#xrdp

Introduction

Remote access to systems has become an essential part of today’s tech environment. Whether for system administration, remote support, or accessing files on a home server, having reliable remote desktop access is crucial. For Ubuntu users, one of the most efficient ways to achieve this is by Installing XRDP on Ubuntu.

XRDP is an open-source server that allows Linux users to access their systems via the Remote Desktop Protocol (RDP), which is widely supported by Windows and other operating systems. With XRDP, you can log into your Ubuntu machine’s graphical desktop environment from virtually any other device.

This comprehensive guide will cover what XRDP is, why it’s useful, how to install and configure it on Ubuntu, and how to ensure it runs securely and efficiently.

What is XRDP?

XRDP is a free and open-source implementation of the Microsoft RDP server for Unix-like systems, including Linux. It bridges the gap between Linux and RDP, allowing remote access to the Linux desktop using Microsoft’s native Remote Desktop client.

This means if you're using a Windows PC and want to remotely control your Ubuntu machine, you can use the built-in “Remote Desktop Connection” tool to log in and interact with your Linux desktop. That’s the power of XRDP.

Why Use XRDP on Ubuntu?

Using XRDP on Ubuntu brings multiple benefits:

Cross-Platform Access: XRDP allows users to connect from Windows, macOS, or another Linux system.

No Extra Clients Needed: Windows has a built-in RDP client, which makes it easy to connect without installing third-party software.

Multiple Desktop Environments: XRDP supports lightweight desktops like Xfce, MATE, and more, ensuring fast and smooth sessions.

User-Friendly: Graphical desktop access makes tasks easier for those less comfortable with the command line.

Open Source & Free: No licensing costs or vendor lock-in—just a reliable tool supported by the community.

Preparing to Install XRDP on Ubuntu

Before Installing XRDP on Ubuntu, make sure:

Your system is updated.

You have sudo access.

The firewall allows traffic on port 3389 (the default RDP port).

You have or plan to install a desktop environment.

This guide is tailored for Ubuntu 20.04, 22.04, or later, but the steps will work for most Ubuntu versions.

Step-by-Step Guide: Installing XRDP on Ubuntu

Step 1: Update the System

Run the following commands to update all packages:sudo apt update && sudo apt upgrade -y

This ensures the system is running the latest stable software before adding XRDP.

Step 2: Install XRDP

Install XRDP using the apt package manager:sudo apt install xrdp -y

After installation, XRDP runs automatically. You can check its status:sudo systemctl status xrdp

It should show the XRDP service as active and running.

Step 3: Install a Desktop Environment

If you're using Ubuntu Server or a minimal version without a graphical interface, install one. Xfce is lightweight and works well with XRDP:sudo apt install xfce4 xfce4-goodies -y

Other supported desktop environments include MATE, LXQt, and KDE Plasma, but Xfce is preferred for speed and compatibility.

Step 4: Configure the Desktop Environment for XRDP

Tell XRDP to use Xfce for the remote session:echo "startxfce4" > ~/.xsession chmod +x ~/.xsession

This file will be executed when you log in via XRDP, starting the Xfce desktop.

Step 5: Edit XRDP Startup File (Optional Fix)

Edit the XRDP startup script to ensure the right session loads:sudo nano /etc/xrdp/startwm.sh

Find and comment out the following lines (if present):# test -x /etc/X11/Xsession && exec /etc/X11/Xsession

Then add this line before the final exec:startxfce4

Save and close the file.

Step 6: Allow RDP Through the Firewall

Enable RDP traffic through the default port 3389:sudo ufw allow 3389/tcp

If you’re using another firewall tool, adjust the settings accordingly.

Step 7: Restart XRDP

Apply all configuration changes:sudo systemctl restart xrdp

Connecting to Ubuntu via XRDP

After installing and configuring XRDP, connect from another computer.

On Windows: Open “Remote Desktop Connection,” type the Ubuntu system’s IP address, and log in with your Ubuntu username and password.

On Linux/macOS: Use an RDP client such as Remmina, FreeRDP, or Microsoft Remote Desktop.

Upon connection, you’ll be greeted with your Ubuntu desktop environment remotely.

Securing XRDP on Ubuntu

While XRDP is powerful, security should always be top of mind. Here are best practices:

Use SSH Tunneling

Instead of exposing XRDP directly to the internet, set up an SSH tunnel to forward port 3389 securely. This encrypts your connection and reduces attack risks.

Restrict Access to Specific IPs

Use UFW or other firewall tools to allow RDP access only from trusted IPs:sudo ufw allow from 192.168.1.100 to any port 3389

Use Fail2Ban

Install Fail2Ban to monitor failed login attempts and block potential brute-force attacks:sudo apt install fail2ban -y

Enable TLS Encryption

XRDP supports TLS for encrypted communication. Set this up by creating and configuring SSL certificates in the XRDP config files.

Keep Your System Updated

Security patches and updates often fix vulnerabilities in XRDP and Ubuntu itself. Keep your system current using:sudo apt update && sudo apt upgrade -y

Troubleshooting XRDP on Ubuntu

Black Screen After Login

This usually means the desktop environment isn’t configured correctly. Verify .xsession has the line:startxfce4

Also check if the session is conflicting with another X server.

Immediate Logout

This can occur if file permissions are incorrect. Ensure the user owns their home directory and .xsession is executable.

Port Blocked

If you can’t connect, test port 3389 using telnet or nmap from the client machine. Check firewall settings if blocked.

Advantages of XRDP for Ubuntu Users

Seamless Remote Access: Provides a graphical interface without the need for SSH or CLI-based tools.

Lightweight Performance: Excellent for low-resource systems when paired with Xfce.

Reliable for Daily Use: Stable connections and session persistence.

Great for Teams: Enables multiple users to access their own sessions simultaneously.

Enterprise-Friendly: Can be integrated with Active Directory and centralized access management.

Final Thoughts

Installing XRDP on Ubuntu gives users a powerful and flexible way to remotely access their Linux systems through a graphical interface. Whether you are managing your home server, working remotely, or offering IT support, XRDP is a reliable solution that integrates easily with Windows-based RDP clients.

Windows的使用者大多都習慣使用圖形介面，而當Windows使用者要去連線使用Linux的環境時，大多都是使用文字介面做連線。而對於文字介面不熟悉的使用者也可以使用Xrdp(X windows Remote Desktop Protocol)這套的中繼程式來幫忙完成Windows遠端桌面可以直接連接Linux。而近來在對於惡意攻擊這塊除了寫死防火牆等網路路由設定外，也可以 安裝Fail2ban 這個套件來輔助大家達到封鎖惡意攻擊的常用連線。