Support protocols

[Ricardo García Arroyo]

Good morning.

I'm Ricardo from an IT company in Spain.

My team and me are working in a project with Apache Guacamole tool. We provide 
access to clients by VNC, RDP and SSH with guacamole. Our customer requests us 
access by http or https. We watch that your tool doesn't allow this access for 
that moment. Is it possible a development for that or is programed for future 
versions of Guacamole?

If that question has been sent to a wrong email, can you tell me where can I 
ask our question?

Thanks and regards.
Ricardo

File permission with RDP drive redirect

[Yang Yang]

Hello,

When I use guacamole to access a Windows machine with RDP and have drive 
redirection enabled, files I copied from the Windows machine to the guacamole 
virtual drive are with permission 600 (-rw--).

Is it possible to set the file permission to 611 (-rw-r--r-- ) by default？So 
that other users on the guacd server can read the files.

Thanks,
Yang   
-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

Re: Upload more than 60 files

[Mike Jumper]

No, and I wouldn't recommend doing that as it would affect the size of
structures and may break ABI compatibility with anything that isn't rebuilt.

It would be better to improve the handling of file transfers within the
webapp such outstanding transfers are automatically deferred and retried if
the server reports that you've hit the limit.

- Mike


On Mon, Mar 28, 2022, 14:08 Denis Bessa  wrote:

> Hi, thanks for your response.
>
> Is there any way to change this restriction without compiling the source
> code?
> --
> *De:* Mike Jumper 
> *Enviado:* domingo, 27 de março de 2022 03:26
> *Para:* User 
> *Assunto:* Re: Upload more than 60 files
>
> On Sat, Mar 26, 2022, 19:06 Nick Couchman  wrote:
>
> On Wed, Mar 23, 2022 at 12:10 PM Denis Bessa  wrote:
>
> Hi,
>
> I have a Guacamole Server running on Kubernetes. It works perfectly,
> except for one thing: users can't upload more than 60 files throug the RDP
> connection.
>
> When they try to do so, they receive this error message:
>
>
> (An internal error has occurred within the Guacamole Server...)
>
>
> Can you check the catalina.out file and see if there's any indication of
> the error?
>
>
> Is there any limitations with the number of file uploads?
>
>
> Probably, but I don't think it's 60.
>
>
> The Guacamole server uses a static limit of 64 simultaneous streams per
> connection:
>
>
> https://github.com/apache/guacamole-server/blob/master/src/libguac/guacamole/client-constants.h#L33
>
> Streams exceeding that limit are rejected by the server until existing
> streams close.
>
> - Mike
>
> [image: denis@bessa.digital] *Denis Bessa*
>
> *CEO +55 31 3236-9200*
> --
> Contabilidade Bessa
> *bessa.digital*
>
> Precisa falar comigo? Clique aqui
>  e me
> chame no Microsoft Teams
>

RE: Upload more than 60 files

[Denis Bessa]

Hi, thanks for your response.

Is there any way to change this restriction without compiling the source code?

De: Mike Jumper 
Enviado: domingo, 27 de março de 2022 03:26
Para: User 
Assunto: Re: Upload more than 60 files

On Sat, Mar 26, 2022, 19:06 Nick Couchman 
mailto:vn...@apache.org>> wrote:
On Wed, Mar 23, 2022 at 12:10 PM Denis Bessa  wrote:
Hi,

I have a Guacamole Server running on Kubernetes. It works perfectly, except for 
one thing: users can't upload more than 60 files throug the RDP connection.

When they try to do so, they receive this error message:

[cid:17fc91d750acb971f161]
(An internal error has occurred within the Guacamole Server...)


Can you check the catalina.out file and see if there's any indication of the 
error?

Is there any limitations with the number of file uploads?


Probably, but I don't think it's 60.

The Guacamole server uses a static limit of 64 simultaneous streams per 
connection:

https://github.com/apache/guacamole-server/blob/master/src/libguac/guacamole/client-constants.h#L33

Streams exceeding that limit are rejected by the server until existing streams 
close.

- Mike

[denis@bessa.digital]   Denis Bessa
CEO
+55 31 3236-9200

[https://bessa.blob.core.windows.net/assinaturas/logo.png]  Contabilidade 
Bessa
bessa.digital

Precisa falar comigo? Clique 
aqui e me 
chame no Microsoft Teams

SAML Attribute Mapping to Guacamole Parameter Tokens

[Guillermo Vargas-Dellacasa]

Hello,

Is there any support for mapping SAML attributes to Guacamole parameter
tokens, similarly to how it is supported for LDAP?

Thank you,

G.

Guillermo Vargas-Dellacasa
gvargas-dellac...@nhvweb.net 

-- 


*Confidentiality Notice*: This
e-mail contains information that is 
privileged and confidential and subject to
legal restrictions and penalties 
regarding its unauthorized disclosure or other
use. You are prohibited from 
copying, distributing or otherwise using this
information if you are not 
the intended recipient. If you have received this
e-mail in error, please 
notify us immediately by return e-mail and delete this
e-mail and all 
attachments from your system. Thank You.

Re: How To have multiple LDAP servers?

[Jim Rx]

Johnathan,

 

I will give it a try. It would be nice to know the logic/process Guacamole uses in this case.

 

Thanks

 

Jim

 
 

Sent: Wednesday, March 23, 2022 at 10:25 AM
From: "Hankins, Jonathan" 
To: user@guacamole.apache.org
Subject: Re: How To have multiple LDAP servers?


Jim,
 

What LDAP server are you using? Are you wanting multiple LDAP servers for fault-tolerance / load balancing? If you are using AD LDAP, you can use the DNS name of the domain instead of individual DCs and you will get DNS round robin. I am not sure how the LDAP library that Guacamole uses handles this, and I don't know if it has any logic to, e.g., try the 2nd IP if the first one doesn't respond. You could probably also handle this kind of situation with a load balancer (like haproxy) in front of your LDAP.

 

If you are trying to authenticate against multiple, different LDAP domains (i.e., users in domain 1 OR users in domain 2), that'd be up to guacamole to support, and I don't see anything indicating that in the documentation.

 

If you are in an AD situation where you have multiple domains all in one forest and want to query across the forest, you can do that by querying the Global Catalog port instead of the normal LDAP port, and enabling following of referrals, I think. Your search filter would have to be permissive enough to work for both domains, but not over-match, since you only get one search filter.

 

Good luck!

 


On Tue, Mar 22, 2022 at 6:53 AM Jim Rx  wrote:




We came upon this requirement yesterday -- how to I configure guacamole.properties so that there are multiple LDAP servers available to query? Can I simply have more than one ldap-hostname entries?

 

Thanks

 

Jim


- To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org For additional commands, e-mail: user-h...@guacamole.apache.org

 

 
--


Jonathan Hankins

Homewood City Schools

W: 205-877-4548


This e-mail is intended only for the recipient and may contain confidential or proprietary information. If you are not the intended recipient, the review, distribution, duplication or retention of this message and its attachments are prohibited. Please notify the sender of this error immediately by reply e-mail, and permanently delete this message and its attachments in any form in which they may have been preserved.




-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org