RE: Using XRDP over Microsoft RDP client is much faster than using it over Guacamole

[Adrian Owen]

Play YouTube over guacamole connection is always slow. Frame by frame video 
compression is required.

Run test again, with no play video.

Adrian

From: Pierre Bastola 
Sent: 04 October 2023 01:13
To: user@guacamole.apache.org
Subject: Using XRDP over Microsoft RDP client is much faster than using it over 
Guacamole

Hi there,

I am struggling with a problem related to Guacamole RDP. Please help me if 
possible:

--Start of question--


I am building a web client that can RDP into remote VMs. I am running a guacd 
server locally (on my macbook) using docker.

I am using a JS script in the frontend to connect to a Java backend using 
WebSockets, which in turn creates a tunnel to the guacd server This is the 
standard Guacamole Web Client flow from what I have read.

These are the configurations I use when connecting to the guacd server. This is 
java code:

- guacConfig.setParameter("ignore-cert", "true");

- guacConfig.setParameter("force-lossless", "true");



try {

GuacamoleSocket socket = new ConfiguredGuacamoleSocket(

new InetGuacamoleSocket(hostname, port),

guacConfig

);

GuacamoleTunnel tunnel = new SimpleGuacamoleTunnel(socket);

return tunnel;

} catch (Exception e) {

System.out.println(e);

return null;

}

This is the JS script in the index.html that uses Web sockets to connect to 
Java tomcat:

 /*  */ 

I run the following commands in the remote VM to start xrdp:

sudo apt-get update

sudo apt update

sudo ufw enable

sudo ufw allow ssh

sudo ufw allow 3389/tcp

sudo ufw reload

sudo systemctl stop apparmor

sudo apt install xfce4 xfce4-goodies -y

sudo apt install xrdp -y

sudo adduser xrdp ssl-cert

sudo chmod +x /etc/xrdp/key.pem

sudo reboot

I make the following configuration changes to the xrdp.ini file:

tcp_send_buffer_bytes=8388608

crypt_=none

I also change the value of the net.core.wmem_max to allow more traffic to 
passthrough to the network:

sudo sysctl -w net.core.wmem_max=8388608

And I stop composting. I read that this makes it run faster.

xfconf-query --channel=xfwm4 --property=/general/use_compositing --type=bool 
--set=false --create

When I rdp into the VM using my web client, it runs quite slowly. If I rdp 
using the Microsoft Remote Desktop, it runs quite smoothly. Here are two videos 
comparing them. The first one is from the Microsoft Remote Desktop client where 
I play a YouTube video and the second is from my web application.

Viewed from Microsoft Remote Desktop: https://youtu.be/hOW1wsfSVu4

My application (from the web client) https://youtu.be/5UiMNv9WSDc

This is the journalctl log for xrdp when connecting over the Microsoft client:

connected client computer name: Prabuddhas-Lapt

784]: (5784)(140716040189760)[INFO ] adding channel item name rdpdr chan_id 
1004 flags 0x8080

784]: (5784)(140716040189760)[INFO ] adding channel item name rdpsnd chan_id 
1005 flags 0xc000

784]: (5784)(140716040189760)[INFO ] adding channel item name cliprdr chan_id 
1006 flags 0xc0a0

784]: (5784)(140716040189760)[INFO ] adding channel item name drdynvc chan_id 
1007 flags 0xc080

784]: (5784)(140716040189760)[INFO ] TLS connection established from 
:::73.70.63.162 port 57150: TLSv1.3 with cipher TLS_AES_256_GCM_SHA384

784]: (5784)(140716040189760)[DEBUG] xrdp_1698_wm_login_mode_event_0001

784]: 

RE: Error when compile guacamole-server-1.5.3

[Adrian Owen]

Hi,  Please be careful with unsupported repo components, you may unknowingly 
hide security patches.

Waiting for Guacamole Debian 12 support is safest option.   Adrian

From: Yves Auffret 
Sent: 14 August 2023 13:00
To: user@guacamole.apache.org
Subject: Re: Error when compile guacamole-server-1.5.3

Hi,

I agree. Another solution is to keep Debian 12 and downgrade Tomcat from 10 to 
9 by using Debian 11 repo for Tomcat.

Regards,
Le lun. 14 août 2023, 13:54, Adrian Owen 
mailto:adrian.o...@eesm.com>> a écrit :
Debian 12 runs tomcat 10 that’s not supported by Guacamole 
https://issues.apache.org/jira/browse/GUACAMOLE-1325

Debian 11 is okay and should also fix your build issues.

Adrian

-Original Message-
From: Alessandro Sironi 
mailto:a.sir...@me.com.INVALID>>
Sent: 14 August 2023 11:54
To: user@guacamole.apache.org<mailto:user@guacamole.apache.org>
Subject: Error when compile guacamole-server-1.5.3

Hello all,

I'm trying to upgrade from Guacamole 1.5.2 to Guacamole 1.5.3 but I got this 
error during make:

make[2]: uscita dalla directory «/tmp/guacamole-server-1.5.3/src/guacd»
Making all in src/guacenc
make[2]: ingresso nella directory «/tmp/guacamole-server-1.5.3/src/guacenc»
   CC   guacenc-video.o
video.c: In function ‘guacenc_video_alloc’:
video.c:63:22: error: assignment discards ‘const’ qualifier from pointer target 
type [-Werror=discarded-qualifiers]
63 | container_format = container_format_context->oformat;
   |  ^
video.c:66:22: error: initialization discards ‘const’ qualifier from pointer 
target type [-Werror=discarded-qualifiers]
66 | AVCodec* codec = avcodec_find_encoder_by_name(codec_name);
   |  ^~~~
cc1: all warnings being treated as errors
make[2]: *** [Makefile:1126: guacenc-video.o] Errore 1
make[2]: uscita dalla directory «/tmp/guacamole-server-1.5.3/src/guacenc»
make[1]: *** [Makefile:544: all-recursive] Errore 1
make[1]: uscita dalla directory «/tmp/guacamole-server-1.5.3»
make: *** [Makefile:464: all] Errore 2

it's a standalone installation on a dedicated VM Debian 12, I've upgraded right 
now from D11 to D12 and now I'm going to upgrade Guacamole too, this is not my 
first guacamole 1.5.3 on a Debian 12, but this is the first time I see this 
error.

Can someone help me please?

Thanks,

Alessandro


-
To unsubscribe, e-mail: 
user-unsubscr...@guacamole.apache.org<mailto:user-unsubscr...@guacamole.apache.org>
For additional commands, e-mail: 
user-h...@guacamole.apache.org<mailto:user-h...@guacamole.apache.org>

RE: Error when compile guacamole-server-1.5.3

[Adrian Owen]

Debian 12 runs tomcat 10 that’s not supported by Guacamole 
https://issues.apache.org/jira/browse/GUACAMOLE-1325

Debian 11 is okay and should also fix your build issues.

Adrian

-Original Message-
From: Alessandro Sironi  
Sent: 14 August 2023 11:54
To: user@guacamole.apache.org
Subject: Error when compile guacamole-server-1.5.3

Hello all,

I'm trying to upgrade from Guacamole 1.5.2 to Guacamole 1.5.3 but I got this 
error during make:

make[2]: uscita dalla directory «/tmp/guacamole-server-1.5.3/src/guacd»
Making all in src/guacenc
make[2]: ingresso nella directory «/tmp/guacamole-server-1.5.3/src/guacenc»
   CC   guacenc-video.o
video.c: In function ‘guacenc_video_alloc’:
video.c:63:22: error: assignment discards ‘const’ qualifier from pointer target 
type [-Werror=discarded-qualifiers]
    63 | container_format = container_format_context->oformat;
   |  ^
video.c:66:22: error: initialization discards ‘const’ qualifier from pointer 
target type [-Werror=discarded-qualifiers]
    66 | AVCodec* codec = avcodec_find_encoder_by_name(codec_name);
   |  ^~~~
cc1: all warnings being treated as errors
make[2]: *** [Makefile:1126: guacenc-video.o] Errore 1
make[2]: uscita dalla directory «/tmp/guacamole-server-1.5.3/src/guacenc»
make[1]: *** [Makefile:544: all-recursive] Errore 1
make[1]: uscita dalla directory «/tmp/guacamole-server-1.5.3»
make: *** [Makefile:464: all] Errore 2

it's a standalone installation on a dedicated VM Debian 12, I've upgraded right 
now from D11 to D12 and now I'm going to upgrade Guacamole too, this is not my 
first guacamole 1.5.3 on a Debian 12, but this is the first time I see this 
error.

Can someone help me please?

Thanks,

Alessandro


-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

RE: Issue with Guacamole 1.5.2 native build

[Adrian Owen]

Public key authentication failed: Unable to extract public key from private key

This is OpenSSH issue: 
https://security.stackexchange.com/questions/226131/openssh-declares-ssh-rsa-deprecated-what-do-i-do-next

We find Debian 10/11 failed with same error Guacamole SSH to Ubuntu 22.04.

  *   Debian 12 has latest SSH libs and is OK

Try installing Guacamole 1.5.2 on Ubuntu 22.04.

From: devikanth...@gmail.com  On Behalf Of Devi Kanth
Sent: 27 July 2023 05:31
To: user@guacamole.apache.org
Subject: Issue with Guacamole 1.5.2 native build

I followed the below steps to generate guacd (Guacamole 1.5.2) .so files. So, I 
can deploy it on another machine if I wish.

I took a Linux machine with Ubuntu 20.04.6 installed. Followed the Guacamole 
Native installation 
documentation 
and installed the libraries specified in the documentation.
Note: Installed all required libraries using apt install only.

I have copied the generated libs and launcher files into another Linux machine 
of the same OS version (installed required libraries).

I was able to start the guacd service without errors. But, when I tried to use 
SSH / RDP, I faced issues below.

SSH:
1. Password-based login is working fine.
2. Key-based authentication is not working.
Error: guacd[21666]: Public key authentication failed: Unable to extract public 
key from private key.
Later, I tried with the libssh2-1.11.0 version (1.8.0 is the default in Ubuntu 
20.04.6), and Then I got the below error.
guacd[23242]: Public key authentication failed: Callback returned error

RDP:
Getting disconnected after a successful login but no display. (error if I 
provide wrong login details)
kernel: [15747103.155263] guacd[16970]: segfault at 0 ip 7ff8518ccbc0 sp 
7ff84a7fb8a8 error 6 in 
libc-2.31.so[7ff851763000+178000]

I followed the same steps for the Guacamole 1.4.0 version, where SSH/RDP both 
are working fine.

--
Kanth

RE: Launch an app on my guacamole client

[Adrian Owen]

RDP only.

From: Fatima Ezzahra Jaber 
Sent: 26 July 2023 15:42
To: user 
Subject: Re: Launch an app on my guacamole client

Thank you. Is it possible for VNC connections too or just RDP.


De: "Adrian Owen" mailto:adrian.o...@eesm.com>>
À: "user" mailto:user@guacamole.apache.org>>
Envoyé: Mercredi 26 Juillet 2023 16:34:13
Objet: RE: Launch an app on my guacamole client

For RDP connections: 
https://guacamole.apache.org/doc/gug/configuring-guacamole.html#rdp

Set initial-program   connection parameter

It’s a standard RDP function and requires licenced Windows RDS.

From: Fatima Ezzahra Jaber 
mailto:fatima-ezzahra.ja...@grenoble-inp.org>>
Sent: 26 July 2023 15:22
To: user mailto:user@guacamole.apache.org>>
Subject: Launch an app on my guacamole client

Hello,
I am using my own guacamole client application for the goal of launching an 
application, and I am wondering if there is a Guacamole instruction I can send 
from my server to Guacd to open an application, I know it's possible to just go 
to the remote desktop on my web application and open the app manually, but 
that's not my goal. Is there a way I can send an instruction with the app I 
want to open and it will be launched after the connection is established? 
Please don't mind to tell me if my question isn't clear enough or if you need 
more context.

--
JABER Fatima Ezzahra



--
JABER Fatima Ezzahra
2A SEOC Grenoble-INP Phelma
Tél : +33 (0) 6 05 93 50 23

RE: Launch an app on my guacamole client

[Adrian Owen]

For RDP connections: 
https://guacamole.apache.org/doc/gug/configuring-guacamole.html#rdp

Set initial-program   connection parameter

It’s a standard RDP function and requires licenced Windows RDS.

From: Fatima Ezzahra Jaber 
Sent: 26 July 2023 15:22
To: user 
Subject: Launch an app on my guacamole client

Hello,
I am using my own guacamole client application for the goal of launching an 
application, and I am wondering if there is a Guacamole instruction I can send 
from my server to Guacd to open an application, I know it's possible to just go 
to the remote desktop on my web application and open the app manually, but 
that's not my goal. Is there a way I can send an instruction with the app I 
want to open and it will be launched after the connection is established? 
Please don't mind to tell me if my question isn't clear enough or if you need 
more context.

--
JABER Fatima Ezzahra

RE: upgrade guacamole host

[Adrian Owen]

Hi Mike, 

Our policy is install software from Debian repository.  
Installing Tomcat 9 on Debian 12 sadly bypasses repository putting Tomcat at 
risk from missing updates.

-Original Message-
From: Michael Jumper  
Sent: 20 July 2023 18:21
To: user@guacamole.apache.org
Subject: Re: upgrade guacamole host

On 7/20/23 08:18, Adrian Owen wrote:
> Installing 1.5.2 on Debian 12, we met a few issues:
> 
> Minor
> a) maven cannot find Javadoc and fails
> b) maven guacamole build throws 4 x error as warnings

There are no known issues with building guacamole-client.

As long as you have Maven and a version of the JDK installed (8 or newer), 
things should build just fine.

> 
> Major
> c) tomcat 10 not supported.
> https://issues.apache.org/jira/browse/GUACAMOLE-1325
> 

This (upgrading Tomcat) does not pertain to the question at hand (upgrading 
Guacamole). If you are also looking to upgrade your copy of Tomcat, you need to 
instead use the latest release of Tomcat 9.x:

https://tomcat.apache.org/download-90.cgi

Tomcat 10.x uses a different and incompatible API which would require 
correspondingly incompatible changes within Guacamole. Tomcat 9.x, on the other 
hand, is actively maintained and compatible.

That's not to say support for Tomcat 10.x will never be added. Only that:

* Doing so while maintaining API compatibility is non-trivial, and maintaining 
API compatibility is important.
* Doing so is pretty low priority so long as Tomcat 9.x remains an actively 
maintained option.

- Mike

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

RE: upgrade guacamole host

[Adrian Owen]

Installing 1.5.2 on Debian 12, we met a few issues:

Minor
a) maven cannot find Javadoc and fails
b) maven guacamole build throws 4 x error as warnings

Major
c) tomcat 10 not supported.
https://issues.apache.org/jira/browse/GUACAMOLE-1325

Debian 11 is okay


-Original Message-
From: Nick Couchman  
Sent: 20 July 2023 16:13
To: user@guacamole.apache.org
Subject: Re: upgrade guacamole host

On Thu, Jul 20, 2023 at 10:53 AM Piviul  wrote:
>
> Hi all I have installed guacamole 1.4 on a virtual host debian buster 
> 10 and now I would like upgrade debian to 12 (bookwarm) and upgrade 
> guacamole to the last 1.5.2. Whats the best way to performing this 
> upgrade? Have you any suggestions?
>

First, I'll say that 1.5.3 is right around the corner, so you might not want to 
go to 1.5.2. There's a pretty impactful bug in 1.5.2 that gets fixed in 1.5.3, 
so if you use RDP connections, it's probably worth waiting for.

I can't help much with the Debian upgrade, but as far as Guacamole goes, you 
really just follow the same install process with the newer
versions:
* Download and compile guacd, and install it. One of the main keys, here, is to 
make sure that all of the old files from the 1.4.0 version get cleaned 
up/removed prior to installing the new version. I've found it easiest, when I 
install guacd (guacamole-server), to install to its own folder (I use 
/opt/guac), which makes it really easy to just move it out of the way or tar it 
up and remove it before doing the install of the new version.
* Download the Guacamole Client components, including the WAR file and any 
extensions that you use. Remove the old extensions and replace those with the 
newer ones, and then replace the WAR file with the new WAR file. There aren't 
any DB schema changes from 1.4.0 to 1.5.2, so you shouldn't need to worry about 
that during the update process.

-Nick

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

Guacamole 1.5.2 freeRDP version

[Adrian Owen]

Latest freeRDP  version 2.10.0 - 16 Feb 2023.   Is this version supported?

Please recommend version.

Thanks

RE: Guacamole client install - fails with org.apache.rat:apache-rat-plugin Error

[Adrian Owen]

Hi,

I confirm with Open JDK 11 installed the client build completed successfully.

Thank you.

-Original Message-
From: Shigeki Sawamura  
Sent: 07 July 2023 15:53
To: user@guacamole.apache.org
Subject: Re: Guacamole client install - fails with 
org.apache.rat:apache-rat-plugin Error

Hello,

If you are using an Ubuntu system, remove openjdk, $ sudo apt install 
openjdk-11-jdk and try again.

Best Regards,


On 2023/07/07 金 午後 10:31, Adrian Owen wrote:
> Hi Nick,
> 
> 1) > there may be some extra files in your guacamole-client directory 
> that are getting picked up by RAT Yes thanks. I deleted the extra file and 
> rat errors are resolved.
> 
> 2) Next I hit this javadocs JAVAHOME error:
> https://issues.apache.org/jira/browse/MJAVADOC-595
> 
> Fixed by adding to pox.xml
> 
>  ${java.home}/bin/javadoc
> 
> 
> 
> 3) Now maven build fails on guacamole:
>   [INFO] guacamole-common-js  SUCCESS 
> [ 12.186 s] [INFO] guacamole 
> .. FAILURE [01:08 min]
> 
> openjdk version "17.0.7" 2023-04-18
> OpenJDK Runtime Environment (build 17.0.7+7-Debian-1deb12u1) OpenJDK 
> 64-Bit Server VM (build 17.0.7+7-Debian-1deb12u1, mixed mode, sharing)
> 
> Errors:
> Jul 07, 2023 1:52:53 PM 
> com.google.javascript.jscomp.LoggerErrorManager println
> WARNING: all.js:974: WARNING - [JSC_BAD_JSDOC_ANNOTATION] Parse error. 
> illegal use of unknown JSDoc tag "contant"; ignoring it
>   * @contant
> ^
> 
> Jul 07, 2023 1:52:53 PM 
> com.google.javascript.jscomp.LoggerErrorManager println
> WARNING: all.js:5943: WARNING - [JSC_BAD_JSDOC_ANNOTATION] Parse error. 
> illegal use of unknown JSDoc tag "callback"; ignoring it
>   * @callback Guacamole.Event.Target~listener
> ^
> 
> Jul 07, 2023 1:52:53 PM 
> com.google.javascript.jscomp.LoggerErrorManager println
> WARNING: all.js:9718: WARNING - [JSC_BAD_JSDOC_ANNOTATION] Parse error. 
> illegal use of unknown JSDoc tag "inheritdoc"; ignoring it
>   * @inheritdoc
> ^
> 
> Jul 07, 2023 1:52:53 PM 
> com.google.javascript.jscomp.LoggerErrorManager println
> WARNING: all.js:14157: WARNING - [JSC_MISPLACED_ANNOTATION] Misplaced 
> function annotation. This JSDoc is not attached to a function node. Are you 
> missing parentheses?
>  element.addEventListener('touchstart', function touchstart(e) {
>  ^^^
> 
> Thanks, Adrian
> 
> -Original Message-
> From: Nick Couchman 
> Sent: 06 July 2023 16:14
> To: user@guacamole.apache.org
> Subject: Re: Guacamole client install - fails with 
> org.apache.rat:apache-rat-plugin Error
> 
> On Thu, Jul 6, 2023 at 10:33 AM Adrian Owen  wrote:
>>
>> Debian 12  + openjdk-17-jdk
>>
>>
>>> git clone https://github.com/apache/guacamole-client.git
>>   > cd guacamole-client
>>   > git checkout 1.5.2
>>   > mvn package
>>
>>
>> Stops with error:
>>
>>
>> [ERROR] Failed to execute goal org.apache.rat:apache-rat-plugin:0.13:check 
>> (validate-licenses) on project guacamole-client:
>> Too many files with unapproved license: 1 See RAT report in:
>> /home/nonroot/guacamole-client/target/rat.txt -> [Help 1]
> 
> It seems like there may be some extra files in your guacamole-client 
> directory that are getting picked up by RAT, which checks for proper license 
> documentation in source code files. My environment is slightly different - 
> CentOS 8 Stream with OpenJDK (11 and 17), but I've tried the steps you posted 
> above and I do not get this error (OpenJDK 17 does not work with 1.5.2 for 
> other reasons). You can also check the rat.txt file mentioned to see which 
> file it is complaining about.
> 
> -Nick
> 
> -
> To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
> For additional commands, e-mail: user-h...@guacamole.apache.org
> 
> 
> -
> To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
> For additional commands, e-mail: user-h...@guacamole.apache.org

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

RE: Guacamole client install - fails with org.apache.rat:apache-rat-plugin Error

[Adrian Owen]

Hi Nick,

1) > there may be some extra files in your guacamole-client directory that are 
getting picked up by RAT
Yes thanks. I deleted the extra file and rat errors are resolved.

2) Next I hit this javadocs JAVAHOME error:
https://issues.apache.org/jira/browse/MJAVADOC-595

Fixed by adding to pox.xml

${java.home}/bin/javadoc



3) Now maven build fails on guacamole:
 [INFO] guacamole-common-js  SUCCESS [ 12.186 s]
[INFO] guacamole .. FAILURE [01:08 min]

openjdk version "17.0.7" 2023-04-18
OpenJDK Runtime Environment (build 17.0.7+7-Debian-1deb12u1)
OpenJDK 64-Bit Server VM (build 17.0.7+7-Debian-1deb12u1, mixed mode, sharing)

Errors: 
Jul 07, 2023 1:52:53 PM com.google.javascript.jscomp.LoggerErrorManager println
WARNING: all.js:974: WARNING - [JSC_BAD_JSDOC_ANNOTATION] Parse error. illegal 
use of unknown JSDoc tag "contant"; ignoring it
 * @contant
   ^

Jul 07, 2023 1:52:53 PM com.google.javascript.jscomp.LoggerErrorManager println
WARNING: all.js:5943: WARNING - [JSC_BAD_JSDOC_ANNOTATION] Parse error. illegal 
use of unknown JSDoc tag "callback"; ignoring it
 * @callback Guacamole.Event.Target~listener
   ^

Jul 07, 2023 1:52:53 PM com.google.javascript.jscomp.LoggerErrorManager println
WARNING: all.js:9718: WARNING - [JSC_BAD_JSDOC_ANNOTATION] Parse error. illegal 
use of unknown JSDoc tag "inheritdoc"; ignoring it
 * @inheritdoc
   ^

Jul 07, 2023 1:52:53 PM com.google.javascript.jscomp.LoggerErrorManager println
WARNING: all.js:14157: WARNING - [JSC_MISPLACED_ANNOTATION] Misplaced function 
annotation. This JSDoc is not attached to a function node. Are you missing 
parentheses?
element.addEventListener('touchstart', function touchstart(e) {
^^^

Thanks, Adrian

-Original Message-
From: Nick Couchman  
Sent: 06 July 2023 16:14
To: user@guacamole.apache.org
Subject: Re: Guacamole client install - fails with 
org.apache.rat:apache-rat-plugin Error

On Thu, Jul 6, 2023 at 10:33 AM Adrian Owen  wrote:
>
> Debian 12  + openjdk-17-jdk
>
>
> > git clone https://github.com/apache/guacamole-client.git
>  > cd guacamole-client
>  > git checkout 1.5.2
>  > mvn package
>
>
> Stops with error:
>
>
> [ERROR] Failed to execute goal org.apache.rat:apache-rat-plugin:0.13:check 
> (validate-licenses) on project guacamole-client:
> Too many files with unapproved license: 1 See RAT report in: 
> /home/nonroot/guacamole-client/target/rat.txt -> [Help 1]

It seems like there may be some extra files in your guacamole-client directory 
that are getting picked up by RAT, which checks for proper license 
documentation in source code files. My environment is slightly different - 
CentOS 8 Stream with OpenJDK (11 and 17), but I've tried the steps you posted 
above and I do not get this error (OpenJDK 17 does not work with 1.5.2 for 
other reasons). You can also check the rat.txt file mentioned to see which file 
it is complaining about.

-Nick

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

Guacamole client install - fails with org.apache.rat:apache-rat-plugin Error

[Adrian Owen]

Debian 12  + openjdk-17-jdk


> git clone https://github.com/apache/guacamole-client.git
 > cd guacamole-client
 > git checkout 1.5.2
 > mvn package


Stops with error:

[ERROR] Failed to execute goal org.apache.rat:apache-rat-plugin:0.13:check 
(validate-licenses) on project guacamole-client:
Too many files with unapproved license: 1 See RAT report in: 
/home/nonroot/guacamole-client/target/rat.txt -> [Help 1]

Thanks

Re: SAMBA "drive-path" question

[Adrian Owen]

HI Nick,


>Just to be clear, there is no reason you need Samba in order to have
>the RDP drive redirection work correctly - this is completely internal
>to RDP and does not require Samba.


I understand - We normally set drive share to internal Guacamole Linux drive.


This special requirement is give RDP users access to Windows Network Drive when 
RDP session starts.


Setting the drive path to shared Guacamole server SAMBA mounted  Windows 
Network Drive, meets the requirement.



Is there a better Guacamole solution that does not require SAMBA drive-path?   
Thanks Adrian

SAMBA "drive-path" question

[Adrian Owen]

I installed SAMBA and setup access to Windows Network File Share on Debian 
Guacamole server: /media/winshare


Opened 2 x Guacamole RDP session setting "drive-path" to /media/winshare works 
fine.


Both windows sessions can access the Windows Network share..


My question is will it scale to 100 x Guacamole RDP sessions, all with same 
drive-path = /media/winshare, or is there a limit on SAMBA/Guacamole 
drive-paths?



thanks Adrian

Connection timeout

[Adrian Owen]

I have a customer where connection to Linux requires MFA.

How to increase Guacamole connection timeout?


Thanks, Adrian

Re: Error with only some servers

[Adrian Owen]

Workaround for Ubuntu 2204 target:

echo HostKeyAlgorithms +ssh-rsa >> /etc/ssh/sshd_config
systemctl restart sshd


Hope it helps. Adrian

From: Brendan 
Sent: 08 February 2023 3:13 AM
To: user@guacamole.apache.org 
Subject: Re: Error with only some servers 
 
Ah. Thanks heaps for your help :)

Regards
Brendan.

On Wed, 8 Feb 2023, at 11:07, Michael Jumper wrote:
You are encountering:

https://github.com/libssh2/libssh2/issues/634

which should be fixed by:

https://github.com/libssh2/libssh2/pull/626

but has not yet made it into a libssh2 release. You can build libssh2 from git, 
or reconfigure OpenSSH on the Ubuntu server to work around things.

- Mike

On Tue, Feb 7, 2023, 4:21 PM Brendan  wrote:

OpenSSH_8.9p1 Ubuntu-3ubuntu0.1, OpenSSL 3.0.2 15 Mar 2022


On Wed, 8 Feb 2023, at 10:18, Michael Jumper wrote:
What version of OpenSSH is on the destination machine?

On Tue, Feb 7, 2023, 4:18 PM Brendan  wrote:

I'm not sure, how do i find out?

Also, i removed the key, and it still doesn't work. I just recreated the 
server, and it still doesn't work

Regards
Brendan.

On Wed, 8 Feb 2023, at 10:14, Michael Jumper wrote:
What kind of private key is this?

On Tue, Feb 7, 2023, 3:59 PM Brendan  wrote:

Hi

I've got one last problem. One of my servers still isn't connecting, despite 
checking that i had the parameters set, not the proxy details.

When I try to connect, i get the following:

guacd[251]: INFO: Creating new client for protocol "ssh"
guacd[251]: INFO: Connection ID is "$b8f61fb7-71a4-4ab2-80f1-b69fd11beda2"
01:55:32.223 [http-nio-8080-exec-3] INFO  o.a.g.tunnel.TunnelRequestService - 
User "brendan" connected to connection "5".
guacd[2115]: INFO: User "@36ada82c-1c68-4f1b-8a4d-55512697534f" joined 
connection "$b8f61fb7-71a4-4ab2-80f1-b69fd11beda2" (1 users now present)
guacd[2115]: INFO: Auth key successfully imported.
guacd[2115]: ERROR: SSH handshake failed.
01:55:32.282 [http-nio-8080-exec-10] INFO  o.a.g.tunnel.TunnelRequestService - 
User "brendan" disconnected from connection "5". Duration: 55 milliseconds
guacd[2115]: INFO: User "@36ada82c-1c68-4f1b-8a4d-55512697534f" disconnected (0 
users remain)
guacd[2115]: INFO: Last user of connection 
"$b8f61fb7-71a4-4ab2-80f1-b69fd11beda2" disconnected
Exception in thread "Thread-14" java.lang.IllegalStateException: Message will 
not be sent because the WebSocket session has been closed
at 
org.apache.tomcat.websocket.WsRemoteEndpointImplBase.writeMessagePart(WsRemoteEndpointImplBase.java:425)
at 
org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendMessageBlock(WsRemoteEndpointImplBase.java:309)
at 
org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendMessageBlock(WsRemoteEndpointImplBase.java:250)
at 
org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendString(WsRemoteEndpointImplBase.java:191)
at 
org.apache.tomcat.websocket.WsRemoteEndpointBasic.sendText(WsRemoteEndpointBasic.java:37)
at 
org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint.sendInstruction(GuacamoleWebSocketTunnelEndpoint.java:152)
at 
org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint.access$200(GuacamoleWebSocketTunnelEndpoint.java:53)
at 
org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint$2.run(GuacamoleWebSocketTunnelEndpoint.java:253)
guacd[251]: INFO: Connection "$b8f61fb7-71a4-4ab2-80f1-b69fd11beda2" removed.


On Wed, 8 Feb 2023, at 09:47, Brendan wrote:
aha. Yes, i filled in the proxy details, not the proper part.

Thanks for your help

regards
Brendan.

On Wed, 8 Feb 2023, at 09:43, Michael Jumper wrote:
The error in question is specifically regarding the webapp being unable to 
connect over TCP to the guacd service, so something must be interfering with 
that...

Did you perchance accidentally fill in the hostname/address for the destination 
machine in the "Guacamole proxy parameters (guacd)" section and not the 
"Parameters" section?

- Mike

On Tue, Feb 7, 2023, 3:40 PM Brendan  wrote:

Hi

I just removed the IPv6 from the /etc/hosts, and it didn't resolve anything. I 
don't think it's because guacd isn't running, because other servers work fine.

Regards
Brendan.

On Wed, 8 Feb 2023, at 02:48, Michael Jumper wrote:
On Tue, Feb 7, 2023, 1:24 AM Brendan  wrote:

Hello

I am having a problem whereby a couple of my servers won't connect in guac. It 
says in the web client "An error has occurred with the guacamole server". I ran 
docker logs guacamole and this is the error i get:

11:20:29.290 [http-nio-8080-exec-6] ERROR 
o.a.g.w.GuacamoleWebSocketTunnelEndpoint - Creation of WebSocket tunnel to 
guacd failed: java.net.ConnectException: Connection refused (Connection refused)
11:20:29.307 [http-nio-8080-exec-8] ERROR o.a.g.s.GuacamoleHTTPTunnelServlet - 
HTTP tunnel request failed: java.net.ConnectException: Connection refused 
(Connection refused)

This sounds like guacd isn't running, or something is blocking the connection 
from the webapp to guacd.

I should note, that i have other servers working perfectly 

RE: Default Clipboard Settings

[Adrian Owen]

Copy/paste is enabled by default.   In JSON you can set:
"disable-copy", "true"
"disable-paste", "true" Adrian

From: Hannah Mortimer [mailto:hmorti...@plexsys.com]
Sent: 21 September 2022 15:24
To: user@guacamole.apache.org
Subject: Default Clipboard Settings

Good morning,

I was wondering if someone would be able to help me determine where I can 
change the default clipboard settings.

When we create a new connection I would like the option to not show (for RDP) 
as well as the setting for the clipboard copy/paste to be automatically set to 
disabled. We want to prevent users from copying and pasting outside of the RDP 
connection.

I have tried changing the BOOLEAN value in 
/guacamole-ext/src/main/resources/org/apache/guacamole/protocols/rdp.json - but 
to no avail that did not set the clipboard to disabled.


Please let me know what information you may need so that we may find a solution!

Hannah Mortimer

RE: A question about performance.

[Adrian Owen]

Mentioned here:  
https://sourceforge.net/p/guacamole/discussion/1110834/thread/666f7a9f/

Adrian

From: tong13005572...@gmail.com [mailto:tong13005572...@gmail.com]
Sent: 12 August 2022 09:12
To: user 
Subject: A question about performance.

Hi~

My os enviroment:
OS: Rocky Linux release 8.5 (Green Obsidian)
CPU:   Intel(R) Core(TM) i7-6700 CPU @ 3.40GHz
Memory: 8GB

After the client establishes an RDP connection (only one connection), I observe 
the CPU utilization rate through the top command in the Linux system.
When the content of the client window changes a lot, such as playing video and 
dragging the window quickly, I can see that the single core CPU utilization 
rate reaches 100%, and the memory utilization rate is not high.
I want to know what methods can be used to solve this situation and replace it 
with a better CPU or GPU?


tong13005572...@gmail.com

RE: RDP drag and drop error messages

[Adrian Owen]

Hi Nick,

> When you say "drag and drop"?

These connection properties: 
enable-drive
drive-path
create-drive-path

I checked directory permissions on server- guacd process user is also owner of 
directory and group owner and world RW is set.


When you run rdp drag and drop, do you see same errors in daemon log?

Many thanks, Adrian

From: Nick Couchman [mailto:vn...@apache.org] 
Sent: 11 May 2022 13:01
To: user@guacamole.apache.org
Subject: Re: RDP drag and drop error messages



On Wed, May 11, 2022 at 5:25 AM Adrian Owen  wrote:
Hi, RDP drag and drop works great. (Guacamole 1.2 on Debian)

When you say "drag and drop", what do you mean?
 
But daemon log file show errors:

May 11 10:04:29 guac-124 guacd[1543]: File open refused (-2): "\desktop.ini"
May 11 10:04:29 guac-124 guacd-eesm[473]: guacd[1543]: ERROR:#011File open 
refused (-2): "\desktop.ini"
May 11 10:04:29 guac-124 guacd[1543]: File open refused (-2): 
"\SocketTest.exe.Config"

This looks like guacd doesn't have read and/or write access to the location 
specified for the redirected folder, or at least for some of the files in that 
folder. Make sure the user running guacd has the correct privileges.

-Nick

RDP drag and drop error messages

[Adrian Owen]

Hi, RDP drag and drop works great. (Guacamole 1.2 on Debian)

But daemon log file show errors:

May 11 10:04:29 guac-124 guacd[1543]: File open refused (-2): "\desktop.ini"
May 11 10:04:29 guac-124 guacd-eesm[473]: guacd[1543]: ERROR:#011File open 
refused (-2): "\desktop.ini"
May 11 10:04:29 guac-124 guacd[1543]: File open refused (-2): 
"\SocketTest.exe.Config"
May 11 10:04:29 guac-124 guacd-eesm[473]: guacd[1543]: ERROR:#011File open 
refused (-2): "\SocketTest.exe.Config"
May 11 10:04:32 guac-124 guacd[1543]: File open refused (-2): "\sockettest.exe"
May 11 10:04:32 guac-124 guacd-eesm[473]: guacd[1543]: ERROR:#011File open 
refused (-2): "\sockettest.exe"
May 11 10:04:32 guac-124 guacd-eesm[473]: guacd[1543]: ERROR:#011File open 
refused (-2): "\sockettest.exe"
May 11 10:04:32 guac-124 guacd[1543]: File open refused (-2): "\sockettest.exe"
May 11 10:04:32 guac-124 guacd[1543]: File open refused (-2): 
"\sockettest.exe.DLL"
May 11 10:04:32 guac-124 guacd-eesm[473]: guacd[1543]: ERROR:#011File open 
refused (-2): "\sockettest.exe.DLL"
May 11 10:04:32 guac-124 guacd[1543]: File open refused (-2): "\sockettest.exe"
May 11 10:04:32 guac-124 guacd-eesm[473]: guacd[1543]: ERROR:#011File open 
refused (-2): "\sockettest.exe"
May 11 10:04:32 guac-124 guacd[1543]: File open refused (-2): "\sockettest.exe"
May 11 10:04:32 guac-124 guacd-eesm[473]: guacd[1543]: ERROR:#011File open 
refused (-2): "\sockettest.exe"
May 11 10:04:32 guac-124 guacd[1543]: File open refused (-2): "\sockettest.exe"
May 11 10:04:32 guac-124 guacd-eesm[473]: guacd[1543]: ERROR:#011File open 
refused (-2): "\sockettest.exe"
May 11 10:04:32 guac-124 guacd[1543]: File open refused (-2): "\sockettest.exe"
May 11 10:04:32 guac-124 guacd-eesm[473]: guacd[1543]: ERROR:#011File open 
refused (-2): "\sockettest.exe"
May 11 10:04:32 guac-124 guacd[1543]: File open refused (-2): 
"\sockettest.exe.DLL"
May 11 10:04:32 guac-124 guacd-eesm[473]: guacd[1543]: ERROR:#011File open 
refused (-2): "\sockettest.exe.DLL"
May 11 10:04:32 guac-124 guacd[1543]: File open refused (-2): "\sockettest.exe"
May 11 10:04:32 guac-124 guacd-eesm[473]: guacd[1543]: ERROR:#011File open 
refused (-2): "\sockettest.exe"
May 11 10:04:32 guac-124 guacd[1543]: File open refused (-2): "\sockettest.exe"
May 11 10:04:32 guac-124 guacd-eesm[473]: guacd[1543]: ERROR:#011File open 
refused (-2): "\sockettest.exe"
May 11 10:04:34 guac-124 guacd[1543]: File open refused (-2): "\.svn"
May 11 10:04:34 guac-124 guacd-eesm[473]: guacd[1543]: ERROR:#011File open 
refused (-2): "\.svn"
May 11 10:04:34 guac-124 guacd[1543]: File open refused (-2): "\.svn"
May 11 10:04:34 guac-124 guacd-eesm[473]: guacd[1543]: ERROR:#011File open 
refused (-2): "\.svn"
May 11 10:05:22 guac-124 guacd[1543]: File open refused (-2): "\Download\.svn"
May 11 10:05:22 guac-124 guacd-eesm[473]: guacd[1543]: ERROR:#011File open 
refused (-2): "\Download\.svn"
May 11 10:05:22 guac-124 guacd-eesm[473]: guacd[1543]: ERROR:#011File open 
refused (-2): "\.svn"
May 11 10:05:22 guac-124 guacd[1543]: File open refused (-2): "\.svn"
May 11 10:05:22 guac-124 guacd[1543]: File open refused (-2): "\Download\.svn"
May 11 10:05:22 guac-124 guacd-eesm[473]: guacd[1543]: ERROR:#011File open 
refused (-2): "\Download\.svn"
May 11 10:05:22 guac-124 guacd[1543]: File open refused (-2): "\.svn"
May 11 10:05:22 guac-124 guacd-eesm[473]: guacd[1543]: ERROR:#011File open 
refused (-2): "\.svn"
May 11 10:05:22 guac-124 guacd[1543]: File open refused (-7): "\Download"
May 11 10:05:22 guac-124 guacd-eesm[473]: guacd[1543]: ERROR:#011File open 
refused (-7): "\Download"
May 11 10:05:23 guac-124 guacd[1543]: File open refused (-2): "\888QQQ.txt"
May 11 10:05:23 guac-124 guacd-eesm[473]: guacd[1543]: ERROR:#011File open 
refused (-2): "\888QQQ.txt"

Is connection setting missing?  Thanks, Adrian

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

RE: Issues with RDP connections

[Adrian Owen]

> I set TLS and ignore certificate, and it could get in

Guacamole settings are ok.

From: Devine, Harry (FAA) [mailto:harry.dev...@faa.gov.INVALID]
Sent: 17 February 2022 21:11
To: user@guacamole.apache.org
Subject: RE: Issues with RDP connections

Same errors (Guac's web page says the connection is currently unreachable).  
The log shows:

Feb 17 16:09:10 armt guacd[4148]: Creating new client for protocol "rdp"
Feb 17 16:09:10 armt guacd[4148]: Connection ID is 
"$61bba758-ee0f-442d-9c99-03bb6204066d"
Feb 17 16:09:10 armt guacd[19478]: Security mode: Negotiate (ANY)
Feb 17 16:09:10 armt guacd[19478]: Resize method: none
Feb 17 16:09:10 armt guacd[19478]: No clipboard line-ending normalization 
specified. Defaulting to preserving the format of all line endings.
Feb 17 16:09:10 armt server: 16:09:10.650 [http-bio-8080-exec-89] INFO  
o.a.g.tunnel.TunnelRequestService - User "guacadmin" connected to connection 
"2".
Feb 17 16:09:10 armt server: 16:09:10.650 [http-bio-8080-exec-89] INFO  
o.a.g.t.h.RestrictedGuacamoleHTTPTunnelServlet - Using HTTP tunnel (not 
WebSocket). Performance may be sub-optimal.
Feb 17 16:09:10 armt guacd[19478]: User "@d394b5b0-4e10-47d1-a237-0d3536b5c921" 
joined connection "$61bba758-ee0f-442d-9c99-03bb6204066d" (1 users now present)
Feb 17 16:09:10 armt guacd[19478]: Loading keymap "base"
Feb 17 16:09:10 armt guacd[19478]: Loading keymap "en-us-qwerty"
Feb 17 16:09:11 armt guacd[19478]: RDP server closed/refused connection: Server 
refused connection (wrong security type?)
Feb 17 16:09:11 armt guacd[19478]: User "@d394b5b0-4e10-47d1-a237-0d3536b5c921" 
disconnected (0 users remain)
Feb 17 16:09:11 armt guacd[19478]: Last user of connection 
"$61bba758-ee0f-442d-9c99-03bb6204066d" disconnected
Feb 17 16:09:11 armt guacd[4148]: Connection 
"$61bba758-ee0f-442d-9c99-03bb6204066d" removed.
Feb 17 16:09:11 armt server: 16:09:11.387 [http-bio-8080-exec-109] INFO  
o.a.g.tunnel.TunnelRequestService - User "guacadmin" disconnected from 
connection "2". Duration: 15423 milliseconds
Feb 17 16:09:11 armt server: 16:09:11.392 [http-bio-8080-exec-109] ERROR 
o.a.g.s.GuacamoleHTTPTunnelServlet - HTTP tunnel request failed: Connection to 
guacd timed out.

I created a new connection to  another Windows server that's Windows 10, and I 
set TLS and ignore certificate, and it could get in, so what could be wrong on 
this Windows server to cause to refuse a connection?

Thanks,
Harry

From: Adrian Owen mailto:adrian.o...@eesm.com>>
Sent: Thursday, February 17, 2022 4:08 PM
To: user@guacamole.apache.org<mailto:user@guacamole.apache.org>
Subject: RE: Issues with RDP connections

security   any
ignore-cert true

Adrian

From: Devine, Harry (FAA) [mailto:harry.dev...@faa.gov.INVALID]
Sent: 17 February 2022 20:45
To: user@guacamole.apache.org<mailto:user@guacamole.apache.org>
Subject: Issues with RDP connections

We are trying to get RDP connections to a Windows Server 2012 machine, and 
every time we try, it fails.  The /var/log/messages shows the following:

Feb 17 15:40:51 armt guacd[4148]: Creating new client for protocol "rdp"
Feb 17 15:40:51 armt guacd[4148]: Connection ID is 
"$4886636f-dd2a-455d-865a-239b95a0f4ae"
Feb 17 15:40:51 armt guacd[17756]: Security mode: TLS
Feb 17 15:40:51 armt guacd[17756]: Resize method: none
Feb 17 15:40:51 armt guacd[17756]: No clipboard line-ending normalization 
specified. Defaulting to preserving the format of all line endings.
Feb 17 15:40:51 armt server: 15:40:51.939 [http-bio-8080-exec-87] INFO  
o.a.g.tunnel.TunnelRequestService - User "guacadmin" connected to connection 
"2".
Feb 17 15:40:51 armt server: 15:40:51.939 [http-bio-8080-exec-87] INFO  
o.a.g.t.h.RestrictedGuacamoleHTTPTunnelServlet - Using HTTP tunnel (not 
WebSocket). Performance may be sub-optimal.
Feb 17 15:40:51 armt guacd[17756]: User "@eca84bdc-710e-43f6-88c0-0451531d9a14" 
joined connection "$4886636f-dd2a-455d-865a-239b95a0f4ae" (1 users now present)
Feb 17 15:40:51 armt guacd[17756]: Loading keymap "base"
Feb 17 15:40:51 armt guacd[17756]: Loading keymap "en-us-qwerty"
Feb 17 15:40:52 armt guacd[17756]: RDP server closed/refused connection: 
Security negotiation failed (wrong security type?)
Feb 17 15:40:52 armt guacd[17756]: User "@eca84bdc-710e-43f6-88c0-0451531d9a14" 
disconnected (0 users remain)
Feb 17 15:40:52 armt guacd[17756]: Last user of connection 
"$4886636f-dd2a-455d-865a-239b95a0f4ae" disconnected
Feb 17 15:40:52 armt guacd[4148]: Connection 
"$4886636f-dd2a-455d-865a-239b95a0f4ae" removed.
Feb 17 15:41:07 armt server: 15:41:07.343 [http-bio-8080-exec-105] INFO  
o.a.g.tunnel.TunnelRequestService - User "guacadmin" disconnected from 
connection "2". Duration: 15404 milliseconds
Feb 17 15:41:07

RE: Issues with RDP connections

[Adrian Owen]

security   any
ignore-cert true

Adrian

From: Devine, Harry (FAA) [mailto:harry.dev...@faa.gov.INVALID]
Sent: 17 February 2022 20:45
To: user@guacamole.apache.org
Subject: Issues with RDP connections

We are trying to get RDP connections to a Windows Server 2012 machine, and 
every time we try, it fails.  The /var/log/messages shows the following:

Feb 17 15:40:51 armt guacd[4148]: Creating new client for protocol "rdp"
Feb 17 15:40:51 armt guacd[4148]: Connection ID is 
"$4886636f-dd2a-455d-865a-239b95a0f4ae"
Feb 17 15:40:51 armt guacd[17756]: Security mode: TLS
Feb 17 15:40:51 armt guacd[17756]: Resize method: none
Feb 17 15:40:51 armt guacd[17756]: No clipboard line-ending normalization 
specified. Defaulting to preserving the format of all line endings.
Feb 17 15:40:51 armt server: 15:40:51.939 [http-bio-8080-exec-87] INFO  
o.a.g.tunnel.TunnelRequestService - User "guacadmin" connected to connection 
"2".
Feb 17 15:40:51 armt server: 15:40:51.939 [http-bio-8080-exec-87] INFO  
o.a.g.t.h.RestrictedGuacamoleHTTPTunnelServlet - Using HTTP tunnel (not 
WebSocket). Performance may be sub-optimal.
Feb 17 15:40:51 armt guacd[17756]: User "@eca84bdc-710e-43f6-88c0-0451531d9a14" 
joined connection "$4886636f-dd2a-455d-865a-239b95a0f4ae" (1 users now present)
Feb 17 15:40:51 armt guacd[17756]: Loading keymap "base"
Feb 17 15:40:51 armt guacd[17756]: Loading keymap "en-us-qwerty"
Feb 17 15:40:52 armt guacd[17756]: RDP server closed/refused connection: 
Security negotiation failed (wrong security type?)
Feb 17 15:40:52 armt guacd[17756]: User "@eca84bdc-710e-43f6-88c0-0451531d9a14" 
disconnected (0 users remain)
Feb 17 15:40:52 armt guacd[17756]: Last user of connection 
"$4886636f-dd2a-455d-865a-239b95a0f4ae" disconnected
Feb 17 15:40:52 armt guacd[4148]: Connection 
"$4886636f-dd2a-455d-865a-239b95a0f4ae" removed.
Feb 17 15:41:07 armt server: 15:41:07.343 [http-bio-8080-exec-105] INFO  
o.a.g.tunnel.TunnelRequestService - User "guacadmin" disconnected from 
connection "2". Duration: 15404 milliseconds
Feb 17 15:41:07 armt server: 15:41:07.348 [http-bio-8080-exec-105] ERROR 
o.a.g.s.GuacamoleHTTPTunnelServlet - HTTP tunnel request failed: Connection to 
guacd timed out.

We have tried all possible values in the connection's Security Mode, as well 
has having "Ignore Server Certificate" checked and unchecked, and it simply 
won't connect.  How can we get this working?  This is a high-security item for 
a client of ours and they have to have connectivity to these machines restored 
asap.

Thanks,
Harry

Harry Devine
Secure-OSE System Administrator
Red Hat Certified System Administrator (RHCSA)
Work: (609) 485-4218
FAA Cell:  (609) 612-7274

RE: RDP session freeze

[Adrian Owen]

1)  Any users playing Video? E.g. YouTube.

2)  How many cores, how much RAM in your guacamole server?

Adrian

From: Prakhar Jalan [mailto:prakhar@terralink.cloud]
Sent: 07 January 2022 13:58
To: user@guacamole.apache.org
Subject: RDP session freeze

Hello everyone!

After switching to 1.4.0, many of our users are reporting freezing of RDP 
sessions at regular intervals. We handle about 70 simultaneous user sessions. 
Is anyone facing similar issue with 1.4.0 or it could be something to do with 
just our infrastructure?

Thanks!

Prakhar

RE: enable-font-smoothing - Network Overhead

[Adrian Owen]

Hi Nick,

> First, I'm not sure that I understand what the various test cases mean. I 
> don't know what "NOT Smoothing NOT text" means? Maybe that smooth is disabled 
> and you're not display text?

NOT Text = Start RDP Session and don’t start an apps.
NOT Smoothing = Font smoothing not enabled.

It’s for special use case. Screenshot with smooth fonts plays better with OCR.

Interestingly the 11 year old post on Smooth Font RDP bandwidth is still 
correct. No change.

Thanks, Adrian

,
From: Nick Couchman [mailto:vn...@apache.org]
Sent: 27 November 2021 15:23
To: user@guacamole.apache.org
Subject: Re: enable-font-smoothing - Network Overhead

On Sat, Nov 27, 2021 at 4:02 AM Adrian Owen 
mailto:adrian.o...@eesm.com>> wrote:
Hi Nick,

Test results:

Chrome Browser 1200 x 800
Debian Buster Guacamole 1.2
Target Windows 2016 Server

Total Network Bytes. 4 x 30 second RDP Sessions.

Font Smoothing Test Target->Guacamole(3389 RDP) 
Guacamole->Browser(443 HTTP)

NOT Smoothing NOT text  312 21K
NOT Smoothing AND text  381K221K
Smoothing NOT text  312 21K
Smoothing AND text  1054K   496K

Font smoothing enabled = 300% RDP increase, 200% HTTP increase.

Could the HTTP increase be reduced?

First, I'm not sure that I understand what the various test cases mean. I don't 
know what "NOT Smoothing NOT text" means? Maybe that smooth is disabled and 
you're not display text?

However, I would say that if "Smoothing AND text" means that you've got font 
smoothing enabled and a lot of text, the RDP session is having to process a lot 
of edges of many pixels on the screen in order to smooth all of the text on the 
screen, and this is necessarily going to mean that more regions of the screen 
need to be updated and smoothed, which is naturally going to result in larger 
amounts of data going back and forth. It's also worth pointing out that the 
presence of text seems, itself, to be a driver for bandwidth - if you're using 
21K without text, and 221K with text, that's a 10x increase in bandwidth 
utilization. It's only double that amount when you smooth it, so that's less 
the issue than the presence of text.

As far as what can be done to limit the HTTP increase - you have part of your 
answer - don't enable font smoothing (which appears to double the bandwidth 
requirement. Beyond that, I'm not sure anything can be done.

That said, are you running into situations where bandwidth or network 
utilization related to Guacamole is a problem? Guacamole is reasonably good at 
1) using the available resources, including bandwidth, but then, 2) balancing 
connections over the available resources to avoid one connection monopolizing 
the resources. If you're not seeing any issues, and you're scaling up the 
number of connections, then I wouldn't worry about it until you're actually 
seeing problems.

-Nick

RE: enable-font-smoothing - Network Overhead

[Adrian Owen]

Hi Nick,

Test results:

Chrome Browser 1200 x 800
Debian Buster Guacamole 1.2
Target Windows 2016 Server 

Total Network Bytes. 4 x 30 second RDP Sessions.

Font Smoothing Test Target->Guacamole(3389 RDP) 
Guacamole->Browser(443 HTTP)

NOT Smoothing NOT text  312 21K
NOT Smoothing AND text  381K221K
Smoothing NOT text  312 21K
Smoothing AND text  1054K   496K

Font smoothing enabled = 300% RDP increase, 200% HTTP increase.

Could the HTTP increase be reduced?

Thanks, Adrian


-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

RE: Block certain commands for SSH

[Adrian Owen]

SSH user ID 0 can always circumvent.



It's impossible.



Adrian

From: Mike Jumper [mailto:mike.jum...@glyptodon.com]
Sent: 26 November 2021 10:06
To: user@guacamole.apache.org
Subject: Re: Block certain commands for SSH

On Fri, Nov 26, 2021, 01:52 Yang Yang 
mailto:yy8...@icloud.com.invalid>> wrote:
Hello,

Is it possible to set a list of commands that will be blocked when any user 
types in for SSH connection? This will be useful to protect the server from 
dangerous command such as “rm -rf /“.

If the feature is not yet available, is it possible with guacamole? If I can 
get some time to have a try, should it be implemented with guacamole client or 
server (guacd)?

No, this is not possible for any SSH client:

Keep in mind that when you use SSH, you are not sending commands but 
keystrokes. There is no way to know that a user's keystrokes are due to the 
user running a command, typing documentation about that command, or messaging 
their friend who happens to be named "rm -rf /".

The only way to reliably block anything like this would be on the SSH server, 
within the shell interpreting the command. Only the shell truly knows that what 
you are doing is typing a command.

- Mike

RE: enable-font-smoothing - Network Overhead

[Adrian Owen]

Thanks Nick.

>> it's possible that some further optimization was done in later versions of 
>> Windows and RDP

I’ll run tests and post the results. Adrian

From: Nick Couchman [mailto:vn...@apache.org]
Sent: 20 November 2021 18:01
To: user@guacamole.apache.org
Subject: Re: enable-font-smoothing - Network Overhead

On Sat, Nov 20, 2021 at 11:52 AM Adrian Owen 
mailto:adrian.o...@eesm.com>> wrote:
Documentation: If set to "true", text will be rendered with smooth edges. Text 
over RDP is rendered with rough edges by default, as this reduces the number of 
colors used by text, and thus reduces the bandwidth required for the connection.

User test result 330% network increase
https://helgeklein.com/blog/bandwidth-requirements-for-cleartype-over-rdp/

In a Guacamole system is this network increase between:

A) Remote computer and Guacamole server

B)  Guacamole server and User Browser

C)  Both


Well, a couple of things. That post is talking about the RDP protocol itself, 
so, to strictly answer your question, the answer would be "A" - if this setting 
does indeed result in an increase in bandwidth utilization, it would be between 
guacd and the RDP server. That said, it could also be "B" (and thus, "C" in 
your list), but it's hard to say. If you're that concerned about it maybe you 
should spend some time testing it and see what results you get?

I'll also point out that the blog post you mentioned is 11 years old, and talks 
about Server 2008, so it's possible that some further optimization was done in 
later versions of Windows and RDP that make this a moot point.

-Nick

enable-font-smoothing - Network Overhead

[Adrian Owen]

Documentation: If set to "true", text will be rendered with smooth edges. Text 
over RDP is rendered with rough edges by default, as this reduces the number of 
colors used by text, and thus reduces the bandwidth required for the connection.

User test result 330% network increase
https://helgeklein.com/blog/bandwidth-requirements-for-cleartype-over-rdp/

In a Guacamole system is this network increase between:

A) Remote computer and Guacamole server

B)  Guacamole server and User Browser

C)  Both

Thanks, Adrian

RE: Difference between normal RDP and Guacamole’s RDP.

[Adrian Owen]

Don’t know.   Question for the team.

From: takuya morita [mailto:mrttky521...@gmail.com]
Sent: 05 November 2021 02:33
To: user@guacamole.apache.org
Subject: Re: Difference between normal RDP and Guacamole’s RDP.

Thanks for the detailed explanation.
Is it possible that the data traffic between the browser and Tomcat is smaller 
than that of normal RDP when bandwidth is tight?

2021年11月4日(木) 21:33 Adrian Owen 
mailto:adrian.o...@eesm.com>>:
Hi,

When you run normal RDP.RDP traffic is direct between your computer and 
remote computer.
Your RDP client displays session.

When you run Guacamole RDP.Traffic is:

A)  (RDP) Between Guacamole (freeRDP) and remote computer.

B)   (Web) Your Web Browser and Guacamole

As Nick says, you should also measure Guacamole (freeRDP) to Remote computer 
bandwidth, to get complete picture,

Adrian

From: Nick Couchman [mailto:vn...@apache.org<mailto:vn...@apache.org>]
Sent: 04 November 2021 12:01
To: user@guacamole.apache.org<mailto:user@guacamole.apache.org>
Subject: Re: Difference between normal RDP and Guacamole’s RDP.

On Wed, Nov 3, 2021 at 10:33 PM takuya morita 
mailto:mrttky521...@gmail.com>> wrote:
Hi, support.
I’m Takuya.

I found out that the data traffic is different between using normal RDP and 
Guacamole RDP.
What is the structural difference between Guacamole RDP and normal RDP?

We also found that normal RDP uses less traffic when watching videos, and 
Guacamole RDP uses less traffic when watching non-video clips.
Do you think the results of this survey are correct?

First, I believe what you're asking is what the difference is between RDP and 
the Guacamole Protocol. Guacamole is not an extension or implementation of RDP, 
it is a completely different protocol. The job of guacd (Guacamole Server) is 
to translate connections between the Guacamole protocol and one of several 
supported remote access protocols, of which RDP is one. Guacamole supports 
connecting to RDP servers, but the RDP connection is only between guacd and the 
RDP server - the connection between the user's browser (tunneled through the 
Java components, usually running on Tomcat) and guacd is not RDP, it is 
Guacamole.

So, when you're comparing the traffic/bandwidth utilization of Guacamole to 
RDP, it's important to distinguish where you're measuring that - is it between 
the user's browser and Tomcat, between Tomcat and guacd, or between guacd and 
RDP?

Others (Mike?) can probably provide more detailed analysis of why video would 
produce more bandwidth via Guacamole than RDP, but keep in mind the answer to 
the last question you asked - that Guacamole dynamically measures performance 
of the link between the client (web browser) and guacd and adjusts the frame 
rates, and even image processing algorithms, based on the available resources. 
So, it is possible that Guacamole is using more bandwidth simply because it has 
detected that more bandwidth is available, and it is attempting to give the 
best possible experience - highest frame rate, lowest loss to compression.

-Nick

RE: Difference between normal RDP and Guacamole’s RDP.

[Adrian Owen]

Hi,

When you run normal RDP.RDP traffic is direct between your computer and 
remote computer.
Your RDP client displays session.

When you run Guacamole RDP.Traffic is:

A)  (RDP) Between Guacamole (freeRDP) and remote computer.

B)   (Web) Your Web Browser and Guacamole

As Nick says, you should also measure Guacamole (freeRDP) to Remote computer 
bandwidth, to get complete picture,

Adrian

From: Nick Couchman [mailto:vn...@apache.org]
Sent: 04 November 2021 12:01
To: user@guacamole.apache.org
Subject: Re: Difference between normal RDP and Guacamole’s RDP.

On Wed, Nov 3, 2021 at 10:33 PM takuya morita 
mailto:mrttky521...@gmail.com>> wrote:
Hi, support.
I’m Takuya.

I found out that the data traffic is different between using normal RDP and 
Guacamole RDP.
What is the structural difference between Guacamole RDP and normal RDP?

We also found that normal RDP uses less traffic when watching videos, and 
Guacamole RDP uses less traffic when watching non-video clips.
Do you think the results of this survey are correct?

First, I believe what you're asking is what the difference is between RDP and 
the Guacamole Protocol. Guacamole is not an extension or implementation of RDP, 
it is a completely different protocol. The job of guacd (Guacamole Server) is 
to translate connections between the Guacamole protocol and one of several 
supported remote access protocols, of which RDP is one. Guacamole supports 
connecting to RDP servers, but the RDP connection is only between guacd and the 
RDP server - the connection between the user's browser (tunneled through the 
Java components, usually running on Tomcat) and guacd is not RDP, it is 
Guacamole.

So, when you're comparing the traffic/bandwidth utilization of Guacamole to 
RDP, it's important to distinguish where you're measuring that - is it between 
the user's browser and Tomcat, between Tomcat and guacd, or between guacd and 
RDP?

Others (Mike?) can probably provide more detailed analysis of why video would 
produce more bandwidth via Guacamole than RDP, but keep in mind the answer to 
the last question you asked - that Guacamole dynamically measures performance 
of the link between the client (web browser) and guacd and adjusts the frame 
rates, and even image processing algorithms, based on the available resources. 
So, it is possible that Guacamole is using more bandwidth simply because it has 
detected that more bandwidth is available, and it is attempting to give the 
best possible experience - highest frame rate, lowest loss to compression.

-Nick

RE: Guacd High CPU

[Adrian Owen]

If user plays video in Session. High guacd CPU

Encoding  frames = CPU.
https://sourceforge.net/p/guacamole/discussion/1110834/thread/666f7a9f/#7053

Check with your users.

Adrian

From: Nick Couchman [mailto:vn...@apache.org]
Sent: 07 October 2021 12:22
To: user@guacamole.apache.org
Subject: Re: Guacd High CPU

On Thu, Oct 7, 2021 at 1:05 AM 
mailto:manoj2pa...@gmail.com>> wrote:
Dear,

My environment is 32 GB ram with core i3 cpu . users are hiting a transaction 
in tally software.


Not sure what Core i3 CPU, but it looks like most of them are 2-core CPUs. I 
seem to recall that Mike had put together some performance data that indicated 
that a _rough_ guideline for performance was 25 concurrent connections per CPU 
core. That's rough, because it depends on the kind of workload you're running 
(I don't know what tally software is), but that's what sticks out in my mind. 
You have 30 concurrent connections per CPU core, so you're definitely above 
that connection to core density - that could explain the high utilization that 
you're seeing.

-Nick

RE: JSON Expiry

[Adrian Owen]

Thanks

From: Mike Jumper [mailto:mike.jum...@glyptodon.com]
Sent: 27 June 2021 01:12
To: user@guacamole.apache.org
Subject: Re: JSON Expiry

Sessions expiration is not dictated by the JSON, no.

The expiration timestamp only dictates how long the JSON itself will be 
accepted. An unauthenticated user will not be able to authenticate with that 
same JSON after those 30 seconds.

- Mike


On Sat, Jun 26, 2021, 16:54 Adrian Owen 
mailto:adrian.o...@eesm.com>> wrote:
Hi Mike,

I sent JSON sample.

Session does not expire.

It should timeout right after 30 secs?

The session continues

Thanks, Adrian


From: Mike Jumper 
[mailto:mike.jum...@glyptodon.com<mailto:mike.jum...@glyptodon.com>]
Sent: 26 June 2021 20:45
To: user@guacamole.apache.org<mailto:user@guacamole.apache.org>
Subject: Re: JSON Expiry

On Sat, Jun 26, 2021, 07:09 Adrian Owen 
mailto:adrian.o...@eesm.com>> wrote:
Guacamole 1.2 JSON auth onto RDP Session

I set expires to 1624716035000  (time of email)
-10 seconds =  403 Unauthorised. Correct it’s in the past.
+30 seconds = RDP OK

But it does not expire. Any idea what’s wrong.

What do you mean by "it does not expire"? The JSON should definitely cease 
being accepted for auth after the timestamp is in the past.

- Mike

RE: JSON Expiry

[Adrian Owen]

Hi Mike,

I sent JSON sample.

Session does not expire.

It should timeout right after 30 secs?

The session continues

Thanks, Adrian


From: Mike Jumper [mailto:mike.jum...@glyptodon.com]
Sent: 26 June 2021 20:45
To: user@guacamole.apache.org
Subject: Re: JSON Expiry

On Sat, Jun 26, 2021, 07:09 Adrian Owen 
mailto:adrian.o...@eesm.com>> wrote:
Guacamole 1.2 JSON auth onto RDP Session

I set expires to 1624716035000  (time of email)
-10 seconds =  403 Unauthorised. Correct it’s in the past.
+30 seconds = RDP OK

But it does not expire. Any idea what’s wrong.

What do you mean by "it does not expire"? The JSON should definitely cease 
being accepted for auth after the timestamp is in the past.

- Mike

RE: JSON Expiry

[Adrian Owen]

My JSON:

{"username":"","expires":"1624716065000","connections":{"RDP jenny@HUB nom@hub 
SE19HUBDEV01":{"id":"6869","protocol":"rdp","parameters":{"username":"nom","security":"any","ignore-cert":"true","domain":"hub","hostname":"192.168.242.18","password":"LmgX3+ZgxCFW3cQbEuv7Rn","width":"800","height":"600","dpi":"300","port":"3389","create-recording-path":"true","recording-path":"/temp/v2","recording-name":"RDP-jenny@HUB-nom@hub-SE19HUBDEV01-1624716065-192.168.242.18-WINDOWS"
-

Guacamole 1.2 JSON auth onto RDP Session

I set expires to 1624716035000  (time of email)
-10 seconds =  403 Unauthorised. Correct it's in the past.
+30 seconds = RDP OK

But it does not expire. Any idea what's wrong.

Many thanks, Adrian


-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

JSON Expiry

[Adrian Owen]

Guacamole 1.2 JSON auth onto RDP Session

I set expires to 1624716035000  (time of email)
-10 seconds =  403 Unauthorised. Correct it's in the past.
+30 seconds = RDP OK

But it does not expire. Any idea what's wrong.

Many thanks, Adrian

RE: SSH UTf-8

[Adrian Owen]

Debian Stretch server: 

apt install fonts-wqy-zenhei

Now working,  thanks Nick!

From: Nick Couchman [mailto:vn...@apache.org] 
Sent: 24 June 2021 14:07
To: user@guacamole.apache.org
Subject: Re: SSH UTf-8

On Thu, Jun 24, 2021 at 6:54 AM Adrian Owen  wrote:
Guacamole 1.2  SSH session to Chinese Linux Server
-  Chinese Text is garbled.
 
Putty SSH session to Chinese Linux Server with Remote Character set = UTF-8
-  Chinese Text is OK
 
How to fix Guacamole garbled SSH text?

You might check on the system running guacd and make sure that it has the 
correct fonts installed for the Chinese text to be rendered. The rendering of 
the text between SSH and Guacamole is done by guacd, so the required fonts need 
to be present on that system.

-Nick

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

SSH UTf-8

[Adrian Owen]

Guacamole 1.2  SSH session to Chinese Linux Server

-  Chinese Text is garbled.

Putty SSH session to Chinese Linux Server with Remote Character set = UTF-8

-  Chinese Text is OK

How to fix Guacamole garbled SSH text?

Many thanks, Adrian

RE: RDP The remote desktop server is unavailable

[Adrian Owen]

Hi Nick,

We disabled glyph caching but user disconnects continue.

We set verbose Guacamole logging

Grep single guacd user process 19495 from daemon.log and extract file is 
attached (large)

At 09:59:03  heavy lag begins.  User eventually click Reconnect, killing 
process.

We vmstat but guacamole server only 10% capacity whole time.


What can cause lagging?


Many thanks, Adrian

From: Adrian Owen [mailto:adrian.o...@eesm.com]
Sent: 17 May 2021 13:29
To: user@guacamole.apache.org
Subject: RE: RDP The remote desktop server is unavailable

Thanks Nick,

I’ll give it a go, and let you know.

Adrian

From: Nick Couchman [mailto:vn...@apache.org]
Sent: 17 May 2021 12:54
To: user@guacamole.apache.org<mailto:user@guacamole.apache.org>
Subject: Re: RDP The remote desktop server is unavailable

On Mon, May 17, 2021 at 7:18 AM Adrian Owen 
mailto:adrian.o...@eesm.com>> wrote:
Hi,

1.2  Guacamole.

Setup: Both tests from same browser on same workstation.
Connection: Active Directory account RDP session to Windows 7 workstation.
Pre-test: Mstsc RDP connection as Normal Domain Account is OK.




1)  Normal Domain Account – member of local “Remote Desktop Users” on 
workstation

They connect OK.  But then popup “The remote desktop server is unavailable” – 
then reconnect and popup over and over.

System is unusable



2)  Active Directory Domain Admin account RDP session to the same Windows 7 
workstation.

No problem. Session is fine.



Has anyone experienced any similar Guacamole RDP issue. And how to resolve?

Can you try to disable Glyph Caching on the connection and see if that resolves 
the issue?

-Nick
<>

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

RE: RDP The remote desktop server is unavailable

[Adrian Owen]

Thanks Nick,

I’ll give it a go, and let you know.

Adrian

From: Nick Couchman [mailto:vn...@apache.org]
Sent: 17 May 2021 12:54
To: user@guacamole.apache.org
Subject: Re: RDP The remote desktop server is unavailable

On Mon, May 17, 2021 at 7:18 AM Adrian Owen 
mailto:adrian.o...@eesm.com>> wrote:
Hi,

1.2  Guacamole.

Setup: Both tests from same browser on same workstation.
Connection: Active Directory account RDP session to Windows 7 workstation.
Pre-test: Mstsc RDP connection as Normal Domain Account is OK.




1)  Normal Domain Account – member of local “Remote Desktop Users” on 
workstation

They connect OK.  But then popup “The remote desktop server is unavailable” – 
then reconnect and popup over and over.

System is unusable



2)  Active Directory Domain Admin account RDP session to the same Windows 7 
workstation.

No problem. Session is fine.



Has anyone experienced any similar Guacamole RDP issue. And how to resolve?

Can you try to disable Glyph Caching on the connection and see if that resolves 
the issue?

-Nick

RDP The remote desktop server is unavailable

[Adrian Owen]

Hi,

1.2  Guacamole.

Setup: Both tests from same browser on same workstation.
Connection: Active Directory account RDP session to Windows 7 workstation.
Pre-test: Mstsc RDP connection as Normal Domain Account is OK.




1)  Normal Domain Account - member of local "Remote Desktop Users" on 
workstation

They connect OK.  But then popup "The remote desktop server is unavailable" - 
then reconnect and popup over and over.

System is unusable



2)  Active Directory Domain Admin account RDP session to the same Windows 7 
workstation.

No problem. Session is fine.



Has anyone experienced any similar Guacamole RDP issue. And how to resolve?

Many thanks, Adrian

RE: SSH to Palo Alto firewall

[Adrian Owen]

Nick,



It’s resolved!



‘enable-sftp’ ‘true’ in connection parameters  caused Palo Alto SSH to fail.





Many thanks, Adrian

From: Nick Couchman [mailto:vn...@apache.org]
Sent: 10 March 2021 13:33
To: user@guacamole.apache.org
Subject: Re: SSH to Palo Alto firewall

On Wed, Mar 10, 2021 at 5:18 AM Adrian Owen 
mailto:adrian.o...@eesm.com>> wrote:
Hi,

Guacamole SSH fails to connect:

Mar 10 08:08:47 busterguac guacd[438]: Creating new client for protocol "ssh"
Mar 10 08:08:47 busterguac guacd[438]: Connection ID is 
"$ce36e34a-92e6-424c-86d0-2ad4f9a46078"
Mar 10 08:08:47 busterguac guacd[79116]: Current locale does not use UTF-8. 
Some characters may not render correctly.
Mar 10 08:08:47 busterguac guacd[79116]: User 
"@af8aab17-f8b4-435a-8ba6-66cb07242351" joined connection 
"$ce36e34a-92e6-424c-86d0-2ad4f9a46078" (1 users now present)
Mar 10 08:08:48 busterguac guacd[79116]: No known host keys provided, host 
identity will not be verified.
Mar 10 08:08:48 busterguac guacd[79116]: Unable to set the timezone: SSH server 
refused to set "TZ" variable.
Mar 10 08:08:49 busterguac guacd[79116]: No known host keys provided, host 
identity will not be verified.
Mar 10 08:10:18 busterguac guacd[79116]: User 
"@af8aab17-f8b4-435a-8ba6-66cb07242351" disconnected (0 users remain)
Mar 10 08:10:18 busterguac guacd[79116]: Last user of connection 
"$ce36e34a-92e6-424c-86d0-2ad4f9a46078" disconnected
Mar 10 08:10:23 busterguac guacd[79116]: Client did not terminate in a timely 
manner. Forcibly terminating client and any child processes.
Mar 10 08:10:24 busterguac guacd[438]: Connection 
"$ce36e34a-92e6-424c-86d0-2ad4f9a46078" removed.

Does Guacamole connect to other SSH hosts without issue? This looks like guacd 
is expecting something from the client but not getting it, which seems to 
indicate less of an SSH issue (that is gaucd -> Palo Alto) and more of a 
Guacamole Client -> guacd issue. Can you put guacd in debug mode and see if 
there are any more useful messages?

-Nick

SSH to Palo Alto firewall

[Adrian Owen]

Hi,

Guacamole SSH fails to connect:

Mar 10 08:08:47 busterguac guacd[438]: Creating new client for protocol "ssh"
Mar 10 08:08:47 busterguac guacd[438]: Connection ID is 
"$ce36e34a-92e6-424c-86d0-2ad4f9a46078"
Mar 10 08:08:47 busterguac guacd[79116]: Current locale does not use UTF-8. 
Some characters may not render correctly.
Mar 10 08:08:47 busterguac guacd[79116]: User 
"@af8aab17-f8b4-435a-8ba6-66cb07242351" joined connection 
"$ce36e34a-92e6-424c-86d0-2ad4f9a46078" (1 users now present)
Mar 10 08:08:48 busterguac guacd[79116]: No known host keys provided, host 
identity will not be verified.
Mar 10 08:08:48 busterguac guacd[79116]: Unable to set the timezone: SSH server 
refused to set "TZ" variable.
Mar 10 08:08:49 busterguac guacd[79116]: No known host keys provided, host 
identity will not be verified.
Mar 10 08:10:18 busterguac guacd[79116]: User 
"@af8aab17-f8b4-435a-8ba6-66cb07242351" disconnected (0 users remain)
Mar 10 08:10:18 busterguac guacd[79116]: Last user of connection 
"$ce36e34a-92e6-424c-86d0-2ad4f9a46078" disconnected
Mar 10 08:10:23 busterguac guacd[79116]: Client did not terminate in a timely 
manner. Forcibly terminating client and any child processes.
Mar 10 08:10:24 busterguac guacd[438]: Connection 
"$ce36e34a-92e6-424c-86d0-2ad4f9a46078" removed.


. Putty SSH works fine. 
. Plink only works after confirming connection in command line.
. All SSH libraries I tested connect but won't run commands. 


Is there connection setting to enable Guacamole SSH connection to Palo Alto?


Thanks, Adrian

RE: Cannot connect using RDP

[Adrian Owen]

rdp
DIS-WS-29.corp.ugins.com
3389
administrator
ugins
rdp  
<--- all   not rdp
true


From: Stefan Bogdan Cimpeanu [mailto:bog...@cimpeanu.org]
Sent: 18 February 2021 20:31
To: user@guacamole.apache.org
Subject: Re: Cannot connect using RDP

Have you checked the Windows Event viewer logs on your target? Do you even get 
connection attempts?

Bogdan


On 18 Feb 2021, at 22:28, Mike Jumper 
mailto:mike.jum...@glyptodon.com>> wrote:

On Thu, Feb 18, 2021 at 11:06 AM Bill Sandor 
mailto:b...@allegiance-it.com>> wrote:
I can ping all the RDP endpoint IPs and hostnames from the guac server.  
Connecting to client via IP or hostname fails the same either way.

I have tried with and without password (thinking it would prompt for password 
like MS’s RDP client).  Same failure either way.

It will (as of 1.3.0), but only after authentication has been requested by the 
RDP server. If the low-level connection to the RDP server is being rejected, 
this won't happen.

What do you see within your guacd logs when debug-level logging is enabled?

- Mike

RE: Cannot connect using RDP

[Adrian Owen]

Try windows mstsc login OK? Try no username/password - new Guacamole 1.3 
feature.

From: Bill Sandor [mailto:b...@allegiance-it.com]
Sent: 18 February 2021 19:06
To: user@guacamole.apache.org
Subject: Re: Cannot connect using RDP

I can ping all the RDP endpoint IPs and hostnames from the guac server.  
Connecting to client via IP or hostname fails the same either way.

I have tried with and without password (thinking it would prompt for password 
like MS’s RDP client).  Same failure either way.


--Bill Sandor
Allegiance Technologies & Consulting LLC
http://www.allegiance-it.com
330.315.2867


On Feb 18, 2021, at 12:42 PM, Adrian Owen 
mailto:adrian.o...@eesm.com>> wrote:

1st RDP fail  Putty to guac server. Is DNS setup ping by hostname?

2nd RDP fail. Username – no password given.

Adrian

From: Bill Sandor [mailto:b...@allegiance-it.com]
Sent: 18 February 2021 17:08
To: user@guacamole.apache.org<mailto:user@guacamole.apache.org>
Subject: Re: Cannot connect using RDP

See new config file below.  I’ve fixed the “passworde” typo on the one entry, 
removed the password from another.  Also, removed the domain viable (I’ve tried 
both ways).  I’ve also turned off the firewall on the Windows 10 PC altogether 
and unloaded the antivirus software for good measure, it still will not connect 
to it from Guacamole.











rdp
DIS-WS-29.corp.ugins.com<http://dis-ws-29.corp.ugins.com/>
3389
administrator
ugins
rdp
true




rdp
192.168.236.11
3389
ugins\administrator
any
true




ssh
192.168.236.20
22
root








Feb 18 16:43:50 dis-ububtu1 guacd[25418]: Creating new client for protocol "rdp"
Feb 18 16:43:50 dis-ububtu1 guacd[25418]: Connection ID is 
"$476fd94c-d906-41ac-811f-41e64b301d5f"
Feb 18 16:43:50 dis-ububtu1 guacd[25503]: Security mode: Negotiate (ANY)
Feb 18 16:43:50 dis-ububtu1 guacd[25503]: Resize method: none
Feb 18 16:43:50 dis-ububtu1 guacd[25503]: User 
"@4ac29186-6354-496b-8d2d-c5d0a26ba805" joined connection 
"$476fd94c-d906-41ac-811f-41e64b301d5f" (1 users now present)
Feb 18 16:43:50 dis-ububtu1 guacd[25503]: Loading keymap "base"
Feb 18 16:43:50 dis-ububtu1 guacd[25503]: Loading keymap "en-us-qwerty"
Feb 18 16:44:05 dis-ububtu1 guacd[25503]: RDP server closed/refused connection: 
Connection failed (server unreachable?)
Feb 18 16:44:05 dis-ububtu1 guacd[25503]: User 
"@4ac29186-6354-496b-8d2d-c5d0a26ba805" disconnected (0 users remain)
Feb 18 16:44:05 dis-ububtu1 guacd[25503]: Last user of connection 
"$476fd94c-d906-41ac-811f-41e64b301d5f" disconnected
Feb 18 16:44:05 dis-ububtu1 guacd[25418]: Connection 
"$476fd94c-d906-41ac-811f-41e64b301d5f" removed.
Feb 18 16:44:47 dis-ububtu1 guacd[25418]: Creating new client for protocol "rdp"
Feb 18 16:44:47 dis-ububtu1 guacd[25418]: Connection ID is 
"$cf6354bf-9352-4ccb-a1c9-b7f59a8291c9"
Feb 18 16:44:47 dis-ububtu1 guacd[25547]: Security mode: RDP
Feb 18 16:44:47 dis-ububtu1 guacd[25547]: Resize method: none
Feb 18 16:44:47 dis-ububtu1 guacd[25547]: User 
"@c3ac4deb-12c7-43ca-8731-9a4f3b3e93e2" joined connection 
"$cf6354bf-9352-4ccb-a1c9-b7f59a8291c9" (1 users now present)
Feb 18 16:44:47 dis-ububtu1 guacd[25547]: Loading keymap "base"
Feb 18 16:44:47 dis-ububtu1 guacd[25547]: Loading keymap "en-us-qwerty"
Feb 18 16:45:02 dis-ububtu1 guacd[25547]: RDP server closed/refused connection: 
Connection failed (server unreachable?)
Feb 18 16:45:02 dis-ububtu1 guacd[25547]: User 
"@c3ac4deb-12c7-43ca-8731-9a4f3b3e93e2" disconnected (0 users remain)
Feb 18 16:45:02 dis-ububtu1 guacd[25547]: Last user of connection 
"$cf6354bf-9352-4ccb-a1c9-b7f59a8291c9" disconnected
Feb 18 16:45:02 dis-ububtu1 guacd[25418]: Connection 
"$cf6354bf-9352-4ccb-a1c9-b7f59a8291c9" removed.
Feb 18 16:46:48 dis-ububtu1 guacd[25418]: Creating new client for protocol "rdp"
Feb 18 16:46:49 dis-ububtu1 guacd[25418]: Connection ID is 
"$6f8b5c57-1346-47ac-a467-3eab1a3edc93"
Feb 18 16:46:49 dis-ububtu1 guacd[25618]: Security mode: RDP
Feb 18 16:46:49 dis-ububtu1 guacd[25618]: Resize method: none
Feb 18 16:46:49 dis-ububtu1 guacd[25618]: User 
"@9156b7ce-1700-4238-bcbc-3bef36fd92d2" joined connection 
"$6f8b5c57-1346-47ac-a467-3eab1a3edc93" (1 users now present)
Feb 18 16:46:49 dis-ububtu1 guacd[25618]: Loading keymap "base"
Feb 18 16:46:49 dis-ububtu1 guacd[25618]: Loading keymap "en-us-qwerty"
Feb 18 16:47:04 dis-ububtu1 guacd[25618]: RDP server closed/refused connection: 
Connection failed (server unreachable?)
Feb 18 16:47:04

RE: Cannot connect using RDP

[Adrian Owen]

1st RDP fail  Putty to guac server. Is DNS setup ping by hostname?

2nd RDP fail. Username – no password given.

Adrian

From: Bill Sandor [mailto:b...@allegiance-it.com]
Sent: 18 February 2021 17:08
To: user@guacamole.apache.org
Subject: Re: Cannot connect using RDP

See new config file below.  I’ve fixed the “passworde” typo on the one entry, 
removed the password from another.  Also, removed the domain viable (I’ve tried 
both ways).  I’ve also turned off the firewall on the Windows 10 PC altogether 
and unloaded the antivirus software for good measure, it still will not connect 
to it from Guacamole.











rdp
DIS-WS-29.corp.ugins.com
3389
administrator
ugins
rdp
true




rdp
192.168.236.11
3389
ugins\administrator
any
true




ssh
192.168.236.20
22
root








Feb 18 16:43:50 dis-ububtu1 guacd[25418]: Creating new client for protocol "rdp"
Feb 18 16:43:50 dis-ububtu1 guacd[25418]: Connection ID is 
"$476fd94c-d906-41ac-811f-41e64b301d5f"
Feb 18 16:43:50 dis-ububtu1 guacd[25503]: Security mode: Negotiate (ANY)
Feb 18 16:43:50 dis-ububtu1 guacd[25503]: Resize method: none
Feb 18 16:43:50 dis-ububtu1 guacd[25503]: User 
"@4ac29186-6354-496b-8d2d-c5d0a26ba805" joined connection 
"$476fd94c-d906-41ac-811f-41e64b301d5f" (1 users now present)
Feb 18 16:43:50 dis-ububtu1 guacd[25503]: Loading keymap "base"
Feb 18 16:43:50 dis-ububtu1 guacd[25503]: Loading keymap "en-us-qwerty"
Feb 18 16:44:05 dis-ububtu1 guacd[25503]: RDP server closed/refused connection: 
Connection failed (server unreachable?)
Feb 18 16:44:05 dis-ububtu1 guacd[25503]: User 
"@4ac29186-6354-496b-8d2d-c5d0a26ba805" disconnected (0 users remain)
Feb 18 16:44:05 dis-ububtu1 guacd[25503]: Last user of connection 
"$476fd94c-d906-41ac-811f-41e64b301d5f" disconnected
Feb 18 16:44:05 dis-ububtu1 guacd[25418]: Connection 
"$476fd94c-d906-41ac-811f-41e64b301d5f" removed.
Feb 18 16:44:47 dis-ububtu1 guacd[25418]: Creating new client for protocol "rdp"
Feb 18 16:44:47 dis-ububtu1 guacd[25418]: Connection ID is 
"$cf6354bf-9352-4ccb-a1c9-b7f59a8291c9"
Feb 18 16:44:47 dis-ububtu1 guacd[25547]: Security mode: RDP
Feb 18 16:44:47 dis-ububtu1 guacd[25547]: Resize method: none
Feb 18 16:44:47 dis-ububtu1 guacd[25547]: User 
"@c3ac4deb-12c7-43ca-8731-9a4f3b3e93e2" joined connection 
"$cf6354bf-9352-4ccb-a1c9-b7f59a8291c9" (1 users now present)
Feb 18 16:44:47 dis-ububtu1 guacd[25547]: Loading keymap "base"
Feb 18 16:44:47 dis-ububtu1 guacd[25547]: Loading keymap "en-us-qwerty"
Feb 18 16:45:02 dis-ububtu1 guacd[25547]: RDP server closed/refused connection: 
Connection failed (server unreachable?)
Feb 18 16:45:02 dis-ububtu1 guacd[25547]: User 
"@c3ac4deb-12c7-43ca-8731-9a4f3b3e93e2" disconnected (0 users remain)
Feb 18 16:45:02 dis-ububtu1 guacd[25547]: Last user of connection 
"$cf6354bf-9352-4ccb-a1c9-b7f59a8291c9" disconnected
Feb 18 16:45:02 dis-ububtu1 guacd[25418]: Connection 
"$cf6354bf-9352-4ccb-a1c9-b7f59a8291c9" removed.
Feb 18 16:46:48 dis-ububtu1 guacd[25418]: Creating new client for protocol "rdp"
Feb 18 16:46:49 dis-ububtu1 guacd[25418]: Connection ID is 
"$6f8b5c57-1346-47ac-a467-3eab1a3edc93"
Feb 18 16:46:49 dis-ububtu1 guacd[25618]: Security mode: RDP
Feb 18 16:46:49 dis-ububtu1 guacd[25618]: Resize method: none
Feb 18 16:46:49 dis-ububtu1 guacd[25618]: User 
"@9156b7ce-1700-4238-bcbc-3bef36fd92d2" joined connection 
"$6f8b5c57-1346-47ac-a467-3eab1a3edc93" (1 users now present)
Feb 18 16:46:49 dis-ububtu1 guacd[25618]: Loading keymap "base"
Feb 18 16:46:49 dis-ububtu1 guacd[25618]: Loading keymap "en-us-qwerty"
Feb 18 16:47:04 dis-ububtu1 guacd[25618]: RDP server closed/refused connection: 
Connection failed (server unreachable?)
Feb 18 16:47:04 dis-ububtu1 guacd[25618]: User 
"@9156b7ce-1700-4238-bcbc-3bef36fd92d2" disconnected (0 users remain)
Feb 18 16:47:04 dis-ububtu1 guacd[25618]: Last user of connection 
"$6f8b5c57-1346-47ac-a467-3eab1a3edc93" disconnected
Feb 18 16:47:04 dis-ububtu1 guacd[25418]: Connection 
"$6f8b5c57-1346-47ac-a467-3eab1a3edc93" removed.
Feb 18 16:49:17 dis-ububtu1 guacd[25732]: Creating new client for protocol "rdp"
Feb 18 16:49:17 dis-ububtu1 guacd[25732]: Connection ID is 
"$88c4d256-4636-498f-bfea-356b1567b81f"
Feb 18 16:49:17 dis-ububtu1 guacd[25800]: Security mode: RDP
Feb 18 16:49:17 dis-ububtu1 guacd[25800]: Resize method: none
Feb 18 16:49:17 dis-ububtu1 guacd[25800]: User 
"@95c6f23f-4672-476f-903d-e1c4fd3790ce" joined connection 
"$88c4d256-4636-498f-bfea-356b1567b81f" (1 users now present)
Feb 18 16:49:17 dis-ububtu1 guacd[25800]: Loading keymap "base"
Feb 18 16:49:17 dis-ububtu1 guacd[25800]: Loading keymap "en-us-qwerty"
Feb 18 16:49:32 dis-ububtu1 guacd[25800]: RDP server 

RE: RDP Black Square cursor QT Creator

[Adrian Owen]

Thanks Mike.

From: Mike Jumper [mailto:mike.jum...@glyptodon.com]
Sent: 01 February 2021 23:43
To: user@guacamole.apache.org
Subject: Re: RDP Black Square cursor QT Creator

The issue you are seeing is a known issue in Chrome under Windows:

https://bugs.chromium.org/p/chromium/issues/detail?id=31463

When the mouse cursor is set to a transparent image, Chrome under Windows will 
instead render that as a completely opaque black square. You are encountering 
this when you press a key because the application within the remote desktop is 
hiding the mouse cursor when you use the keyboard.

Michael Jumper
CEO, Lead Developer
Glyptodon Inc<https://enterprise.glyptodon.com/>.


On Sun, Jan 31, 2021 at 2:41 PM Adrian Owen 
mailto:adrian.o...@eesm.com>> wrote:
Hi Nick,
All combinations of disable cache sadly made no difference with my 1.2
disable-bitmap-caching true
disable-offscreen-caching true
disable-glyph-caching true

Cursor keeps turning to Black square on arrow key down.  Adrian


From: Nick Couchman [mailto:vn...@apache.org<mailto:vn...@apache.org>]
Sent: 31 January 2021 21:57
To: user@guacamole.apache.org<mailto:user@guacamole.apache.org>
Subject: Re: RDP Black Square cursor QT Creator

On Sat, Jan 30, 2021 at 5:29 PM Adrian Owen 
mailto:adrian.o...@eesm.com>> wrote:

Hi, Guacamole 1.2 RDP Session->2019 Server.



Visual Studio  – OK

QT Creator (freeware)   – PROBLEM

   On arrow key, cursor becomes Black square ?



My suggestion would be to try various combinations of performance options to 
see if one or more of them result in the expected behavior. In particular, the 
Glyph Cache has been the subject of recent discussion, both here and with 
FreeRDP, in general, as the FreeRDP team considers it unreliable. This causes 
disconnects in certain versions of Windows, but I wouldn't be shocked if it 
causes issues like the one you're seeing. We've already introduced a change in 
the git code to forcibly disable it, but version 1.2 won't include this change, 
so you can try using the connection parameter to disable it. You might try the 
same with the other caching options if that doesn't work.

-Nick

RE: RDP Black Square cursor QT Creator

[Adrian Owen]

Hi Nick,
All combinations of disable cache sadly made no difference with my 1.2
disable-bitmap-caching true
disable-offscreen-caching true
disable-glyph-caching true

Cursor keeps turning to Black square on arrow key down.  Adrian


From: Nick Couchman [mailto:vn...@apache.org]
Sent: 31 January 2021 21:57
To: user@guacamole.apache.org
Subject: Re: RDP Black Square cursor QT Creator

On Sat, Jan 30, 2021 at 5:29 PM Adrian Owen 
mailto:adrian.o...@eesm.com>> wrote:

Hi, Guacamole 1.2 RDP Session->2019 Server.



Visual Studio  – OK

QT Creator (freeware)   – PROBLEM

   On arrow key, cursor becomes Black square ?



My suggestion would be to try various combinations of performance options to 
see if one or more of them result in the expected behavior. In particular, the 
Glyph Cache has been the subject of recent discussion, both here and with 
FreeRDP, in general, as the FreeRDP team considers it unreliable. This causes 
disconnects in certain versions of Windows, but I wouldn't be shocked if it 
causes issues like the one you're seeing. We've already introduced a change in 
the git code to forcibly disable it, but version 1.2 won't include this change, 
so you can try using the connection parameter to disable it. You might try the 
same with the other caching options if that doesn't work.

-Nick

RE: Super Key not registering

[Adrian Owen]

The special Windows Key is picked up by client running the guacamole 1.2 RDP 
session.

Key only accessible thru On-Screen keyboard.


Is there way for Guacamole session to pick up?

Thanks, Adrian


From: Nick Couchman [mailto:vn...@apache.org]
Sent: 01 January 2021 20:57
To: user@guacamole.apache.org
Subject: Re: Super Key not registering

On Wed, Dec 30, 2020 at 7:46 PM Tyler Marcotte 
mailto:marcott...@gmail.com>> wrote:
Hi - I didn't see any responses to this, so I wanted to check to see if it made 
it through to the mailing list.


Sorry for the lack of response - your message did make it through to the 
mailing list. The only insight I can offer on this is to note that, often when 
keypresses don't make it through to Guacamole Client it's because either the 
O/S or the browser is intercepting the key combination and it cannot be passed 
through. That said, I'm not 100% certain that's what is going on in your case - 
I know there have been some JIRA issues opened in the not-too-distant past 
dealing with Super key issues, so it could be a bug in Guacamole's handling of 
those keys. Maybe others can offer more insight...

-Nick

RDP Black Square cursor QT Creator

[Adrian Owen]

Hi, Guacamole 1.2 RDP Session->2019 Server.



Visual Studio  - OK

QT Creator (freeware)   - PROBLEM

   On arrow key, cursor becomes Black square ?



Thanks, Adrian





-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

RE: copy past from our system to RDP issue

[Adrian Owen]

Try IE, see if issue repeats.

From: Arpit Agarwal [mailto:a...@mpatra.com]
Sent: 02 December 2020 11:16
To: user@guacamole.apache.org
Subject: Re: copy past from our system to RDP issue

Hello,

I am using chrome always.

Thanks & Regards,
Arpit Agarwal
Chat ID's:
GTalk  :a...@mpatra.com<mailto:a...@mpatra.com>
Skype :iarpit22
http://www.arpitagarwal.in
Office: +91 120 4561602
India Cell   : +91 99719 0
USA Cell : +1-732-705-7727

The information contained in this transmittal is privileged and confidential.  
The information is intended only for the use of the individual or entity named 
above. If the reader of this message is not the intended recipient, you are 
hereby notified that any dissemination, distribution or copying of this 
communication is strictly prohibited.  If you have received this communication 
in error, please notify us immediately by telephone or e-mail, and delete this 
message from your server.
 P Please don't print this e-mail unless you really need to. Be Green.











On 02-Dec-2020, at 4:25 PM, Adrian Owen 
mailto:adrian.o...@eesm.com>> wrote:

Hi,

Hope this helps.

IE
1)  Guacamole URL to IE->Settings->Security->Local Intranet->Sites->Advanced
2)  IE->Settings->Security->Internet->Custom Level-> IE Scripting property 
“Allow Programmatic clipboard access” to “Enable”

Chrome Firefox
Check Clipboard permission manager.

Adrian

From: Arpit Agarwal [mailto:a...@mpatra.com]
Sent: 02 December 2020 10:21
To: user@guacamole.apache.org<mailto:user@guacamole.apache.org>
Subject: Re: copy past from our system to RDP issue

Hello Mike,

Thanks for the details. I tried all and it is not on https also but still not 
able to use normal clipboard from local system to rdp. All the time has to 
paste the text first via ctrl+shift+alt clipboard windows and then into rdp.

Kindly help me to solve this issue as i know it is not an issue but my system 
is not working with it.

Thanks & Regards,
Arpit Agarwal
Chat ID's:
GTalk  :a...@mpatra.com<mailto:a...@mpatra.com>
Skype :iarpit22
http://www.arpitagarwal.in<http://www.arpitagarwal.in/>
Office: +91 120 4561602
India Cell   : +91 99719 0
USA Cell : +1-732-705-7727

The information contained in this transmittal is privileged and confidential.  
The information is intended only for the use of the individual or entity named 
above. If the reader of this message is not the intended recipient, you are 
hereby notified that any dissemination, distribution or copying of this 
communication is strictly prohibited.  If you have received this communication 
in error, please notify us immediately by telephone or e-mail, and delete this 
message from your server.
 P Please don't print this e-mail unless you really need to. Be Green.












On 02-Dec-2020, at 10:14 AM, Mike Jumper 
mailto:mike.jum...@glyptodon.com>> wrote:

On Tue, Dec 1, 2020 at 2:28 AM Arpit Agarwal 
mailto:a...@mpatra.com>> wrote:
Hello Mike,

Thanks for the information. I am using chrome as browser and windows 2016 
server in RDP but still not able to copy from local and paste into rdp. Please 
help me to get this done if there is some steps i need to follow please tell me 
what need to do.

It should Just Work. The only cases I am aware of where this would not be the 
case are:

* HTTPS is not being used (Chrome will refuse to provide clipboard access to a 
web application that isn't served securely)
* The user has already refused clipboard access when Chrome asked whether they 
wish to grant it (you can change that response and then have things work as 
expected)

Michael Jumper
CEO, Lead Developer
Glyptodon Inc<https://enterprise.glyptodon.com/>.

RE: copy past from our system to RDP issue

[Adrian Owen]

Hi,

Hope this helps.

IE

1)  Guacamole URL to IE->Settings->Security->Local Intranet->Sites->Advanced

2)  IE->Settings->Security->Internet->Custom Level-> IE Scripting property 
"Allow Programmatic clipboard access" to "Enable"

Chrome Firefox
Check Clipboard permission manager.

Adrian

From: Arpit Agarwal [mailto:a...@mpatra.com]
Sent: 02 December 2020 10:21
To: user@guacamole.apache.org
Subject: Re: copy past from our system to RDP issue

Hello Mike,

Thanks for the details. I tried all and it is not on https also but still not 
able to use normal clipboard from local system to rdp. All the time has to 
paste the text first via ctrl+shift+alt clipboard windows and then into rdp.

Kindly help me to solve this issue as i know it is not an issue but my system 
is not working with it.

Thanks & Regards,
Arpit Agarwal
Chat ID's:
GTalk  :a...@mpatra.com
Skype :iarpit22
http://www.arpitagarwal.in
Office: +91 120 4561602
India Cell   : +91 99719 0
USA Cell : +1-732-705-7727

The information contained in this transmittal is privileged and confidential.  
The information is intended only for the use of the individual or entity named 
above. If the reader of this message is not the intended recipient, you are 
hereby notified that any dissemination, distribution or copying of this 
communication is strictly prohibited.  If you have received this communication 
in error, please notify us immediately by telephone or e-mail, and delete this 
message from your server.
 P Please don't print this e-mail unless you really need to. Be Green.











On 02-Dec-2020, at 10:14 AM, Mike Jumper 
mailto:mike.jum...@glyptodon.com>> wrote:

On Tue, Dec 1, 2020 at 2:28 AM Arpit Agarwal 
mailto:a...@mpatra.com>> wrote:
Hello Mike,

Thanks for the information. I am using chrome as browser and windows 2016 
server in RDP but still not able to copy from local and paste into rdp. Please 
help me to get this done if there is some steps i need to follow please tell me 
what need to do.

It should Just Work. The only cases I am aware of where this would not be the 
case are:

* HTTPS is not being used (Chrome will refuse to provide clipboard access to a 
web application that isn't served securely)
* The user has already refused clipboard access when Chrome asked whether they 
wish to grant it (you can change that response and then have things work as 
expected)

Michael Jumper
CEO, Lead Developer
Glyptodon Inc.

RE: Guacamole and reverse Proxy

[Adrian Owen]

Hi,

Would you be kind enough to send your sever specification for your 1K users

Cores, Ram, Disks etc. Is recording  enabled?


Useful info for many users.

Thanks, Adrian

-Original Message-
From: Gerardo [mailto:gcha...@bpba.com.ar] 
Sent: 29 October 2020 14:24
To: user@guacamole.apache.org
Subject: Re: Guacamole and reverse Proxy

Hi,

im using guacamole with more than 1k of users,  i started using apache as 
reverse proxy but i do not recomend you.

finally im sing haproxy and just works like a charm.  

use websocket without any extra conf and you can balance all your nodes.

using apache as reverse proxy you loss a lot of performance.


Regards



--
Sent from: 
http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org


-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

RE: api-session-timeout chrome block issue

[Adrian Owen]

Hi Nick,

After setting api-session-timeout, I restarted Guacamole server.

>>it is possible that Chrome is hiding the actual window while still beginning 
>>to load parts of the page or keep the session active with the server

I have recording enabled on session. But during site block, there is no 
recording file.
So no parts of page have been loaded during block

As soon as I allow block, Guacamole window pops up, and recording file appears 
and starts appending with data.

Maybe block happens before guacamole starts processing, hence no timeout?


Kind Regards,
Adrian Owen | CTO | ForestSafe SessionSafe LAPSafe | PPM PAM | EESM

From: Nick Couchman [mailto:vn...@apache.org]
Sent: 13 October 2020 11:42
To: user@guacamole.apache.org
Subject: Re: api-session-timeout chrome block issue

On Mon, Oct 12, 2020 at 10:56 AM Adrian Owen 
mailto:adrian.o...@eesm.com>> wrote:
Hi Nick,

What do you mean "blocked by Chrome"?

I use JSON Auth API, and my Web application send JSON and receives AuthToken,

Next I open the Guacamole URL+AuthToken in new browser window.

But first time on Chrome, the popup blocker, blocks the guacamole window.


In that case, whether or not the API timeout is effective is going to depend 
upon whether there is any other traffic that would keep that session alive.  I 
do not know the internals of how Chrome's popup blocker works, but it is 
possible that Chrome is hiding the actual window while still beginning to load 
parts of the page or keep the session active with the server on the chance that 
you'll want to allow the pop-up and continue.  Again, I don't know this for 
sure, it's just my speculation on what might be going on - you'll have to 
investigate further in Chrome.

Also, when you changed the API session timeout property in 
guacamole.properties, did you reload the web application (restart Tomcat or 
re-deploy Guacamole)?

-Nick

RE: api-session-timeout chrome block issue

[Adrian Owen]

Hi Nick,

What do you mean "blocked by Chrome"?

I use JSON Auth API, and my Web application send JSON and receives AuthToken,

Next I open the Guacamole URL+AuthToken in new browser window.

But first time on Chrome, the popup blocker, blocks the guacamole window.

Same Chrome behaviour can be seen here: http://popuptest.com/


Adrian







From: Nick Couchman [mailto:vn...@apache.org]
Sent: 12 October 2020 15:14
To: user@guacamole.apache.org
Subject: Re: api-session-timeout chrome block issue

On Mon, Oct 12, 2020 at 8:33 AM Adrian Owen 
mailto:adrian.o...@eesm.com>> wrote:
I set api-session-timeout to 2 minutes

Catalina out shows message:   Sessions will expire after 2 minutes of 
inactivity.

I access Guacamole URL with Chrome browser, and  it is blocked by Chrome, never 
appears.

What do you mean "blocked by Chrome"?



I wait over 2 minutes, but no timeout occurs.

Should block trigger timeout?


No, the "block" will not trigger a timeout.  What is important as to whether 
the timeout occurs or not is any API activity.  As the property states, it is 
the timeout for the API session.  So, while I'm not sure what you mean by 
"blocked by Chrome", if there is *any* API activity at all during this 2-minute 
period, the timeout will not occur and the session will remain active.

-Nick

api-session-timeout chrome block issue

[Adrian Owen]

I set api-session-timeout to 2 minutes

Catalina out shows message:   Sessions will expire after 2 minutes of 
inactivity.

I access Guacamole URL with Chrome browser, and  it is blocked by Chrome, never 
appears.


I wait over 2 minutes, but no timeout occurs.

Should block trigger timeout?


Thanks, Adrian

RE: Have one question

[Adrian Owen]

https://sourceforge.net/p/guacamole/discussion/1110833/thread/8cd5876c/#976c

Answers here

From: V Srinivas Reddy [mailto:mailvsrinivasre...@gmail.com]
Sent: 02 October 2020 11:12
To: user@guacamole.apache.org
Subject: Re: Have one question

Dear Team,

Guacamole server, how many simultaneous connections can be handled with the 
default settings ?  is it 50 or above 100 users, or any final figure.


Is there any option for load balancing in apache guacamole?
We have a requirement to connect the servers using guacamole. Users count 
exceeding 100.
So I need an option for load balancing in guacamole

Quick help will be greatly appreciated..
thankyou.

RE: guacamole-auth-json is not working

[Adrian Owen]

Please paste your connection JSON, I can check it.

Adrian

From: Prashant K [mailto:prashan...@agreeya.com]
Sent: 31 August 2020 10:01
To: user@guacamole.apache.org
Subject: guacamole-auth-json is not working

Hello All,
I am new to Guacamole and recently installed it on Linux debian 4.19
Its GUI is working fine with the credentials in the Usermapping.xml and now I 
am trying to use the guacamole-auth-json.
I have followed the steps mentioned at 
https://github.com/glyptodon/guacamole-auth-json and checking the Reference 
implementation first.
But when I am posting the data to the Rest API using curl it is failing with 
below error:

root@debian:~# curl --data-urlencode 
"data=Bbg91V2NX0yUFc/fq1pl8e+mwg10qSWSRT5AmJWERt+ctO+jNy0sE96knvgD6HwU5EoV0lIfgrCzXi3qMRWmw2QDxBKjGuB8qIiHFasvoAOMLTgrlzdeqicQu2LJoOCVZErDLp/mpc0VaiAL3zuT+fOVphEQ0igNqMCaMlNMzkUQW6UPLoXYG+ouo5jvdK/0asydMjJKt797+Sl+Ir1+wK9flKpQgRxLac/MXwR5X7jPKqrlH5eTCG6s0MVEDG+ejNis3Mwow4jjpE5u6a+7e1R7tct9MIgUmNtcq/4b+APz6h2Fb9zQLzOgrycmiGlV4N1vfmGMNQEAqpRPPaQX8hun0LBNHYLAa2kwpHg8LxCDsIuYAFpVJeScm1kdWol6byq1GJx9gjauazTuwaMYGg72EjImVdqjsG96+ceNDjOdJwkL4gu32Az1Dxap7Er6PECMzcCpP61ItEvBkRYkQg=="
 http://10.9.31.33:8080/guacamole/api/tokens
{"message":"Permission Denied.","translatableMessage":{"key":"Permission 
Denied.","variables":null},"statusCode":null,"expected":[{"name":"username","type":"USERNAME"},{"name":"password","type":"PASSWORD"}],"type":"INVALID_CREDENTIALS"}root@debian:~

Please suggest where to look into to resolve this issue?

Regards,
Prashant

Guacamole 1.2 - AUTH JSON - FAIL

[Adrian Owen]

Hi,

Pulled down Auth JSON, but build is failing.

Environment: openjdk 11 on debian bullseye and buster



$ mvn package



[[1;34mINFO[m] Scanning for projects...

[[1;34mINFO[m]

[[1;34mINFO[m] [1m< 
[0;36morg.glyptodon.guacamole:guacamole-auth-json[0;1m >-[m 
[[1;34mINFO[m] [1mBuilding guacamole-auth-json 1.0.0-1[m [[1;34mINFO[m] 
[1m[ jar ]-[m

[[1;34mINFO[m]

[[1;34mINFO[m] [1m--- [0;32mmaven-resources-plugin:2.6:resources[m 
[1m(default-resources)[m @ [36mguacamole-auth-json[0;1m ---[m [[1;34mINFO[m] 
Using 'UTF-8' encoding to copy filtered resources.

[[1;34mINFO[m] Copying 2 resources

[[1;34mINFO[m]

[[1;34mINFO[m] [1m--- [0;32mmaven-compiler-plugin:3.3:compile[m 
[1m(default-compile)[m @ [36mguacamole-auth-json[0;1m ---[m [[1;34mINFO[m] 
Changes detected - recompiling the module!

[[1;34mINFO[m] Compiling 15 source files to 
/home/jk/sandbox/guacamole/auth-json/target/classes

[[1;34mINFO[m] -

[[1;31mERROR[m] COMPILATION ERROR :

[[1;34mINFO[m] -

[[1;31mERROR[m] 
/home/jk/sandbox/guacamole/auth-json/src/main/java/org/glyptodon/guacamole/auth/json/ByteArrayProperty.java:[25,21]
 error: package javax.xml.bind does not exist [[1;31mERROR[m] 
/home/jk/sandbox/guacamole/auth-json/src/main/java/org/glyptodon/guacamole/auth/json/user/UserDataBlacklist.java:[29,21]
 error: package javax.xml.bind does not exist [[1;31mERROR[m] 
/home/jk/sandbox/guacamole/auth-json/src/main/java/org/glyptodon/guacamole/auth/json/user/UserDataService.java:[36,21]
 error: package javax.xml.bind does not exist [[1;31mERROR[m] 
/home/jk/sandbox/guacamole/auth-json/src/main/java/org/glyptodon/guacamole/auth/json/user/UserDataConnection.java:[48,7]
 error: UserDataConnection is not abstract and does not override abstract 
method connect(GuacamoleClientInformation) in Connectable [[1;31mERROR[m] 
/home/jk/sandbox/guacamole/auth-json/src/main/java/org/glyptodon/guacamole/auth/json/user/UserDataConnection.java:[181,4]
 error: method does not override or implement a method from a supertype 
[[1;31mERROR[m] 
/home/jk/sandbox/guacamole/auth-json/src/main/java/org/glyptodon/guacamole/auth/json/connection/ConnectionService.java:[224,8]
 error: constructor TokenFilter in class TokenFilter cannot be applied to given 
types;

[[1;31mERROR[m]   required: no arguments

  found: Map

  reason: actual and formal argument lists differ in length 
/home/jk/sandbox/guacamole/auth-json/src/main/java/org/glyptodon/guacamole/auth/json/ByteArrayProperty.java:[48,19]
 error: cannot find symbol

[[1;31mERROR[m]   symbol:   variable DatatypeConverter

  location: class ByteArrayProperty

/home/jk/sandbox/guacamole/auth-json/src/main/java/org/glyptodon/guacamole/auth/json/user/UserDataBlacklist.java:[110,30]
 error: cannot find symbol

[[1;31mERROR[m]   symbol:   variable DatatypeConverter

  location: class UserDataBlacklist

/home/jk/sandbox/guacamole/auth-json/src/main/java/org/glyptodon/guacamole/auth/json/user/UserDataService.java:[150,16]
 error: cannot find symbol [[1;34mINFO[m] 9 errors [[1;34mINFO[m] 
-

[[1;34mINFO[m] 
[1m[m

[[1;34mINFO[m] [1;31mBUILD FAILURE[m

[[1;34mINFO[m] 
[1m[m

[[1;34mINFO[m] Total time:  2.168 s

[[1;34mINFO[m] Finished at: 2020-07-20T19:23:58+01:00 [[1;34mINFO[m] 
[1m[m

[[1;31mERROR[m] Failed to execute goal 
[32morg.apache.maven.plugins:maven-compiler-plugin:3.3:compile[m 
[1m(default-compile)[m on project [36mguacamole-auth-json[m: [1;31mCompilation 
failure[m: Compilation failure:

[[1;31mERROR[m] 
/home/jk/sandbox/guacamole/auth-json/src/main/java/org/glyptodon/guacamole/auth/json/ByteArrayProperty.java:[25,21]
 error: package javax.xml.bind does not exist [[1;31mERROR[m] 
/home/jk/sandbox/guacamole/auth-json/src/main/java/org/glyptodon/guacamole/auth/json/user/UserDataBlacklist.java:[29,21]
 error: package javax.xml.bind does not exist [[1;31mERROR[m] 
/home/jk/sandbox/guacamole/auth-json/src/main/java/org/glyptodon/guacamole/auth/json/user/UserDataService.java:[36,21]
 error: package javax.xml.bind does not exist [[1;31mERROR[m] 
/home/jk/sandbox/guacamole/auth-json/src/main/java/org/glyptodon/guacamole/auth/json/user/UserDataConnection.java:[48,7]
 error: UserDataConnection is not abstract and does not override abstract 
method connect(GuacamoleClientInformation) in Connectable [[1;31mERROR[m] 
/home/jk/sandbox/guacamole/auth-json/src/main/java/org/glyptodon/guacamole/auth/json/user/UserDataConnection.java:[181,4]
 error: method does not override or implement a method from a supertype 
[[1;31mERROR[m] 

RE: Help with TELNET password-regex

[Adrian Owen]

Set username-regex to '[Uu]sername:'

And now its ok.Many thanks,

From: Mike Jumper [mailto:mjum...@apache.org] 
Sent: 18 June 2020 00:22
To: user@guacamole.apache.org
Subject: Re: Help with TELNET password-regex

On Wed, Jun 17, 2020 at 3:30 PM Adrian Owen  wrote:
Hi,

TELNET logon to Cisco router not accepting username/password


User Access Verification

Username:
Password:
--

Anyone have example of password-regex?

The default regular expressions for username and password can be found here:

https://github.com/apache/guacamole-server/blob/787ae317fc2da932cd826c9df68932355258dd60/src/protocols/telnet/settings.h#L58-L68

The password regex should already match the password prompt you have there. If 
your router doesn't support the standard telnet mechanisms for sending the 
username (forcing Guacamole to rely on a regex for that, as well), that may be 
why you're seeing things fail. The default username prompt regex used by 
Guacamole looks for "Login:" or "login:", not "Username:".

- Mike

Help with TELNET password-regex

[Adrian Owen]

Hi,

TELNET logon to Cisco router not accepting username/password


User Access Verification

Username:
Password:
--

Anyone have example of password-regex?

Thanks, Adrian




-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

1.2 Release news

[Adrian Owen]

Is there a date planned for 1.2 release yet?

Thanks, Adrian

RE: IPhone 11 mouse

[Adrian Owen]

Hi Nick

IOS version is 13.3 and 13.5

Thanks for update. We will upgrade to 1.2 when available.

Adrian

From: Nick Couchman [mailto:vn...@apache.org]
Sent: 28 May 2020 12:46
To: user@guacamole.apache.org
Subject: Re: IPhone 11 mouse

On Thu, May 28, 2020 at 6:25 AM Adrian Owen 
mailto:adrian.o...@eesm.com>> wrote:
Hi,

Version: 0.9.14

Users have reported mouse problems with IPhone 11 not responding, IPhone 7 and 
8 work ok.


What iOS versions?

Was there 0.9.14 issue that may have caused this, that’s been fixed in later 
version?


Depending on the iOS version in question you may be running into this issue:

https://issues.apache.org/jira/browse/GUACAMOLE-883

This issue has been fixed for the upcoming 1.2.0 release.

-Nick

IPhone 11 mouse

[Adrian Owen]

Hi,

Version: 0.9.14

Users have reported mouse problems with IPhone 11 not responding, IPhone 7 and 
8 work ok.

Was there 0.9.14 issue that may have caused this, that's been fixed in later 
version?


Many thanks, Adrian

RE: VNC 403 JSON API

[Adrian Owen]

Cleared out calalina.out ready to test, clicked and  403



I saw hundreds of trace messages, before I cleared it.



But these only ones shown before 403   . V 0.9.14. No Trace only debug



JDBC Connection [com.mysql.jdbc.JDBC4Connection@1e709431]

20:06:57.106 [http-nio-8080-exec-1] DEBUG o.a.i.d.pooled.PooledDataSource - 
Testing connection 510694449 ...

20:06:57.106 [http-nio-8080-exec-1] DEBUG o.a.i.d.pooled.PooledDataSource - 
Connection 510694449 is GOOD!

20:06:57.106 [http-nio-8080-exec-1] DEBUG o.a.i.d.pooled.PooledDataSource - 
Returned connection 510694449 to pool.

20:06:57.129 [http-nio-8080-exec-1] DEBUG o.g.g.a.j.RequestValidationService - 
Authentication request from "127.0.0.1" is ALLOWED (no restrictions).

20:06:57.191 [http-nio-8080-exec-1] DEBUG o.a.g.r.auth.AuthenticationService - 
Anonymous authentication attempt from [10.10.220.74, 127.0.0.1] failed.

From: Nick Couchman [mailto:vn...@apache.org]
Sent: 26 April 2020 14:01
To: user@guacamole.apache.org
Subject: Re: VNC 403 JSON API

On Sun, Apr 26, 2020 at 7:43 AM Adrian Owen 
mailto:adrian.o...@eesm.com>> wrote:
I set logback to trace

VNC connection
*** event handler 1
20:06:57.191 [http-nio-8080-exec-1] DEBUG o.a.g.r.auth.AuthenticationService - 
Anonymous authentication attempt from [10.10.220.74, 127.0.0.1] failed.

RDP Connection
20:14:53.521 [http-nio-8080-exec-7] DEBUG o.a.g.r.auth.AuthenticationService - 
Login was successful for user "".


On another Guacamole Server VNC connected. Same credentials.

How can I get more detail of the failure?


Well, that's a little hard to say, because of all the log messages that you 
should have (trace should give you hundreds or thousands of them), you've 
posted two or three entries.  There's no possible way for us to help with this 
little information.  In would be good to know:
- What version of Guacamole are you running?
- What authentication modules are you using, and in what order are they being 
evaluated?
- If you can post the rest of the log messages to some place like PasteBin and 
link, here, that would help.  If you do this don't forget to sanitize them 
before posting them so that they don't contain any information that would 
present a security risk to your environment.

-Nick

RE: VNC 403 JSON API

[Adrian Owen]

I set logback to trace

VNC connection
*** event handler 1
20:06:57.191 [http-nio-8080-exec-1] DEBUG o.a.g.r.auth.AuthenticationService - 
Anonymous authentication attempt from [10.10.220.74, 127.0.0.1] failed.

RDP Connection
20:14:53.521 [http-nio-8080-exec-7] DEBUG o.a.g.r.auth.AuthenticationService - 
Login was successful for user "".


On another Guacamole Server VNC connected. Same credentials.

How can I get more detail of the failure?

Many thanks

From: Nick Couchman [mailto:vn...@apache.org]
Sent: 24 April 2020 20:43
To: user@guacamole.apache.org
Subject: Re: VNC 403 JSON API

On Fri, Apr 24, 2020 at 3:37 PM Adrian Owen 
mailto:adrian.o...@eesm.com>> wrote:
Nothing is shown in catalina.out either

Should I update the apache log level?What do you suggest to get at the 
error?


yes, you might need to bump up Tomcat logging:

http://guacamole.apache.org/doc/gug/configuring-guacamole.html#webapp-logging

Also, note that 403 "errors" are a normal part of Guacamole Client's operation 
- for example, when you first visit the Guacamole web page, the back-end server 
issues a 403 status to the web client in order to tell the web application to 
display the logon page.  So, just because you're receiving this on the client 
side doesn't mean that anything is occurring that Guacamole Client considers an 
error.  It could be, but it may not be.

-Nick

RE: VNC 403 JSON API

[Adrian Owen]

Nothing is shown in catalina.out either

Should I update the apache log level?What do you suggest to get at the 
error?

Many thanks

From: Nick Couchman [mailto:vn...@apache.org]
Sent: 24 April 2020 20:33
To: user@guacamole.apache.org
Subject: Re: VNC 403 JSON API

On Fri, Apr 24, 2020 at 3:15 PM Adrian Owen 
mailto:adrian.o...@eesm.com>> wrote:
Using JSON API.  I occasionally get 403 Forbbidon when I post to get the Auth 
Token.

It only happens with VNC connection. When I try RDP connection its ok.


Is there way to get more information? I ran guacd with –L trace to terminal. 
But get nothing is logged?


guacd does not handle the REST API in any way, so that's not going to help you 
determine why you're getting 403 errors. You need to look at the Tomcat output 
(catalina.out, usually) for that.  Also, note that, by default, tokens expire 
after 60 minutes, so it's possible you're hitting that timeout and just 
attributing it to a particular protocol even though it's just timing out and 
becoming invalid.

-Nick

VNC 403 JSON API

[Adrian Owen]

Using JSON API.  I occasionally get 403 Forbbidon when I post to get the Auth 
Token.

It only happens with VNC connection. When I try RDP connection its ok.


Is there way to get more information? I ran guacd with -L trace to terminal. 
But get nothing is logged?

Thanks, Adrian

RE: Multiple WAN Network Interface

[Adrian Owen]

Your dept., you're adept.

From: Andrew Kopp [mailto:ak...@soleilfoodservice.com]
Sent: 14 April 2020 14:31
To: user@guacamole.apache.org
Subject: Re: Multiple WAN Network Interface

This is a problem at the networking level, any OS will have the same issue.

You will have a return routing problem regarding default gateway on the server 
- unless you are going todo some creative NATing with automatic return route 
scripting (which is not very good tbh many many painful issues with such an 
approach)

The example below assumes that your default gateway on the server is WAN1

- When client A uses WAN1 URL, the server will return data via default gateway 
on WAN1. No problem.

- When client B uses WAN2 URL, the server will see the initial connection 
request but any response wil still be sent back via default gateway on WAN1. 
This will break your connection and eat up bandwidth on WAN1 that you did not 
originally intend.

This issue stems from the simplicity of TCP/IP and the OSI model separating 
each layer. The application layers have very little control over networking and 
do not control routes, where as the networking layers have no idea what you are 
trying to accomplish on an application layer. NATing was born out of the need 
to be able to control the network on a session level.

If you have such an environment you should consider WAN bonding from solution 
providers such as Mushroom Networks or Peplink (no affiliation - just 
experienced with both products)

If you cannot do this, you are better off running multiple dedicated instances 
of Guacamole for each connection. You might be able to accomplish this using 
docker on the same host, but I am not familiar enough with the docker network 
stack.

If you really want to go with the NATing solution, you will need multiple 
Apache proxy listeners/ports - one for each connection. You will then need to 
separate each interface traffic via reverse NAT rules and port forwarding. Even 
when this is perfectly configured, an outage on one of the connections will put 
you back to the drawing board tearing your hair out reconfiguring the stack.

Your time is probably worth a lot more than a bonding solution.



Andrew


From: Chris Lee 
mailto:chris...@centurycity.com.hk>>
Sent: Tuesday, April 14, 2020, 05:01
To: user@guacamole.apache.org
Subject: Multiple WAN Network Interface


HI All,

It is possible to setup multiple Network WAN interface on Fedora Linux box, so 
it can increase the total WAN bandwidth and HA?

WAN 1 \
WAN 2 --- Guacamole Server - LAN
WAN 3 /

Suppose each WAN link have 10Gb bandwidth, Then I get different URL for 
different department users:

Account: https://WAN01.example.com:8443/guacamole/
Sales:  https://WAN02.example.com:8443/guacamole/
IT:https://WAN03.exmaple.com:8443:guacamole/
In theory , I have 30Gb WAN bandwidth?

In case one of WAN Link is dead, I just update the DNS records to redirect the 
traffic.

Any comments?

Regards,
Chris


This message and its attachment (if any) are strictly confidential and sent to 
the designated recipient(s) only. If you are not the intended recipient, please 
notify the sender by e-mail and delete this message and its attachment (if any) 
from your computer system immediately . Century City International Holdings 
Limited, Paliburg Holdings Limited, Regal Hotels International Holdings 
Limited, its respective related subsidiaries, associated companies and 
affiliates do not guarantee this message and its attachment (if any) are free 
of computer virus and would not accept any liability whatsoever arising from 
Internet transmission.




This email and any files transmitted with it are confidential and intended 
solely for the use of the individual or entity to whom they are addressed. If 
you have received this email in error please disregard. This message may 
contain confidential information and is intended only for the individual named.

For more information about our privacy policy and how we process data, please 
visit our website and use the Privacy Notice link located on the main page.

RE: TunnelCloseEvent

[Adrian Owen]

Thanks Nick, understood.

From: Nick Couchman [mailto:vn...@apache.org]
Sent: 03 April 2020 19:33
To: user@guacamole.apache.org
Subject: Re: TunnelCloseEvent

On Fri, Apr 3, 2020 at 2:29 PM Adrian Owen 
mailto:adrian.o...@eesm.com>> wrote:
We are building custom event listener.

How to get Authentication Token?

We use custom JSON authentication, and need the hook back to our application.

We see UUID, but that is not part of the string returned with token from our 
JSON call.

Is there a light in this tunnel?


I don't think you can retrieve the authentication token working backward from 
the TunnelCloseEvent listener.  You'd likely need to add some "glue" to your 
custom authentication extension to register the tunnels with the tokens in such 
a way that this is traceable - similar to how the JDBC module tracks active 
connections.

-Nick

TunnelCloseEvent

[Adrian Owen]

We are building custom event listener.

How to get Authentication Token?

We use custom JSON authentication, and need the hook back to our application.

We see UUID, but that is not part of the string returned with token from our 
JSON call.

Is there a light in this tunnel?

adrian

RE: guacamole_connection_history in SRC

[Adrian Owen]

I use custom api to get authentication Token from guacamole and use to connect.

Guacamole writes entry to the guacamole_connection_history table when 
connection completes.

I would like to put a hook in that spot to make a call out to pass a message to 
my application.

The bigger question is would this work, and is it worth pursuing?

From: ivanmarcus [mailto:ivanmar...@yahoo.com.INVALID]
Sent: 01 April 2020 13:26
To: user@guacamole.apache.org
Subject: Re: guacamole_connection_history in SRC


Well it's entirely possible I don't know (what we're talking about :-), but I 
assumed Adrian was wanting to know where in the Guacamole code it caused data 
to be inserted into the database "guacamole_connection_history" table...

On 2/04/2020 12:40 a.m., Esther Krispin wrote:
Sorry,
What are we talking about?
�
From: ivanmarcus 
<mailto:ivanmar...@yahoo.com.INVALID>
Sent: Wednesday, 1 April 2020 14:22
To: user@guacamole.apache.org<mailto:user@guacamole.apache.org>; Adrian Owen 
<mailto:adrian.o...@eesm.com>
Subject: Re: guacamole_connection_history in SRC
�

I have very limited knowledge of the Guacamole code, but have you looked at 
org/apache/guacamole/auth/jdbc/connection/ConnectionRecordMapper.xml ?

At least that's where I find it if I expand the 
guacamole-auth-jdbc-mysql-1.0.0.jar file, I'm on a, extremely slow internet 
connection right now and still waiting for the equivalent 1.1.0 to come down 
(~80+ mins away!).
�
On 1/04/2020 11:32 p.m., Adrian Owen wrote:
I recursively searched under master branch. But cannot find this table?
�
Where do table rows get inserted in code?
�
Thanks, Adrian
�

�



Email secured by Check Point

Report 
Phishing<https://mta-cnf.iaas.checkpoint.com/mta_feedback?id=269bb848ebd36662b7bf50615a010e767af2505ae010b0db267231c4a0161cb4=C5CEAA199888;=m>
�

guacamole_connection_history in SRC

[Adrian Owen]

I recursively searched under master branch. But cannot find this table?

Where do table rows get inserted in code?

Thanks, Adrian

RE: guacenc new parameters

[Adrian Owen]

Hi Sean,

Thank you so much.  I will have time tomorrow to pull down and build.

Moreover my pal has managed to get PNG Snapshots direct from stream.

1)  Their very clean. The ones from M4V have noise around the edges.

2)  Running with our –R option (no M4V)  guacaenc completes 3 x faster

You have been so kind.  I’ll let you know how I get on with H.264 branch.

Many thanks, Adrian

From: Sean Reid [mailto:sean.re...@gmail.com]
Sent: 27 March 2020 20:23
To: user@guacamole.apache.org
Subject: Re: guacenc new parameters

Hi Adrian,

I updated my H.264 branch and rebased it with guacamole-server's master branch. 
You'll obviously need to pull this branch and build from source.

It makes a few changes to guacenc to support H.264 in an MP4 container.

First off, you'll only be able to encode one file at a time with H.264, rather 
than in a batch. If you've been using guacenc for batches of files, you might 
need to write a small script to do those batches instead.

Second, the command line syntax is a little different. You'll want to use a 
command that looks like:
guacenc -i /path/to/recordingfile.guac -o /path/to/destination.mp4 -c libx264

The -i is to specify the input file path, the -o is to specify the output file 
path (and extension), and -c is to specify the codec you'd like to use. For 
this branch, only mpeg4 (which was the codec used for m4v) and libx264 (which 
is ffmpeg's H.264 codec) are supported for the -c argument.

Third, I did some quick benchmarks to encode the example recording file from 
guacamole-client (recording.guac). I compared the default MPEG4 in M4V file 
against the new H.264 in MP4. It took 8.034 seconds to encode to MPEG4/M4V and 
10.029 seconds to encode H.264/MP4 on my machine. This is about a 24% increase 
in encoding time. While in your use case, you won't have to do the initial 
encode to M4V, which will probably save you time overall, it might be important 
to note the increased difficulty in encoding H.264.

Finally, I hope it goes without saying that none of this code has been reviewed 
yet. I'm going to be contributing it to the project at some point, but as of 
now, I'm the only one who's ever used it or looked at it, and there could 
possibly be issues that haven't been fixed. It's worked well for me and my uses 
for the last while and I'm hoping it does for you too.

The branch is located at here: 
https://github.com/sreid8/guacamole-server/tree/guacenc_h264

Good luck,
Sean

On Thu, Mar 26, 2020 at 5:00 PM Adrian Owen 
mailto:adrian.o...@eesm.com>> wrote:
Thank you Sean.

I look forward to the update!

Adrian

From: Sean Reid [mailto:sean.re...@gmail.com<mailto:sean.re...@gmail.com>]
Sent: 26 March 2020 20:36
To: user@guacamole.apache.org<mailto:user@guacamole.apache.org>
Subject: Re: guacenc new parameters

I've been working on a series of patches to support h.264 in MP4 for guacenc. I 
have an old branch that has all of it working, but it needs to be resurrected 
and rebased against the latest master of guacamole-server. I'll work on getting 
that done this weekend and let you know where you can find it then.

Sean

On Thu, Mar 26, 2020 at 4:17 PM Adrian Owen 
mailto:adrian.o...@eesm.com>> wrote:

I run guacenc to get MV4 and then ffmpeg to get H264 MP4 video

Is there way to go straight to MP4? It would take less processing.

Thanks,
From: Sean Reid [mailto:sean.re...@gmail.com<mailto:sean.re...@gmail.com>]
Sent: 26 March 2020 01:32
To: user@guacamole.apache.org<mailto:user@guacamole.apache.org>
Subject: Re: guacenc new parameters

To satisfy my curiosity, do you have an example (even 10 or so minutes will do) 
recording that's representative of the data you're encoding that you could 
share, along with the command you're using to encode it with guacenc? I'd be 
interested in trying to see how long it takes to encode with a few different 
codecs that I've been experimenting with for support in guacenc.

On Wed, Mar 25, 2020 at 8:36 PM Adrian Owen 
mailto:adrian.o...@eesm.com>> wrote:
Hi Sean,

It’s 2 problems in 1.

Snapshots are needed for input for OCR and I also need make guacenc run a lots 
faster on High res data rich RDP sessions.
I hoped if I could solve the snapshots only option, then it would also complete 
sooner.

The overall Issue is how many concurrent users can it support with data 
gathered in a timely manner.

From: Sean Reid [mailto:sean.re...@gmail.com<mailto:sean.re...@gmail.com>]
Sent: 26 March 2020 00:18
To: user@guacamole.apache.org<mailto:user@guacamole.apache.org>
Subject: Re: guacenc new parameters

I don't think we can provide a definitive answer as to whether mpeg4 (which is 
the codec guacenc uses for m4v), jpeg, png, or any other codec will be faster 
always. Often, the ability for a codec to encode quickly relative to another 
depends on the content of the frames it is encoding. In addition, individual 
snapshots add a different type of concern that a video doesn't

RE: guacenc new parameters

[Adrian Owen]

Thank you Sean.

I look forward to the update!

Adrian

From: Sean Reid [mailto:sean.re...@gmail.com]
Sent: 26 March 2020 20:36
To: user@guacamole.apache.org
Subject: Re: guacenc new parameters

I've been working on a series of patches to support h.264 in MP4 for guacenc. I 
have an old branch that has all of it working, but it needs to be resurrected 
and rebased against the latest master of guacamole-server. I'll work on getting 
that done this weekend and let you know where you can find it then.

Sean

On Thu, Mar 26, 2020 at 4:17 PM Adrian Owen 
mailto:adrian.o...@eesm.com>> wrote:

I run guacenc to get MV4 and then ffmpeg to get H264 MP4 video

Is there way to go straight to MP4? It would take less processing.

Thanks,
From: Sean Reid [mailto:sean.re...@gmail.com<mailto:sean.re...@gmail.com>]
Sent: 26 March 2020 01:32
To: user@guacamole.apache.org<mailto:user@guacamole.apache.org>
Subject: Re: guacenc new parameters

To satisfy my curiosity, do you have an example (even 10 or so minutes will do) 
recording that's representative of the data you're encoding that you could 
share, along with the command you're using to encode it with guacenc? I'd be 
interested in trying to see how long it takes to encode with a few different 
codecs that I've been experimenting with for support in guacenc.

On Wed, Mar 25, 2020 at 8:36 PM Adrian Owen 
mailto:adrian.o...@eesm.com>> wrote:
Hi Sean,

It’s 2 problems in 1.

Snapshots are needed for input for OCR and I also need make guacenc run a lots 
faster on High res data rich RDP sessions.
I hoped if I could solve the snapshots only option, then it would also complete 
sooner.

The overall Issue is how many concurrent users can it support with data 
gathered in a timely manner.

From: Sean Reid [mailto:sean.re...@gmail.com<mailto:sean.re...@gmail.com>]
Sent: 26 March 2020 00:18
To: user@guacamole.apache.org<mailto:user@guacamole.apache.org>
Subject: Re: guacenc new parameters

I don't think we can provide a definitive answer as to whether mpeg4 (which is 
the codec guacenc uses for m4v), jpeg, png, or any other codec will be faster 
always. Often, the ability for a codec to encode quickly relative to another 
depends on the content of the frames it is encoding. In addition, individual 
snapshots add a different type of concern that a video doesn't have: extra IO 
operations. A video is one big binary file, tons of images is tons of small 
binary files. Each image file creation is an extra create, write, flush, and 
close IO operation that video won't have. Whether these extra operations add up 
to a meaningful amount of overhead is another question entirely.

To answer both your questions:
1. Guacenc could write snapshots every second of a recording instead of 
encoding video, but it doesn't right now and I don't know that anyone has 
talked about providing code to do that.
2. It's not possible to know if encoding individual images every second would 
be faster than encoding mpeg4 for the reasons I outlined above.

This conversation brings up some other questions for me though. What problem 
are you trying to solve? Is it the speed of video encoding? Is it that you need 
screenshots rather than a video for OCR? Maybe understanding the whole problem 
will help us help you.

On Wed, Mar 25, 2020 at 7:29 PM Adrian Owen 
mailto:adrian.o...@eesm.com>> wrote:
Thanks, It’s what I suspected. And I use the typescript, for SSH/TELNET already.

So going back to my question. Would guacaenc support writing snapshots every 
second?  And moreover, if it did that instead of writing M4V would be a lot 
faster?

An intense high res 1 Hour RDP, can take guacenc 15-30 minutes to complete?
From: Mike Jumper [mailto:mjum...@apache.org<mailto:mjum...@apache.org>]
Sent: 25 March 2020 22:26
To: user@guacamole.apache.org<mailto:user@guacamole.apache.org>
Subject: Re: guacenc new parameters

For purely-graphical connections like VNC and RDP, no, OCR would really be the 
only option. Once the data leaves the VNC/RDP server, it's just a fragment of 
an image and has lost all text meaning. If you enable recording of keyboard 
events, you would be able to infer what is being typed, but the only way to 
read the graphical content of the screen would be OCR.

For connections driven by text like SSH, telnet, and Kubernetes, you can 
leverage Guacamole's support for typescripts. Each typescript is the raw text 
data received from the server prior to being rendered, including console codes, 
coupled with a separate file containing timing information.

- Mike

On Wed, Mar 25, 2020 at 1:52 PM Adrian Owen 
mailto:adrian.o...@eesm.com>> wrote:
Mike,

Is there a less convoluted way to grab the text displayed?

From: Mike Jumper [mailto:mjum...@apache.org<mailto:mjum...@apache.org>]
Sent: 25 March 2020 20:42
To: user@guacamole.apache.org<mailto:user@guacamole.apache.org>
Subject: Re: guacenc new parameters

On Wed, Mar 25, 2020 at

RE: guacenc new parameters

[Adrian Owen]

I run guacenc to get MV4 and then ffmpeg to get H264 MP4 video

Is there way to go straight to MP4? It would take less processing.

Thanks,
From: Sean Reid [mailto:sean.re...@gmail.com]
Sent: 26 March 2020 01:32
To: user@guacamole.apache.org
Subject: Re: guacenc new parameters

To satisfy my curiosity, do you have an example (even 10 or so minutes will do) 
recording that's representative of the data you're encoding that you could 
share, along with the command you're using to encode it with guacenc? I'd be 
interested in trying to see how long it takes to encode with a few different 
codecs that I've been experimenting with for support in guacenc.

On Wed, Mar 25, 2020 at 8:36 PM Adrian Owen 
mailto:adrian.o...@eesm.com>> wrote:
Hi Sean,

It’s 2 problems in 1.

Snapshots are needed for input for OCR and I also need make guacenc run a lots 
faster on High res data rich RDP sessions.
I hoped if I could solve the snapshots only option, then it would also complete 
sooner.

The overall Issue is how many concurrent users can it support with data 
gathered in a timely manner.

From: Sean Reid [mailto:sean.re...@gmail.com<mailto:sean.re...@gmail.com>]
Sent: 26 March 2020 00:18
To: user@guacamole.apache.org<mailto:user@guacamole.apache.org>
Subject: Re: guacenc new parameters

I don't think we can provide a definitive answer as to whether mpeg4 (which is 
the codec guacenc uses for m4v), jpeg, png, or any other codec will be faster 
always. Often, the ability for a codec to encode quickly relative to another 
depends on the content of the frames it is encoding. In addition, individual 
snapshots add a different type of concern that a video doesn't have: extra IO 
operations. A video is one big binary file, tons of images is tons of small 
binary files. Each image file creation is an extra create, write, flush, and 
close IO operation that video won't have. Whether these extra operations add up 
to a meaningful amount of overhead is another question entirely.

To answer both your questions:
1. Guacenc could write snapshots every second of a recording instead of 
encoding video, but it doesn't right now and I don't know that anyone has 
talked about providing code to do that.
2. It's not possible to know if encoding individual images every second would 
be faster than encoding mpeg4 for the reasons I outlined above.

This conversation brings up some other questions for me though. What problem 
are you trying to solve? Is it the speed of video encoding? Is it that you need 
screenshots rather than a video for OCR? Maybe understanding the whole problem 
will help us help you.

On Wed, Mar 25, 2020 at 7:29 PM Adrian Owen 
mailto:adrian.o...@eesm.com>> wrote:
Thanks, It’s what I suspected. And I use the typescript, for SSH/TELNET already.

So going back to my question. Would guacaenc support writing snapshots every 
second?  And moreover, if it did that instead of writing M4V would be a lot 
faster?

An intense high res 1 Hour RDP, can take guacenc 15-30 minutes to complete?
From: Mike Jumper [mailto:mjum...@apache.org<mailto:mjum...@apache.org>]
Sent: 25 March 2020 22:26
To: user@guacamole.apache.org<mailto:user@guacamole.apache.org>
Subject: Re: guacenc new parameters

For purely-graphical connections like VNC and RDP, no, OCR would really be the 
only option. Once the data leaves the VNC/RDP server, it's just a fragment of 
an image and has lost all text meaning. If you enable recording of keyboard 
events, you would be able to infer what is being typed, but the only way to 
read the graphical content of the screen would be OCR.

For connections driven by text like SSH, telnet, and Kubernetes, you can 
leverage Guacamole's support for typescripts. Each typescript is the raw text 
data received from the server prior to being rendered, including console codes, 
coupled with a separate file containing timing information.

- Mike

On Wed, Mar 25, 2020 at 1:52 PM Adrian Owen 
mailto:adrian.o...@eesm.com>> wrote:
Mike,

Is there a less convoluted way to grab the text displayed?

From: Mike Jumper [mailto:mjum...@apache.org<mailto:mjum...@apache.org>]
Sent: 25 March 2020 20:42
To: user@guacamole.apache.org<mailto:user@guacamole.apache.org>
Subject: Re: guacenc new parameters

On Wed, Mar 25, 2020 at 8:58 AM Adrian Owen 
mailto:adrian.o...@eesm.com>> wrote:
I had an idea for another parameter to guacenc.

gaucenc generates an M4V file.

Could it optionally, generate PNG Snapshot images instead. Every second. 
1.file.png, 2.file.png ….

Why?

- Mike

RE: guacenc new parameters

[Adrian Owen]

Hi Sean,

It’s 2 problems in 1.

Snapshots are needed for input for OCR and I also need make guacenc run a lots 
faster on High res data rich RDP sessions.
I hoped if I could solve the snapshots only option, then it would also complete 
sooner.

The overall Issue is how many concurrent users can it support with data 
gathered in a timely manner.

From: Sean Reid [mailto:sean.re...@gmail.com]
Sent: 26 March 2020 00:18
To: user@guacamole.apache.org
Subject: Re: guacenc new parameters

I don't think we can provide a definitive answer as to whether mpeg4 (which is 
the codec guacenc uses for m4v), jpeg, png, or any other codec will be faster 
always. Often, the ability for a codec to encode quickly relative to another 
depends on the content of the frames it is encoding. In addition, individual 
snapshots add a different type of concern that a video doesn't have: extra IO 
operations. A video is one big binary file, tons of images is tons of small 
binary files. Each image file creation is an extra create, write, flush, and 
close IO operation that video won't have. Whether these extra operations add up 
to a meaningful amount of overhead is another question entirely.

To answer both your questions:
1. Guacenc could write snapshots every second of a recording instead of 
encoding video, but it doesn't right now and I don't know that anyone has 
talked about providing code to do that.
2. It's not possible to know if encoding individual images every second would 
be faster than encoding mpeg4 for the reasons I outlined above.

This conversation brings up some other questions for me though. What problem 
are you trying to solve? Is it the speed of video encoding? Is it that you need 
screenshots rather than a video for OCR? Maybe understanding the whole problem 
will help us help you.

On Wed, Mar 25, 2020 at 7:29 PM Adrian Owen 
mailto:adrian.o...@eesm.com>> wrote:
Thanks, It’s what I suspected. And I use the typescript, for SSH/TELNET already.

So going back to my question. Would guacaenc support writing snapshots every 
second?  And moreover, if it did that instead of writing M4V would be a lot 
faster?

An intense high res 1 Hour RDP, can take guacenc 15-30 minutes to complete?
From: Mike Jumper [mailto:mjum...@apache.org<mailto:mjum...@apache.org>]
Sent: 25 March 2020 22:26
To: user@guacamole.apache.org<mailto:user@guacamole.apache.org>
Subject: Re: guacenc new parameters

For purely-graphical connections like VNC and RDP, no, OCR would really be the 
only option. Once the data leaves the VNC/RDP server, it's just a fragment of 
an image and has lost all text meaning. If you enable recording of keyboard 
events, you would be able to infer what is being typed, but the only way to 
read the graphical content of the screen would be OCR.

For connections driven by text like SSH, telnet, and Kubernetes, you can 
leverage Guacamole's support for typescripts. Each typescript is the raw text 
data received from the server prior to being rendered, including console codes, 
coupled with a separate file containing timing information.

- Mike

On Wed, Mar 25, 2020 at 1:52 PM Adrian Owen 
mailto:adrian.o...@eesm.com>> wrote:
Mike,

Is there a less convoluted way to grab the text displayed?

From: Mike Jumper [mailto:mjum...@apache.org<mailto:mjum...@apache.org>]
Sent: 25 March 2020 20:42
To: user@guacamole.apache.org<mailto:user@guacamole.apache.org>
Subject: Re: guacenc new parameters

On Wed, Mar 25, 2020 at 8:58 AM Adrian Owen 
mailto:adrian.o...@eesm.com>> wrote:
I had an idea for another parameter to guacenc.

gaucenc generates an M4V file.

Could it optionally, generate PNG Snapshot images instead. Every second. 
1.file.png, 2.file.png ….

Why?

- Mike

RE: guacenc new parameters

[Adrian Owen]

Thanks, It’s what I suspected. And I use the typescript, for SSH/TELNET already.

So going back to my question. Would guacaenc support writing snapshots every 
second?  And moreover, if it did that instead of writing M4V would be a lot 
faster?

An intense high res 1 Hour RDP, can take guacenc 15-30 minutes to complete?
From: Mike Jumper [mailto:mjum...@apache.org]
Sent: 25 March 2020 22:26
To: user@guacamole.apache.org
Subject: Re: guacenc new parameters

For purely-graphical connections like VNC and RDP, no, OCR would really be the 
only option. Once the data leaves the VNC/RDP server, it's just a fragment of 
an image and has lost all text meaning. If you enable recording of keyboard 
events, you would be able to infer what is being typed, but the only way to 
read the graphical content of the screen would be OCR.

For connections driven by text like SSH, telnet, and Kubernetes, you can 
leverage Guacamole's support for typescripts. Each typescript is the raw text 
data received from the server prior to being rendered, including console codes, 
coupled with a separate file containing timing information.

- Mike

On Wed, Mar 25, 2020 at 1:52 PM Adrian Owen 
mailto:adrian.o...@eesm.com>> wrote:
Mike,

Is there a less convoluted way to grab the text displayed?

From: Mike Jumper [mailto:mjum...@apache.org<mailto:mjum...@apache.org>]
Sent: 25 March 2020 20:42
To: user@guacamole.apache.org<mailto:user@guacamole.apache.org>
Subject: Re: guacenc new parameters

On Wed, Mar 25, 2020 at 8:58 AM Adrian Owen 
mailto:adrian.o...@eesm.com>> wrote:
I had an idea for another parameter to guacenc.

gaucenc generates an M4V file.

Could it optionally, generate PNG Snapshot images instead. Every second. 
1.file.png, 2.file.png ….

Why?

- Mike

RE: guacenc new parameters

[Adrian Owen]

Mike,

Is there a less convoluted way to grab the text displayed?

From: Mike Jumper [mailto:mjum...@apache.org]
Sent: 25 March 2020 20:42
To: user@guacamole.apache.org
Subject: Re: guacenc new parameters

On Wed, Mar 25, 2020 at 8:58 AM Adrian Owen 
mailto:adrian.o...@eesm.com>> wrote:
I had an idea for another parameter to guacenc.

gaucenc generates an M4V file.

Could it optionally, generate PNG Snapshot images instead. Every second. 
1.file.png, 2.file.png ….

Why?

- Mike

RE: guacenc new parameters

[Adrian Owen]

Input images to OCR system.

From: Mike Jumper [mailto:mjum...@apache.org]
Sent: 25 March 2020 20:42
To: user@guacamole.apache.org
Subject: Re: guacenc new parameters

On Wed, Mar 25, 2020 at 8:58 AM Adrian Owen 
mailto:adrian.o...@eesm.com>> wrote:
I had an idea for another parameter to guacenc.

gaucenc generates an M4V file.

Could it optionally, generate PNG Snapshot images instead. Every second. 
1.file.png, 2.file.png ….

Why?

- Mike

RE: A large thank you to the Apache Guacamole Team

[Adrian Owen]

Hi

How many Guacamole servers support your 6000+ connections?

-Original Message-
From: sciUser [mailto:shulb...@securitycentric.net] 
Sent: 25 March 2020 19:33
To: user@guacamole.apache.org
Subject: Re: A large thank you to the Apache Guacamole Team

Thank you to the team and this community for shaping one of the industries 
widely used HTML5 RDP gateway- From the USA and UK we are supporting over
6000+ connections in both work from home and academics.  

Thank You



-
A Cybersecurity Enablement Company
We don't just run you through the motions, Our labs teach you how to think! 
Known good Guacamole  installations

--
Sent from: 
http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org


-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

RE: guacenc new parameters

[Adrian Owen]

I had an idea for another parameter to guacenc.

gaucenc generates an M4V file.

Could it optionally, generate PNG Snapshot images instead. Every second. 
1.file.png, 2.file.png 

This would be similar to using ffmpeg to generate PNG snapshots from M4V.

Thanks, Adrian

From: Adrian Owen
Sent: 15 March 2020 22:38
To: user@guacamole.apache.org
Subject: Re: guacenc new parameters


Hi Sean,



Yes this is something I'd be very interested on working on.



My requirements are simple. Start at point x and run to the end.



The stream will be active (locked), and each time I visit it and will have 
moved on.



Or supply the 2 parameters, either way make it a contribution to guacamole 
project




I had as look at video.c and see I have a really steep learning curve ahead to 
code it.

Thanks Adrian

From: Sean Reid mailto:sean.re...@gmail.com>>
Sent: 15 March 2020 22:15
To: user@guacamole.apache.org<mailto:user@guacamole.apache.org>
Subject: Re: guacenc new parameters

Hi Adrian,

Is this something you'd be interested in working on? I've worked a bit on 
guacenc myself, so I can give you some information that I've found from working 
on it.

I'm not confident that you need to think about keyframes much at all from the 
perspective of guacenc. From my understanding (and I welcome anyone who might 
differ from my understanding or explanation here to jump in), since the 
Guacamole Protocol attempts to only send changes, guacenc renders a new image 
in memory for each new instruction in the recording file, based on the 
previously rendered image. Each new image is just a mutation of the previous, 
but itself is a full image. These images are sent to libavcodec on a periodic 
that matches the target framerate. This is done because the guacamole protocol 
doesn't have a framerate, so to square the circle of converting to a video with 
a time base, guacenc holds the image in memory so that it can repeat sending 
unchanged frames to libavcodec if no guacamole protocol instructions mutated 
the in-memory image. This implicitly means that each image guacenc sends can be 
a keyframe, so you could potentially start the encoding at any frame you'd like.

I'd recommend you look at the logic of 
video.c<https://github.com/apache/guacamole-server/blob/master/src/guacenc/video.c>
 in the guacenc source to get a better idea about how this process works.

Sean

On Sun, Mar 15, 2020 at 5:17 PM Adrian Owen 
mailto:adrian.o...@eesm.com>> wrote:

Hi Sean,



Thanks!



I believe that Keyframes are written to video stream, done as work for the 
Player.



So I guess it would be StartKeyFrameEndKeyFrame.



It would have to start at StartKeyFrame and run 'n' keyframes and stop.



So its a matter of scanning the video stream file for keyframes.



That is challenging. I am a C programmer, but know not how to identify a 
keyframe while reading the stream.





Adrian






From: Sean Reid mailto:sean.re...@gmail.com>>
Sent: 15 March 2020 20:02
To: user@guacamole.apache.org<mailto:user@guacamole.apache.org>
Subject: Re: guacenc new parameters

Hi Adrian,

I don't see a reason that this wouldn't be possible. I think it would be done 
by guacenc, though, not by ffmpeg. I'd think that guacenc just wouldn't start 
sending the frames to be encoded until, while reading the input file, guacenc 
has reached the start time and stop sending frames to be encoded at end time.

Sean

On Sun, Mar 15, 2020 at 1:55 PM Adrian Owen 
mailto:adrian.o...@eesm.com>> wrote:
Hi,

ffmpeg allows getting a section of a video file by specifying start seconds and 
end seconds,

Now the Guacamole video steam may not know seconds but:

Could Guacenc support  extra parameters: StartPoint Endpoint?

And then only generate MV4 between those points.


This is a theoretical question,


Many thanks, Adrian

Re: guacenc new parameters

[Adrian Owen]

Hi Sean,


Yes this is something I'd be very interested on working on.


My requirements are simple. Start at point x and run to the end.


The stream will be active (locked), and each time I visit it and will have 
moved on.



Or supply the 2 parameters, either way make it a contribution to guacamole 
project



I had as look at video.c and see I have a really steep learning curve ahead to 
code it.

Thanks Adrian


From: Sean Reid 
Sent: 15 March 2020 22:15
To: user@guacamole.apache.org
Subject: Re: guacenc new parameters

Hi Adrian,

Is this something you'd be interested in working on? I've worked a bit on 
guacenc myself, so I can give you some information that I've found from working 
on it.

I'm not confident that you need to think about keyframes much at all from the 
perspective of guacenc. From my understanding (and I welcome anyone who might 
differ from my understanding or explanation here to jump in), since the 
Guacamole Protocol attempts to only send changes, guacenc renders a new image 
in memory for each new instruction in the recording file, based on the 
previously rendered image. Each new image is just a mutation of the previous, 
but itself is a full image. These images are sent to libavcodec on a periodic 
that matches the target framerate. This is done because the guacamole protocol 
doesn't have a framerate, so to square the circle of converting to a video with 
a time base, guacenc holds the image in memory so that it can repeat sending 
unchanged frames to libavcodec if no guacamole protocol instructions mutated 
the in-memory image. This implicitly means that each image guacenc sends can be 
a keyframe, so you could potentially start the encoding at any frame you'd like.

I'd recommend you look at the logic of 
video.c<https://github.com/apache/guacamole-server/blob/master/src/guacenc/video.c>
 in the guacenc source to get a better idea about how this process works.

Sean

On Sun, Mar 15, 2020 at 5:17 PM Adrian Owen 
mailto:adrian.o...@eesm.com>> wrote:

Hi Sean,


Thanks!


I believe that Keyframes are written to video stream, done as work for the 
Player.


So I guess it would be StartKeyFrameEndKeyFrame.


It would have to start at StartKeyFrame and run 'n' keyframes and stop.


So its a matter of scanning the video stream file for keyframes.


That is challenging. I am a C programmer, but know not how to identify a 
keyframe while reading the stream.




Adrian





From: Sean Reid mailto:sean.re...@gmail.com>>
Sent: 15 March 2020 20:02
To: user@guacamole.apache.org<mailto:user@guacamole.apache.org>
Subject: Re: guacenc new parameters

Hi Adrian,

I don't see a reason that this wouldn't be possible. I think it would be done 
by guacenc, though, not by ffmpeg. I'd think that guacenc just wouldn't start 
sending the frames to be encoded until, while reading the input file, guacenc 
has reached the start time and stop sending frames to be encoded at end time.

Sean

On Sun, Mar 15, 2020 at 1:55 PM Adrian Owen 
mailto:adrian.o...@eesm.com>> wrote:

Hi,

ffmpeg allows getting a section of a video file by specifying start seconds and 
end seconds,

Now the Guacamole video steam may not know seconds but:

Could Guacenc support  extra parameters: StartPoint Endpoint?

And then only generate MV4 between those points.


This is a theoretical question,


Many thanks, Adrian

Re: guacenc new parameters

[Adrian Owen]

Hi Sean,


Thanks!


I believe that Keyframes are written to video stream, done as work for the 
Player.


So I guess it would be StartKeyFrameEndKeyFrame.


It would have to start at StartKeyFrame and run 'n' keyframes and stop.


So its a matter of scanning the video stream file for keyframes.


That is challenging. I am a C programmer, but know not how to identify a 
keyframe while reading the stream.




Adrian





From: Sean Reid 
Sent: 15 March 2020 20:02
To: user@guacamole.apache.org
Subject: Re: guacenc new parameters

Hi Adrian,

I don't see a reason that this wouldn't be possible. I think it would be done 
by guacenc, though, not by ffmpeg. I'd think that guacenc just wouldn't start 
sending the frames to be encoded until, while reading the input file, guacenc 
has reached the start time and stop sending frames to be encoded at end time.

Sean

On Sun, Mar 15, 2020 at 1:55 PM Adrian Owen 
mailto:adrian.o...@eesm.com>> wrote:

Hi,

ffmpeg allows getting a section of a video file by specifying start seconds and 
end seconds,

Now the Guacamole video steam may not know seconds but:

Could Guacenc support  extra parameters: StartPoint Endpoint?

And then only generate MV4 between those points.


This is a theoretical question,


Many thanks, Adrian

guacenc new parameters

[Adrian Owen]

Hi,

ffmpeg allows getting a section of a video file by specifying start seconds and 
end seconds,

Now the Guacamole video steam may not know seconds but:

Could Guacenc support  extra parameters: StartPoint Endpoint?

And then only generate MV4 between those points.


This is a theoretical question,


Many thanks, Adrian

RE: Biggest Guacamole User - fame at last

[Adrian Owen]

Thank you for correction. 16GB RAM


From: ivanmarcus [mailto:ivanmar...@yahoo.com]
Sent: 05 March 2020 23:41
To: user@guacamole.apache.org; Adrian Owen 
Subject: Re: Biggest Guacamole User - fame at last


Wow, that many on 16MB, impressive :-D

On 6/03/2020 11:57 a.m., Adrian Owen wrote:

Hi Guacamole forum users,


Many users ask how many concurrent sessions. To which there are academic 
answers.

So I though ask the forum.�


What is the highest number of concurrent users a Forum user has experienced?


I'll kick it off:
50 concurrent
Debian stretch�
16�MB RAM
100 MB/Sec HDD
Xeon 4 core


Can anyone improve on that?�


Adrian

Biggest Guacamole User - fame at last

[Adrian Owen]

Hi Guacamole forum users,


Many users ask how many concurrent sessions. To which there are academic 
answers.

So I though ask the forum.


What is the highest number of concurrent users a Forum user has experienced?


I'll kick it off:
50 concurrent
Debian stretch
16 MB RAM
100 MB/Sec HDD
Xeon 4 core


Can anyone improve on that?


Adrian

RE: How many users can use Guacamole simultaneously?

[Adrian Owen]

https://sourceforge.net/p/guacamole/discussion/1110834/thread/666f7a9f/

From: Stewart Alexander [mailto:stewart.alexan...@alamancecc.edu]
Sent: 03 March 2020 12:47
To: user@guacamole.apache.org
Subject: How many users can use Guacamole simultaneously?

Hi all,

Does anyone know how many users can login through Guacamole simultaneously?

What are the bottlenecks?

Thank you,
Stewart Alexander


-- Original Message --
From: "Fabio Corsi" 
mailto:fabio1299.discussionli...@gmail.com>>
To: user@guacamole.apache.org
Sent: 3/2/2020 5:01:07 PM
Subject: Re: ldap-user-search-filter problem


CAUTION: This email originated from outside your organization. Exercise caution 
when opening attachments or clicking links, especially from unknown senders.
Hi,

I was wondering if anyone could provide some insight on this issue.

To recap my previous message I have a ldap-user-search-filter set to

(&(objectClass=person)(memberof=cn=guacusers,ou=groups,dc=asrc,dc=crossroads))
however any valid LDAP user is allowed to login on the Guacamole web page.
My configuration: Guacamole 1.1.0, Ubuntu 18.04, openLDAP (libldap-2.4-2:amd64) 
on a separate Ubuntu 18.04 VM.

since my first message I’ve done some additional investigation into the problem.
By looking at the logs on my LDAP server I can see that the filters are passed 
on to the LDAP server and they do return the correct number of entries.

There are a couple of things that seem strange to me:

  *   Not sure why the "(|(uid=*)) clause is added to the main group filter 
defined in my configuration
  *   For the user in the guacusers group the SeeAlso seems to expand to all 
the object of class groupOfNames in my directory

Here are the log entries for the user that is in the guacusers group:
slapd[904]: conn=9470 fd=48 ACCEPT from IP=10.16.33.12:52422 (IP=0.0.0.0:389)
slapd[904]: conn=9470 op=0 BIND 
dn="uid=user_in_guacusers,ou=users,dc=my,dc=domain" method=128
slapd[904]: conn=9470 op=0 BIND 
dn="uid=user_in_guacusers,ou=users,dc=my,dc=domain" mech=SIMPLE ssf=0
slapd[904]: conn=9470 op=0 RESULT tag=97 err=0 text=
slapd[904]: conn=9470 op=1 SRCH base="ou=groups,dc=my,dc=domain" scope=2 
deref=0 
filter="(&(!(objectClass=guacConfigGroup))(|(member=uid=user_in_guacusers,ou=users,dc=my,dc=domain)))"
slapd[904]: conn=9470 op=1 SEARCH RESULT tag=101 err=0 nentries=5 text=
slapd[904]: conn=9470 fd=48 closed (connection lost)
slapd[904]: conn=9471 fd=48 ACCEPT from IP=10.16.33.12:52424 (IP=0.0.0.0:389)
slapd[904]: conn=9471 op=0 BIND 
dn="uid=user_in_guacusers,ou=users,dc=my,dc=domain" method=128
slapd[904]: conn=9471 op=0 BIND 
dn="uid=user_in_guacusers,ou=users,dc=my,dc=domain" mech=SIMPLE ssf=0
slapd[904]: conn=9471 op=0 RESULT tag=97 err=0 text=
slapd[904]: conn=9471 op=1 SRCH base="ou=users,dc=my,dc=domain" scope=2 deref=0 
filter="(&(&(objectClass=person)(memberOf=cn=guacusers,ou=groups,dc=my,dc=domain))(|(uid=*)))"
slapd[904]: conn=9471 op=1 SEARCH RESULT tag=101 err=0 nentries=6 text=
slapd[904]: conn=9471 op=2 SRCH base="ou=groups,dc=my,dc=domain" scope=2 
deref=0 filter="(&(!(objectClass=guacConfigGroup))(|(cn=*)))"
slapd[904]: conn=9471 op=2 SEARCH RESULT tag=101 err=0 nentries=46 text=
slapd[904]: conn=9471 op=3 SRCH base="ou=groups,dc=my,dc=domain" scope=2 
deref=0 
filter="(&(!(objectClass=guacConfigGroup))(|(member=uid=user_in_guacusers,ou=users,dc=my,dc=domain)))"
slapd[904]: conn=9471 op=3 SEARCH RESULT tag=101 err=0 nentries=5 text=
slapd[904]: conn=9471 op=4 SRCH base="ou=guac_config,dc=my,dc=domain" scope=2 
deref=0 
filter="(&(objectClass=guacConfigGroup)(|(member=uid=user_in_guacusers,ou=users,dc=my,dc=domain)(seeAlso=cn=group1,ou=groups,dc=my,dc=domain)(seeAlso=cn=group2,ou=groups,dc=my,dc=domain)(seeAlso=cn=group3,ou=groups,dc=my,dc=domain)(seeAlso=cn=group4,ou=groups,dc=my,dc=domain)(seeAlso=cn=guacusers,ou=groups,dc=my,dc=domain)))"
slapd[904]: conn=9471 op=4 SEARCH RESULT tag=101 err=0 nentries=1 text=

And for the user that is not in the guacusers group:
slapd[904]: conn=9478 fd=88 ACCEPT from IP=10.16.33.12:52430 (IP=0.0.0.0:389)
slapd[904]: conn=9478 op=0 BIND 
dn="uid=user_not_in_guacusers,ou=users,dc=my,dc=domain" method=128
slapd[904]: conn=9478 op=0 BIND 
dn="uid=user_not_in_guacusers,ou=users,dc=my,dc=domain" mech=SIMPLE ssf=0
slapd[904]: conn=9478 op=0 RESULT tag=97 err=0 text=
slapd[904]: conn=9478 op=1 SRCH base="ou=groups,dc=my,dc=domain" scope=2 
deref=0 
filter="(&(!(objectClass=guacConfigGroup))(|(member=uid=user_not_in_guacusers,ou=users,dc=my,dc=domain)))"
slapd[904]: conn=9478 op=1 SEARCH RESULT tag=101 err=0 nentries=0 text=
slapd[904]: conn=9478 fd=88 closed (connection lost)
slapd[904]: conn=9479 fd=88 ACCEPT from IP=10.16.33.12:52432 (IP=0.0.0.0:389)
slapd[904]: conn=9479 op=0 BIND 
dn="uid=user_not_in_guacusers,ou=users,dc=my,dc=domain" method=128
slapd[904]: conn=9479 op=0 BIND 
dn="uid=user_not_in_guacusers,ou=users,dc=my,dc=domain" mech=SIMPLE ssf=0
slapd[904]: conn=9479 op=0 

RE: Guacamole Database Schema - disconnected sessions

[Adrian Owen]

Hi Nick,

--Connection history is stored persistently, but these entries are made after 
the connection is closed

So new entry in connection history table means a connection has just closed.

That’s all we need to know,   If connections always result in history entry 
after termination, this is solution?


Thanks, Adrian

From: Nick Couchman [mailto:vn...@apache.org]
Sent: 25 February 2020 17:31
To: user@guacamole.apache.org
Subject: Re: Guacamole Database Schema - disconnected sessions

On Tue, Feb 25, 2020 at 8:54 AM Adrian Owen 
mailto:adrian.o...@eesm.com>> wrote:

In our automated Guacamole solution we currently enable VIDEO on every 
connection and monitor for no lock on the video stream file. We allow for .1, 
.2 etc.

But this puts overhead on Guacamole, disk certainly and risk of bottleneck.

I would prefer to make a MYSQL call to the database, and enquire on the state 
of connections.

Is there a documentation on the Schema, or failing that, which MYSQL tables 
should I select to see active and disconnected sessions?


Currently active session tracking is only done in memory - it is not stored 
anywhere persistently.  Connection history is stored persistently, but these 
entries are made after the connection is closed, so the database cannot be 
relied upon to contain a record of what sessions are active.  To change this 
behavior will require some work in the code - it's not something that can be 
enabled/disabled.

-Nick

Re: Guacamole Capacity planning

[Adrian Owen]

Just found this thread 
https://sourceforge.net/p/guacamole/discussion/1110834/thread/666f7a9f/


The questions answered here.


thanks, Adrian



From: Adrian Owen 
Sent: 25 February 2020 14:10
To: user@guacamole.apache.org
Subject: Guacamole Capacity planning


I read that 1 core x 2GB RAM is recommended per 25 concurrent users.



What is recommended for 200 concurrent users?



a. 8 x 1 Core 2GB RAM

b. 4 x 2 Core 2GB RAM

c. 2 x 2 Core 4GB RAM

or

d. 1 x 4 Core 4GB RAM



Thanks, Adrian

Guacamole Capacity planning

[Adrian Owen]

I read that 1 core x 2GB RAM is recommended per 25 concurrent users.

What is recommended for 200 concurrent users?

a. 8 x 1 Core 2GB RAM
b. 4 x 2 Core 2GB RAM
c. 2 x 2 Core 4GB RAM
or
d. 1 x 4 Core 4GB RAM

Thanks, Adrian

Guacamole Database Schema - disconnected sessions

[Adrian Owen]

In our automated Guacamole solution we currently enable VIDEO on every 
connection and monitor for no lock on the video stream file. We allow for .1, 
.2 etc.

But this puts overhead on Guacamole, disk certainly and risk of bottleneck.

I would prefer to make a MYSQL call to the database, and enquire on the state 
of connections.

Is there a documentation on the Schema, or failing that, which MYSQL tables 
should I select to see active and disconnected sessions?

Thanks, Adrian

RE: Session recording behaviour

[Adrian Owen]

Thanks Mike.

1 more. Customer said they want to run sessions for 30 days recording video.

That will result is a massive file.

Is there a way for me to remotely bump the session by running something on 
guacamole server so:


1.   Cause Session reconnect

2.   It starts streaming again (but mysession file exists)

3.   So it starts writing mysession_1

4.   I can then process mysession with guacenc and delete it.


5.   This would run every … 2 hours …

Adrian

From: Mike Jumper [mailto:mjum...@apache.org]
Sent: 10 January 2020 17:59
To: user@guacamole.apache.org
Subject: Re: Session recording behaviour

On Fri, Jan 10, 2020, 09:49 Adrian Owen 
mailto:adrian.o...@eesm.com>> wrote:
I set session to record to ‘mysession’  file
If there is a break in session, Gucamole will attempt to reconnect and if 
successful a new streaming file is created mysession_1
And so on _2, _3 …

Yes, but this has nothing to do with reconnecting. A sequential numeric suffix 
is added if a file with that name already exists.

The suffix will be .1, .2, etc.

I belive this is how it works.  Is there any documentation on this behahior?

https://guacamole.apache.org/doc/gug/configuring-guacamole.html#rdp-recording

"Guacamole will never overwrite an existing recording. If necessary, a numeric 
suffix like ".1", ".2", ".3", etc. will be appended to NAME to avoid 
overwriting an existing recording. If even appending a numeric suffix does not 
help, the session will simply not be recorded."

And what is the easeist way to manually cause a session break to simulate the 
scenario?

Manually disconnect and click "reconnect", or reload the page.

- Mike

Session recording behaviour

[Adrian Owen]

I set session to record to 'mysession'  file

If there is a break in session, Gucamole will attempt to reconnect and if 
successful a new streaming file is created mysession_1

And so on _2, _3 ...


I belive this is how it works.  Is there any documentation on this behahior?

And what is the easeist way to manually cause a session break to simulate the 
scenario?

Many thanks, Adrian

RE: Screenshots of remote machine usage

[Adrian Owen]

Use ffmpeg to pull snapshots from the M4V

https://stackoverflow.com/questions/27568254/how-to-extract-1-screenshot-for-a-video-with-ffmpeg-at-a-given-time

From: Umesh Bhatt [mailto:um...@nuvepro.com]
Sent: 15 November 2019 06:31
To: user@guacamole.apache.org
Subject: Screenshots of remote machine usage

Hi,

As there is option to create video of user session in remote machine, is there 
any way to take the screenshots at multiple times?
Since screenshots will be smaller in size compared to video.

Regards,
Umesh

RE: Guacamole IIS URL Rewrite Chrome FAILS

[Adrian Owen]

Hi Nick,

We gave up on IIS Url Rewrite. The error persisted no matter what we tried.

In the end we wrote ASP.NET Core reverse Proxy using ProxyKit.
https://github.com/damianh/ProxyKit

Our custom site supports all browsers. Works perfectly.

Thanks, Adrian

From: Nick Couchman [mailto:vn...@apache.org]
Sent: 27 September 2019 15:13
To: user@guacamole.apache.org
Subject: Re: Guacamole IIS URL Rewrite Chrome FAILS

On Fri, Sep 27, 2019 at 5:57 AM Adrian Owen 
mailto:adrian.o...@eesm.com>> wrote:
Hi Nick,

“Can Chrome access anything on that IIS web server?  Do other pages hosted by 
that server work, and only Guacamole fails?”

Yes. All other pages work fine, I can go to NGINX landing page, and Guacamole 
home page.  It is only when session starts.

Only IE 11 works. The old Edge browser worked but the new Edge browser built on 
chromium fails.


I suspect that Websockets is to blame, here - somehow that is not being passed 
correctly.  I've never set that up on IIS, so I don't know what all is required 
to configure it to pass through correctly, but I suspect that IE11 is falling 
back to HTTPS and not attempting to use Websockets at all, while the rest of 
the browsers are attempting to use WSS.  To confirm this you could try to 
disable Websockets pass-through entirely, forcing all browsers to fall back to 
HTTPS, and see if it works.  If it does, then you have an issue with the IIS 
WSS configuration.

-Nick

RE: Guacamole IIS URL Rewrite Chrome FAILS

[Adrian Owen]

Will disable Websockets pass-through and test.  Many thanks, Adrian



From: Nick Couchman [mailto:vn...@apache.org]

Sent: 27 September 2019 15:13

To: user@guacamole.apache.org

Subject: Re: Guacamole IIS URL Rewrite Chrome FAILS



On Fri, Sep 27, 2019 at 5:57 AM Adrian Owen  wrote:

Hi Nick,



“Can Chrome access anything on that IIS web server?  Do other pages hosted by 
that server work, and only Guacamole fails?”



Yes. All other pages work fine, I can go to NGINX landing page, and Guacamole 
home page.  It is only when session starts.



Only IE 11 works. The old Edge browser worked but the new Edge browser built on 
chromium fails.





I suspect that Websockets is to blame, here - somehow that is not being passed 
correctly.  I've never set that up on IIS, so I don't know what all is required 
to configure it to pass through correctly, but I suspect that IE11 is falling 
back to HTTPS and not attempting to use Websockets at all, while the rest of 
the browsers are attempting to use WSS.  To confirm this you could try to 
disable Websockets pass-through entirely, forcing all browsers to fall back to 
HTTPS, and see if it works.  If it does, then you have an issue with the IIS 
WSS configuration.



-Nick

RE: Guacamole IIS URL Rewrite Chrome FAILS

[Adrian Owen]

Hi Nick,

“Can Chrome access anything on that IIS web server?  Do other pages hosted by 
that server work, and only Guacamole fails?”

Yes. All other pages work fine, I can go to NGINX landing page, and Guacamole 
home page.  It is only when session starts.

Only IE 11 works. The old Edge browser worked but the new Edge browser built on 
chromium fails.


Adrian

From: Nick Couchman [mailto:vn...@apache.org]
Sent: 27 September 2019 02:37
To: user@guacamole.apache.org
Subject: Re: Guacamole IIS URL Rewrite Chrome FAILS

On Tue, Sep 24, 2019 at 7:25 AM Adrian Owen 
mailto:adrian.o...@eesm.com>> wrote:
Guacamole is installed on CAMPUS LAN Debian Server.
IIS URL Rewrite, ARR and WebSockets are installed on DMZ 2016 Windows IIS Server
CORS is disabled in NGINX and TOMCAT on Guacamole Server.


Internet users visit DMZ Web server Guacamole Web Application on exteral 
address, and URL Rewrite forwards traffic to internal CAMPUS Guacamole Server.

Using IE 11. Solution works and internet users can remote access CAMPUS 
computers.
Using Chrome/Firefox – Connection tries and timeouts.

We cannot see anything in logfiles.


Is there a known issue with Chrome and IIS URL Rewrite to Guacamole?

I periodically see issues with Chrome accessing IIS URLs in general.  Can 
Chrome access anything on that IIS web server?  Do other pages hosted by that 
server work, and only Guacamole fails?

-Nick

RE: Help building guacenc

[Adrian Owen]

What linux

From: Melroy Rodrigues [mailto:meldisc...@yahoo.com.INVALID]
Sent: 30 August 2019 15:50
To: user@guacamole.apache.org
Subject: Re: Help building guacenc

I am unable to yum install ffmpeg which has the libraries that guacenc needs. 
This is on Linux

On Friday, August 30, 2019, 10:36:45 AM EDT, Adrian Owen 
mailto:adrian.o...@eesm.com>> wrote:



What o/s, what version of guacamole?



Show cmd, show error.



Adrian



From: Melroy Rodrigues [mailto:meldisc...@yahoo.com.INVALID]
Sent: 30 August 2019 14:47
To: user@guacamole.apache.org<mailto:user@guacamole.apache.org>
Subject: Help building guacenc



Hi,



I am unable to build guacenc. Any assistance will be much appreciated.



Regards,

Mel

RE: Help building guacenc

[Adrian Owen]

What o/s, what version of guacamole?

Show cmd, show error.

Adrian

From: Melroy Rodrigues [mailto:meldisc...@yahoo.com.INVALID]
Sent: 30 August 2019 14:47
To: user@guacamole.apache.org
Subject: Help building guacenc

Hi,

I am unable to build guacenc. Any assistance will be much appreciated.

Regards,
Mel

RE: ERROR : "Remote desktop currently unavailable"

[Adrian Owen]

What results you get with mstsc?

Adrian

From: Mike Jumper [mailto:mjum...@apache.org]
Sent: 20 July 2019 07:36
To: user@guacamole.apache.org
Subject: Re: ERROR : "Remote desktop currently unavailable"

On Thu, Jul 18, 2019 at 3:28 AM Amarjeet Singh 
mailto:amarjee...@gmail.com>> wrote:
...Error : The remote desktop server is currently unavailable. If the problem 
persists, please notify your system administrator, or check your system logs.

This means the RDP server refused the connection. Your guacd logs will note 
this.

Error : The connection has been closed because the server is taking too long to 
respond. This is usually caused by network problems, such as a spotty wireless 
signal, or slow network speeds. Please check your network connection and try 
again or contact your system administrator.

Note : We have checked the ping request as well. There are no packet drops. 
There is delay of  only 150-200ms.

That's some hefty latency. Even if you're not seeing packet drops, it's likely 
the issue here is that your network is performing poorly.

If you're positive there are no network issues, the RDP server may simply not 
be responding.

Error : The remote desktop server has forcibly closed the connection. If this 
is undesired or unexpected, please notify your system administrator, or check 
your system logs.

Either an administrator logged in to the Windows machine and disconnected the 
user, or Windows is configured to force the session to disconnect after a 
certain time period and this time period has elapsed. Your guacd logs would 
have noted these specifics.

- Mike