Audio

[Robert Dinse]

  Ok, making progress.  It was not connecting to pulseaudio because I had
forgotten to open a hole in the firewall for it, now that that is done it
indicated it connects but still I get no sound:

guacd[10356]: INFO: Connecting to PulseAudio...
guacd[10356]: INFO: Authorizing PulseAudio connection...
guacd[10356]: INFO: Sending client name...
guacd[10356]: INFO: PulseAudio now ready
guacd[10356]: INFO: Will use default sink: "auto_null"
guacd[10356]: INFO: Starting streaming from "Dummy Output"
guacd[10356]: INFO: PulseAudio stream being created...
guacd[10356]: INFO: PulseAudio stream now ready
guacd[10356]: DEBUG:Broadcasting clipboard to all connected users.
guacd[10356]: DEBUG:Created stream 0 for text/plain clipboard data.
guacd[10356]: DEBUG:Sent 23 bytes of clipboard data on stream 0.
guacd[10356]: DEBUG:Clipboard stream 0 complete.
guacd[10356]: DEBUG:Broadcast of clipboard complete.
guacd[10356]: DEBUG:Broadcasting clipboard to all connected users.
guacd[10356]: DEBUG:Created stream 0 for text/plain clipboard data.
guacd[10356]: DEBUG:Sent 23 bytes of clipboard data on stream 0.
guacd[10356]: DEBUG:Clipboard stream 0 complete.
guacd[10356]: DEBUG:Broadcast of clipboard complete.


-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-
  Eskimo North Linux Friendly Internet Access, Shell Accounts, and Hosting.
Knowledgeable human assistance, not telephone trees or script readers.
  See our web site: http://www.eskimo.com/ (206) 812-0051 or (800) 246-6874.

Sound

[Robert Dinse]

 Now trying to get sound to work.  I have tcp listening enabled on the
destination server ubuntu.eskimo.com.  I've got the following entry in
user-mapping.xml:




vnc
ubuntu.eskimo.com
5900
true
ubuntu.eskimo.com



 But no joy.  I can login but get no sound.  I've confirmed pulse audio
is listening with netstat.

-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-
 Eskimo North Linux Friendly Internet Access, Shell Accounts, and Hosting.
   Knowledgeable human assistance, not telephone trees or script readers.
 See our web site: http://www.eskimo.com/ (206) 812-0051 or (800) 246-6874.

Re: WebsocketTunnel

[Robert Dinse]

 Yea, this is very weird.  If I launch guacd in the forground it tells
me vnc protocol not supported when it tries to connect.  Yet, when I did the
configure I did --with-vnc and at the end it showed vnc: yes.

-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-
 Eskimo North Linux Friendly Internet Access, Shell Accounts, and Hosting.
   Knowledgeable human assistance, not telephone trees or script readers.
 See our web site: http://www.eskimo.com/ (206) 812-0051 or (800) 246-6874.

On Wed, 27 Feb 2019, Nick Couchman wrote:


Date: Wed, 27 Feb 2019 22:26:43 -0500
From: Nick Couchman 
Reply-To: user@guacamole.apache.org
To: user@guacamole.apache.org
Subject: Re: WebsocketTunnel

On Wed, Feb 27, 2019 at 22:08 Robert Dinse  wrote:



   This is how it fails when trying to connect vnc, can anyone tell me
what I've got wrong here?



Sorry, can't remember if you already posted it, but any useful log messages
from the guacd side?  Have you done debug logging on guacd?  Apologies if
that's in a previous thread...

-Nick

guacd - parallel builds

[Robert Dinse]

 Something is wrong that causes parallel builds of guacd to fail.  When
I first made it I used make -j13 to fully take advantage of a six core 
processor.  It said vnc not supported even though it was configured in.


 I went back and built without the parallel option and now it is working.
Thanks for all your help!

-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-
 Eskimo North Linux Friendly Internet Access, Shell Accounts, and Hosting.
   Knowledgeable human assistance, not telephone trees or script readers.
 See our web site: http://www.eskimo.com/ (206) 812-0051 or (800) 246-6874.

Re: Authentication Changes in 1.0.0

[Mike Jumper]

On Wed, Feb 27, 2019 at 7:16 PM Lee  wrote:

> Auth Code: https://github.com/VTLee/guac-auth-ext
> ...
>

> Note how the second connection didn't even mention AuthenticationProvider
> --
> something bypassed that entire step (and there's no pathway that passes
> through getAuthorizedConfigurations that doesn't log a message). I have no
> way to alter this process within my extension anymore.
>
>
Nothing bypassed the step - your extension as written would have worked
this way for all releases of Guacamole, including 0.9.14. The
SimpleAuthenticationProvider class always caches the GuacamoleConfiguration
instances returned by getAuthorizedConfigurations().

The authenticateUser() function is invoked only at the beginning of the
user's session. Until the user logs out or their session expires (or they
use a different machine/browser that isn't logged in), this will only be
invoked once. After that point, the existing user will only be updated if
the extension implements updateAuthenticatedUser(). Data associated with
the session like connections, accessed via the UserContext returned by
getUserContext(), will similarly only be updated if updateUserContext() is
implemented.


> The intended functionality (that worked in 9.14) is for the user to be able
> to have several simultaneous connections to guacamole which route to
> different servers based on an initial cookie value which is used to lookup
> connection information (think: multiple tabs to different machines). The
> cookie is simply a one-time use primary key in a table that says the target
> machine info (host, port, protocol).
>

If you want the user's session to be updated when your cookie changes, you
will need to write an extension which implements updateUserContext() to
update the UserContext associated with their session with respect to that
cookie.

I suspect that if you retest your extension with 0.9.14, you'll find that
the behavior is unchanged, and the result of processing the cookie is still
cached.

- Mike

Re: Authentication Changes in 1.0.0

[Lee]

Auth Code: https://github.com/VTLee/guac-auth-ext

What I see: Only the first cookie matters. If I try to re-connect later, I
see no `logger.info()` messages that I used to see in
`getAuthorizedConfigurations`. It simply goes right into the previous
connection


Here's what I see in logs; First connection:
21:06:13.893 [http-nio-8080-exec-4] INFO myorg.ext.AuthenticationProvider -
Authenticated '9f263271-720c-4ec3-8df9-3342ed1cb059' to access the access
point: rdp://10.1.41.16:3389
21:06:13.913 [http-nio-8080-exec-4] INFO o.a.g.r.auth.AuthenticationService
- User "9f263271-720c-4ec3-8df9-3342ed1cb059" successfully authenticated
from [10.1.1.14, 10.1.6.31].
21:06:14.373 [http-nio-8080-exec-15] INFO o.a.g.environment.LocalEnvironment
- GUACAMOLE_HOME is "/root/.guacamole".
21:06:14.436 [http-nio-8080-exec-15] INFO o.a.g.tunnel.TunnelRequestService
- User "9f263271-720c-4ec3-8df9-3342ed1cb059" connected to connection
"2c28b2f6-156a-4f84-bbaa-7becffb92f00/ac454c62-387f-44aa-b129-352b6fce6d8d/012a5617-00aa-430c-9915-5e92e91b4d70".
21:06:20.856 [http-nio-8080-exec-12] INFO o.a.g.tunnel.TunnelRequestService
- User "9f263271-720c-4ec3-8df9-3342ed1cb059" disconnected from connection
"2c28b2f6-156a-4f84-bbaa-7becffb92f00/ac454c62-387f-44aa-b129-352b6fce6d8d/012a5617-00aa-430c-9915-5e92e91b4d70".
Duration: 6416 milliseconds

Connection with different cookie passed in (which the service would look up
and realize is a different server):
21:06:22.867 [http-nio-8080-exec-13] INFO o.a.g.environment.LocalEnvironment
- GUACAMOLE_HOME is "/root/.guacamole".
21:06:22.879 [http-nio-8080-exec-13] INFO o.a.g.tunnel.TunnelRequestService
- User "9f263271-720c-4ec3-8df9-3342ed1cb059" connected to connection
"2c28b2f6-156a-4f84-bbaa-7becffb92f00/ac454c62-387f-44aa-b129-352b6fce6d8d/012a5617-00aa-430c-9915-5e92e91b4d70".
21:06:24.541 [http-nio-8080-exec-12] INFO o.a.g.tunnel.TunnelRequestService
- User "9f263271-720c-4ec3-8df9-3342ed1cb059" disconnected from connection
"2c28b2f6-156a-4f84-bbaa-7becffb92f00/ac454c62-387f-44aa-b129-352b6fce6d8d/012a5617-00aa-430c-9915-5e92e91b4d70".
Duration: 1662 milliseconds

Note how the second connection didn't even mention AuthenticationProvider --
something bypassed that entire step (and there's no pathway that passes
through getAuthorizedConfigurations that doesn't log a message). I have no
way to alter this process within my extension anymore.


The intended functionality (that worked in 9.14) is for the user to be able
to have several simultaneous connections to guacamole which route to
different servers based on an initial cookie value which is used to lookup
connection information (think: multiple tabs to different machines). The
cookie is simply a one-time use primary key in a table that says the target
machine info (host, port, protocol).




--
Sent from: 
http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

WebsocketTunnel

[Robert Dinse]

  This is how it fails when trying to connect vnc, can anyone tell me
what I've got wrong here?

19:06:50.386 [http-nio-8080-exec-9] INFO  o.a.g.r.auth.AuthenticationService - 
User "public" successfully authenticated from 127.0.0.1.
19:06:50.731 [http-nio-8080-exec-3] INFO  o.a.g.environment.LocalEnvironment - 
GUACAMOLE_HOME is "/etc/guacamole".
19:06:50.836 [http-nio-8080-exec-3] ERROR 
o.a.g.w.GuacamoleWebSocketTunnelEndpoint - Creation of WebSocket tunnel to 
guacd failed: java.net.ConnectException: Connection refused (Connection 
refused)
19:06:50.841 [http-nio-8080-exec-4] INFO  o.a.g.environment.LocalEnvironment - 
GUACAMOLE_HOME is "/etc/guacamole".
19:06:50.844 [http-nio-8080-exec-4] ERROR o.a.g.s.GuacamoleHTTPTunnelServlet - 
HTTP tunnel request failed: java.net.ConnectException: Connection refused 
(Connection refused)
19:07:05.866 [http-nio-8080-exec-8] INFO  o.a.g.environment.LocalEnvironment - 
GUACAMOLE_HOME is "/etc/guacamole".
19:07:05.868 [http-nio-8080-exec-8] ERROR 
o.a.g.w.GuacamoleWebSocketTunnelEndpoint - Creation of WebSocket tunnel to 
guacd failed: java.net.ConnectException: Connection refused (Connection 
refused)
19:07:05.882 [http-nio-8080-exec-1] INFO  o.a.g.environment.LocalEnvironment - 
GUACAMOLE_HOME is "/etc/guacamole".
19:07:05.883 [http-nio-8080-exec-1] ERROR o.a.g.s.GuacamoleHTTPTunnelServlet - 
HTTP tunnel request failed: java.net.ConnectException: Connection refused 
(Connection refused)
19:07:20.901 [http-nio-8080-exec-7] INFO  o.a.g.environment.LocalEnvironment - 
GUACAMOLE_HOME is "/etc/guacamole".
19:07:20.903 [http-nio-8080-exec-7] ERROR 
o.a.g.w.GuacamoleWebSocketTunnelEndpoint - Creation of WebSocket tunnel to 
guacd failed: java.net.ConnectException: Connection refused (Connection 
refused)
19:07:20.911 [http-nio-8080-exec-6] INFO  o.a.g.environment.LocalEnvironment - 
GUACAMOLE_HOME is "/etc/guacamole".
19:07:20.911 [http-nio-8080-exec-6] ERROR o.a.g.s.GuacamoleHTTPTunnelServlet - 
HTTP tunnel request failed: java.net.ConnectException: Connection refused 
(Connection refused)



-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-
 Eskimo North Linux Friendly Internet Access, Shell Accounts, and Hosting.
   Knowledgeable human assistance, not telephone trees or script readers.
 See our web site: http://www.eskimo.com/ (206) 812-0051 or (800) 246-6874.

Re: Authentication Changes in 1.0.0

[Nick Couchman]

On Wed, Feb 27, 2019 at 18:06 Lee  wrote:

> Hello,
>
>   I'm seeing a change in behavior I'm not sure how to work around. I'm
> using
> the docker image guacamole/guacamole:1.0.0 with a custom authentication
> provider extending SimpleAuthenticationProvider. With guacamole 0.9.14, I
> saw calls to getAuthorizedConfigurations in the authentication provider
> with
> every user request. This was great, as it allowed a single user to have
> multiple sessions open in separate tabs as the function could return
> different hosts/protocols/usernames/passwords.


Perhaps you could share your code?  And what you're trying to accomplish?
You can have multiple connections open on the client in different tabs, and
you can link directly to these different connections, and each connection
can have its own host, protocol, username, and password.


-Nick

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

[drhy]

Added to the first post

# Ensure server doesn't sleep:
systemctl mask sleep.target suspend.target hibernate.target
hybrid-sleep.target

# Install PDF printer driver for Guacamole's print redirection:
yum -y install ghostscript
# If A4 (not Letter) is your default paper size:
echo 'a4' > /etc/papersize

-David



--
Sent from: 
http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

Guacamole VNC / Web Tunnel

[Robert Dinse]

 I've gotten guacamole to work with telnet, ssh, and rdp, but I have
not been able to get it to connect to vnc.  I have verified that I can connect
using xvnc4viewer on the same host guacamole is running on to the host I am
trying to connect to.

 You can see the catalina.out, I cleared the logs, restarted tomcat8,
made a connection attempt, then shut it down to try to keep as much
irrelevant material out of the logs as possible.

 https://www.eskimo.com/forums/viewtopic.php?f=6=495

 This is what my guacamole.properties looks like:

# Hostname and port of guacamole proxy
guacd-host: localhost
guacd-port: 4822

# Authentication provider class
auth-provider: 
net.sourceforge.guacamole.net.basic.BasicFileAuthenticationProvider


# SSL
guacd-ssl: true

# Properties used by BasicFileAuthenticationProvider
basic-user-mapping: /etc/guacamole/user-mapping.xml

 This is my guacd.conf

#
# guacd configuration file
#

[daemon]

pid_file = /var/run/guacd.pid
log_level = info

[server]

bind_host = localhost
bind_port = 4822

#
# The following parameters are valid only if
# guacd was built with SSL support.
#

[ssl]

server_certificate = /misc/ssl/eskimo.com/certs/STAR_eskimo_com.pem
server_key = /misc/ssl/eskimo.com/key/eskimo.key

 And this is my user-mapping.xml




vnc
centos6.eskimo.com
5900



 Don't worry, the vnc host uses xdmcp and so what comes up if you connect
to it is an xdmcp greeter / login screen.

 The centos6 host is running tigervnc which is one of the vnc's 
recommended.


-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-
 Eskimo North Linux Friendly Internet Access, Shell Accounts, and Hosting.
   Knowledgeable human assistance, not telephone trees or script readers.
 See our web site: http://www.eskimo.com/ (206) 812-0051 or (800) 246-6874.

Authentication Changes in 1.0.0

[Lee]

Hello,

  I'm seeing a change in behavior I'm not sure how to work around. I'm using
the docker image guacamole/guacamole:1.0.0 with a custom authentication
provider extending SimpleAuthenticationProvider. With guacamole 0.9.14, I
saw calls to getAuthorizedConfigurations in the authentication provider with
every user request. This was great, as it allowed a single user to have
multiple sessions open in separate tabs as the function could return
different hosts/protocols/usernames/passwords.

Now on 1.0.0, it seems to ignore the authentication provider if they've
already passed through once (even through the passed in credentials object
would result in a different configuration). This pass through then tries to
re-connect to the previously used host with old username/password. This is
not our desired functionality and seems to persist for quite some time. I'm
unsure how to restore the previous functionality as long as it completely
bypasses the extension when the follow up request comes in.

Any guidance to documentation or comments on what the culprit might be would
be helpful.

-Lee





--
Sent from: 
http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

Re: LDAP Cannot Find Specific User

[Paul Cantle]

Does it work if you use the global catalogue port instead of standard 
LDAP/LDAPS?

Port 3268/3269 (non-secure / secure respectively)

Rgds

Paul

> On 27 Feb 2019, at 21:21, avocado  wrote:
> 
> I found this in the log:
> 
> [https-openssl-apr-443-exec-10] WARN  o.a.g.auth.ldap.ObjectQueryService -
> Given a referral, but referrals are disabled. Er
> ror was: Referral
> 
> 
> I also moved the user to a different OU, and was able to find the user. This
> tells me it is an issue with the OU after all. I looked at the permissions
> for the problem OU for 'Authenticated Users', but I can't find a difference
> from any of the other OUs. Any other input would be appreciated.
> 
> 
> 
> --
> Sent from: 
> http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

Re: LDAP Cannot Find Specific User

[avocado]

I found this in the log:

[https-openssl-apr-443-exec-10] WARN  o.a.g.auth.ldap.ObjectQueryService -
Given a referral, but referrals are disabled. Er
ror was: Referral


I also moved the user to a different OU, and was able to find the user. This
tells me it is an issue with the OU after all. I looked at the permissions
for the problem OU for 'Authenticated Users', but I can't find a difference
from any of the other OUs. Any other input would be appreciated.



--
Sent from: 
http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

Re: Can't print in RDP sessions

[Fabián Rodríguez]

Le 19-02-27 à 15 h 35, Nick Couchman a écrit :
> On Wed, Feb 27, 2019 at 3:18 PM Fabián Rodríguez
> mailto:magic...@member.fsf.org>> wrote:
>
> Hi,
>
> I am using Guacamole 1.0.0 in Debian 9 with Tomcat 8, database
> authentication with self-sgned SSL certificate.
>
> After following the installation documentation
>  I
> documented my initial 0.9.14 installation steps here
> . I then recently used this
> script
> 
> 
> to update, while working around  a small bug
> . VNC,
> SSH and RDP remote sessions are used daily without problems.
>
>
> Just FYI, that script is not maintained by the project.

I know, it automates the native installation steps - I just mentioned it
for context.

> I can't seem to get a prompt to save the PDF file generated when
> printing in RDP sessions.
>
> I initially had to symlink all files in /usr/local/lib/freerdp to
> /usr/lib/x86_64-linux-gnu/freerdp, for example (see this bug
> report ):
>
>
> The Docker image you're using is also not the official Guacamole
> project Docker image, and not maintained by the project [...]

Sorry, I am not using Docker. I linked the wrong bug report, I meant to
reference this one:

https://jira.glyptodon.com/browse/GUAC-513

>  ln -s /usr/local/lib/freerdp/guacdr-client.so
> /usr/lib/x86_64-linux-gnu/freerdp/guacdr-client.so
>
> After reboot guacdr started normally:
>
> Feb 27 14:35:19 guacamole guacd[14998]: guacsnd connected.
> Feb 27 14:35:19 guacamole guacd[14998]: guacdr connected.
>
> When connected, a new printer "Guacamole PDF printer" (as I named
> it) showed up. When I start printing there is no error, only a
> message on my local browser notifications "Waiting for
> guacamole.domain.lan...:" and nothing happens.
>
> Ghostscript is installed, in /var/syslog I see:
>
> Feb 27 14:44:51 guacamole guacd[23876]: Device 0 (Imprimante
> Guacamole PDF) connected successfully
> Feb 27 14:45:07 guacamole guacd[23876]: Print job created
> Feb 27 14:45:07 guacamole guacd[23876]: Created PDF filter process
> PID=24158
> Feb 27 14:45:07 guacamole guacd[24158]: Running gs
>
> And a gs process is running continuously:
>
> PID TTY  STAT   TIME COMMAND
> 24158 ?  S  0:06 gs -q -dNOPAUSE -dBATCH -dSAFER
> -dPARANOIDSAFER -sDEVICE=pdfwrite -sOutputFile=- -c .setpdfwrite
> -sstdout=/dev/null -f -
>
> But nothing happens...
>
> If I close the session then a file dialog to save appears, the
> resulting file is very small (255 bytes) and of course corrupted
> but it has PDF headers.
>
>
> The issue you're running into is likely this one:
>
> https://issues.apache.org/jira/browse/GUACAMOLE-506
>
> I don't know anything about how that Docker container you're using is
> set up, but I suspect it's using HTTP(S) and not WebSocket(/WSS).

I am not using Docker so not sure how the default installation would
have the same problem.

F.


-- 
Fabián Rodríguez
http://fsf.magicfab.ca/

Re: LDAP Cannot Find Specific User

[Nick Couchman]

On Wed, Feb 27, 2019 at 3:44 PM avocado  wrote:

> I have had Apache Guacamole running with LDAP + MySQL for quite some time
> now. I have not had many issues, but I have come across a new one. When I
> search for users, I am unable to find a certain user. I have
> *ldap-user-base-dn:* at the very root of my domain, so I know that OU isn't
> an issue. I use *ldap-user-search-filter:* to filter for a certain group
> membership, but I have removed and re-added the user to the group.
> Typically, once I add a user to the group, log out, and log in the user
> appears. I have ~100 users, and have never seen this before. Does anyone
> know where I can even look for a log that might point me in the direction
> of
> the problem?
>
>
Check the catalina.out file from Tomcat to see if there are any errors.  If
not, try bumping up logging (
http://guacamole.apache.org/doc/gug/configuring-guacamole.html#webapp-logging)
and see if it provides any additional information.

-Nick

LDAP Cannot Find Specific User

[avocado]

I have had Apache Guacamole running with LDAP + MySQL for quite some time
now. I have not had many issues, but I have come across a new one. When I
search for users, I am unable to find a certain user. I have
*ldap-user-base-dn:* at the very root of my domain, so I know that OU isn't
an issue. I use *ldap-user-search-filter:* to filter for a certain group
membership, but I have removed and re-added the user to the group.
Typically, once I add a user to the group, log out, and log in the user
appears. I have ~100 users, and have never seen this before. Does anyone
know where I can even look for a log that might point me in the direction of
the problem?



--
Sent from: 
http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

Re: Can't print in RDP sessions

[Nick Couchman]

On Wed, Feb 27, 2019 at 3:18 PM Fabián Rodríguez 
wrote:

> Hi,
>
> I am using Guacamole 1.0.0 in Debian 9 with Tomcat 8, database
> authentication with self-sgned SSL certificate.
>
> After following the installation documentation
>  I documented
> my initial 0.9.14 installation steps here
> . I then recently used this script
> 
> to update, while working around  a small bug
> . VNC, SSH and
> RDP remote sessions are used daily without problems.
>

Just FYI, that script is not maintained by the project.


> I can't seem to get a prompt to save the PDF file generated when printing
> in RDP sessions.
>
> I initially had to symlink all files in /usr/local/lib/freerdp to 
> /usr/lib/x86_64-linux-gnu/freerdp,
> for example (see this bug report
> ):
>

The Docker image you're using is also not the official Guacamole project
Docker image, and not maintained by the project, so we cannot provide any
support for it.  If you'd like the one associated with the project, use
gaucamole/guacamole and guacamole/guacd.


> ln -s /usr/local/lib/freerdp/guacdr-client.so
> /usr/lib/x86_64-linux-gnu/freerdp/guacdr-client.so
>
> After reboot guacdr started normally:
> Feb 27 14:35:19 guacamole guacd[14998]: guacsnd connected.
> Feb 27 14:35:19 guacamole guacd[14998]: guacdr connected.
>
> When connected, a new printer "Guacamole PDF printer" (as I named it)
> showed up. When I start printing there is no error, only a message on my
> local browser notifications "Waiting for guacamole.domain.lan...:" and
> nothing happens.
>
> Ghostscript is installed, in /var/syslog I see:
>
> Feb 27 14:44:51 guacamole guacd[23876]: Device 0 (Imprimante Guacamole
> PDF) connected successfully
> Feb 27 14:45:07 guacamole guacd[23876]: Print job created
> Feb 27 14:45:07 guacamole guacd[23876]: Created PDF filter process
> PID=24158
> Feb 27 14:45:07 guacamole guacd[24158]: Running gs
>
> And a gs process is running continuously:
>
> PID TTY  STAT   TIME COMMAND
> 24158 ?  S  0:06 gs -q -dNOPAUSE -dBATCH -dSAFER -dPARANOIDSAFER
> -sDEVICE=pdfwrite -sOutputFile=- -c .setpdfwrite -sstdout=/dev/null -f -
>
> But nothing happens...
>
> If I close the session then a file dialog to save appears, the resulting
> file is very small (255 bytes) and of course corrupted but it has PDF
> headers.
>

The issue you're running into is likely this one:

https://issues.apache.org/jira/browse/GUACAMOLE-506

I don't know anything about how that Docker container you're using is set
up, but I suspect it's using HTTP(S) and not WebSocket(/WSS).

-Nick

>

Can't print in RDP sessions

[Fabián Rodríguez]

Hi,

I am using Guacamole 1.0.0 in Debian 9 with Tomcat 8, database
authentication with self-sgned SSL certificate.

After following the installation documentation
 I
documented my initial 0.9.14 installation steps here
. I then recently used this script

to update, while working around  a small bug
. VNC, SSH and
RDP remote sessions are used daily without problems.

I can't seem to get a prompt to save the PDF file generated when
printing in RDP sessions.

I initially had to symlink all files in /usr/local/lib/freerdp to
/usr/lib/x86_64-linux-gnu/freerdp, for example (see this bug report
):

ln -s /usr/local/lib/freerdp/guacdr-client.so
/usr/lib/x86_64-linux-gnu/freerdp/guacdr-client.so

After reboot guacdr started normally:

Feb 27 14:35:19 guacamole guacd[14998]: guacsnd connected.
Feb 27 14:35:19 guacamole guacd[14998]: guacdr connected.

When connected, a new printer "Guacamole PDF printer" (as I named it)
showed up. When I start printing there is no error, only a message on my
local browser notifications "Waiting for guacamole.domain.lan...:" and
nothing happens.

Ghostscript is installed, in /var/syslog I see:

Feb 27 14:44:51 guacamole guacd[23876]: Device 0 (Imprimante Guacamole
PDF) connected successfully
Feb 27 14:45:07 guacamole guacd[23876]: Print job created
Feb 27 14:45:07 guacamole guacd[23876]: Created PDF filter process PID=24158
Feb 27 14:45:07 guacamole guacd[24158]: Running gs

And a gs process is running continuously:

PID TTY  STAT   TIME COMMAND
24158 ?  S  0:06 gs -q -dNOPAUSE -dBATCH -dSAFER -dPARANOIDSAFER
-sDEVICE=pdfwrite -sOutputFile=- -c .setpdfwrite -sstdout=/dev/null -f -

But nothing happens...

If I close the session then a file dialog to save appears, the resulting
file is very small (255 bytes) and of course corrupted but it has PDF
headers.

I tested this using both Firefox ESR and 65, Chrome and Chromium, from
Debian 9 and WIndows 7 Pro desktops with the same results. Any ideas or
suggestions on how to troubleshoot further ?

Thanks in advance.

F.

-- 
Fabián Rodríguez
http://fsf.magicfab.ca/

Error

[Robert Dinse]

 When I try to make a connection to a server with vnc this is the error
I get in catalina.out:

 02:06:08.483 [http-nio-8080-exec-7] ERROR 
o.a.g.w.GuacamoleWebSocketTunnelEndpoint - Creation of WebSocket tunnel to 
guacd failed: Connection to guacd timed out.


  Can anyone suggest how to debug this further?

-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-
 Eskimo North Linux Friendly Internet Access, Shell Accounts, and Hosting.
   Knowledgeable human assistance, not telephone trees or script readers.
 See our web site: http://www.eskimo.com/ (206) 812-0051 or (800) 246-6874.

Re: guacamole

[Robert Dinse]

 SSH works, but vnc does not.

-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-
 Eskimo North Linux Friendly Internet Access, Shell Accounts, and Hosting.
   Knowledgeable human assistance, not telephone trees or script readers.
 See our web site: http://www.eskimo.com/ (206) 812-0051 or (800) 246-6874.

On Wed, 27 Feb 2019, Robert Dinse wrote:


Date: Wed, 27 Feb 2019 01:14:01 -0800 (PST)
From: Robert Dinse 
Reply-To: user@guacamole.apache.org
To: user@guacamole.apache.org
Subject: guacamole


I have a sample user in user-mapping.xml, it accepts my password but
times out trying to connect to the vnc server, yet, I can fire up xvnc4viewer
on the host that guac is running on and connect to vnc on the host okay.  Any
tips at troubleshooting this?

-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-
Eskimo North Linux Friendly Internet Access, Shell Accounts, and Hosting.
  Knowledgeable human assistance, not telephone trees or script readers.
See our web site: http://www.eskimo.com/ (206) 812-0051 or (800) 246-6874.

guacamole

[Robert Dinse]

 I have a sample user in user-mapping.xml, it accepts my password but
times out trying to connect to the vnc server, yet, I can fire up xvnc4viewer
on the host that guac is running on and connect to vnc on the host okay.  Any
tips at troubleshooting this?

-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-
 Eskimo North Linux Friendly Internet Access, Shell Accounts, and Hosting.
   Knowledgeable human assistance, not telephone trees or script readers.
 See our web site: http://www.eskimo.com/ (206) 812-0051 or (800) 246-6874.