Re: Replacement for MS terminal server

[Eby Mani]

 > We have a legacy Java application (thick client). Currently, users connect 
 > to MS terminal server, to access the application, where some driver's must 
 > be installed.

1, Any particular reason this application running on Windows platform ?. 
2, Is the driver related some security hardware or something else ?. 
3, What is the Java version required for this application.

Latest LTS version of NixOS can run multiple versions JDK including Oracle and 
Open versions, starting from JDK8. - https://nixos.wiki/wiki/Java

Unfortunately they don't have stable GUI yet, but works well as any other linux 
server.
 On Thursday, 7 March, 2024 at 09:34:45 pm IST, Mansour Al Akeel 
 wrote:  
 
 Hello all,
We have a legacy Java application (thick client). Currently, users connect to 
MS terminal server, to access the application, where some driver's must be 
installed. The platform is windows. We are hoping to replace TS with an open 
source alternative to avoid licensing costs. I believe this should be a simple 
process.
My questions:- Can guacamole replace MS terminal server, or is it just an HTML5 
adapter ?- If it is a replacement, can it be installed on windows ?  
- Looking at this page 
https://guacamole.apache.org/doc/gug/guacamole-architecture.html I can see that 
a user connects to guacd which in truns connects to the RDP server. Does it 
open a session for each user ? In other words, do we need a license for each 
user or does it require multiple connections ? 
- For docker installation, all I need is the server ( guacamole/guacd ), but my 
guess is Linux image, and not for windows. Is this correct ? 

Thank you in advance for your help.  

SAML + Docker/Nginix Proxy Issue

[Mike]

Hi, I have a new Docker setup of Guacamole running in Docker with a Nginx 
proxy.   Everything works great but I can't get SAML working properly.   The 
issue is similar to other issues I found searching this mailing list archive 
since the 1.4 tightened SAML validation but I couldnt find anyone with the same 
issue.
My issue is that I am getting:
01:02:14.237 [http-nio-8080-exec-9] ERROR c.onelogin.saml2.authn.SamlResponse - 
The response was received at 
http://guacamole:8080/guacamole/api/ext/saml/callback instead of 
https://guactest.mydomain.org:8443/api/ext/saml/callback
I saw in the mailing list that some people were told to change guacamole.war to 
ROOT.war but I wasnt sure if that would work because the domain will still be 
wrong.  (alsso need to figure out how to do this running in docker).
Thanks much.
Mike

RE: Quick flash of a "Yellow Dialog Box"

[Brad Turnbough]

I think you’re right on the money, Sean.  Thanks.

Appears the box is pretty starved for ram --- I’ll get that taken care of right 
quick.




Thank you,

Brad Turnbough
Senior Technology Analyst

[cid:Backlund-Investment-logo_20ce9d6e-04b9-4d73-9d17-cfc69decf4cc.gif]

P: 309.272.2739 F: 309.272.2839

www.betterbanks.com
www.statestreetbank.com

NOTICE: The information contained in this email and any document attached 
hereto is intended only for the named recipient(s). If you are not the intended 
recipient, nor the employee or agent responsible for delivering this message in 
confidence to the intended recipient(s), you are hereby notified that you have 
received this transmittal in error, and any review, dissemination, distribution 
or copying of this transmittal or its attachments is strictly prohibited. If 
you have received this transmittal and/or attachments in error, please notify 
me immediately by reply e-mail and then delete this message, including any 
attachments.


From: Sean Hulbert 
Sent: Thursday, March 7, 2024 12:02 PM
To: user@guacamole.apache.org
Subject: Re: Quick flash of a "Yellow Dialog Box"

External email. Please make sure you trust this source before clicking links or 
opening attachments.


I am betting it is the connection warning dialog box stating connection is 
unstable, this is a resource issue such as memory and/or CPU allocation.





Thank You
Sean Hulbert
Founder / CEO
Work Ph: 925.663.5565

Security Centric Inc.
A Cybersecurity Virtualization Enablement Company
StormCloud Gov, Protected CUI Environment!

[cid:image001.png@01DA7091.51883220]
Industry's most secure virtual desktops!

FedRAMP MIL4 in process (RAR)
System Award Management
CAGE: 8AUV4
SAM ID: UMJLJ8A7BMT3

AFCEA San Francisco Chapter President
If you have heard of a hacker by name, he/she has failed, fear the hacker you 
haven’t heard of!

CONFIDENTIALITY NOTICE: This communication with its contents may contain 
confidential and/or legally privileged information. It is solely for the use of 
the intended recipient(s). Unauthorized interception, review, use or disclosure 
is prohibited and may violate applicable laws including the Electronic 
Communications Privacy Act. If you are not the intended recipient, please 
contact the sender and destroy all copies of the communication. Content within 
this email communication is not legally binding as a contract and no promises 
are guaranteed unless in a formal contract outside this email communication.

igitur qui desiderat pacem, praeparet bellum!!!

Epitoma Rei Militaris
On 3/7/2024 8:39 AM, Brad Turnbough wrote:
Yes, bottom right.

Thanks,
Brad

From: Vincent Sherwood 

Sent: Thursday, March 7, 2024 10:38 AM
To:user@guacamole.apache.org
Subject: Re: Quick flash of a "Yellow Dialog Box"

External email. Please make sure you trust this source before clicking links or 
opening attachments.
Is it on the bottom right of the console?

Perhaps it is the "Unstable Network" notification - Sorry, I can't recall the 
exact message wording.

Vincent


From: Brad Turnbough 
mailto:bturnbo...@backlundinvestment.com>>
Sent: Thursday 7 March 2024 14:58
To:user@guacamole.apache.org 
mailto:user@guacamole.apache.org>>
Subject: Quick flash of a "Yellow Dialog Box"


It has been reported to me that some of my users have seen a yellow dialog like 
box that quickly shows up on our guacamole browser sessions and then disappers 
– not even up long enough to be seen / read.



Does anyone know what this is and if so, what is it?  Is there a log file that 
will tell us what this yellow dialog box is stating?



Thanks,

Brad

IT Solutions Email Disclaimer - The information contained in this email 
message, including any files transmitted with it, is confidential and may be 
legally privileged.

This e-mail is intended only for the personal attention of the stated 
addressee(s). Any access to this email, including any files transmitted with 
it, by any other person is unauthorised. If you are not an addressee, you must 
not disclose, copy, circulate or in any other way use or rely on the accuracy 
or completeness of the information contained in this email or any files 
transmitted with it.

If you have received this email in error, please inform the sender immediately 
and delete it and all copies from your system. You may not forward this email 
without the permission of the authorised sender.

The views expressed in this email are those of the author, and do not 
necessarily represent the views of IT Solutions or its affiliates. Internet 
communications are not secure and IT Solutions cannot therefore accept legal 
responsibility for the contents of this message nor for any damage caused by 
viruses. This email has been scanned at the originating end. For further 
information on IT 

Re: Quick flash of a "Yellow Dialog Box"

[Sean Hulbert]

I am betting it is the connection warning dialog box stating connection 
is unstable, this is a resource issue such as memory and/or CPU allocation.




*Thank You*
Sean Hulbert
*Founder / CEO*
*Work Ph:* 925.663.5565

*Security Centric Inc.*
A Cybersecurity Virtualization Enablement Company
/StormCloud Gov, Protected CUI Environment!/


Industry's most secure virtual desktops!


*/FedRAMP MIL4 in process (RAR)/*
System Award Management
*CAGE: 8AUV4*
*SAM ID: UMJLJ8A7BMT3*

AFCEA San Francisco Chapter President
If you have heard of a hacker by name, he/she has failed, fear the 
hacker you haven’t heard of!


CONFIDENTIALITY NOTICE: This communication with its contents may contain 
confidential and/or legally privileged information. It is solely for the 
use of the intended recipient(s). Unauthorized interception, review, use 
or disclosure is prohibited and may violate applicable laws including 
the Electronic Communications Privacy Act. If you are not the intended 
recipient, please contact the sender and destroy all copies of the 
communication. Content within this email communication is not legally 
binding as a contract and no promises are guaranteed unless in a formal 
contract outside this email communication.


igitur qui desiderat pacem, praeparet bellum!!!

Epitoma Rei Militaris

On 3/7/2024 8:39 AM, Brad Turnbough wrote:


Yes, bottom right.

Thanks,

Brad

Thank you,

*Brad Turnbough*
Senior Technology Analyst



P: 309.272.2739 F: 309.272.2839

www.betterbanks.com 
www.statestreetbank.com 

NOTICE: The information contained in this email and any document 
attached hereto is intended only for the named recipient(s). If you 
are not the intended recipient, nor the employee or agent responsible 
for delivering this message in confidence to the intended 
recipient(s), you are hereby notified that you have received this 
transmittal in error, and any review, dissemination, distribution or 
copying of this transmittal or its attachments is strictly prohibited. 
If you have received this transmittal and/or attachments in error, 
please notify me immediately by reply e-mail and then delete this 
message, including any attachments.


*From:*Vincent Sherwood 
*Sent:* Thursday, March 7, 2024 10:38 AM
*To:* user@guacamole.apache.org
*Subject:* Re: Quick flash of a "Yellow Dialog Box"

*External email. Please make sure you trust this source before 
clicking links or opening attachments.**


*

Is it on the bottom right of the console?

Perhaps it is the "Unstable Network" notification - Sorry, I can't 
recall the exact message wording.


Vincent



*From:*Brad Turnbough 
*Sent:* Thursday 7 March 2024 14:58
*To:*user@guacamole.apache.org 
*Subject:* Quick flash of a "Yellow Dialog Box"

It has been reported to me that some of my users have seen a yellow 
dialog like box that quickly shows up on our guacamole browser 
sessions and then disappers – not even up long enough to be seen / read.


Does anyone know what this is and if so, what is it?  Is there a log 
file that will tell us what this yellow dialog box is stating?


Thanks,

Brad


IT Solutions Email Disclaimer - The information contained in this 
email message, including any files transmitted with it, is 
confidential and may be legally privileged.


This e-mail is intended only for the personal attention of the stated 
addressee(s). Any access to this email, including any files 
transmitted with it, by any other person is unauthorised. If you are 
not an addressee, you must not disclose, copy, circulate or in any 
other way use or rely on the accuracy or completeness of the 
information contained in this email or any files transmitted with it.


If you have received this email in error, please inform the sender 
immediately and delete it and all copies from your system. You may not 
forward this email without the permission of the authorised sender.


The views expressed in this email are those of the author, and do not 
necessarily represent the views of IT Solutions or its affiliates. 
Internet communications are not secure and IT Solutions cannot 
therefore accept legal responsibility for the contents of this message 
nor for any damage caused by viruses. This email has been scanned at 
the originating end. For further information on IT Solutions visit 
https://www.itsolutions.ie

RE: Quick flash of a "Yellow Dialog Box"

[Brad Turnbough]

Yes, bottom right.

Thanks,
Brad


Thank you,

Brad Turnbough
Senior Technology Analyst

[cid:Backlund-Investment-logo_20ce9d6e-04b9-4d73-9d17-cfc69decf4cc.gif]

P: 309.272.2739 F: 309.272.2839

www.betterbanks.com
www.statestreetbank.com

NOTICE: The information contained in this email and any document attached 
hereto is intended only for the named recipient(s). If you are not the intended 
recipient, nor the employee or agent responsible for delivering this message in 
confidence to the intended recipient(s), you are hereby notified that you have 
received this transmittal in error, and any review, dissemination, distribution 
or copying of this transmittal or its attachments is strictly prohibited. If 
you have received this transmittal and/or attachments in error, please notify 
me immediately by reply e-mail and then delete this message, including any 
attachments.


From: Vincent Sherwood 
Sent: Thursday, March 7, 2024 10:38 AM
To: user@guacamole.apache.org
Subject: Re: Quick flash of a "Yellow Dialog Box"

External email. Please make sure you trust this source before clicking links or 
opening attachments.

Is it on the bottom right of the console?

Perhaps it is the "Unstable Network" notification - Sorry, I can't recall the 
exact message wording.

Vincent


From: Brad Turnbough 
mailto:bturnbo...@backlundinvestment.com>>
Sent: Thursday 7 March 2024 14:58
To:user@guacamole.apache.org 
mailto:user@guacamole.apache.org>>
Subject: Quick flash of a "Yellow Dialog Box"


It has been reported to me that some of my users have seen a yellow dialog like 
box that quickly shows up on our guacamole browser sessions and then disappers 
- not even up long enough to be seen / read.



Does anyone know what this is and if so, what is it?  Is there a log file that 
will tell us what this yellow dialog box is stating?



Thanks,

Brad

IT Solutions Email Disclaimer - The information contained in this email 
message, including any files transmitted with it, is confidential and may be 
legally privileged.

This e-mail is intended only for the personal attention of the stated 
addressee(s). Any access to this email, including any files transmitted with 
it, by any other person is unauthorised. If you are not an addressee, you must 
not disclose, copy, circulate or in any other way use or rely on the accuracy 
or completeness of the information contained in this email or any files 
transmitted with it.

If you have received this email in error, please inform the sender immediately 
and delete it and all copies from your system. You may not forward this email 
without the permission of the authorised sender.

The views expressed in this email are those of the author, and do not 
necessarily represent the views of IT Solutions or its affiliates. Internet 
communications are not secure and IT Solutions cannot therefore accept legal 
responsibility for the contents of this message nor for any damage caused by 
viruses. This email has been scanned at the originating end. For further 
information on IT Solutions visit https://www.itsolutions.ie

Re: Quick flash of a "Yellow Dialog Box"

[Vincent Sherwood]

Is it on the bottom right of the console?

Perhaps it is the "Unstable Network" notification - Sorry, I can't recall the 
exact message wording.

Vincent


From: Brad Turnbough 
Sent: Thursday 7 March 2024 14:58
To: user@guacamole.apache.org 
Subject: Quick flash of a "Yellow Dialog Box"


It has been reported to me that some of my users have seen a yellow dialog like 
box that quickly shows up on our guacamole browser sessions and then disappers 
– not even up long enough to be seen / read.



Does anyone know what this is and if so, what is it?  Is there a log file that 
will tell us what this yellow dialog box is stating?



Thanks,

Brad

Thank you,

Brad Turnbough
Senior Technology Analyst

[cid:Backlund-Investment-logo_20ce9d6e-04b9-4d73-9d17-cfc69decf4cc.gif]

P: 309.272.2739 F: 309.272.2839

www.betterbanks.com
www.statestreetbank.com

NOTICE: The information contained in this email and any document attached 
hereto is intended only for the named recipient(s). If you are not the intended 
recipient, nor the employee or agent responsible for delivering this message in 
confidence to the intended recipient(s), you are hereby notified that you have 
received this transmittal in error, and any review, dissemination, distribution 
or copying of this transmittal or its attachments is strictly prohibited. If 
you have received this transmittal and/or attachments in error, please notify 
me immediately by reply e-mail and then delete this message, including any 
attachments.



IT Solutions Email Disclaimer - The information contained in this email 
message, including any files transmitted with it, is confidential and may be 
legally privileged.

This e-mail is intended only for the personal attention of the stated 
addressee(s). Any access to this email, including any files transmitted with 
it, by any other person is unauthorised. If you are not an addressee, you must 
not disclose, copy, circulate or in any other way use or rely on the accuracy 
or completeness of the information contained in this email or any files 
transmitted with it.

If you have received this email in error, please inform the sender immediately 
and delete it and all copies from your system. You may not forward this email 
without the permission of the authorised sender.

The views expressed in this email are those of the author, and do not 
necessarily represent the views of IT Solutions or its affiliates. Internet 
communications are not secure and IT Solutions cannot therefore accept legal 
responsibility for the contents of this message nor for any damage caused by 
viruses. This email has been scanned at the originating end. For further 
information on IT Solutions visit https://www.itsolutions.ie

Re: Quick flash of a "Yellow Dialog Box"

[Nick Couchman]

On Thu, Mar 7, 2024 at 9:58 AM Brad Turnbough <
bturnbo...@backlundinvestment.com> wrote:

> It has been reported to me that some of my users have seen a yellow dialog
> like box that quickly shows up on our guacamole browser sessions and then
> disappers – not even up long enough to be seen / read.
>
>
Doesn't sound familiar to me.


>
>
> Does anyone know what this is and if so, what is it?  Is there a log file
> that will tell us what this yellow dialog box is stating?
>
>
The two places I would check are:
1) The user's browser console (Developer Console) logs.
2) The Tomcat catalina.out file, or wherever your Tomcat instance logs
things.

-Nick

>

Re: Replacement for MS terminal server

[Nick Couchman]

On Thu, Mar 7, 2024 at 11:04 AM Mansour Al Akeel 
wrote:

> Hello all,
>
> We have a legacy Java application (thick client). Currently, users connect
> to MS terminal server, to access the application, where some driver's must
> be installed. The platform is windows. We are hoping to replace TS with an
> open source alternative to avoid licensing costs. I believe this should be
> a simple process.
>
>
I'll answer your other questions below; however, for a Java-based thick
client, if it will run on platforms other than Windows (that's kind of one
of the points of Java, right?), you might be able to get rid of Windows and
run on Linux + xrdp or something like that. If drivers have to be
installed, and there aren't any available for Linux, then, well, you might
be out-of-luck.


> My questions:
> - Can guacamole replace MS terminal server, or is it just an HTML5 adapter
> ?
>

No, Guacamole is not a replacement for the actual terminal server, it is a
Remote Desktop gateway/client that runs in a browser (with a couple of
back-end components).


> - If it is a replacement, can it be installed on windows ?
>

Not really, at least, not fully. You can definitely install the client-side
bits on Windows (Tomcat 9.x). However, at the moment, guacd only runs on
Linux. You could run it in WSL, though, if you absolutely must run Windows.
But, why not just run Linux ;-)?


>
> - Looking at this page
> https://guacamole.apache.org/doc/gug/guacamole-architecture.html I can
> see that a user connects to guacd which in truns connects to the RDP
> server. Does it open a session for each user ? In other words, do we need a
> license for each user or does it require multiple connections ?
>

Kind of - not quite. Depending on how you leverage it, there are several
components:
* Guacamole Client, which is the web application, manages access control,
etc. If you use this (rather than writing your own web application), the
user will log in to the Guacamole Client web page, which is hosted by a
Tomcat server (or other JavaEE-compatible application server), and then
they can open connections from that client interface.
* Part of the stock Guacamole Client is the HTTP(S)+WS(S) tunneling
functionality, which provides the link between the user's web browser and
guacd, allowing for data (images, keystrokes, mouse movement, sound, etc.)
to be transferred between the client and guacd.
* guacd takes care of the translation between the Guacamole protocol and
the remote server protocols (RDP, SSH, Telnet, Kubernetes, and VNC).

>  Does it open a session for each user

Your question, here, is a bit vague. Does what open a session for each
user? What users are you talking about? What sessions?

>  In other words, do we need a license for each user or does it require
multiple connections ?

Again, I'm not entirely sure what you're referring to, here, when you ask
about licensing. Guacamole is freely-available, licensed under the Apache
2.0 license. There's nothing you have to license or buy for that.

For Windows, all of your normal Microsoft EULA licensing applies. I won't
go into detailed examples, but using Guacamole is not going to let you have
the same number of users accessing the application on the Terminal Server
and somehow reduce your Terminal Server/RDS licensing numbers/costs.
Microsoft has very, very good legal folks writing their EULAs, and they've
already dealt with the use of gateways end between actual end users/devices
and terminal servers in the terms of those EULAs. If your only reason for
trying to use Guacamole is to reduce the number of terminal server licenses
you're purchasing, IMHO, you might as well quit, now.


>
> - For docker installation, all I need is the server ( guacamole/guacd ),
> but my guess is Linux image, and not for windows. Is this correct ?
>
>
No, you need both guacamole/guacamole (the client side) and
guacamole/guacd. And, yes, those are Linux-based images, not Windows.

-Nick

>

Replacement for MS terminal server

[Mansour Al Akeel]

 Hello all,

We have a legacy Java application (thick client). Currently, users connect
to MS terminal server, to access the application, where some driver's must
be installed. The platform is windows. We are hoping to replace TS with an
open source alternative to avoid licensing costs. I believe this should be
a simple process.

My questions:
- Can guacamole replace MS terminal server, or is it just an HTML5 adapter ?
- If it is a replacement, can it be installed on windows ?
- Looking at this page
https://guacamole.apache.org/doc/gug/guacamole-architecture.html I can see
that a user connects to guacd which in truns connects to the RDP server.
Does it open a session for each user ? In other words, do we need a license
for each user or does it require multiple connections ?

- For docker installation, all I need is the server ( guacamole/guacd ),
but my guess is Linux image, and not for windows. Is this correct ?

Thank you in advance for your help.

Quick flash of a "Yellow Dialog Box"

[Brad Turnbough]

It has been reported to me that some of my users have seen a yellow dialog like 
box that quickly shows up on our guacamole browser sessions and then disappers 
- not even up long enough to be seen / read.

Does anyone know what this is and if so, what is it?  Is there a log file that 
will tell us what this yellow dialog box is stating?

Thanks,
Brad

Thank you,

Brad Turnbough
Senior Technology Analyst

[cid:Backlund-Investment-logo_20ce9d6e-04b9-4d73-9d17-cfc69decf4cc.gif]

P: 309.272.2739 F: 309.272.2839

www.betterbanks.com
www.statestreetbank.com

NOTICE: The information contained in this email and any document attached 
hereto is intended only for the named recipient(s). If you are not the intended 
recipient, nor the employee or agent responsible for delivering this message in 
confidence to the intended recipient(s), you are hereby notified that you have 
received this transmittal in error, and any review, dissemination, distribution 
or copying of this transmittal or its attachments is strictly prohibited. If 
you have received this transmittal and/or attachments in error, please notify 
me immediately by reply e-mail and then delete this message, including any 
attachments.