Xrdp - 通過Windows的RDP連線Linux遠端桌面（Ubuntu/CentOS/Redhat 7）

2020-06-16 16:43:15

您多久存取一次Linux桌面？您使用什麼工具來存取遠端桌面？

Xrdp是一個開源工具，允許使用者通過Windows RDP存取Linux遠端桌面。除了Windows RDP之外，xrdp工具還接受來自其他RDP用戶端的連線，如FreeRDP，rdesktop和NeutrinoRDP。 Xrdp現在支援TLS安全層。

Xrdp要求

xrdp和xorgxrdp包
監聽3389/tcp。確保您的防火牆接受連線

在本文中，我將展示如何使用Xrdp工具從Windows機器遠端連線到Ubuntu桌面。

1）在Linux上安裝

在Ubuntu 18.04/Ubuntu 18.10上

首先，您需要在Ubuntu上安裝Xrdp

apt install xrdp

您必須設定polkit規則以避免在Windows上的xrdp登入螢幕上輸入使用者名稱和密碼後進行身份驗證彈出視窗

linuxidc@linuxidc:~$ sudo nano /etc/polkit-1/localauthority.conf.d/02-allow-colord.conf

polkit.addRule(function(action, subject) {
if ((action.id == “org.freedesktop.color-manager.create-device” || action.id == “org.freedesktop.color-manager.create-profile” || action.id == “org.freedesktop.color-manager.delete-device” || action.id == “org.freedesktop.color-manager.delete-profile” || action.id == “org.freedesktop.color-manager.modify-device” || action.id == “org.freedesktop.color-manager.modify-profile”) && subject.isInGroup(“{group}”))
{
return polkit.Result.YES;
}
});

重新啟動xrdp服務

linuxidc@linuxidc:~$ sudo systemctl restart xrdp

然後確保該服務正在執行

linuxidc@linuxidc:~$ systemctl status xrdp
● xrdp.service - xrdp daemon
Loaded: loaded (/lib/systemd/system/xrdp.service; enabled; vendor preset: ena
Active: active (running) since Mon 2018-10-29 21:16:31 CST; 2min 0s ago
Docs: man:xrdp(8)
man:xrdp.ini(5)
Process: 5543 ExecStop=/usr/sbin/xrdp $XRDP_OPTIONS --kill (code=exited, statu
Process: 5565 ExecStart=/usr/sbin/xrdp $XRDP_OPTIONS (code=exited, status=0/SU
Process: 5557 ExecStartPre=/bin/sh /usr/share/xrdp/socksetup (code=exited, sta
Main PID: 5566 (xrdp)
Tasks: 1 (limit: 2305)
Memory: 1.2M
CGroup: /system.slice/xrdp.service
└─5566 /usr/sbin/xrdp

現在確保在系統啟動時自動啟動服務

linuxidc@linuxidc:~$ systemctl enable xrdp
Synchronizing state of xrdp.service with SysV service script with /lib/systemd/systemd-sysv-install.
Executing: /lib/systemd/systemd-sysv-install enable xrdp
PolicyKit daemon disconnected from the bus.
We are no longer a registered authentication agent.
Failed to reload daemon: Message recipient disconnected from message bus without replying
PolicyKit daemon disconnected from the bus.
We are no longer a registered authentication agent.
Failed to reload daemon: Message recipient disconnected from message bus without replying
PolicyKit daemon disconnected from the bus.
We are no longer a registered authentication agent.
Failed to enable unit: Message recipient disconnected from message bus without replying

現在您需要檢查您的IP地址，因為您將需要它來進行連線

linuxidc@linuxidc:~$ ip add
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: ens33: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
link/ether 00:0c:29:e4:b3:cf brd ff:ff:ff:ff:ff:ff
inet 192.168.182.146/24 brd 192.168.182.255 scope global dynamic noprefixroute ens33
valid_lft 1116sec preferred_lft 1116sec
inet6 fe80::3f83:c7da:950a:e08/64 scope link noprefixroute
valid_lft forever preferred_lft forever

我的IP地址是192.168.182.146。所以請記住。

Xrdp使用埠3389，所以一定要開啟它。預設情況下禁用UFW，因此您需要啟用防火牆並為xrdp建立規則

linuxidc@linuxidc:~$ sudo ufw enable
[sudo] linuxidc 的密碼：
在系統啟動時啟用和啟用防火牆
linuxidc@linuxidc:~$ sudo ufw allow 3389/tcp
規則已新增
規則已新增 (v6)

如果這時候出現所說的Ubuntu安中裝的xrdp，桌面共用設定為允許，虛擬機器設定的是橋接，虛擬機器內外可以互相ping 通；
在Windows下用 mstsc 連線Ubuntu桌面，跳出賬號密碼頁面，登入後自動退出（閃退）的解決方法：

sudo apt-get install xfce4
echo xfce4-session > ~/.xsession
touch .session
sudo vim /etc/xrdp/startwm.sh
在. /etc/X11/Xsession前面加
xfce4-session

然後重新啟動 sudo service xrdp restart。

現在，您可以在Windows端繼續設定。

在CentOS/RedHat 7上

確保之前安裝了Epel儲存庫

# rpm -Uvh https://dl.Fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm

現在安裝xrdp包

# yum update && yum -y install xrdp tigervnc-server

在防火牆中新增規則。 CentOS/RedHat不是ufw，而是firewalld來設定

[root@localhost ~]# firewall-cmd --permanent --zone=public --add-port=3389/tcp
success

然後重新載入防火牆
[root@localhost ~]# firewall-cmd --reload
success

現在啟用並重新啟動xrdp服務
[root@localhost ~]# systemctl enable xrdp && systemctl restart xrdp
Created symlink from /etc/systemd/system/multi-user.target.wants/xrdp.service to /usr/lib/systemd/system/xrdp.service.

檢查您的IP地址以獲取Windows上的遠端連線

[root@localhost ~]# ip add
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: ens33: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
link/ether 00:0c:29:93:77:6f brd ff:ff:ff:ff:ff:ff
inet 192.168.182.148/24 brd 192.168.182.255 scope global noprefixroute dynamic ens33
valid_lft 1285sec preferred_lft 1285sec
inet6 fe80::72bf:712e:7c0b:ca6d/64 scope link noprefixroute
valid_lft forever preferred_lft forever
3: virbr0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default qlen 1000
link/ether 52:54:00:02:67:f9 brd ff:ff:ff:ff:ff:ff
inet 192.168.122.1/24 brd 192.168.122.255 scope global virbr0
valid_lft forever preferred_lft forever
4: virbr0-nic: <BROADCAST,MULTICAST> mtu 1500 qdisc pfifo_fast master virbr0 state DOWN group default qlen 1000
link/ether 52:54:00:02:67:f9 brd ff:ff:ff:ff:ff:ff