Re: Guacamole logs “Wrong number of arguments”

[Klaus Bergmann]

Hi Mike,

I was eager to say "nothing special" but remembered to have been tried
to apt-get install guacamole before what didn't seem to fully work.
I purged it but that purge didn't remove everything. Another apt
autoremove removed several packages including:

libguac-client-rdp0:i386 (0.9.9-2build1) ...
libguac-client-ssh0:i386 (0.9.9-2build1) ...
libguac-client-vnc0:i386 (0.9.9-2build1) ...
libguac11:i386 (0.9.9-2build1) ...

I assume these led to a version conflict bringing this error.

Now I can work further!  :-)

Thanks a lot!

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

Re: Guacamole on Xubuntu

[ivanmarcus]

Just a comment on your response Alesandro,

I have a number of remote systems I administer. Users have a variety of 
programs they operate on M$ Winboxen at the remote end.


Various of the clients have VPN available, or they use Guacamole.

In many cases Guacamole is [much] faster as Guacamole's network traffic 
can be quite light in comparison to VPN. Typically those users that are 
handling large files find the VPN is much slower (ie. the VPN/internet 
represents a bottleneck), and there are other nuances that lead them to 
prefer Guacamole.


IMV it's also easier to ensure a more stable and secure environment, 
particularly when the remote users are utilising 'home' offices, with 
Guacamole than with a VPN.


Overall I consider it's 'horses for courses'; in some cases a VPN may be 
preferable for certain operations, but in many cases a solution such as 
Guacamole will provide a better experience.



On 16/04/2020 9:24 p.m., Niubbo75 wrote:

Hi, IMHO if you still use VPN to let user connect from remote side to Office
internal LAN, you do not need to use guacamole, it could be a bottle neck,
let your user directly RDP/VPN into their PCs.
If you use Guacamole you don't need to have a VPN, just forward TCP port 80
and 443 to your guacamole machine and put guacamole under a reverse proxy
like NGINX and set a valid SSL CA to have https and the trick is done!

Alesandro



--
Sent from: 
http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

can't type in Word 2016 when I first launch it

[Joseph Szabo]

Anyone know why I can't type in Word 2016 for Windows 10 when I first launch 
it?  The mouse works fine  My browser is Chrome in Windows 10.  If I just 
switch windows and switch back go Word, it works fine.


Joseph Szabo
CSS Lab Technical Services
NBCS Lab Team
System Administrator
Rutgers University

RE: EXT: Re: Graphical Performance Question

[Nanney, Ryan (GE Healthcare, consultant)]

Hello Nick,

Thanks for your reply!  We have kept an eye on resource usage across the guac 
VM depending on which use case we tried.  In order to try and minimize that 
possibility we gave 8vCPU and 8GB ram to the VM and tried with one concurrent 
user.  Using top/iotop to keep tabs on things, we have not seen any obvious 
bottlenecks with this approach.  Thanks again!

Best regards,
Ryan

From: Nick Couchman 
Sent: Thursday, April 16, 2020 2:09 PM
To: user@guacamole.apache.org
Subject: EXT: Re: Graphical Performance Question

On Thu, Apr 16, 2020 at 3:04 PM Nanney, Ryan (GE Healthcare, consultant) 
mailto:ryan.nan...@ge.com>> wrote:
Hello all,

I am a technical product owner with GE Healthcare and we are using Guacamole to 
provide medical professionals an ability to remotely access applications while 
reviewing diagnostic imaging such as MRI scans.  Overall our experience with 
Guacamole has been quite good, though we have an area of concern and are 
curious what types of options exist.  The symptom we are facing is during 
certain instances of cinematic playback there are blocky (64x64 squares) areas 
which become noticeable at certain times.  I was able to watch the websocket 
traffic to identify this scenario.

I have attached a small MKV video to illustrate the playback issue folks are 
having issue with, for your review.

We are operating off of a Gigabit LAN environment and Guacamole is exposed to 
the LAN, the rest of the traffic happens inside of a virtualized environment.  
Our endpoints are all using RDP, either from Windows Server 2012R2 or Windows 
Server 2019.

It has been observed that direct RDP provides a smoother playback experience.  
Also, it seems that server 2019 is better than 2012R2.  We have tried both the 
docker container and building from source, with version 1.0.0 and 1.1.0 which 
produce similar experiences.  An nginx server is also in play, though we have 
tested with that removed from the stack.

I certainly welcome any feedback or ideas anyone may have.  We would like to 
understand the cause and what the potential fix(es) may be.  It seems to be 
something within guacd or tomcat?


Ryan,
Have you examined resource utilization on both the system running guacd and the 
system running Tomcat (may be the same system?) to make sure there isn't any 
resource shortage, there?

-Nick

Re: Graphical Performance Question

[Nick Couchman]

On Thu, Apr 16, 2020 at 3:04 PM Nanney, Ryan (GE Healthcare, consultant) <
ryan.nan...@ge.com> wrote:

> Hello all,
>
>
>
> I am a technical product owner with GE Healthcare and we are using
> Guacamole to provide medical professionals an ability to remotely access
> applications while reviewing diagnostic imaging such as MRI scans.  Overall
> our experience with Guacamole has been quite good, though we have an area
> of concern and are curious what types of options exist.  The symptom we are
> facing is during certain instances of cinematic playback there are blocky
> (64x64 squares) areas which become noticeable at certain times.  I was able
> to watch the websocket traffic to identify this scenario.
>
>
>
> I have attached a small MKV video to illustrate the playback issue folks
> are having issue with, for your review.
>
>
>
> We are operating off of a Gigabit LAN environment and Guacamole is exposed
> to the LAN, the rest of the traffic happens inside of a virtualized
> environment.  Our endpoints are all using RDP, either from Windows Server
> 2012R2 or Windows Server 2019.
>
>
>
> It has been observed that direct RDP provides a smoother playback
> experience.  Also, it seems that server 2019 is better than 2012R2.  We
> have tried both the docker container and building from source, with version
> 1.0.0 and 1.1.0 which produce similar experiences.  An nginx server is also
> in play, though we have tested with that removed from the stack.
>
>
>
> I certainly welcome any feedback or ideas anyone may have.  We would like
> to understand the cause and what the potential fix(es) may be.  It seems to
> be something within guacd or tomcat?
>
>
>

Ryan,
Have you examined resource utilization on both the system running guacd and
the system running Tomcat (may be the same system?) to make sure there
isn't any resource shortage, there?

-Nick

RDP connection tries

[awhittle]

I have seen the configuration for VNC with being able to limit the number of
tries to connect, is there one for RDP?

Thanks



--
Sent from: 
http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

RE: Capslock not working in RDP

[Wesley de Graaf]

Hi Alesandro,

Thanks for your information. We have it set to ENG, and all keyboard shortcuts 
are working as expected, only enabling CAPS Lock does not seem to work 
correctly.

The CAPS locks seems to be enabled in the RDP session, but typing still gives 
me the NON capital letters. It’s a strange issue. 

Kind regards,

Wesley

-Original Message-
From: Niubbo75  
Sent: Thursday, April 16, 2020 2:23 PM
To: user@guacamole.apache.org
Subject: RE: Capslock not working in RDP

Hi,
I do not have your caps lock issue, I'm on compiled Guacamole server on
CentOS7 with the latest update.
On our remote server we have set IT layout but when we connect to them via 
Guacamole keyboard automatically switch to EN, if we do not touch anything, 
keyboard works like a charm and we do not have any issues, if we switch to IT 
then keymap become wrong (I mean hitting key # and get £).

In Guacamole client we have setup default language Italian, on every type of 
connection we do not have this kind of issue with keyboard (VNC, RDP, Telnet, 
SSH).

Alessandro.



--
Sent from: 
http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

connectin error, after shared profile deleted

[DMoscovitch]

Hi I was wondering if this was a known issue/feature? I could not find any 
notes on this.

I tested the following scenario.

User1 connects to their RDP1
User 1 goes to their share menu and selects "ReadOnlyShare1"  (just a 
name)
grab that URL and send to another USER2 , but that just happens to be ME 
at the same remote IP but in a different browser brand.
So now USER1 is controling stuff and USER 2 is watching
-
ADMIN goes in and deletes Profile "ReadOnlyShare1" from that RDP1 
connection.
no affect on USER2 as all is still viewable. and USER1 still working
USER1 goes to home screen. and back in (not disconnecting) and USER2 still 
connected in view .
USER1, "Disconnects" and goes back to the home screen.  At this point 
USER2 does disconnected.
now the issue.
User1 goes to reconnect back to RDP1 (I can't remember If I did a full 
logout and login to the guacamole interface at this point ), and then sees 
the message
"Connection error...Exhausted the simultaneous connection limit for an 
individual user"USER2 window still open but with disconnect error 
on screen.

Then closed the USER2 browser. and no difference. Closed all browsers... 
no difference

so. basically I am stuck in the situation where the active sessions shows 
USER1 still connected to the RDP1 connection internally. and could not 
lock back in to that RDP1  connection
For now, until reboot or guacd restart, I was able to just increase the 
connection limit for that user to 2 and it works. but there is still that 
zombie connection active.


You question: Why delete a share profile while it is in use?
Answer: Because sh*t happens and things gotta adapt :)  . and its good to 
know security wise that connections are not killed right away if the share 
profile gets removed.(but that would be a nice feature. yes i noticed 
'anonymous' int the active connection logs :))

/danielm

Re: Guacamole on Xubuntu

[Niubbo75]

WhiteTiger-2 wrote
> I don't have a reverse proxy on the server.

You can easy install NGINX and configure it to work like that, here you can
find how to:

http://guacamole.apache.org/doc/gug/proxying-guacamole.html


WhiteTiger-2 wrote
> Also, there is already a server in the network that uses ports 80 and 443,
> so I should change the ports on the firewall.

well, you can choose two ways, the first and easy, if your firewall is
capable, is to set FQDN rules to forward request to the correct internal IP,
if your firewall is not capable of that, you can configure reverse proxy on
the server that already have 80 and 443 forwarded to and let it forward
related traffic to your guacamole server.
Hope this help.

Alessandro




--
Sent from: 
http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

RE: Capslock not working in RDP

[Niubbo75]

Hi,
I do not have your caps lock issue, I'm on compiled Guacamole server on
CentOS7 with the latest update.
On our remote server we have set IT layout but when we connect to them via
Guacamole keyboard automatically switch to EN, if we do not touch anything,
keyboard works like a charm and we do not have any issues, if we switch to
IT then keymap become wrong (I mean hitting key # and get £).

In Guacamole client we have setup default language Italian, on every type of
connection we do not have this kind of issue with keyboard (VNC, RDP,
Telnet, SSH).

Alessandro.



--
Sent from: 
http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

RE: guacamole-auth-ldap Performance

[Niubbo75]

Hi Chris,
no, I do not use such parameters in my conf, exept for:

ldap-username-attribute: sAMAccountName

and the other basic parameters needed to bind, my AD is really simple, I
have my users in a single OU, after successful login I do not have your
warning, I get only 

$time [http-nio-8080-exec-4] o.a.r.g.auth.AuthenticationService - User
"$username" successfully authenticated from $user_IP_Address.

and I get the same message twice because I'm using TOTP.

If this can help, I'm using LDAP module from 1.0.0 on guacamole 1.1.0, with
LDAP module from 1.1.0 I had have lots of issue starting from seeing users
in guacamole and a lot of warning messages after each successfully logon.



--
Sent from: 
http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

RE: Capslock not working in RDP

[Wesley de Graaf]

I did some additional research and we are using the following settings:

On client side we use the following keyboard layout: NLD (INTL) or ENG (NL) and 
on the RDP server we use ENG (English united states – Keyboard United states) 
or NLD (Dutch – Dutch Keyboard Unites states)

Client:

[cid:image002.png@01D613F6.171E1BA0]

RDP:
[cid:image003.png@01D613F6.171E1BA0]

Any suggestions on this ?

Kind regards,

Wesley

From: Vieri 
Sent: Tuesday, April 7, 2020 6:21 PM
To: user@guacamole.apache.org
Subject: Re: Capslock not working in RDP



On Tuesday, April 7, 2020, 3:08:37 PM GMT+2, Allen Chen 
mailto:ac...@harbourfrontcentre.com>> wrote:


On 07/04/2020 6:40 a.m., Piviul wrote:
> Wesley de Graaf ha scritto il 07/04/20 alle 09:52:
>>
>> Later on, I did find out when setting the keyboard on “Unicode” it is
>> working as expected. Our default keyboard layout is the US English
>> (qwerty). So when using the US English (Qwerty) keyboard layout its
>> not working.
> I have no problems too with caps lock in guacamole... AFAIK the
> keyboard layout you have to set on the RDP connection should be the
> keyboard layout that is set as default on the rdp server.

I set it up exactly like that (ie. 
server-layout=).
I too HAVE the CAPS LOCK issue.
When I press that key, I get capital letters. If I press it again (no mater how 
many times I do that) I still get capital letters. If I want the lower case 
letters again I need to re-start the RDP session.

I was wondering if I could disable this key altogether (workaround).

Vieri

keyup keydown events on Mac OS and Firefox

[Vieri]

Hi,

Some Mac OS users have reported issues with accented characters within RDP 
sessions.
Whenever they type, say é,  this character is printed three times. It does NOT 
happen when using other operating systems.

Mac v10.15.4 with Mozilla Firefox 75.0 64bits

For some reason the user who reported this issue has even more problems with 
Safari. So I asked him to try Google Chrome for Mac OS, and it worked fine with 
accented characters.

It's fair to say that the same Fiefox version on Windows or Linux works fine 
with accented characters.

Does anyone know why?


Now, the only issue this user is seeing with his Chrome on Mac (same as with 
Firefox) is that CONTROL-C and CONTROL-V (copy / paste) do "not work". I've 
asked for a keyboard test, but in the meantime I would like to ask if anyone 
else here has had issues with CTRL-C and CTRL-V within RDP sessions. 

Regards,

Vieri

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

Re: Guacamole on Xubuntu

[WhiteTiger]

I don't have a reverse proxy on the server.
Also, there is already a server in the network that uses ports 80 and 443,
so I should change the ports on the firewall.



--
Sent from: 
http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

RE: guacamole-auth-ldap Performance

[Chris Lee]

Hi Alessandro,

About AD 600 users.

Did you use setting like following:

ldap-username-attribute: sAMAccountName
ldap-user-search-filter:(objectClass=user)(!(objectCategory=computer))
ldap-max-search-results:400

Beside, do you got following msg after success auth

Apr 16 18:16:58 server[313781]: 18:16:58.663 [NioProcessor-98] WARN  
o.a.d.a.l.m.entry.DefaultAttribute - ERR_13207_VALUE_ALREADY_EXISTS The value 
'CN=ABC,OU=Domain Controllers,DC=example,DC=com' already exists in the 
attribute (msDS-RevealedDSAs)

Regards,
Chris

-Original Message-
From: Niubbo75 
Sent: Thursday, April 16, 2020 4:47 PM
To: user@guacamole.apache.org
Subject: Re: guacamole-auth-ldap Performance

Hi Chris,
we are using LDAP in our AD and we do not see any issue, our AD is quiet small 
(about 50 users), maybe that's why we do not see problem, how big is your AD?

For what I think to have understand, LDAP will query DB on every connection, 
but it still not querying AD DB during connection time (infact, if you try to 
add or remove users from AD and you check if there are changed on guacamole 
side, you do not see them untill you log off and log on again on guacamole).

Alessandro



--
Sent from: 
http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org



This message and its attachment (if any) are strictly confidential and sent to 
the designated recipient(s) only. If you are not the intended recipient, please 
notify the sender by e-mail and delete this message and its attachment (if any) 
from your computer system immediately . Century City International Holdings 
Limited, Paliburg Holdings Limited, Regal Hotels International Holdings 
Limited, its respective related subsidiaries, associated companies and 
affiliates do not guarantee this message and its attachment (if any) are free 
of computer virus and would not accept any liability whatsoever arising from 
Internet transmission.

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

Re: Guacamole on Xubuntu

[Niubbo75]

Hi, IMHO if you still use VPN to let user connect from remote side to Office
internal LAN, you do not need to use guacamole, it could be a bottle neck,
let your user directly RDP/VPN into their PCs.
If you use Guacamole you don't need to have a VPN, just forward TCP port 80
and 443 to your guacamole machine and put guacamole under a reverse proxy
like NGINX and set a valid SSL CA to have https and the trick is done!

Alesandro



--
Sent from: 
http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

Guacamole on Xubuntu

[WhiteTiger]

In a small company I have to install a PC with Xubuntu 20.04 for when there
is need for maintenance on the network.
I would also like to install Guacamole on this PC so that users can take
remote control of their PC.
The idea is that users activate a VPN and then access the Guacamole server
where they will find their PC reported.
I, always in VPN, access the complete list of PCs.
To take remote control of the server PC I would like to understand if I can
still use Guacamole or if for this only PC I have to use some other remote
control software.

In the image there is the scheme of what I have in mind to do.
What do you think?


 



--
Sent from: 
http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

Re: guacamole-auth-ldap Performance

[Niubbo75]

Hi Chris,
we are using LDAP in our AD and we do not see any issue, our AD is quiet
small (about 50 users), maybe that's why we do not see problem, how big is
your AD?

For what I think to have understand, LDAP will query DB on every connection,
but it still not querying AD DB during connection time (infact, if you try
to add or remove users from AD and you check if there are changed on
guacamole side, you do not see them untill you log off and log on again on
guacamole).

Alessandro



--
Sent from: 
http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

Re: randomely showing localhost IP in guacamole user history

[Niubbo75]

Here's my Tomcat conf:

==



==



==

and in catalina.out I get correct remote & local IP (local IP do not use
nginx but connect directly to tomcat on port 8080) and in
localhost_access_log-* I get full detailed logs.

Alessandro



--
Sent from: 
http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org