# Uncomment the following to turn on the user access control list whenever
# the PAM User/Password authentication method is used.
# (Default: user ACL is disabled)

#enable-user-acl

# This specifies the maximum desktop size for all TurboVNC sessions started on
# this host.  If a user attempts to start a session with a larger geometry than
# this or to use remote desktop resizing to increase the desktop size to a size
# larger than this, the desktop size will be clamped to this width/height.

#max-desktop-size = 3840x2160

# This specifies the maximum idle timeout (in seconds) for all TurboVNC
# sessions started on this host.  The idle timeout is the amount of time that
# a TurboVNC session can remain idle (with no VNC viewer connections) before it
# will automatically exit.  If this value is set to a number greater than 0,
# then all TurboVNC sessions on this host will use this idle timeout value by
# default, and the user will only be allowed to override it with a lower value.

#max-idle-timeout = 86400

# Uncomment the following to globally disable the automatic sending of
# clipboard changes to TurboVNC sessions from their connected viewers.
# (Default: clipboard receiving is allowed)

#no-clipboard-recv

# Uncomment the following to globally disable the automatic sending of
# clipboard changes from TurboVNC sessions to their connected viewers.
# (Default: clipboard sending is allowed)

#no-clipboard-send

# Uncomment the following to globally disable creating/opening PAM sessions in
# all TurboVNC sessions started on this host.

#no-pam-sessions

# Uncomment the following to globally disable inbound remote connections to all
# TurboVNC sessions started on this host.  This effectively forces SSH
# tunneling to be used for all inbound TurboVNC connections.
# (Default: inbound remote connections are allowed)

#no-remote-connections

# Uncomment the following to globally disable remote desktop resizing.
# (Default: remote desktop resizing is allowed)

#no-remote-resize

# Uncomment the following to globally disable the ability to make reverse
# VNC connections.
# (Default: reverse connections are allowed)

#no-reverse-connections

# Uncomment the following to globally disable X11 TCP connections to all
# TurboVNC sessions started on this host.

#no-x11-tcp-connections

# Set pam-service-name to the name of the PAM service that you will use to
# to process PAM User/Password authentications from TurboVNC.  This service
# name typically corresponds to a file in /etc/pam.d or to one or more lines in
# /etc/pam.conf.
# (Default: turbovnc)

#pam-service-name = turbovnc

# Set the following to a colon-separated list of permitted TLS cipher suites
# for the TLS* and X509* security types.  (Run 'openssl ciphers aNULL' for a
# list of possible options for the TLS* security types, and 'openssl ciphers'
# for a list of possible options for the X509* security types.)  This directive
# also controls the order in which the cipher suites are advertised to the VNC
# viewer.
# (Default: allow any cipher suite supported by the host's OpenSSL
# implementation)

#permitted-cipher-suites =

# Set the following to any combination of "TLSVnc", "TLSOtp", "TLSPlain",
# "TLSNone", "X509Vnc", "X509Otp", "X509Plain", "X509None", "VNC", "OTP",
# "UnixLogin", "Plain", or "None", separated by commas (security types are
# case-insensitive.)  If the following directive is enabled and a particular
# security type is not listed in it, then users cannot enable that security
# type by using Xvnc command-line arguments.  This directive also controls the
# order in which the corresponding authentication capabilities are advertised
# to the VNC viewer.  See the man pages and User's Guide for more information.
# (Default: TLSVnc, TLSOtp, TLSPlain, TLSNone, X509Vnc, X509Otp, X509Plain, X509None, VNC, OTP, UnixLogin, Plain, None)

#permitted-security-types = TLSVnc, TLSOtp, TLSPlain, X509Vnc, X509Otp, X509Plain, VNC, OTP, UnixLogin, Plain

# This specifies the length of the key, in bits, that the TurboVNC Server will
# generate for any of the TLS* (anonymous TLS) security types.
# (Default: 2048)

#tls-key-length = 2048

# This specifies the per-user TurboVNC session limit (0 = no limit.)  If the
# number of TurboVNC sessions currently running under the user's account is
# greater than or equal to the session limit, then the vncserver script will
# refuse to start a new session.  Note, however, that the session limit is only
# enforced within the vncserver script, which is easily defeated, so it is more
# of a user-proofing feature than a security feature.

#session-limit = 0
