Re: Session not associated with authentication provider "openid"?

[Mike Jumper]

On Mon, Jun 3, 2019 at 11:39 AM parth.mishra 
wrote:

> I've configured OIDC and the module loads correctly, I can sign in using my
> IDP and I'm redirected as expected. However,  I looked at the network
> console in Chrome and noticed that I get the following 404 error message
> when retrieving "/openid/data/users/" endpoint:
>
> {
>"message":"Session not associated with authentication provider
> \"openid\".",
>"translatableMessage":
>   {
> "key":"Session not associated with authentication
> provider\"openid\".",
> "variables":null
>},
> "statusCode":null,
> "expected":null,
> "type":"NOT_FOUND"
> }
>
> Does this mean that the OIDC extension failed and is relying on MySQL/db
> backend?


No. Nothing is failing here. The OpenID extension doesn't provide data for
the user account, thus the web interface receives a 404 when it asks the
extension for that data. It's not really an error as much as it is the REST
API communicating the nonexistence of the requested data.


> Functionally, the extension seems to be working as intended. New
> users are able to login and they are granted access even if I haven't
> provisioned the user in the database yet. Users not authorized by my OIDC
> client are unable to login as expected.
>
> So is there something not working that I'm not aware of and I just have the
> "illusion" of the OIDC extension working?


Things are working and as expected.

- Mike

Re: REST API documentation?

[parth.mishra]

Huh, that's strange that no documentation exists. Do people not design the
API spec and code stubs prior to development? I'm not familiar with Java dev
processes so I don't know. 

I think in my case, I figure it'd just be easier to use ODBC and handle
things manually. Not preferable, but I simply don't have the time to parse
out and document the API behavior. 



--
Sent from: 
http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

Session not associated with authentication provider "openid"?

[parth.mishra]

I've configured OIDC and the module loads correctly, I can sign in using my
IDP and I'm redirected as expected. However,  I looked at the network
console in Chrome and noticed that I get the following 404 error message
when retrieving "/openid/data/users/" endpoint:

{
   "message":"Session not associated with authentication provider
\"openid\".",
   "translatableMessage":
  { 
"key":"Session not associated with authentication
provider\"openid\".",
"variables":null
   },
"statusCode":null,
"expected":null,
"type":"NOT_FOUND"
}

Does this mean that the OIDC extension failed and is relying on MySQL/db
backend? Functionally, the extension seems to be working as intended. New
users are able to login and they are granted access even if I haven't
provisioned the user in the database yet. Users not authorized by my OIDC
client are unable to login as expected. 

So is there something not working that I'm not aware of and I just have the
"illusion" of the OIDC extension working?



--
Sent from: 
http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

Re: guacamole not update custom java script

[Mike Jumper]

Can you explain what you're trying to achieve at a high level? Rather than
describing only your attempted solution, can you describe what you're
trying to solve? What is driving you to try to modify
authenticationService.js?

https://meta.stackexchange.com/a/66378

- Mike


On Mon, Jun 3, 2019 at 11:23 AM Manoj Patil  wrote:

> Can you please give me the example to write extension and how to integrate
> it and rebuilt it and deploy
>
> On Mon, 3 Jun 2019, 20:45 Nick Couchman 
>> On Mon, Jun 3, 2019 at 10:33 AM Manoj Patil 
>> wrote:
>>
>>> Dear team,
>>>
>>> My scenario is that i have to write custom javascript after guacamole
>>> login successful in authenticateservice.js
>>>
>>> I tried writing simple alerts to check code work flow but it didnt
>>> worked for me.
>>>
>>> I then restarted tomcat and guacamole application but still nothing
>>> changed.
>>>
>>>
>> You'll have to be more specific about what you're trying to do and how
>> you've tried to integrate this in.  In general, if you're going to be
>> changing the code, you should write an extension for it, or, at the very
>> least, make your changes in the git repository and re-compile and re-deploy
>> the code.
>>
>> -Nick
>>
>

Re: guacamole not update custom java script

[Nick Couchman]

On Mon, Jun 3, 2019 at 2:23 PM Manoj Patil  wrote:

> Can you please give me the example to write extension and how to integrate
> it and rebuilt it and deploy
>

http://guacamole.apache.org/doc/gug/guacamole-ext.html

-Nick

>

Re: guacamole not update custom java script

[Manoj Patil]

Can you please give me the example to write extension and how to integrate
it and rebuilt it and deploy

On Mon, 3 Jun 2019, 20:45 Nick Couchman  On Mon, Jun 3, 2019 at 10:33 AM Manoj Patil  wrote:
>
>> Dear team,
>>
>> My scenario is that i have to write custom javascript after guacamole
>> login successful in authenticateservice.js
>>
>> I tried writing simple alerts to check code work flow but it didnt worked
>> for me.
>>
>> I then restarted tomcat and guacamole application but still nothing
>> changed.
>>
>>
> You'll have to be more specific about what you're trying to do and how
> you've tried to integrate this in.  In general, if you're going to be
> changing the code, you should write an extension for it, or, at the very
> least, make your changes in the git repository and re-compile and re-deploy
> the code.
>
> -Nick
>

Re: guacamole-client from GIT and user-mapping

[Mike Jumper]

On Mon, Jun 3, 2019 at 8:28 AM Vieri  wrote:

> ...
> My user-mapping file is:
>
>  # cat user-mapping.xml
> 
> ...
> 
>
> With Guacamole 1.0.0 I can login as "testme", and I can see the three
> connections.
>
> With today's Guacamole GIT I can "log-in" (sort of), but I get an error
> page on my browser:
>
> An error has occurred and this action cannot be completed. If the problem
> persists, please notify your system administrator or check your system logs.
>

Using your user-mapping.xml and a fresh build from staging/1.1.0, things
are working fine for me. Same for a build from master. No errors, three
connections upon login.

There must be some other reason that your deployment of the newer build is
not deploying/loading correctly vs. your deployment of the older build. The
difference in version does not correlate with the error.

- Mike

Re: Issue with private key authentication

[Mike Jumper]

On Mon, Jun 3, 2019 at 3:11 AM Someone123  wrote:

> Hello,
>
> I've got this issue, that is only possible to connect via Putty and a
> private key to a test device, but if I use the same private key in
> guacamole, I can't connect. I've deleted all empty lines, but It doesn't
> matter.
>
> Maybe the different types of keys, create this problem? Maybe someone got
> an
> idea.
>

Have you converted the key? Putty uses its own key format. Guacamole
expects keys to be in OpenSSH format.

http://guacamole.apache.org/doc/gug/configuring-guacamole.html#ssh-authentication


> (RSA/DSA/ECDSA/ED25519/SS-1 (RSA))


What are you trying to say here?

- Mike

Re: guacamole-client from GIT and user-mapping

[Vieri]

On Monday, June 3, 2019, 5:28:14 PM GMT+2, Vieri  
wrote: 

> With today's Guacamole GIT I can "log-in" (sort of), but I get an error page 
> on my browser:
>
> An error has occurred and this action cannot be completed. If the problem 
> persists, please notify your system administrator or check your system logs.

I'd just like to add that when I get this in my browser, the web console 
network tab in FF shows that there's a 500 Internal Error response when 
accessing:

https://10.215.144.124:8443/guacamole-1.1.0/api/tokens


-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

Re: guacamole-client from GIT and user-mapping

[Vieri]

On Monday, June 3, 2019, 5:14:22 PM GMT+2, Nick Couchman  
wrote: 
>
> Can you more clearly define what you mean by "does not work," and what you're 
> trying to accomplish?  It sounds like maybe your 1.0.0 and 1.1.0 environments 
> are set up differently, and it would be good to know at a 
> more detailed level what you're trying to do that "does not work."


Sure.

The environment is identical. The configuration file within /etc/guacamole is 
identical:

# cat guacamole.properties
guacd-hostname: 10.215.144.124
guacd-port: 4822

My user-mapping file is:

 # cat user-mapping.xml


    

    
    rdp
    10.215.246.24
    true
    

    
    rdp
    10.215.144.50
    true
    nla
    24
    ${GUAC_USERNAME}
    ${GUAC_PASSWORD}
    DOMAIN
    

    
    telnet
    alcatel-ocx
    

    



With Guacamole 1.0.0 I can login as "testme", and I can see the three 
connections.

With today's Guacamole GIT I can "log-in" (sort of), but I get an error page on 
my browser:

An error has occurred and this action cannot be completed. If the problem 
persists, please notify your system administrator or check your system logs.

Unfortunately, there's nothing relevant in my Tomcat log dir at the time of 
this test.

Vieri


-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

Re: guacamole not update custom java script

[Nick Couchman]

On Mon, Jun 3, 2019 at 10:33 AM Manoj Patil  wrote:

> Dear team,
>
> My scenario is that i have to write custom javascript after guacamole
> login successful in authenticateservice.js
>
> I tried writing simple alerts to check code work flow but it didnt worked
> for me.
>
> I then restarted tomcat and guacamole application but still nothing
> changed.
>
>
You'll have to be more specific about what you're trying to do and how
you've tried to integrate this in.  In general, if you're going to be
changing the code, you should write an extension for it, or, at the very
least, make your changes in the git repository and re-compile and re-deploy
the code.

-Nick

Re: guacamole-client from GIT and user-mapping

[Nick Couchman]

On Mon, Jun 3, 2019 at 10:14 AM Vieri  wrote:

> Hi,
>
> The current guacamole-client GIT version (1.1.0) doesn't seem to work with
> the default user-mapping.xml config. The same user-mapping does however
> work with the 1.0.0 release.


> I'm asking because I'm trying out the GIT version for full LDAP group
> support (seeAlso) and long LDAP/AD directories. This seems to work fine
> with current GIT. However, LDAP-configured NLA RDP server connections
> don't. That's why I was hoping to try NLA RDP connections via
> user-mapping.xml with Guacamole GIT (to avoid possible LDAP issues).
>
>
> Anyone know if user-mapping.xml is currently broken?
>
>
Can you more clearly define what you mean by "does not work," and what
you're trying to accomplish?  It sounds like maybe your 1.0.0 and 1.1.0
environments are set up differently, and it would be good to know at a more
detailed level what you're trying to do that "does not work."

-Nick

guacamole not update custom java script

[Manoj Patil]

Dear team,

My scenario is that i have to write custom javascript after guacamole login 
successful in authenticateservice.js

I tried writing simple alerts to check code work flow but it didnt worked for 
me.

I then restarted tomcat and guacamole application but still nothing changed.

pls guide mw on this.
-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

guacamole-client from GIT and user-mapping

[Vieri]

Hi,

The current guacamole-client GIT version (1.1.0) doesn't seem to work with the 
default user-mapping.xml config. The same user-mapping does however work with 
the 1.0.0 release.

I'm asking because I'm trying out the GIT version for full LDAP group support 
(seeAlso) and long LDAP/AD directories. This seems to work fine with current 
GIT. However, LDAP-configured NLA RDP server connections don't. That's why I 
was hoping to try NLA RDP connections via user-mapping.xml with Guacamole GIT 
(to avoid possible LDAP issues).


Anyone know if user-mapping.xml is currently broken?

Thanks,

Vieri

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

Issue with private key authentication

[Someone123]

Hello,

I've got this issue, that is only possible to connect via Putty and a
private key to a test device, but if I use the same private key in
guacamole, I can't connect. I've deleted all empty lines, but It doesn't
matter.   

Maybe the different types of keys, create this problem? Maybe someone got an
idea.
(RSA/DSA/ECDSA/ED25519/SS-1 (RSA))

My Apache Guacamole Version is 1.0.0.


 


Many greetings and thank you in advance










--
Sent from: 
http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

ISSUES USING TEXT INPUT ON IPAD

[Amarjeet Singh]

Hi Team,

Guacamole Client Version : 1.0.0
Guacamole Server Version : 1.0.0
Browser : Chrome  or  Safari Browser on iPad

*ISSUE 1* : Only half of the Canvas screen  ( displaying Remote Desktop
Server ) is visible.

STEPS TO REPRODUCE :-

1. User changes the input method to *TEXT INPUT* as there is no support of
Japanese virtual keyboard on Guacamole.
2. User clicks on the Text Input which  opens up the system keyboard of
ipad.
3.  Only half of the RDP screen is visible on iPad. User cannot scroll up
to view the upper part of the RDP Desktop screen.
4. Once system keyboard opens up. It is always up on the screen. User
cannot hide it by changing TEXT INPUT to none.


NOTE : The above issue also occurs if User changes input method to TEXT
INPUT to type english keywords using iPad.

*ISSUE 2* : Unable to drag the desktop icons of the remote Desktop Server

Default Behaviour on touch screens using mstsc : User can place finger on
the desktop icons and easily drag them.
On Guacamole :  User is unable to drag desktop icons in Guacamole.

Is there anything I can try to resolve this issue?

Thanks and Regards,
Amarjeet Singh