XRDP -0.10.2 | Rocky 9

[Abinaya-sandhiya]

Hi,

We are facing XRDP connection issue with Xorg.

We have been using xrdp 0.10.2 on Rocky 8 and 9 machines where facing Xorg connection issue.

After further investigation we understood that our machine has X11 Forwarding and x11displayoffset value in sshd_config.

that means our ssh -X connection would use TCP port range 6000+ in terms of using X11 forwarding. [default unix socket method would be used].

So all ssh -X process are occupying port 6010 and so on

tcp 0 0 0.0.0.0:6000 0.0.0.0:* LISTEN 317016/sshd: /usr/s
tcp 0 0 127.0.0.1:6012 0.0.0.0:* LISTEN 23375/sshd: XXX@
tcp 0 0 127.0.0.1:6013 0.0.0.0:* LISTEN 298080/sshd: XXX
tcp 0 0 127.0.0.1:6014 0.0.0.0:* LISTEN 562481/sshd: XXX
tcp 0 0 127.0.0.1:6015 0.0.0.0:* LISTEN 601992/sshd: XXX@
tcp 0 0 127.0.0.1:6010 0.0.0.0:* LISTEN 1406860/sshd: XXXX
tcp 0 0 127.0.0.1:6011 0.0.0.0:* LISTEN 20067/sshd: XXX
tcp6 0 0 :::6000 :::* LISTEN 317016/sshd: /usr/s

Now we on /etc/xrdp/sesman.ini also we have enable this x11displayoffset to 10 and made Xorg parm to -listen TCP that means instead of unix socket method TCP port range should be used for Xorg.

We faced Xorg issue because of the port conflict

[20250228-13:28:09] [ERROR] g_tcp_bind(17, 6010) failed bind IPv6 (errno=98) and IPv4 (errno=22). // Here trying for 6010 and that occupied by sshd
[20250228-13:28:09] [INFO ] Found X server running at 6010
[20250228-13:28:09] [INFO ] Starting session: session_pid 26080, display :11.0, width 1920, height 1080, bpp 24, client ip ::ffff:10.143.99.1:53247 - socket: 12, user name XXX// Here it is changing for 6011 [means display :11]

Now i have revoked all changes

X11displayoffset has been revoked also made Xorg to -nolisten TCP but still Xorg not working

any idea why the changes not taking properly in xrdp

[matt335672]

Hi @Abinaya-sandhiya

I'm not entirely understanding your question.

sesman will not start a session on a TCP port that appears to have an X server on it. This check is performed regardless of whether you are using -listen tcp or -nolisten tcp.

Can you add a bit more information as to what you are trying to achieve, or what problems you are encountering?

Thanks.