Found a solution: after changing to "allowed_users=anybody" in /etc/X11/Xwrapper.config , XRDP works as expected. So, the default value ("console") supplied by xserver-xorg-legacy is not compatible with XRDP, and needs to be adapted.