necouchman opened a new pull request, #830:
URL: https://github.com/apache/guacamole-client/pull/830

   I've taken a run at implementing a decorating extension that allows users, 
groups, connections, and connection groups, to be restricted beyond the 
defaults provided by the base Guacamole implementation:
   * Restrict the times at which users can log in based on a "Day of the Week" 
schedule. This is implemented using both an "Allow at certain times" field, 
which, if present, will restrict the user to logins only during those times, 
and a "Deny at certain times" field, which, if present, will block the user 
from logging in during the specified times. This is implemented at both the 
individual user level, as well as a setting that can be applied to a group and 
will impact all the members of that group.
   
![Screenshot_2023-04-11_09-33-34](https://user-images.githubusercontent.com/4706000/231179648-5cc8f053-abba-4559-a60d-64b6f222c5c8.png)
   
![Screenshot_2023-04-11_10-46-48](https://user-images.githubusercontent.com/4706000/231200408-dcd7631c-708d-44f0-a304-73a6fb8a8f23.png)
   
   * Restrict the hosts from which users can log in, based on hostname, IP 
address, or CIDR notation. I've attempted to implement both IPv4 and IPv6 
restrictions. Hostnames will be reverse-queried to resolve to IPs, and then 
they are checked against the user's login IP, if it's available.
   
![Screenshot_2023-04-11_10-50-45](https://user-images.githubusercontent.com/4706000/231201581-9f3e14c6-11f3-4091-a599-5cabf156f79e.png)
   
   * Restrict the times at which connections and/or connection groups (of the 
Balancing variety) can be accessed, in the same "Day of the Week" schedule.
   * Restrict the hosts from which connections and/or connection groups (of the 
Balancing variety) can be accessed, using hostname, IP address, and/or CIDR 
range.
   
![Screenshot_2023-04-11_11-06-47](https://user-images.githubusercontent.com/4706000/231206405-cb0f26b8-9ffe-40be-a6ae-4ba932ed153f.png)


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@guacamole.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

Reply via email to