[arch-general] Arch Linux PC as a Remote Desktop Node

[David C. Rankin]

On 07/27/2018 12:07 PM, Foxtrot Mike via arch-general wrote:
> I  want to use the Arch system as a Remote Desktop 
> node. The Arch system would use a login manager (such as lightdm) to 
> authenticate users from Windows Domain. Once the user has been 
> authenticated, the system is supposed to automatically open a RDP 
> connection (using freerdp) to the Windows Server (if possible, using the 
> credentials provided to lightdm so the user doesn't have to enter his 
> password twice). As soon as the user quits the RDP session, his 
> X-session should also be closed automatically.

FM,

  I am totally confused as to what and why you are wanting to put your Arch
server between the employees and the RDP session to the windows server?? Where
is the code they produce stored? Windows? Arch Server?

  Why not just have them open a single RDP session to the windows server
directly? Are they actually using something from the Linux box?

  If there is a reason why they need the Arch server, do they each have a
Linux user account there? If they do, why not use vncserver (TigerVNC) to
provide a Linux desktop to them using ssh tunneling. The vncserver can handle
the X startup (it provides a nice short configuration file you can tweak to
start whatever desktop you like. I3 is fine, fluxbox is another excellent
choice). You likely could launch the additional RDP session there, or have the
desktop startup file do it for you.

  Sorry for the additional questions, but I am not clear on what you are
trying to achieve and there may be simpler ways of doing it -- if I understood
what you were trying to do.

  I use RDP to both Linux and Windows, but each are virtualized with
VirtualBox and made available over the network. That would be a bit resource
intensive for the server depending on your RAM -- I run guests with 2G.

  If both the all employees and both the Arch and Windows servers are being a
secure firewall, then XDMCP is another option for providing a remote Xsession
to your employees. It has its valid uses, but is generally frowned upon from a
security standpoint.

  If all your employees need is the VS install on the windows server -- then I
don't see how the Arch server would be a benefit to have in the middle. (of
course I don't see the benefit of coding in VS... but to each his own...)

-- 
David C. Rankin, J.D.,P.E.