ThinLinc

ThinLinc is a Linux remote desktop server from Cendio AB for organisations that want to run desktops and applications centrally on Linux and reach them from Windows, macOS, Linux or a web browser. If you are looking for a ThinLinc download, there are two parts: the server, which runs only on Linux, and the ThinLinc client, which is free to download and install on as many machines as you like.

It works like a terminal server for Linux: many users log in to the same machine or cluster, each gets an isolated graphical session, and the session keeps running when the user disconnects. Universities, engineering teams and companies with Linux workstations use it to replace a room of desktop PCs with a few well-equipped servers.

ThinLinc at a glance

What it does

• Runs many independent graphical Linux sessions on one server, each with its own desktop (Xfce, MATE and similar environments work best).
• Lets users disconnect and reconnect later from another device, with applications still running.
• Provides a native client for Windows, macOS and Linux, plus ThinLinc Web Access, an HTML5 client served on TCP port 300.
• Tunnels the session over SSH, so the native client needs only port 22 open on the server.
• Scales out to a cluster with a master server and several agent servers, with load balancing between them.
• Supports OpenID Connect sign-in for Web Access since 4.21.0, so users can log in with accounts from providers such as Keycloak or Microsoft Entra ID.
• Lets administrators push mandatory client settings that users cannot change (new in 4.21.0).
• Is built on open-source components such as TigerVNC and noVNC, which Cendio also helps maintain.

How IT teams use it

Set up a server for a small team

1. Install a desktop environment on the Linux server, for example Xfce or MATE. Lightweight desktops without compositing perform best.
2. Unpack the server bundle and run the installer; it starts the configuration tool tl-setup at the end:

   unzip tl-4.21.0-server.zip
   cd tl-4.21.0-server
   ./install-server

3. Check that the three services are running:

   sudo systemctl status vsmserver
   sudo systemctl status vsmagent
   sudo systemctl status tlwebaccess

4. Open the firewall for SSH (native clients) and port 300 (browser clients), for example with firewalld:

   sudo firewall-cmd --permanent --add-service=ssh
   sudo firewall-cmd --permanent --add-port=300/tcp
   sudo firewall-cmd --reload

5. Log in from a client with an ordinary Linux user account on the server.

Raise the free limit from 3 to 10 users

1. Out of the box the server allows 3 concurrent sessions. Download the community licence file from the ThinLinc customer portal.
2. Copy it to /opt/thinlinc/etc/licenses/ on the master server. Only one community licence file can be installed at a time.
3. Restart the master service: sudo systemctl restart vsmserver.

Give contractors browser-only access

1. Keep the native client for staff and point external users to https://your-server:300/.
2. Replace the self-signed certificate on Web Access with one from your own CA or a public CA.
3. On 4.21.0, connect Web Access to your identity provider through OpenID Connect so contractors sign in with their existing accounts.

Troubleshoot a session that will not start

1. Read /var/log/vsmserver.log and /var/log/vsmagent.log, and /var/log/tlwebaccess.log for browser logins.
2. Since 4.21.0 per-session logs go to the user’s systemd journal instead of xinit.log; check them with journalctl --user as that user.
3. If the user is already logged in at the physical console, the client now shows a warning; log out locally first.

Install and first run

Server (Linux). Packages are provided as RPM and DEB inside the server bundle. You need root access, a working SSH daemon and a desktop environment. The installer creates the vsmserver, vsmagent and tlwebaccess services. Port 22 is needed for native clients, 300 for Web Access; the web administration interface (tlwebadm, port 1010) should stay on the internal network. In a cluster, all nodes must run the same ThinLinc version: from 4.21.0 nodes check each other’s versions, so partial upgrades are no longer possible.

Windows client. Install the x64 client, enter the server name, user name and password (public key, smart card and Kerberos ticket are under Options, Security tab, together with the SSH port if yours is not 22). Users only need an ordinary Linux account on the server.

macOS client. Requires macOS 13 Ventura or newer as of 4.21.0; older Macs need an older client release.

Linux client. Available for x86-64 and ARM64 as RPM, DEB and tar.gz. The 32-bit ARM client was dropped in 4.21.0.

Limitations

• The server is Linux-only. It does not publish Windows desktops or Windows applications.
• Sessions run on X11. Wayland support is still being developed upstream.
• Heavy desktops with compositing (for example default GNOME) feel slower than Xfce or MATE.
• The free community licence stops at 10 concurrent users and comes without official support.
• Separately purchased licence files cannot be combined in one cluster.
• It is a multi-user desktop server, not a tool for helping a user on their own PC.

ThinLinc vs alternatives

X2Go is fully free and also serves Linux desktops over SSH, but development is slow and it has no web client or commercial support. TigerVNC gives you the same VNC engine without session brokering, load balancing or a polished client, which is fine for a handful of users. Apache Guacamole is a free browser gateway that sits in front of existing RDP, VNC and SSH servers rather than hosting Linux sessions itself. Choose ThinLinc when you need many users on shared Linux servers with clustering and vendor support.

FAQ

Where do I get the ThinLinc client download?

The client is free and available for Windows, macOS and Linux from the official website, which also hosts the documentation and release notes. Clients for thin-client systems such as ThinStation and IGEL are offered as a separate bundle.

Is ThinLinc free?

Partly. It is shareware (conditionally free): you can run up to 10 concurrent users with a free community licence, while larger deployments and official support need a paid licence. The free and paid builds are the same software.

Is there a ThinLinc client for Mac?

Yes. ThinLinc 4.21.0 supports macOS 13 Ventura and newer.

How does the ThinLinc web client work?

ThinLinc Web Access is an HTML5 client built into the server. Users open https://your-server:300 in a browser and log in with their Linux account, without installing anything.

Does ThinLinc support Wayland?

Not yet. Sessions run on X11, and Cendio lists Wayland support as ongoing upstream work.

ThinLinc vs TigerVNC: what is the difference?

ThinLinc uses TigerVNC internally but adds session brokering, load balancing, SSH tunnelling, a web client, single sign-on and central management. TigerVNC alone is a VNC server and viewer that you configure per user.

ThinLinc vs xrdp?

xrdp lets standard RDP clients connect to a Linux machine and is free. ThinLinc needs its own client or a browser, but adds clustering, Web Access with OpenID Connect and vendor support.

Last checked against official sources: 1 October 2026 (developer website: cendio.com). Versions and licence terms change — confirm on the developer's site before deploying in production.