Skip to content

RDP direct recording configurations without agent

The RDP direct recording configurations without agent module links a set of gateways to a set of machines in order to define the scope of recordable RDP direct sessions. The user then connects to an RDP service on the Edge Gateway, entering as their login a string of the form login:server, where server is the name or address declared for the machine; if the pair is allowed by a configuration, the session opens and recording starts.

This module therefore extends Machines management: only machines whose Without agent mode has been filled in are eligible.

Two prerequisites, one of them on the Edge Gateway

1. On the console side — the machine's Without agent mode box must be filled in, in particular its Name or address field: that value is what the user will type after the :. Without it the machine is not offered in the form's left-hand list.

2. On the Edge Gateway side — direct RDP recording is handled by a dedicated xrdp instance, which is not enabled by default: it listens on the network, which would needlessly widen the attack surface of platforms that do not use the feature. It must therefore be enabled on every Edge Gateway concerned:

1
systemctl enable --now cleanroom-xrdp-direct.service

That instance also needs to know which Edge Gateway instances to query to reach the Mediation Controller: this is the xmlrpc-connect setting of /etc/ipdiva/careserver/careserver.xml, the same one used by direct recording with an agent.


Configuration list

The main grid displays the existing configurations in a paginated view (15, 25 or 50 rows per page):

Column Description
Name Configuration name, preceded by a padlock icon.
Gateways Number of Edge Gateways selected.
Machines Number of machines selected.

Expanding a row shows the detail: the Edge Gateways, then the machines of the configuration. When the grid is empty, it displays No available settings.

A search field in the toolbar filters the list on the fly (triggered 700 ms after the last keystroke or immediately with the Enter key).


Add a configuration

The + button opens the Add an RDP without agent recording configuration window, with two tabs preceded by two fields:

Field Description
Name Mandatory. A string made only of spaces is rejected.
Description Free text.

The Validate button is enabled only when at least one gateway and at least one machine have been selected.

Two lists side by side: available on the left, selected on the right. Moving items is done by drag and drop, and each list carries a Select all button. When no Edge Gateway is available, the left-hand list displays No available gateways.

Same two lists, same behaviour. Only machines whose Without agent mode is filled in are offered; failing that, the left-hand list displays No available machine.

The Previous and Next buttons in the footer navigate between the tabs.


Edit a configuration

Select the configuration in the list and click the Properties icon, or double-click the row. The Edit an RDP without agent recording configuration window offers the same tabs, pre-filled with the configuration values. Click Validate to save.


Delete a configuration

Select one or more configurations and click the × button. A confirmation is requested (label adapted to the singular or plural case).