I would like to have the same functionality as TeamViewer has:
When connecting to a shadowed server, then:
Block all input from the physical computer (switching tty on a linux machine is fine)
You can already try something like:
start-on-connect=chvt 2
(this probably requires special privileges to run on most distros)
Block all input from the physical computer (switching tty on a linux machine is fine)
chvt will black out the screens, but it may also stop the rendering if it is GPU based...
When making the transition to no clients connected, then physical computer would lock (so that further "interaction" needs to be authenticated), and all "limitations" would be lifted.
You should be able to achieve this by launching the lockscreen using the start-on-last-client-exit command line option. (added in r21068)
Replying to Antoine Martin:
Block all input from the physical computer (switching tty on a linux machine is fine)
You can already try something like:
start-on-connect=chvt 2(this probably requires special privileges to run on most distros)
I am sorry :/ I meant that:
If the quoted statement was true instead, then "a malicious user" could easily brute-force the correct tty and try to take control of the already-unlocked machine.
What you are asking for is not possible with X11 and shadow servers.
this ticket has been moved to: https://github.com/Xpra-org/xpra/issues/1991