometimes it's just a matter of closing it).
45
46 When you reconnect to your session, it will be revived. This can happen on a completely different computer, and the resolution of the connection window will also be adjusted accordingly.
47
48 = Executing applications multiple times =
49
50 You can run software multiple times, such as in different RDP sessions or when you are logged into your account and have an RDP session open. Be aware that not all applications support this. If you receive a notification that your application is already open, you need to close it in the other user session so you can reopen it in the desired session.
51
52 == Know problematic software ==
53
54 * Firefox
55 * Thunderbird
56 * Chromium
57 * Vivaldi
58 * LibreOffice
59
60 Those - and other - applications warn you if you want to open them multiple times as the same user. These warnings can be correct(if you have multiple sessions open) but can also be the result of an incomplete shutdown of the program. Some software also offers to clean up the program folders so the program can be started again.
61
62 Care: This can result in severe data loss if the application is running!!
63
64 For Firefox and Thunderbird, you can execute the scripts. Those who clean up the locks that prohibit them from running multiple times.
65
66 = Troubleshooting =
67
68 == thinclinet_drives ==
69
70 Occasionally, the File Manager can show an error message when you try to find the home directory: {{code language="none"}}Failed to open directory ... thinclient_drives: Transport endpoint is not connected{{/code}}
71
72 This could happen when you have connected and disconnected the XRDp Server too often and do not release the directory thinclient_drives correctly. This Error could be fixed by giving the following command in the terminal:
73
74 {{code}}
75 $ fusermount -u ~/thinclient_drives
76 {{/code}}
77
78 The directory thinclient_drives will be used as a file- and clipboard share with the local computer (which is supported by the RDP client).
79
80 The directory thinclient_drives also needs to be accessible to everyone, so execution rights need to be granted to unmount it. Please note this when the home directory is protected. This could be why the error message first occurred.
81
82 == Immediately log out of the application ==
83
84 If your application terminates immediately despite the correct password, you can log in to the remote desktop Server via SSH and manually terminate the Session with killall Xorg.
85
86 {{code}}
87 $ ssh <Remote Desktop Server>
88
89 ---
90
91 <remote Desktop Server>$ killall Xorg
92 {{/code}}
93
94 = Safety measures =
95
96 The RDP server authenticates itself to the client using a certificate.
97
98 {{html wiki="true"}}
99 <span class='WYSIWYG_COLOR ' style='color:Red'>Care:</span>
100 {{/html}}
101
102 Notifications about an errand certificate should never be ignored. Check the fingerprint (look above)!
103
104 For access only, TLSv1.1 and TLSv1.2 with the following ciphers are allowed:
105
106 {{code language="none"}}
107 openssl ciphers AES+aRSA:AES+aECDH:AES+aECDSA
108 {{/code}}
109
110 Be sure the version of your RDP client supports those.
111
112 = RDP Clients =
113
114 == macOS ==
115
116 [[Microsoft Remote Desktop>>https://apps.apple.com/de/app/microsoft-remote-desktop/id1295203466?l=en&mt=12]]
117
118 Version 10 doesn't show fonts in the login window. Not further problematic since it does need your account data in the config. The login window only shows if your data is wrong. You can also use the login without fonts. No other problems are known.
119
120 == Linux ==
121
122 [[KRDC>>http://www.kde.org/applications/internet/krdc/]]
123
124 * [[Vinagre>>https://wiki.gnome.org/Apps/Vinagre/]]
125 * [[Remmina>>https://www.remmina.org/]] (Installed on the BlackBox)
126 * For best performance, configure RemoteFX (32 bpp) as the color depth.
127
128 == Windows ==
129
130 The RDP client is preinstalled on Windows. Just search for **Remote Desktop connection** or **Remote Desktop Verbindung**