A page in your DokuWiki was added or changed. Here are the details:

Date        : 2018/02/12 13:42
Browser     : Mozilla/5.0 (X11; Linux x86_64; rv:52.9) Gecko/20100101 
Goanna/3.4 Firefox/52.9 PaleMoon/27.7.2
IP-Address  : 134.3.37.90
Hostname    : HSI-KBW-134-3-37-90.hsi14.kabel-badenwuerttemberg.de
Old Revision: https://wiki.x2go.org/doku.php/doc:howto:tce?rev=1518442255
New Revision: https://wiki.x2go.org/doku.php/doc:howto:tce
Edit Summary: [What options are available under FURTHER-OPTIONS-GO-HERE?]  - 
added audioout parameter description
User        : stefanbaur

@@ -875,9 +875,10 @@
   * ''broker-url=ssh:<nowiki>//</nowiki>your-broker-address-here'' - this 
allows you to specify an X2Go Session Broker instead of a sessions file (not limited to an 
ssh-based broker, works with an http-based broker as well)
   * 
''sessionsurl=https|http|ftp://your-http-server-ip-or-dns-here/x2go-tce/x2go-tce.sessions''
 - use this to specify a sessions file. You need this unless you are using a
session broker. See below for how to add this file to your HTTP, HTTPS, or FTP 
server.  **Attention: Whoever manages to spoof the server name can inject rogue 
session config files into your ThinClients.**  To mitigate this risk, use 
HTTPS, where the attacker would have to spoof both server name and matching 
certificate.
=== These are entirely optional ===
-   * ''bg=https|http|ftp://your-http-server-ip-or-dns-here/x2go-tce/x2go-tce-bg.svg'' - 
use this to specify an SVG file to "brand" your X2Go-TCE with. It will replace 
theblue background theme of the login screen. See below for how to add this file to your 
HTTP, HTTPS, or FTP server.  **Attention: Whoever manages to spoof the server name can 
inject rogue images into your ThinClients.** To mitigate this risk, use HTTPS, where the 
attacker would have to spoof both server name and matching certificate.
+   * ''audiout=list'' / ''audiout="alsa_card.something|output:something"'' - 
use this to list all available audio outputs /
select a particular audio output. Note that when selecting one, the parameter consists of 
two values (as displayed in the output on /dev/tty8 when specifying ''list'') that need 
to be separated with a ''|'', and the set of the two values needs to be enclosed in 
double quotes. Do //not// enclose each value in double quotes separately! Correct 
example: ''audioout="alsa_card.pci-0000_00_1b.0|output:hdmi-stereo"''
+   * ''bg=https|http|ftp://your-http-server-ip-or-dns-here/x2go-tce/x2go-tce-bg.svg'' - 
use this to specify an SVG file to "brand" your X2Go-TCE with. It will replace 
the blue background theme of the login screen. See below for how to add this file to your 
HTTP, HTTPS, or FTP server.  **Attention: Whoever manages to spoof the server name can 
inject rogue images into your ThinClients.** To mitigate this risk, use HTTPS, where the 
attacker would have to spoof both server name and matching certificate.
   * ''blank=n|n:n:n'' - Will disable (''blank=0'') or set screensaver
timeout. Use ''blank=n:n:n'' to set DPMS Standby/Suspend/Off values. Standby 
value equals screensaver timeout value. All values are given in seconds.
   * ''blankdpmsfix'' - This forces the TFT do black for a few seconds during the X 
startup phase, then forces it back on again.  This fixes an occasional "black 
screen" issue that occurs with some flaky client/TFT hardware combinations when 
using DisplayPort connectors, and could otherwise only be remediated by manually turning 
the TFT off and back on again. (feature available via github repo, soon via x2go repo too)
   * 
''branding=https|http|ftp://your-http-server-ip-or-dns-here/x2go-tce/x2go-tce-branding.svg''
 - use this to specify an SVG file to "brand" your X2Go-TCE with. It will 
replace the seal icon in the lower left of the login screen. See below for how to add 
this file to your HTTP, HTTPS, or FTP server.  **Attention: Whoever manages to spoof the 
server name can inject rogue images into your ThinClients.**  To mitigate this
risk, use HTTPS, where the attacker would have to spoof both server name and 
matching certificate.
   * ''copysecring'' - this will scan for USB media and fixed disk media (with 
USB media taking precedence) at boot for one or more of the following 
directories: ''config/ssh'', 'ssh', ''.ssh''. The volume must be labeled 
''X2GO-TCE-LIVE'' or ''PORTABLEAPP'' and may use any supported file system. Any 
SSH Secret Keys found there will be copied into ''/home/user/.ssh'' (in the 
ramdisk), with proper permissions and ownerships for the default user account. 
This may come in handy when you are using SSH Secret Keys on USB media, but 
need to log in and out of sessions often, and don't want to leave the USB media 
plugged in all the time/don't want to have to re-insert it before each session 
startup. **Attention: This poses a security risk when other people are using 
your ThinClient afterwards (as they will have access to your keys).**  To 
mitigate this risk,be sure to power-cycle the
ThinClient once you are done. You //should// specify this parameter when 
booting X2Go-TCE-Live from portable media when you want to use SSH Secret Keys, 
to make sure your secret key on the VAT/NTFS partition is available. But as 
stated above, be sure to power-cycle the machine once you're done.


--
This mail was generated by DokuWiki at
https://wiki.x2go.org/

_______________________________________________
x2go-commits mailing list
x2go-commits@lists.x2go.org
https://lists.x2go.org/listinfo/x2go-commits

Reply via email to