Re: guacamole server - libfreerdp-dev incompatible with Debian buster

2019-07-02 Thread Mike Jumper
On Tue, Jul 2, 2019, 13:20 M Bond  wrote:

> Hello, kindly be informed that the libfreerdp-dev no longer work with
> guacamole-server-1.0.0 on Debian buster, although it worked with Debian
> stretch.
>
> http://guacamole.apache.org/doc/gug/installing-guacamole.html
>
> I tried to use libfree2-dev to configure the compile list but it didn't
> work.
>
> As a result, freedrp is missing on guacamole-server-1.0.0 on Debian buster.
>
> Kindly advise.
>

You'll want to follow this issue in JIRA:

https://issues.apache.org/jira/browse/GUACAMOLE-249

Support for FreeRDP 2.0.0 is essentially a rewrite but is underway. It is
part of the upcoming 1.1.0 release.

- Mike


Re: guacamole server - libfreerdp-dev incompatible with Debian buster

2019-07-02 Thread Nick Couchman
On Tue, Jul 2, 2019 at 4:20 PM M Bond  wrote:

> Hello, kindly be informed that the libfreerdp-dev no longer work with
> guacamole-server-1.0.0 on Debian buster, although it worked with Debian
> stretch.


> http://guacamole.apache.org/doc/gug/installing-guacamole.html
>
> I tried to use libfree2-dev to configure the compile list but it didn't
> work.
>
> As a result, freedrp is missing on guacamole-server-1.0.0 on Debian buster.
>
>
Getting FreeRDP2 support for Guacamole is one of the top priorities for the
next release (1.1.0) and is actively being worked:

https://issues.apache.org/jira/browse/GUACAMOLE-249

-Nick


guacamole server - libfreerdp-dev incompatible with Debian buster

2019-07-02 Thread M Bond
Hello, kindly be informed that the libfreerdp-dev no longer work with
guacamole-server-1.0.0 on Debian buster, although it worked with Debian
stretch.

http://guacamole.apache.org/doc/gug/installing-guacamole.html

I tried to use libfree2-dev to configure the compile list but it didn't
work.

As a result, freedrp is missing on guacamole-server-1.0.0 on Debian buster.

Kindly advise.

Matt


[GitHub] [guacamole-client] mlewissmith commented on issue #422: GUACAMOLE-300: Support posixGroup in LDAP Authentication and Group-based Session Admission

2019-07-02 Thread GitBox
mlewissmith commented on issue #422: GUACAMOLE-300: Support posixGroup in LDAP 
Authentication and Group-based Session Admission
URL: https://github.com/apache/guacamole-client/pull/422#issuecomment-507792413
 
 
   yes. of course it should be an enum...


This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


With regards,
Apache Git Services


Re: Security review?

2019-07-02 Thread Nick Couchman
On Tue, Jul 2, 2019 at 10:09 AM Heinz Stockinger 
wrote:

> Hello Nick,
>
> Thank you. Do you know who is responsible for security at guacamole?
>

This list is the right place.  It's an open source project, and there's no
specific group or person responsible for security.  The community is.


> We might want to do such a review and might also have some changes to
> suggest and/or could contribute to the code.
>

Two notes, here:
- Any vulnerabilities should be disclosed responsibly (
https://en.wikipedia.org/wiki/Responsible_disclosure), and should be
reported privately to the security list.  See
http://guacamole.apache.org/faq/#security
- Code contributions for security improvements should follow the same
process as any other code contribution - we welcome security improvements,
but, unless it involves a vulnerability (see above), it isn't handled any
differently than other contributions.  See
http://guacamole.apache.org/open-source/.

-Nick

>


Re: Security review?

2019-07-02 Thread Nick Couchman
On Tue, Jul 2, 2019 at 10:00 AM Heinz Stockinger 
wrote:

> Hello,
>
> We are planning to use Guacamole to access sensitive data.
>
> Has the source code already been reviewed by e.g. security companies who
> could "certify" its technical readiness to be used to access sensitive data?
>

Not to my knowledge, no.

-Nick


Security review?

2019-07-02 Thread Heinz Stockinger

Hello,

We are planning to use Guacamole to access sensitive data.

Has the source code already been reviewed by e.g. security companies who 
could "certify" its technical readiness to be used to access sensitive data?


Thank you very much in advance for your help.

Heinz
--
*Dr. Heinz Stockinger, PMP*
Head of Core-IT
*SIB | Swiss Institute of Bioinformatics*
Quartier Sorge - Bâtiment Amphipôle - CH-1015 Lausanne - Switzerland



smime.p7s
Description: S/MIME Cryptographic Signature