<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Configure Linux To Accept Remote Desktop Connections Over SSH</title>
	<atom:link href="http://www.question-defense.com/2011/10/28/configure-linux-to-accept-remote-desktop-connections-over-ssh/feed" rel="self" type="application/rss+xml" />
	<link>http://www.question-defense.com/2011/10/28/configure-linux-to-accept-remote-desktop-connections-over-ssh</link>
	<description>Technical answers for technical questions</description>
	<lastBuildDate>Fri, 24 May 2013 00:33:05 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
		<item>
		<title>By: alex</title>
		<link>http://www.question-defense.com/2011/10/28/configure-linux-to-accept-remote-desktop-connections-over-ssh#comment-18226</link>
		<dc:creator>alex</dc:creator>
		<pubDate>Mon, 23 Apr 2012 08:30:26 +0000</pubDate>
		<guid isPermaLink="false">http://www.question-defense.com/?p=8735#comment-18226</guid>
		<description><![CDATA[Hello Stygian,

Thanks for taking the time to leave such detailed feedback. Definitely some useful information above. 

Thanks.
alex]]></description>
		<content:encoded><![CDATA[<p>Hello Stygian,</p>
<p>Thanks for taking the time to leave such detailed feedback. Definitely some useful information above. </p>
<p>Thanks.<br />
alex</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: alex</title>
		<link>http://www.question-defense.com/2011/10/28/configure-linux-to-accept-remote-desktop-connections-over-ssh#comment-17310</link>
		<dc:creator>alex</dc:creator>
		<pubDate>Mon, 09 Apr 2012 02:51:08 +0000</pubDate>
		<guid isPermaLink="false">http://www.question-defense.com/?p=8735#comment-17310</guid>
		<description><![CDATA[Hello Smith,

Thanks for taking the time to post feedback.

Thanks.
alex]]></description>
		<content:encoded><![CDATA[<p>Hello Smith,</p>
<p>Thanks for taking the time to post feedback.</p>
<p>Thanks.<br />
alex</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Smith</title>
		<link>http://www.question-defense.com/2011/10/28/configure-linux-to-accept-remote-desktop-connections-over-ssh#comment-17053</link>
		<dc:creator>Smith</dc:creator>
		<pubDate>Thu, 15 Mar 2012 17:46:53 +0000</pubDate>
		<guid isPermaLink="false">http://www.question-defense.com/?p=8735#comment-17053</guid>
		<description><![CDATA[I did follow up the steps but my VPS showed that there are no such repositories :( what to do now ?

I searched more on Google and found this. I have two VPS. One is a fresh VPS and on other I have websites.

I did what is written here: URL --&gt; l337fx.com/installing-remote-desktop-rdp-centos-vps.html and it was successful. But I wanna know if I can do it on the VPS which I have websites.]]></description>
		<content:encoded><![CDATA[<p>I did follow up the steps but my VPS showed that there are no such repositories :( what to do now ?</p>
<p>I searched more on Google and found this. I have two VPS. One is a fresh VPS and on other I have websites.</p>
<p>I did what is written here: URL &#8211;> l337fx.com/installing-remote-desktop-rdp-centos-vps.html and it was successful. But I wanna know if I can do it on the VPS which I have websites.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Stygian</title>
		<link>http://www.question-defense.com/2011/10/28/configure-linux-to-accept-remote-desktop-connections-over-ssh#comment-16822</link>
		<dc:creator>Stygian</dc:creator>
		<pubDate>Fri, 13 Jan 2012 15:38:23 +0000</pubDate>
		<guid isPermaLink="false">http://www.question-defense.com/?p=8735#comment-16822</guid>
		<description><![CDATA[I&#039;ve worked with XRDP extensively, and that said, a few of your steps are unnecessary.

1st.  The RDP protocol, and XRDP as well, support built in encryption.  Hence the line &quot;crypt_level=high&quot; in the file xrdp.ini.  This makes using an SSH tunnel kind of redundant in all but the most extreme cases.  

2nd.  While there&#039;s nothing wrong with using TigerVNC, or even TightVNC, I&#039;ve found that the best method is to setup RealVNC, chained against xinetd &amp; gdm to create an LTSP-like terminal server as the base for which XRDP is configured to talk to.  The method I devised on my own network basically had XRDP running from a single installation that was configured as a menu-based gateway, so that when you connect to the server, it would give a list of all of the servers behind my firewall.  Each server then has security according to it&#039;s OS.  All of my systems (windows server &amp; Linux server included) use Active Directory authentication, so it was trivial to setup a VNC password on top of the windows Servers where a session could actually be connected back into without logging out and back in, while with my Linux servers that step was unnecessary because any drop in the connection resets the socket and ends the session, forcing all new connections to authenticate via GDM to Active Directory.  

Now, I haven&#039;t posted this to criticize.  Not at all.  I&#039;m simply hoping my own research will benefit others.  My web server is down at the moment, where I normally would have this procedure documented.  That server will be returning soon, but a lot of what I&#039;ve done is based on the following article: oapeon.blogspot.com/2010/05/ubuntu-1004-vnc-based-login-server.html . 

While Ubuntu was used in the example in the article, as well as my lab environment, I&#039;ve repeated this design at my work, where we have a mixture of Ubuntu, Red Hat, SuSE, and several others.  It can be a bit tricky until you know the differences in configuration from one platform to the next, but overall it&#039;s pretty similar, and once it&#039;s together, it&#039;s solid ... over all.  On the XRDP-gateway at work, I&#039;ve set up a cron job to restart all 3 services that make up the gateway, daily at 1:00am.  This ensures that the server has no dead sockets when you go to connect.  

Anyway, I hope this was (or is) helpful.  :)]]></description>
		<content:encoded><![CDATA[<p>I&#8217;ve worked with XRDP extensively, and that said, a few of your steps are unnecessary.</p>
<p>1st.  The RDP protocol, and XRDP as well, support built in encryption.  Hence the line &#8220;crypt_level=high&#8221; in the file xrdp.ini.  This makes using an SSH tunnel kind of redundant in all but the most extreme cases.  </p>
<p>2nd.  While there&#8217;s nothing wrong with using TigerVNC, or even TightVNC, I&#8217;ve found that the best method is to setup RealVNC, chained against xinetd &amp; gdm to create an LTSP-like terminal server as the base for which XRDP is configured to talk to.  The method I devised on my own network basically had XRDP running from a single installation that was configured as a menu-based gateway, so that when you connect to the server, it would give a list of all of the servers behind my firewall.  Each server then has security according to it&#8217;s OS.  All of my systems (windows server &amp; Linux server included) use Active Directory authentication, so it was trivial to setup a VNC password on top of the windows Servers where a session could actually be connected back into without logging out and back in, while with my Linux servers that step was unnecessary because any drop in the connection resets the socket and ends the session, forcing all new connections to authenticate via GDM to Active Directory.  </p>
<p>Now, I haven&#8217;t posted this to criticize.  Not at all.  I&#8217;m simply hoping my own research will benefit others.  My web server is down at the moment, where I normally would have this procedure documented.  That server will be returning soon, but a lot of what I&#8217;ve done is based on the following article: oapeon.blogspot.com/2010/05/ubuntu-1004-vnc-based-login-server.html . </p>
<p>While Ubuntu was used in the example in the article, as well as my lab environment, I&#8217;ve repeated this design at my work, where we have a mixture of Ubuntu, Red Hat, SuSE, and several others.  It can be a bit tricky until you know the differences in configuration from one platform to the next, but overall it&#8217;s pretty similar, and once it&#8217;s together, it&#8217;s solid &#8230; over all.  On the XRDP-gateway at work, I&#8217;ve set up a cron job to restart all 3 services that make up the gateway, daily at 1:00am.  This ensures that the server has no dead sockets when you go to connect.  </p>
<p>Anyway, I hope this was (or is) helpful.  :)</p>
]]></content:encoded>
	</item>
</channel>
</rss>
