We have a setup where a headless Linux server offers remote desktop services to a number of users. We also have a FreeIPA infrastructure for centralized user management etc.
So far it’s been based on a RHEL8 derivative, standard GUI and XRDP on the server side (and “Windows App” on macOS on the client side.)
This has been working extremely well, setup is as simple as adding the user in IPA, and then they are able to log on graphically.
I’m trying to replicate this setup with AlmaLinux 10.1 and coming up short. I’m trying to follow the instructions here, but, apart from it not working, I’m also puzzled by the whole concept:
Remote users authenticate by using a system-wide password, which grants access to the graphical login screen. Then they log in with their individual credentials, enabling remote access to the desktop environment.
What the heck? This doesn’t sound very enterprisey to me.
Is there a guide explaining how I can achieve this? I don’t have strong opinions on Wayland vs. x11.