# the PAM User/Password authentication method is used. # (Default: user ACL is disabled) #enable-user-acl # This specifies the maximum desktop size for all TurboVNC sessions started on # this host. If a user attempts to start a session with a larger geometry than # this or to use remote desktop resizing to increase the desktop size to a size # larger than this, the desktop size will be clamped to this width/height. #max-desktop-size = 3200x1800 # This specifies the maximum idle timeout (in seconds) for all TurboVNC # sessions started on this host. The idle timeout is the amount of time that # a TurboVNC session can remain idle (with no VNC viewer connections) before it # will automatically exit. If this value is set to a number greater than 0, # then all TurboVNC sessions on this host will use this idle timeout value by # default, and the user will only be allowed to override it with a lower value. #max-idle-timeout = 86400 # Uncomment the following to globally disable the automatic sending of # clipboard changes to TurboVNC sessions from their connected viewers. # (Default: clipboard receiving is allowed) #no-clipboard-recv # Uncomment the following to globally disable the automatic sending of # clipboard changes from TurboVNC sessions to their connected viewers. # (Default: clipboard sending is allowed) #no-clipboard-send # Uncomment the following to globally disable creating/opening PAM sessions in # all TurboVNC sessions started on this host. #no-pam-sessions # Uncomment the following to globally disable inbound remote connections to all # TurboVNC sessions started on this host. This effectively forces SSH # tunneling to be used for all inbound TurboVNC connections. # (Default: inbound remote connections are allowed) #no-remote-connections # Uncomment the following to globally disable remote desktop resizing. # (Default: remote desktop resizing is allowed) #no-remote-resize # Uncomment the following to globally disable the ability to make reverse # VNC connections. # (Default: reverse connections are allowed) #no-reverse-connections # Uncomment the following to globally disable X11 TCP connections to all # TurboVNC sessions started on this host. #no-x11-tcp-connections # Set pam-service-name to the name of the PAM service that you will use to # to process PAM User/Password authentications from TurboVNC. This service # name typically corresponds to a file in /etc/pam.d or to one or more lines in # /etc/pam.conf. # (Default: turbovnc) #pam-service-name = turbovnc # Set the following to a colon-separated list of permitted TLS cipher suites # for the TLS* and X509* security types. (Run 'openssl ciphers aNULL' for a # list of possible options for the TLS* security types, and 'openssl ciphers' # for a list of possible options for the X509* security types.) This directive # also controls the order in which the cipher suites are advertised to the VNC # viewer. # (Default: allow any cipher suite supported by the host's OpenSSL # implementation) #permitted-cipher-suites = # Set the following to any combination of "TLSVnc", "TLSOtp", "TLSPlain", # "TLSNone", "X509Vnc", "X509Otp", "X509Plain", "X509None", "VNC", "OTP", # "UnixLogin", "Plain", or "None", separated by commas (security types are # case-insensitive.) If the following directive is enabled and a particular # security type is not listed in it, then users cannot enable that security # type by using Xvnc command-line arguments. This directive also controls the # order in which the corresponding authentication capabilities are advertised # to the VNC viewer. See the man pages and User's Guide for more information. # (Default: TLSVnc, TLSOtp, TLSPlain, TLSNone, X509Vnc, X509Otp, X509Plain, X509None, VNC, OTP, UnixLogin, Plain, None) #permitted-security-types = TLSVnc, TLSOtp, TLSPlain, X509Vnc, X509Otp, X509Plain, VNC, OTP, UnixLogin, Plain permitted-security-types = none # This specifies the length of the key, in bits, that the TurboVNC Server will # generate for any of the TLS* (anonymous TLS) security types. # (Default: 2048) #tls-key-length = 2048