Please update documentation to advise of a very cool feature not promoted.
I needed to provide restricted username/password access to a X Windows application that must stay running 24/7.
So I started up Xvnc with localhost only access and sharedaccess running as nobody. The application was set to display to the Xvnc server. Then installed XRDP and configured libvnc connection without a password. This worked perfectly with multiple people being able to connect and control the applicaton.
The really cool XRDP Feature is the pam lines:
pamusername=ask
pampassword=ask
pamsessionmng=127.0.0.1
Adding these to the VNC session type meant that everyone had to authenticate to the XRDP Server before they could jump to the VNC Server, like a secured gateway.
No need to add/setup authentication on the VNC Server.
Thanks!!!