☰

如何在 xrdp 上启用/禁用 IPv6？

tag-icon • tag-icon xrdp
如何在 xrdp 上启用/禁用 IPv6？

Linux rudy 5.8.0-59-generic #66~20.04.1-Ubuntu SMP 星期四 六月 17 11:14:10 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux

据我所知：
lsb_release -a

LSB 版本：core-11.1.0ubuntu2-noarch:printing-11.1.0ubuntu2-noarch:security-11.1.0ubuntu2-noarch 分销商 ID：Ubuntu 描述：Ubuntu 20.04.2 LTS 发布：20.04 代号：focal

大家好，

只是想知道除了 man xrdp/xrdp.ini/sesman 等之外，是否还有全面的 xrdp 手册？XRDP 服务正在监听 tcp6，我不知道是谁告诉它这样做的。监听端口是 0.0.0.0 上的默认 3389

tcp6       0      0 ::1:3350                :::*                    LISTEN      60627/xrdp-sesman   
tcp6       0      0 :::3389                 :::*                    LISTEN      60638/xrdp

另一方面，它正在监听 0.0.0.0: 3389。这些有某种关联吗？netstat 监听 IPv6:3389 还是 xrdp status 监听 0.0.0.0 3389？

systemctl status xrdp
● xrdp.service - xrdp daemon
     Loaded: loaded (/lib/systemd/system/xrdp.service; enabled; vendor preset: enabled)
     Active: active (running) since Wed 2021-06-30 21:30:44 EDT; 14h ago
       Docs: man:xrdp(8)
             man:xrdp.ini(5)
   Main PID: 60638 (xrdp)
      Tasks: 1 (limit: 6920)
     Memory: 1.6M
     CGroup: /system.slice/xrdp.service
             └─60638 /usr/sbin/xrdp

Jun 30 21:30:43 rudy xrdp[60637]: (60637)(139653515220800)[INFO ] address [0.0.0.0] port [3389] mode 1
Jun 30 21:30:43 rudy xrdp[60637]: (60637)(139653515220800)[INFO ] listening to port 3389 on 0.0.0.0
Jun 30 21:30:43 rudy xrdp[60637]: (60637)(139653515220800)[INFO ] xrdp_listen_pp done
Jun 30 21:30:43 rudy xrdp[60637]: (60637)(139653515220800)[DEBUG] Closed socket 7 (AF_INET6 :: port 3389)
Jun 30 21:30:43 rudy systemd[1]: xrdp.service: Can't open PID file /run/xrdp/xrdp.pid (yet?) after start: Operation not permitted
Jun 30 21:30:44 rudy systemd[1]: Started xrdp daemon.
Jun 30 21:30:45 rudy xrdp[60638]: (60638)(139653515220800)[INFO ] starting xrdp with pid 60638
Jun 30 21:30:45 rudy xrdp[60638]: (60638)(139653515220800)[INFO ] address [0.0.0.0] port [3389] mode 1
Jun 30 21:30:45 rudy xrdp[60638]: (60638)(139653515220800)[INFO ] listening to port 3389 on 0.0.0.0
Jun 30 21:30:45 rudy xrdp[60638]: (60638)(139653515220800)[INFO ] xrdp_listen_pp done

哪个 conf 文件中可以更改以下 xrdp 选项以及语法是什么？
xrdp -v

xrdp 0.9.12
  A Remote Desktop Protocol Server.
  Copyright (C) 2004-2018 Jay Sorg, Neutrino Labs, and all contributors.
  See https://github.com/neutrinolabs/xrdp for more information.

  Configure options:
      --enable-ipv6
      --enable-jpeg
      --enable-fuse
      --enable-rfxcodec
      --enable-opus
      --enable-painter
      --enable-vsock
      --build=x86_64-linux-gnu
      --prefix=/usr
      --includedir=${prefix}/include
      --mandir=${prefix}/share/man
      --infodir=${prefix}/share/info
      --sysconfdir=/etc
      --localstatedir=/var
      --disable-silent-rules
      --libdir=${prefix}/lib/x86_64-linux-gnu
      --libexecdir=${prefix}/lib/x86_64-linux-gnu
      --disable-maintainer-mode
      --disable-dependency-tracking
      --with-socketdir=/run/xrdp/sockdir
      build_alias=x86_64-linux-gnu
      CFLAGS=-g -O2 -fdebug-prefix-map=/build/xrdp-GJgww4/xrdp-0.9.12=. -fstack-protector-strong -Wformat -Werror=format-security 
      LDFLAGS=-Wl,-Bsymbolic-functions -Wl,-z,relro -Wl,-z,now -Wl,--as-needed
      CPPFLAGS=-Wdate-time -D_FORTIFY_SOURCE=2 
      PKG_CONFIG_PATH=/build/xrdp-GJgww4/xrdp-0.9.12/pkgconfig

  Compiled with OpenSSL 1.1.1f  31 Mar 2020

IPv6 已在系统范围内启用：

net.ipv6.conf.all.disable_ipv6 = 0  
net.ipv6.conf.default.disable_ipv6 = 0

答案1

只需使用带有选项的安装程序脚本即可-c。以非 root 用户身份执行以下步骤 -

wget https://www.c-nergy.be/downloads/xRDP/xrdp-installer-1.3.zip
unzip xrdp-installer-1.3.zip 
chmod +x xrdp-installer-1.3.sh
./xrdp-installer-1.3.sh -c

编译时默认禁用 ipv6。

如需了解完整详情和更多选项，请查看https://c-nergy.be/blog/?p=17175或者https://www.c-nergy.be/products.html以获取最新版本。

相关内容