[ 
https://issues.apache.org/jira/browse/GUACAMOLE-435?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16308493#comment-16308493
 ] 

Jimmy Chen commented on GUACAMOLE-435:
--------------------------------------

- It's the latest build of pfSense 2.42 based on FreeBSD 11.1
- The credentials are saved in the profile in Guacamole web client
- sshd is configured for password authentication
- Just username/password

Full sshd_config
{noformat}
# This file is automatically generated at startup
KexAlgorithms [email protected],diffie-hellman-group-exchange-sha256
Port 22
Protocol 2
HostKey /etc/ssh/ssh_host_rsa_key
HostKey /etc/ssh/ssh_host_ed25519_key
Compression yes
ClientAliveInterval 30
PermitRootLogin yes
# Login via Key and Password
ChallengeResponseAuthentication yes
PasswordAuthentication yes
PubkeyAuthentication yes
UseDNS no
LoginGraceTime 30s
VersionAddendum none
X11Forwarding no
Ciphers 
[email protected],[email protected],[email protected],aes256-ctr,aes192-ctr,aes128-ctr
MACs 
[email protected],[email protected],[email protected],[email protected]
,hmac-sha2-512,hmac-sha2-256,hmac-ripemd160,[email protected]
# override default of no subsystems
Subsystem       sftp    /usr/libexec/sftp-server
{noformat}

> SSH handshake failing
> ---------------------
>
>                 Key: GUACAMOLE-435
>                 URL: https://issues.apache.org/jira/browse/GUACAMOLE-435
>             Project: Guacamole
>          Issue Type: Bug
>          Components: guacamole-docker
>    Affects Versions: 0.9.13-incubating
>            Reporter: Jimmy Chen
>            Priority: Minor
>
> After creating SSH connection configuration to a FreeBSD system, when 
> attempting to access it via Guacamole, it fails to connect. Looking further 
> into the errors being logged. This is shown.
> Guacamole
> {noformat}
> Exception in thread "Thread-65" java.lang.IllegalStateException: Message will 
> not be sent because the WebSocket session has been closed
>         at 
> org.apache.tomcat.websocket.WsRemoteEndpointImplBase.writeMessagePart(WsRemoteEndpointImplBase.java:381)
>         at 
> org.apache.tomcat.websocket.WsRemoteEndpointImplBase.startMessage(WsRemoteEndpointImplBase.java:338)
>         at 
> org.apache.tomcat.websocket.WsRemoteEndpointImplBase$TextMessageSendHandler.write(WsRemoteEndpointImplBase.java:730)
>         at 
> org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendPartialString(WsRemoteEndpointImplBase.java:250)
>         at 
> org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendString(WsRemoteEndpointImplBase.java:193)
>         at 
> org.apache.tomcat.websocket.WsRemoteEndpointBasic.sendText(WsRemoteEndpointBasic.java:37)
>         at 
> org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint$2.run(GuacamoleWebSocketTunnelEndpoint.java:167)
> {noformat}
> guacd
> {noformat}
> guacd[1]: INFO: Connection ID is "$47806483-cb6f-496a-9a14-89f3843280ee"
> guacd[49]: INFO:        Current locale does not use UTF-8. Some characters 
> may not render correctly.
> guacd[49]: INFO:        User "@757f0e46-b2c8-4674-8275-0bc184575ece" joined 
> connection "$47806483-cb6f-496a-9a14-89f3843280ee" (1 users now present)
> guacd[49]: ERROR:       SSH handshake failed.
> guacd[49]: INFO:        User "@757f0e46-b2c8-4674-8275-0bc184575ece" 
> disconnected (0 users remain)
> {noformat}
> Opening a SSH session to the same system via Putty works perfectly, so it 
> seems like something about guacd is preventing from successful handshake.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Reply via email to