[
https://issues.apache.org/jira/browse/GUACAMOLE-2269?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18078514#comment-18078514
]
Charles Hedrick commented on GUACAMOLE-2269:
--------------------------------------------
Guacamole is on Redhat 10.1, target is Ubuntu 24.04. Note that build is with
freerdp 3.
rdp://host?username=xxx&password=&ignore-cert=true
prompts for password. security=tls doesn't change it
This log is from a copy of software build on Redhat 10.1, but as noted before
it doesn't matter. Binaries that work fine on Ubuntu (including moving a copy
of Tomcat 9) fail the same way on Redhat 10.1. That's why I'm guessing it's the
version of freerdp. As I recall, I couldn't get it to work on Redhat 10.1 with
freerdp 2.
/usr/local/sbin/guacd -L debug -f
guacd[1853383]: INFO: Guacamole proxy daemon (guacd) version 1.6.0 started
guacd[1853383]: DEBUG: Successfully bound AF_INET socket to host 127.0.0.1,
port 4822
guacd[1853383]: INFO: Listening on host 127.0.0.1, port 4822
guacd[1853383]: INFO: Creating new client for protocol "rdp"
guacd[1853383]: INFO: Connection ID is
"$97086702-d105-4222-9d9a-099d7096fd16"
guacd[1853386]: DEBUG: Processing instruction: size
guacd[1853386]: DEBUG: Processing instruction: audio
guacd[1853386]: DEBUG: Processing instruction: video
guacd[1853386]: DEBUG: Processing instruction: image
guacd[1853386]: DEBUG: Processing instruction: timezone
guacd[1853386]: DEBUG: Processing instruction: name
guacd[1853386]: DEBUG: Parameter "console" omitted. Using default value of 0.
guacd[1853386]: DEBUG: Parameter "console-audio" omitted. Using default
value of 0.
guacd[1853386]: DEBUG: Parameter "cert-tofu" omitted. Using default value of
0.
guacd[1853386]: DEBUG: Parameter "disable-auth" omitted. Using default value
of 0.
guacd[1853386]: INFO: Security mode: TLS
guacd[1853386]: DEBUG: Parameter "port" omitted. Using default value of 3389.
guacd[1853386]: DEBUG: Parameter "timeout" omitted. Using default value of
10.
guacd[1853386]: DEBUG: User resolution is 2259x1146 at 144 DPI
guacd[1853386]: DEBUG: Parameter "dpi" omitted. Using default value of 96.
guacd[1853386]: DEBUG: Using resolution of 1504x764 at 96 DPI
guacd[1853386]: DEBUG: Parameter "force-lossless" omitted. Using default
value of 0.
guacd[1853386]: DEBUG: Parameter "read-only" omitted. Using default value of
0.
guacd[1853386]: DEBUG: Parameter "client-name" omitted. Using default value
of "Guacamole RDP".
guacd[1853386]: DEBUG: Parameter "enable-wallpaper" omitted. Using default
value of 0.
guacd[1853386]: DEBUG: Parameter "enable-theming" omitted. Using default
value of 0.
guacd[1853386]: DEBUG: Parameter "enable-font-smoothing" omitted. Using
default value of 0.
guacd[1853386]: DEBUG: Parameter "enable-full-window-drag" omitted. Using
default value of 0.
guacd[1853386]: DEBUG: Parameter "enable-desktop-composition" omitted. Using
default value of 0.
guacd[1853386]: DEBUG: Parameter "enable-menu-animations" omitted. Using
default value of 0.
guacd[1853386]: DEBUG: Parameter "disable-bitmap-caching" omitted. Using
default value of 0.
guacd[1853386]: DEBUG: Parameter "disable-offscreen-caching" omitted. Using
default value of 0.
guacd[1853386]: DEBUG: Parameter "disable-glyph-caching" omitted. Using
default value of 0.
guacd[1853386]: DEBUG: Glyph caching is currently universally disabled,
regardless of the value of the "disable-glyph-caching" parameter, as glyph
caching support is not considered stable by FreeRDP as of the FreeRDP 2.0.0
release. See: https://issues.apache.org/jira/browse/GUACAMOLE-1191
guacd[1853386]: DEBUG: Parameter "disable-audio" omitted. Using default
value of 0.
guacd[1853386]: DEBUG: Parameter "enable-printing" omitted. Using default
value of 0.
guacd[1853386]: DEBUG: Parameter "printer-name" omitted. Using default value
of "Guacamole Printer".
guacd[1853386]: DEBUG: Parameter "enable-drive" omitted. Using default value
of 0.
guacd[1853386]: DEBUG: Parameter "drive-name" omitted. Using default value
of "Guacamole Filesystem".
guacd[1853386]: DEBUG: Parameter "drive-path" omitted. Using default value
of "".
guacd[1853386]: DEBUG: Parameter "create-drive-path" omitted. Using default
value of 0.
guacd[1853386]: DEBUG: Parameter "disable-download" omitted. Using default
value of 0.
guacd[1853386]: DEBUG: Parameter "disable-upload" omitted. Using default
value of 0.
guacd[1853386]: DEBUG: Parameter "timezone" omitted. Using default value of
"America/New_York".
guacd[1853386]: DEBUG: Parameter "enable-sftp" omitted. Using default value
of 0.
guacd[1853386]: DEBUG: Parameter "sftp-hostname" omitted. Using default
value of "ilab1.cs.rutgers.edu".
guacd[1853386]: DEBUG: Parameter "sftp-port" omitted. Using default value of
"22".
guacd[1853386]: DEBUG: Parameter "sftp-timeout" omitted. Using default value
of 10.
guacd[1853386]: DEBUG: Parameter "sftp-username" omitted. Using default
value of "hedrick".
guacd[1853386]: DEBUG: Parameter "sftp-password" omitted. Using default
value of "".
guacd[1853386]: DEBUG: Parameter "sftp-passphrase" omitted. Using default
value of "".
guacd[1853386]: DEBUG: Parameter "sftp-root-directory" omitted. Using
default value of "/".
guacd[1853386]: DEBUG: Parameter "sftp-server-alive-interval" omitted. Using
default value of 0.
guacd[1853386]: DEBUG: Parameter "sftp-disable-download" omitted. Using
default value of 0.
guacd[1853386]: DEBUG: Parameter "sftp-disable-upload" omitted. Using
default value of 0.
guacd[1853386]: DEBUG: Parameter "recording-name" omitted. Using default
value of "recording".
guacd[1853386]: DEBUG: Parameter "recording-exclude-output" omitted. Using
default value of 0.
guacd[1853386]: DEBUG: Parameter "recording-exclude-mouse" omitted. Using
default value of 0.
guacd[1853386]: DEBUG: Parameter "recording-exclude-touch" omitted. Using
default value of 0.
guacd[1853386]: DEBUG: Parameter "recording-include-keys" omitted. Using
default value of 0.
guacd[1853386]: DEBUG: Parameter "create-recording-path" omitted. Using
default value of 0.
guacd[1853386]: DEBUG: Parameter "recording-write-existing" omitted. Using
default value of 0.
guacd[1853386]: INFO: Resize method: none
guacd[1853386]: DEBUG: Parameter "disable-gfx" omitted. Using default value
of 0.
guacd[1853386]: DEBUG: Parameter "color-depth" omitted. Using default value
of 32.
guacd[1853386]: DEBUG: Parameter "enable-touch" omitted. Using default value
of 0.
guacd[1853386]: DEBUG: Parameter "enable-audio-input" omitted. Using default
value of 0.
guacd[1853386]: DEBUG: Parameter "gateway-port" omitted. Using default value
of 443.
guacd[1853386]: DEBUG: Parameter "disable-copy" omitted. Using default value
of 0.
guacd[1853386]: DEBUG: Parameter "disable-paste" omitted. Using default
value of 0.
guacd[1853386]: INFO: No clipboard line-ending normalization specified.
Defaulting to preserving the format of all line endings.
guacd[1853386]: DEBUG: Parameter "wol-send-packet" omitted. Using default
value of 0.
guacd[1853386]: INFO: User "@bfcecdb0-181e-4c51-9d76-b950c59b3e0d" joined
connection "$97086702-d105-4222-9d9a-099d7096fd16" (1 users now present)
guacd[1853386]: DEBUG: Client is using protocol version "VERSION_1_5_0"
guacd[1853386]: INFO: Local system reports 20 processor(s) are available.
guacd[1853386]: INFO: Graphical updates will be encoded using 20 worker
thread(s).
guacd[1853386]: DEBUG: *************************************************
guacd[1853386]: DEBUG: This build is using [runtime-check] build options:
guacd[1853386]: DEBUG: * 'WITH_VERBOSE_WINPR_ASSERT=ON'
guacd[1853386]: DEBUG:
guacd[1853386]: DEBUG: [runtime-check] build options might slow down the
application
guacd[1853386]: DEBUG: *************************************************
guacd[1853386]: DEBUG: Failed to initialize digest md4
guacd[1853386]: DEBUG: *************************************************
guacd[1853386]: DEBUG: [SSL] \{Digest} build or configuration missing:
guacd[1853386]: DEBUG: * md4: NTLM support not available
guacd[1853386]: DEBUG: *************************************************
guacd[1853386]: DEBUG: *************************************************
guacd[1853386]: DEBUG: [SSL] \{Cipher} build or configuration missing:
guacd[1853386]: DEBUG: * rc4: assistance files with encrypted passwords,
NTLM, RDP licensing and RDP security will not work
guacd[1853386]: DEBUG: *************************************************
guacd[1853386]: INFO: Loading keymap "base"
guacd[1853386]: INFO: Loading keymap "en-us-qwerty"
guacd[1853386]: DEBUG: Local framebuffer format PIXEL_FORMAT_BGRX32
guacd[1853386]: DEBUG: Remote framebuffer format PIXEL_FORMAT_BGRA32
guacd[1853386]: DEBUG: Support for CLIPRDR (clipboard redirection)
registered. Awaiting channel connection.
guacd[1853386]: DEBUG: Support for static channel "rdpdr" loaded.
guacd[1853386]: DEBUG: Support for static channel "rdpsnd" loaded.
guacd[1853386]: DEBUG: Clipboard data has been received, but cannot be sent
to the RDP server because the CLIPRDR channel is not yet connected.
> prompting for password on redhat 10.1 but not ubuntu 24.04
> ----------------------------------------------------------
>
> Key: GUACAMOLE-2269
> URL: https://issues.apache.org/jira/browse/GUACAMOLE-2269
> Project: Guacamole
> Issue Type: Bug
> Components: guacamole
> Affects Versions: 1.6.0
> Reporter: Charles Hedrick
> Priority: Minor
>
> I don't know whether this is a bug or not, but I thought you should know.
> We've been using Guacamole for years on Ubuntu server, most recently 24.04. I
> recently built it on Redhat 10.1, with Tomcat 10.1. It works fine, but
> there's an odd different in behavior. (Using Tomcat 10.1 turns out not to be
> an issue. Just copy the war file to .../webapps-javaee rather than webapps.
> Tomcat converts it automatically.)
> We configure a lot of hosts to pass on the username, but leave the password
> null. That's because we're using CAS, so we don't know the password. On
> Ubuntu, it connects to the host, and we get a Linux login page. On Redhat
> 10.1, Guacamole prompts for a password.
> The difference matters, because a bad password is much harder to recover from
> when Guacamole prompts for the password and sends it to RDP.
> I actually copied the binaries from Ubuntu, and it didn't fix the problem, so
> I assume it's a difference in library versions, perhaps freerdp2 vs freerdp3.
> In /usr/src/guacamole-server-1.6.0/src/protocols/rdp/rdp.c,
> settings->password is NULL rather than "". I've patched it to turn NULL into
> guac_strdup("") if the username is set.
> The reason I moved is that I need a copy of tomcat where the vendor patches
> all the security bugs that our University's security scanner complains about.
> I don't want to have to watch for notifications and manually update tomcat.
> It doesn't look like any vendor is committed to maintaining tomcat 9 past
> this May, even though the community is maintaining it until May 2027.
>
>
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
