NAME

       sesman.ini - Configuration file for sesman(8)

DESCRIPTION

       This  is  the  man page for sesman.ini, sesman(8) configuration file.  It is composed by a
       number of sections, each one composed by a section  name,  enclosed  by  square  brackets,
       folowed by a list of <parameter>=<value> lines.

       sesman.ini supports the following sections:

       [Globals] - sesman global configuration section,

       [Logging] - logging subsystem parameters

       [Security] - Access control parameters

       [Sessions] - Session management parameters

       All  options  and  values  (except for file names and paths) are case insensitive, and are
       described in detail below.

       For any of the following parameter, if it's specified more than one time  the  last  entry
       encountered will be used.

       NOTE: if any of these options is specified outside its section, it will be ignored.

GLOBALS

       The options to be specified in the [globals] section are the following:

       ListenAddress=ip address
              Specifies sesman listening address. Default is 0.0.0.0 (all interfaces)

       ListenPort=port number
              Specifies sesman listening port. Default is 3350

       EnableUserWindowManager=[0|1]
              If set to 1, true or yes this option enables user specific window manager, that is,
              anyone can define it's own script executed by sesman when starting a  new  session,
              specified by UserWindowManager

       UserWindowManager=startwm.sh
              This option specifies the script run by sesman when starting a session and per-user
              window manager is enabled.
              The path is relative to user's HOME directory

       DefaultWindowManager=${SESMAN_BIN_DIR}/startwm.sh
              This contains full path to the default window manager startup script used by sesman
              to start a session

LOGGING

       The following parameters can be used in the [logging] section:

       LogFile=${SESMAN_LOG_DIR}/sesman.log
              This  options  contains the path to logfile. It can be either absolute or relative,
              and the default is ${SESMAN_LOG_DIR}/sesman.log

       LogLevel=level
              This option can have one of the following values:

              CORE or 0 - Log only core messages. these messages are _always_ logged,  regardless
              the logging level selected.

              ERROR or 1 - Log only error messages

              WARNING, WARN or 2 - Logs warnings and error messages

              INFO or 3 - Logs errors, warnings and informational messages

              DEBUG or 4 - Log everything. If sesman is compiled in debug mode, this options will
              output many more low-level message, useful for developers

       EnableSyslog=[0|1]
              If set to 1, true or yes this option enables logging to syslog. Otherwise syslog is
              disabled.

       SyslogLevel=level
              This  option  sets  the  logging  level  for syslog. It can have the same values of
              LogLevel. If SyslogLevel is greater than LogLevel, its value is lowered to that  of
              LogLevel.

SESSIONS

       The following parameters can be used in the [Sessions] section:

       X11DisplayOffset=<number>
              Specifies the first X display number available for sesman(8).  This prevents sesman
              from interfering with real X11 servers.  The default is 10.

       MaxSessions=<number>
              Sets the maximum number of simultaneous session on terminal server.
              If unset or set to 0, unlimited session are allowed.

       KillDisconnected=[0|1]
              If set to 1, true or yes, every session will be killed when the user disconnects.
              -this option is currently ignored!-

       IdleTimeLimit=<number>
              Sets the the time limit before an idle session is disconnected.
              If set to 0, automatic disconnection is disabled.
              -this option is currently ignored!-

       DisconnectedTimeLimit=<number>
              Sets the the time limit before a disconnected session is killed.
              If set to 0, automatic killing is disabled.
              -this option is currently ignored!-

SECURITY

       The following parameters can be used in the [Sessions] section:

       AllowRootLogin=[0|1]
              If set to 1, true or yes enables root login on the terminal server

       MaxLoginRetry=[0|1]
              The number of login attempts that are allowed on terminal  server.  If  set  to  0,
              unlimited attempts are allowed. The default value for this field is 3.

       TerminalServerUsers=tsusers
              Only  the  users  belonging  to  the group tsusers are allowed to login on terminal
              server.
              If unset or set to an invalid  or  non-existent  group,  login  for  all  users  is
              enabled.

       TerminalServerAdmins=tsadmins
              Sets the group which a user shall belong to have session management rights.
              -this option is currently ignored!-

EXAMPLES

       This is an example sesman.ini:

       [Globals]
       ListenAddress=127.0.0.1
       ListenPort=3350
       EnableUserWindowManager=1
       UserWindowManager=startwm.sh
       DefaultWindowManager=startwm.sh

       [Logging]
       LogFile=/usr/local/xrdp/sesman.log
       LogLevel=DEBUG
       EnableSyslog=0
       SyslogLevel=DEBUG

       [Sessions]
       MaxSessions=10
       KillDisconnected=0
       IdleTimeLimit=0
       DisconnectedTimeLimit=0

       [Security]
       AllowRootLogin=1
       MaxLoginRetry=3
       TerminalServerUsers=tsusers
       TerminalServerAdmins=tsadmins

FILES

       ${SESMAN_CFG_DIR}/sesman.ini

SEE ALSO

       sesman(8) sesrun(8) xrdp(8) xrdp.ini(5)

       for more info on xrdp see http://xrdp.sf.net