🖥️ Setting Up Remote Desktop on Debian with XFCE

Date Created: 2025-03-29 By: 16BitMiker [ BACK.. ]

Remote desktop functionality is an essential tool for system administrators and power users who need to access their Debian systems with a full graphical interface from anywhere. This comprehensive guide walks you through setting up xRDP with XFCE on Debian, providing a lightweight yet feature-rich remote desktop experience.

🔍 Overview

XFCE is an excellent choice for remote desktop sessions because it's lightweight, responsive, and fully featured. When paired with xRDP (an open-source implementation of Microsoft's Remote Desktop Protocol), you get a reliable remote access solution that works seamlessly with native clients on Windows, macOS, and other Linux distributions.

📋 Prerequisites

• A Debian system (this guide is tested on Debian 11 Bullseye and Debian 12 Bookworm)

• Sudo privileges on the target system

• Basic familiarity with terminal commands

• A remote device with an RDP client (like Windows Remote Desktop Connection)

🚀 Installation Process

1️⃣ System Preparation

First, let's ensure our system is up-to-date:

sudo apt update
sudo apt upgrade -y

2️⃣ Install XFCE and xRDP

Install the XFCE desktop environment along with xRDP:

xxxxxxxxxx
sudo apt install xfce4 xfce4-goodies xrdp xorgxrdp dbus-x11 -y

This command installs:

• xfce4: The base XFCE desktop environment

• xfce4-goodies: Additional useful XFCE applications and plugins

• xrdp: The Remote Desktop Protocol server

• xorgxrdp: The Xorg drivers for xRDP

• dbus-x11: Required for proper session handling (prevents black screen issues)

3️⃣ Configure XFCE as the Default Session

Create or modify your .xsession file to ensure XFCE is launched when connecting remotely:

xxxxxxxxxx
echo "xfce4-session" > ~/.xsession
chmod +x ~/.xsession

This tells xRDP to start the XFCE session manager when you connect. The chmod command makes the file executable, which is required for proper functionality.

4️⃣ Set Proper Permissions

Add the xRDP user to the SSL certificate group for secure connections:

xxxxxxxxxx
sudo adduser xrdp ssl-cert

This step is crucial for xRDP to access SSL certificates, which enables encrypted connections.

5️⃣ Configure and Restart xRDP Service

Enable and restart the xRDP service to apply our changes:

xxxxxxxxxx
sudo systemctl enable xrdp
sudo systemctl restart xrdp

These commands ensure that:

• The xRDP service starts automatically on system boot

• Our current configuration changes take effect immediately

6️⃣ Configure Firewall Settings

Allow incoming connections on the RDP port (3389):

For iptables (Debian default)

xxxxxxxxxx
sudo iptables -A INPUT -p tcp --dport 3389 -j ACCEPT
sudo iptables-save | sudo tee /etc/iptables/rules.v4

For UFW (if you've installed it)

xxxxxxxxxx
sudo ufw allow 3389/tcp

This ensures that remote connections can reach your xRDP server. The rules are made persistent so they survive system reboots.

7️⃣ Verify Installation

Check if the xRDP service is running correctly:

xxxxxxxxxx
sudo systemctl status xrdp

You should see active (running) in the output.

Additionally, verify that xRDP is listening on port 3389:

xxxxxxxxxx
sudo netstat -tuln | grep 3389

🔌 Connecting to Your Remote Desktop

From Windows

1. Press Win+R to open the Run dialog

2. Type mstsc.exe and press Enter to launch Remote Desktop Connection

3. Enter your Debian server's IP address

4. Click "Connect"

5. At the xRDP login screen:

   • Select "Xorg" from the session dropdown menu ✅

   • Enter your Debian username and password

   • Click "OK"

From macOS

1. Download and install Microsoft Remote Desktop from the App Store

2. Add a new connection with your Debian server's IP address

3. Connect and use the same login credentials as on your Debian system

From Linux

1. Install Remmina or another RDP client:

   xxxxxxxxxx
   sudo apt install remmina remmina-plugin-rdp
   

2. Create a new RDP connection with your server's IP

3. Connect using your Debian credentials

⚠️ Troubleshooting Common Issues

Blank/Black Screen After Login

If you encounter a black screen after logging in:

xxxxxxxxxx
# Reinstall dbus-x11 package
sudo apt install --reinstall dbus-x11

# Create a proper .xsession file
echo "xfce4-session" > ~/.xsession
chmod +x ~/.xsession

# Restart the xRDP service
sudo systemctl restart xrdp

Connection Issues

If you can't connect to the server:

xxxxxxxxxx
# Check if xRDP is running
sudo systemctl status xrdp

# Verify the firewall isn't blocking connections
sudo iptables -L | grep 3389

# Check xRDP log for errors
sudo tail -f /var/log/xrdp-sesman.log

Performance Optimization

For improved performance, especially over slower connections:

​x
# Install the compositor for better graphics handling
sudo apt install xcompmgr -y

# Add to XFCE autostart to enable it for each session

🔒 Security Enhancements

The default xRDP configuration provides basic security, but for production environments, consider these additional measures:

Change the Default Port

Edit the xRDP configuration file:

xxxxxxxxxx
sudo nano /etc/xrdp/xrdp.ini

Find the line with port=3389 and change it to a non-standard port, such as port=13389.

Remember to update your firewall rules for the new port.

Implement SSH Tunneling

For enhanced security, tunnel RDP through SSH:

xxxxxxxxxx
# On your client machine
ssh -L 13389:localhost:3389 username@debian-server-ip

Then connect your RDP client to localhost:13389.

Limit User Access

Create a specific group for remote access:

xxxxxxxxxx
sudo groupadd remotedesktopusers
sudo usermod -aG remotedesktopusers yourusername

Then configure PAM to only allow members of this group.

📝 Final Tips

• Always log out from local sessions before connecting remotely with the same user

• For headless servers, you don't need a display manager like LightDM or GDM

• Use xrdp-genkeymap to generate custom keyboard mappings for international layouts

• Consider installing xrdp-pulseaudio-installer if you need audio forwarding capabilities

📚 Read More

• Official xRDP GitHub Repository

• XFCE Documentation

• Debian Security Best Practices

• Remote Desktop Protocol Security Considerations

Setting up Remote Desktop on Debian with XFCE gives you the perfect balance of performance and functionality. This setup is particularly valuable for system administrators managing headless servers or for accessing your home system while traveling. With the security enhancements outlined above, you can maintain this convenient access without compromising on security.