Re: Reverse proxy & blank page after saving

2019-06-07 Thread Mike Jumper
On Fri, Jun 7, 2019, 22:11 Ciro Iriarte  wrote:

> Hi!,
>
> Anybody has seen the situation where Guacamole works normally to
> connect to different sessions, but saving session configuration leads
> to a blank page?. Settings are saved though, you just need to reload
> Home.
>

What do you mean by "saving session configuration"?

- Mike


Reverse proxy & blank page after saving

2019-06-07 Thread Ciro Iriarte
Hi!,

Anybody has seen the situation where Guacamole works normally to
connect to different sessions, but saving session configuration leads
to a blank page?. Settings are saved though, you just need to reload
Home.

The only catch is that I'm using a reverse proxy.

Regards,
CI.-

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org



Re: Can't get the client installed

2019-06-07 Thread Mike Jumper
On Thu, Jun 6, 2019 at 11:38 AM Goran  wrote:

> I've done this:
>
> rm -rf guacamole-client/
> git clone https://github.com/apache/guacamole-client.git
> cd guacamole-client/
> mvn package
>
> And got this output. Maybe I'm missing some package?
> ...
> Error while generating Javadoc:
> [ERROR] Exit code: 1 - javadoc: error - The code being documented uses
> modules but the packages defined in
> http://docs.oracle.com/javase/6/docs/api/ are in the unnamed module.
> ...


Not sure. It looks like this is a known issue either with the Maven javadoc
plugin, with the javadoc tool, or both., and specifically with newer
versions of the JDK:

https://bugs.openjdk.java.net/browse/JDK-8212233

>From the above, it looks like a minor change to the pom.xml wherever the
javadoc plugin is being configured may resolve things, informing javadoc
that the code being documented is written for compatibility with Java 8. A
similar issue was mentioned on the mailing list last month, with the user
later noting the problem as solved by switching to JDK 8:

https://lists.apache.org/thread.html/b82c6ed4c73af93a46e4efc1eb8b6a7d5c36cde382a12574e90873e7@%3Cuser.guacamole.apache.org%3E

Perhaps there is more at work here than simply needing a specific JDK.

- Mike


Re: Compile Fails, Does Not Find libjpeg-turbo

2019-06-07 Thread Mike Jumper
In general, on a platform using RPM packages, the convention is to separate
the binaries of a library (libfoo) from the headers required to compile
software against that library (libfoo-devel). An RPM that has already been
built against a particular library can thus simply depend on the binary
package for that library, and the user need not have a bunch of development
headers installed that are not needed. Compiling software against the
library would require both the binary and the development packages.

Debian, Ubuntu, etc. follow similar conventions with "-dev" instead of
"-devel".

The fact that this worked for you before after installing only one package
without the conventional "-devel" suffix suggests that the maintainers of
that package did not follow that convention. Nothing within RPM inherently
requires that the maintainer follow those conventions, of course, nor that
they document that they didn't follow those conventions, nor that the
package actually contain what is expected vs. a post-install script that
runs "rm -rf /". Caveat emptor.

- Mike


On Wed, Jun 5, 2019 at 12:22 PM Zer0Cool  wrote:

> Sorry, correction...
>
> libjpeg-turbo-devel
>
>
>
> --
> Sent from:
> http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/
>
> -
> To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
> For additional commands, e-mail: user-h...@guacamole.apache.org
>
>


Re: Firefox client and Guacamole

2019-06-07 Thread Mike Jumper
On Fri, Jun 7, 2019 at 5:12 AM Vieri  wrote:

> Hi,
>
> In a previous message I mentioned a problem I was seeing with several
> Firefox versions. Whenever I try to connect to either a telnet service or
> RDP server via Guacamole, I sometimes get an odd behavior as if the user
> (me) were sending out ENTER keystrokes (I sent a screenshot). This is
> usually fixed by logging out and back in again. However, it can randomly
> occur again until I log out once again.
>
> This is what I get in my logs when it happens.
>
> STDOUT:
>
> 13:58:06.442 [https-openssl-apr-8443-exec-7] DEBUG
> o.a.g.a.ldap.LDAPConnectionService - Connection to LDAP server without
> encryption.
> 13:58:06.494 [https-openssl-apr-8443-exec-7] DEBUG
> o.a.g.auth.ldap.ObjectQueryService - Searching
> "cn=Users,dc=mydomain,dc=org" for objects matching
> "(&(!(objectClass=guacConfigGroup))(member=cn=myuser,cn=Users,dc=mydomain,dc=org))".
> 13:58:06.812 [https-openssl-apr-8443-exec-7] INFO
> o.a.g.r.auth.AuthenticationService - User "myuser" successfully
> authenticated from 10.215.144.48.
> 13:58:06.813 [https-openssl-apr-8443-exec-7] DEBUG
> o.a.g.a.ldap.LDAPConnectionService - Connection to LDAP server without
> encryption.
> 13:58:06.833 [https-openssl-apr-8443-exec-7] DEBUG
> o.a.g.auth.ldap.ObjectQueryService - Searching
> "cn=Users,dc=mydomain,dc=org" for objects matching
> "(&(|(objectClass=guac*)(cn=*IT*)(cn=*VPN*)(cn=*myuser*))(cn=*))".
> 13:58:07.116 [https-openssl-apr-8443-exec-7] DEBUG
> o.a.g.auth.ldap.ObjectQueryService - Searching
> "cn=Users,dc=mydomain,dc=org" for objects matching
> "(&(!(objectClass=guacConfigGroup))(cn=*))".
> 13:58:07.963 [https-openssl-apr-8443-exec-7] WARN
> o.a.g.auth.ldap.ObjectQueryService - Failed to process an LDAP search
> result. Error was: Sizelimit Exceeded
> ...
>

You'll probably want to look into your LDAP query limits if you're
expecting listing of LDAP users within guac's admin interface to succeed,
but this will have no bearing on handling of keyboard events. The two parts
of the stack which could contain a problem resulting in a mishandled event
are:

1) The browser-side keyboard event handling within JavaScript
2) If keyboard events within the browser are handled correctly, the
handling of received events within protocol-specific event handling
(libguac-client-rdp, etc.)

RDP keyboard event translation is complex, but if you're seeing this same
behavior regardless of underlying protocol, and specifically within
Firefox, that suggests something may be behaving differently on the
JavaScript side.

We have a test page for just the keyboard event handling which can be used
to verify whether things are not behaving as expected in the client. Try
testing against that with the affected browser and see whether you see the
same issue:

http://guacamole.apache.org/pub/tests/guac/keyboard-test.html

...
> Jun  7 13:58:11 inf-fw3 guacd[18791]: Internal RDP client disconnected
> Jun  7 13:58:11 inf-fw3 guacd[14495]: Connection
> "$ae4363ce-1671-40f0-8734-ce45d6af39ad" removed.
> Jun  7 13:58:11 inf-fw3 kernel: guacd[18797]: segfault at 7fd7ea22001c ip
> 7fd802aafb8b sp 7fd801ccece0 error 4 in
> libguac-client-rdp.so.0.0.0[7fd802a98000+2c000]
>
>
> Note the segfault.
>
> What can I try?
> Is it worth a JIRA report?


Segfaults within the RDP support tend to be due to older builds of the
guac*.so plugins for FreeRDP hanging around from older builds of
guacamole-server, so I wouldn't recommend opening a new JIRA issue at this
point. First verify that there is nothing hanging around from older builds
(or from distribution packages, or third-party packages). If there is any
chance that the FreeRDP libraries may have been upgraded since you last
built things, I'd recommend rebuilding as FreeRDP releases are not
generally API- nor ABI-compatible, and this could also cause a segfault
without there being an issue within Guacamole.

If you can confirm the above, and the segfault is reproducible, a backtrace
from gdb would be the next step to determine what is happening. I don't
believe this is related to the keyboard behavior you're seeing.

- Mike


Re: guacamole not update custom java script

2019-06-07 Thread Mike Jumper
On Fri, Jun 7, 2019, 06:24 Manoj Patil  wrote:

> Dear Mike,
>
> We have to insert data in mysql/mariadb database post successful of
> guacamole user login.
>

Please describe the high-level need, rather than the low-level solution
you're attempting. *Why* are you looking to do this?

- Mike


Re: Comparison of Spice-html5 and Guacamole

2019-06-07 Thread Mike Jumper
On Fri, Jun 7, 2019, 06:55 Goran  wrote:

> Is it possible to use Guacamole's js-Files in a same manner as...
>
> " 1. Start the spice server
>   2. Start websockify; my command line looks like this: ./websockify
> 5959 localhost:5900
>   3. Fire up spice.html, set host + port + password, and click start "
>

No.

The webapp and core JavaScript API are written to provide a gateway and
with security in mind. In particular, the tunnel is designed to rely on the
server to dictate which remote desktop the user is connecting to and how,
such that the administrator always controls what can and cannot be accessed
by users of the system.

It is possible to provide users with the ability to connect to completely
arbitrary hosts, either through an extension, something like the
recently-added "quickconnnect" extension, or through writing your own
webapp, but that middle part that enforces server-side control (the tunnel)
is critical. I wouldn't recommend trying to work around that intended
control due to the security implications of allowing such an unrestricted
level of access.

- Mike


Comparison of Spice-html5 and Guacamole

2019-06-07 Thread Goran
Is it possible to use Guacamole's js-Files in a same manner as

https://gitlab.freedesktop.org/spice/spice-html5

?

Spice is for virtual machines terminals and so can't be shared between
multiple user but I like it, it's very easy:

" 1. Start the spice server
  2. Start websockify; my command line looks like this: ./websockify
5959 localhost:5900
  3. Fire up spice.html, set host + port + password, and click start "

.

Regards
Goran

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org



Firefox client and Guacamole

2019-06-07 Thread Vieri
Hi,

In a previous message I mentioned a problem I was seeing with several Firefox 
versions. Whenever I try to connect to either a telnet service or RDP server 
via Guacamole, I sometimes get an odd behavior as if the user (me) were sending 
out ENTER keystrokes (I sent a screenshot). This is usually fixed by logging 
out and back in again. However, it can randomly occur again until I log out 
once again.

This is what I get in my logs when it happens.

STDOUT:

13:58:06.442 [https-openssl-apr-8443-exec-7] DEBUG 
o.a.g.a.ldap.LDAPConnectionService - Connection to LDAP server without 
encryption.
13:58:06.494 [https-openssl-apr-8443-exec-7] DEBUG 
o.a.g.auth.ldap.ObjectQueryService - Searching "cn=Users,dc=mydomain,dc=org" 
for objects matching 
"(&(!(objectClass=guacConfigGroup))(member=cn=myuser,cn=Users,dc=mydomain,dc=org))".
13:58:06.812 [https-openssl-apr-8443-exec-7] INFO  
o.a.g.r.auth.AuthenticationService - User "myuser" successfully authenticated 
from 10.215.144.48.
13:58:06.813 [https-openssl-apr-8443-exec-7] DEBUG 
o.a.g.a.ldap.LDAPConnectionService - Connection to LDAP server without 
encryption.
13:58:06.833 [https-openssl-apr-8443-exec-7] DEBUG 
o.a.g.auth.ldap.ObjectQueryService - Searching "cn=Users,dc=mydomain,dc=org" 
for objects matching 
"(&(|(objectClass=guac*)(cn=*IT*)(cn=*VPN*)(cn=*myuser*))(cn=*))".
13:58:07.116 [https-openssl-apr-8443-exec-7] DEBUG 
o.a.g.auth.ldap.ObjectQueryService - Searching "cn=Users,dc=mydomain,dc=org" 
for objects matching "(&(!(objectClass=guacConfigGroup))(cn=*))".
13:58:07.963 [https-openssl-apr-8443-exec-7] WARN  
o.a.g.auth.ldap.ObjectQueryService - Failed to process an LDAP search result. 
Error was: Sizelimit Exceeded
13:58:07.967 [https-openssl-apr-8443-exec-7] DEBUG 
o.a.g.auth.ldap.ObjectQueryService - Error processing LDAPEntry search result.
com.novell.ldap.LDAPException: Sizelimit Exceeded
    at com.novell.ldap.LDAPResponse.getResultException(Unknown Source)
    at com.novell.ldap.LDAPResponse.chkResultCode(Unknown Source)
    at com.novell.ldap.LDAPSearchResults.next(Unknown Source)
    at 
org.apache.guacamole.auth.ldap.ObjectQueryService.search(ObjectQueryService.java:209)
    at 
org.apache.guacamole.auth.ldap.ObjectQueryService.search(ObjectQueryService.java:281)
    at 
org.apache.guacamole.auth.ldap.group.UserGroupService.getUserGroups(UserGroupService.java:115)
    at 
org.apache.guacamole.auth.ldap.user.LDAPUserContext.init(LDAPUserContext.java:137)
    at 
org.apache.guacamole.auth.ldap.AuthenticationProviderService.getUserContext(AuthenticationProviderService.java:351)
    at 
org.apache.guacamole.auth.ldap.LDAPAuthenticationProvider.getUserContext(LDAPAuthenticationProvider.java:86)
    at 
org.apache.guacamole.extension.AuthenticationProviderFacade.getUserContext(AuthenticationProviderFacade.java:274)
    at 
org.apache.guacamole.rest.auth.AuthenticationService.getUserContexts(AuthenticationService.java:393)
    at 
org.apache.guacamole.rest.auth.AuthenticationService.authenticate(AuthenticationService.java:442)
    at 
org.apache.guacamole.rest.auth.TokenRESTService.createToken(TokenRESTService.java:174)
    at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
    at 
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
    at 
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
    at java.lang.reflect.Method.invoke(Method.java:498)
    at 
com.sun.jersey.spi.container.JavaMethodInvokerFactory$1.invoke(JavaMethodInvokerFactory.java:60)
    at 
com.sun.jersey.server.impl.model.method.dispatch.AbstractResourceMethodDispatchProvider$TypeOutInvoker._dispatch(AbstractResourceMethodDispatchProvider.java:185)
    at 
com.sun.jersey.server.impl.model.method.dispatch.ResourceJavaMethodDispatcher.dispatch(ResourceJavaMethodDispatcher.java:75)
    at 
com.sun.jersey.server.impl.uri.rules.HttpMethodRule.accept(HttpMethodRule.java:302)
    at 
com.sun.jersey.server.impl.uri.rules.ResourceClassRule.accept(ResourceClassRule.java:108)
    at 
com.sun.jersey.server.impl.uri.rules.RightHandPathRule.accept(RightHandPathRule.java:147)
    at 
com.sun.jersey.server.impl.uri.rules.RootResourceClassesRule.accept(RootResourceClassesRule.java:84)
    at 
com.sun.jersey.server.impl.application.WebApplicationImpl._handleRequest(WebApplicationImpl.java:1511)
    at 
com.sun.jersey.server.impl.application.WebApplicationImpl._handleRequest(WebApplicationImpl.java:1442)
    at 
com.sun.jersey.server.impl.application.WebApplicationImpl.handleRequest(WebApplicationImpl.java:1391)
    at 
com.sun.jersey.server.impl.application.WebApplicationImpl.handleRequest(WebApplicationImpl.java:1381)
    at 
com.sun.jersey.spi.container.servlet.WebComponent.service(WebComponent.java:416)
    at 
com.sun.jersey.spi.container.servlet.ServletContainer.service(ServletContainer.java:538)

Re: ISSUES USING TEXT INPUT ON IPAD

2019-06-07 Thread Amarjeet Singh
>
> *ISSUE 2* : Unable to drag the desktop icons of the remote Desktop Server
>



User has to double click and then drag the icons. It works but it is not
the default behaviour of the touch screens using mstsc or  windows on Touch
Srceens.

*ISSUE 1* : Only half of the Canvas screen  ( displaying Remote Desktop
> Server ) is visible.



Screen jumps mostly beacause of the position of the focus. Even if screen
doesn't jumps and System  keyboard  pop-ups over the screen, In that case user
is not able to scroll the canvas screen to go at the bottom of the screen.

as all the events are disabled.

Users are facing lot of issues using Guacamole  on iPad.

Please provide the valuable suggestions.

Thanks and Regards,
Amarjeet Singh


On Mon, Jun 3, 2019 at 1:11 PM Amarjeet Singh  wrote:

> Hi Team,
>
> Guacamole Client Version : 1.0.0
> Guacamole Server Version : 1.0.0
> Browser : Chrome  or  Safari Browser on iPad
>
> *ISSUE 1* : Only half of the Canvas screen  ( displaying Remote Desktop
> Server ) is visible.
>
> STEPS TO REPRODUCE :-
>
> 1. User changes the input method to *TEXT INPUT* as there is no support
> of Japanese virtual keyboard on Guacamole.
> 2. User clicks on the Text Input which  opens up the system keyboard of
> ipad.
> 3.  Only half of the RDP screen is visible on iPad. User cannot scroll up
> to view the upper part of the RDP Desktop screen.
> 4. Once system keyboard opens up. It is always up on the screen. User
> cannot hide it by changing TEXT INPUT to none.
>
>
> NOTE : The above issue also occurs if User changes input method to TEXT
> INPUT to type english keywords using iPad.
>
> *ISSUE 2* : Unable to drag the desktop icons of the remote Desktop Server
>
> Default Behaviour on touch screens using mstsc : User can place finger on
> the desktop icons and easily drag them.
> On Guacamole :  User is unable to drag desktop icons in Guacamole.
>
> Is there anything I can try to resolve this issue?
>
> Thanks and Regards,
> Amarjeet Singh
>