Chapter 14. Server Configuration
Terminate after s seconds of user inactivity. Note: Never use a value smaller than 60.
In addition to the options above which control the lifetime of the ThinLinc session, the option
-IdleTimeout can be used to configure how long an idle session should remain connected. The
-IdleTimeout option takes a number of seconds as an argument, and can be added to the parameter
/vsmagent/xserver_args as per the options described above.
Note: Setting -IdleTimeout s will simply disconnect the client from the session after s seconds; it
will not terminate the ThinLinc session itself.
14.6. Restricting SSH Daemon Port Forwarding
ThinLinc requires that the SSH daemon allows the user to create a forwarded TCP connection to Xvnc
process, in order to be able to connect to the session. The default configuration of the SSH daemon is
typically to allow forwarding to any destination. If you are using the OpenSSH server, version 4.5 or
later, it is possible to use a more restricted configuration. To activate this, add the lines below to
/etc/ssh/sshd_config:
PermitOpen 127.0.0.1:22
# @thinlinc-begin@
Note: The first line essentially turns off TCP forwarding. The "none" option can also be used if you
are using OpenSSH 6.1 or later.
In this case, ThinLinc will automatically add "PermitOpen" lines between this marker and the end
marker:
# @thinlinc-end@
Please note that this feature only works with an OpenSSH (or compatible) daemon. Additionally, if
shadowing should be allowed this must be manually specified. For example, to exclude root from port
forwarding restrictions and allow shadowing, add this to the configuration:
Match User root
PermitOpen any
167
Komentarze do niniejszej Instrukcji