Changes between Version 29 and Version 30 of ProxyServer
- Timestamp:
- 05/08/18 09:44:43 (3 years ago)
Legend:
- Unmodified
- Added
- Removed
- Modified
-
ProxyServer
v29 v30 46 46 To start the proxy server, simply run: 47 47 {{{ 48 xpra proxy :20 --auth=allow --bind-tcp=0.0.0.0: 44348 xpra proxy :20 --auth=allow --bind-tcp=0.0.0.0:8443 49 49 }}} 50 50 51 51 If only one session is accessible, users can connect as usual with: 52 52 {{{ 53 xpra attach tcp:USERNAME:PASSWORD@PROXYHOST: 44353 xpra attach tcp:USERNAME:PASSWORD@PROXYHOST:8443 54 54 }}} 55 55 56 56 If there is more than one session accessible for this user, the client also needs to specify which display it wishes to connect to using the extended attach syntax: "{{{tcp/USERNAME:PASSWORD@SERVER:PORT/DISPLAY}}}": 57 57 {{{ 58 xpra attach tcp/username:password@127.0.0.1: 443/10058 xpra attach tcp/username:password@127.0.0.1:8443/100 59 59 }}} 60 60 [[BR]] … … 65 65 * once authenticated, the proxy server spawns a new process and no longer runs as root 66 66 * the display number chosen for the proxy server is only used for identifying the proxy server and interacting with it using the regular tools ("{{{xpra info}}}", etc) 67 * to use ports lower than 1024 either use {{{--min-port}}} and run as root and or see [https://superuser.com/questions/710253/ allow non-root process to bind to port 80 and 443] 67 68 }}} 68 69 … … 101 102 == Detailed Example == 102 103 103 * Start a proxy server on port 443 using the "{{{multifile}}}" authentication module (we will call this server {{{PROXYHOST}}}):104 * Start a proxy server on port 8443 using the "{{{multifile}}}" authentication module (we will call this server {{{PROXYHOST}}}): 104 105 {{{ 105 xpra proxy :100 --bind-tcp=0.0.0.0: 443 --auth=multifile:filename=./xpra-auth106 xpra proxy :100 --bind-tcp=0.0.0.0:8443 --auth=multifile:filename=./xpra-auth 106 107 }}} 107 108 * Start the session we wish to access via the {{{PROXYHOST}}} (we call this {{{TARGETHOST}}} - for testing, this can be the same host as {{{PROXYHOST}}}): … … 111 112 * on {{{PROXYHOST}}}, add a user to the auth file pointing to {{{TARGETHOST}}} (ie: {{{192.168.1.200}}} should be {{{TARGETHOST}}}'s IP): 112 113 {{{ 113 echo " john|secretpassword|1000|1000|tcp:192.168.1.200:10000|EXAMPLE_ENV=VALUE|compression=0" >> ./xpra-auth114 echo "foo|secretpassword|1000|1000|tcp:192.168.1.200:10000|EXAMPLE_ENV=VALUE|compression=0" >> ./xpra-auth 114 115 }}} 115 116 * create the password file on the client: … … 119 120 * connect the client to the proxy server: 120 121 {{{ 121 xpra attach --username=myusername --password-file=./password.txt $PROXYHOST: 443122 xpra attach --username=myusername --password-file=./password.txt $PROXYHOST:8443 122 123 }}} 123 124