Guacamole Websocket Error

[Tushar Jain]

Hello Everyone,

I had deployed version 1.5.3 some months backing. I am connecting Remote 
Windows VMs through FreeRDP-2.2 through this instance

I am facing following problems:

1. When i am working on these VMs, i am getting following intermittent errors

ERROR o.a.g.w.GuacamoleWebSocketTunnelEndpoint - Creation of WebSocket tunnel 
to guacd failed: Requested tunnel destination does not exist.
[2024-03-21 12:35:11] [info] 12:35:11.371 [http-nio-8180-exec-17] WARN  
o.a.g.s.GuacamoleHTTPTunnelServlet - HTTP tunnel request rejected: Requested 
tunnel destination does not exist.

To the user, it gives an option to reconnect or logout. On reconnect, the 
session resumes.

2. When I change the browser to Full Screen (or vice versa), the underlying 
applications do not resize automatically. This used to work fine (and still 
does) in older versions like 1.2, but does not work in 1.5.3

Any help is appreciated

Thanks,
Tushar Jain

Re: Apache Guacamole html page edit

[Tushar Jain]

That’s the server code you are looking at. Instead, you have to download the 
client code. Following is the location:

https://github.com/apache/guacamole-client
[https://opengraph.githubassets.com/7090848d7aceb6ab363d51e09d02c07d6fe6b51e0fd4b0fe2d3f9ac66a4b0c2f/apache/guacamole-client]
apache/guacamole-client: Mirror of Apache Guacamole Client - 
GitHub
Mirror of Apache Guacamole Client. Contribute to apache/guacamole-client 
development by creating an account on GitHub.
github.com


From: Suat Toksöz 
Sent: Wednesday, June 1, 2022 8:17 PM
To: user@guacamole.apache.org 
Subject: Re: Apache Guacamole html page edit

Also, I am not able to find the file location on apache guacamole source code.

https://dlcdn.apache.org/guacamole/1.4.0/source/
[image.png]

On Wed, Jun 1, 2022 at 9:11 AM Suat Toksöz 
mailto:stok...@gmail.com>> wrote:
Thanks Nick for the quick response.

I want to edit WAR file (https://guacamole.apache.org/releases/1.4.0/) and re 
build the WAR file then deploy to the tomcat server. But, I can not able to 
find html section to edit. We want to edit the "Active Session" section of the 
admin page, where I can find the html files for this on the WAR file.

[image.png]
Thanks


On Tue, May 31, 2022 at 5:58 PM Nick Couchman 
mailto:vn...@apache.org>> wrote:
On Tue, May 31, 2022 at 10:13 AM Suat Toksöz 
mailto:stok...@gmail.com>> wrote:
Hi,

I would like to edit apache guacamole admin web site, where I can find the html 
tags?


If you want to edit the admin site, you should edit the source code and 
re-builld it, and not edit the pages directly. As the site is hosted by Tomcat, 
the static pages are deployed from the WAR file, which can be re-deployed at 
any time and will overwrite any changes you make.

To edit the source code, you can either edit the source directly and rebuild 
the war, or you can build an extension module that modifies the HTML code 
dynamically. The second option is the recommended route.

To edit the source code directly, you need to download the source code and then 
find the location that you want to edit in the 
guacamole/src/main/frontend/src/app directory.

If you want to build an extension that modifies the HTML, see the following 
manual page, and the following branding example:
https://guacamole.apache.org/doc/gug/guacamole-ext.html#updating-existing-html
https://github.com/apache/guacamole-client/tree/master/doc/guacamole-branding-example

Feel free to post back here with any further questions or concerns.

-Nick


--

Best regards,

Suat Toksöz


--

Best regards,

Suat Toksöz

Re: User with access to only Active Sessions and History

[Tushar Jain]

Thanks for the update, Nick. I do hope this one finds its way into 1.6 release!

-Tushar


From: Nick Couchman 
Sent: Saturday, May 28, 2022 8:45 PM
To: user@guacamole.apache.org 
Subject: Re: User with access to only Active Sessions and History

On Sat, May 28, 2022 at 01:15 Tushar Jain 
mailto:tush...@hotmail.com>> wrote:
Hi,

Did a bit of digging- currently, it seems only the administrator has access to 
view "History" tab.  But i do not want to give admin access to the users, since 
I do not want them to create users, connections, etc.

Active Sessions (the tab) is visible to normal users, but they don't see any 
session, even though they have access to respective connections.

Am i missing anything here? I basically want to create a non-admin user who has 
access to "Active Sessions" and "History" tabs. There isn't much documentation 
also that i could find around this.


No, you're not missing anything - currently administrative users are the only 
ones that can see either historical or active sessions for users other than 
themselves.

There is a Jira issue and a pull request for adding support for an "Audit" 
privilege, which would add what you're looking for (at least partially), but it 
hasn't been reviewed and there is no planned release for inclusion.

https://github.com/apache/guacamole-client/pull/619
https://issues.apache.org/jira/browse/GUACAMOLE-538


-Nick

Re: User with access to only Active Sessions and History

[Tushar Jain]

Hi,

Did a bit of digging- currently, it seems only the administrator has access to 
view "History" tab.  But i do not want to give admin access to the users, since 
I do not want them to create users, connections, etc.

Active Sessions (the tab) is visible to normal users, but they don't see any 
session, even though they have access to respective connections.

Am i missing anything here? I basically want to create a non-admin user who has 
access to "Active Sessions" and "History" tabs. There isn't much documentation 
also that i could find around this.

Thanks
-Tushar
____
From: Tushar Jain 
Sent: Friday, May 27, 2022 10:56 PM
To: user@guacamole.apache.org 
Subject: User with access to only Active Sessions and History

Hi,

Is it possible to create a user who has access to only "Active Sessions" and 
"History" tabs for specific (or all) connections?

-Tushar

User with access to only Active Sessions and History

[Tushar Jain]

Hi,

Is it possible to create a user who has access to only "Active Sessions" and 
"History" tabs for specific (or all) connections?

-Tushar

Re: Guacamole 1.4 API/token returns 403

[Tushar Jain]

Thanks! I might have missed it in previous releases.

-Tushar

From: Michael Jumper 
Sent: Friday, May 27, 2022 8:47 PM
To: user@guacamole.apache.org 
Subject: Re: Guacamole 1.4 API/token returns 403

On Fri, May 27, 2022, 08:06 Tushar Jain 
mailto:tush...@hotmail.com>> wrote:
Hi,

I have deployed guacamole 1.4 (or rather upgraded from 1.2). In the browser 
console, it has started giving a 403 error, when the login page loads. 
Following is the snapshot

[cid:2b9cf18a-7076-4642-a193-d546e24a2fe8]
Not that it affects the guacamole operations, but for sure something is not 
right. Where am I going wrong?

No, this is absolutely normal. The REST API will return HTTP error codes to 
properly represent the nature of a response. A 403 indicates you are not yet 
logged in. This would have happened in all past releases, as well.

- Mike

Guacamole 1.4 API/token returns 403

[Tushar Jain]

Hi,

I have deployed guacamole 1.4 (or rather upgraded from 1.2). In the browser 
console, it has started giving a 403 error, when the login page loads. 
Following is the snapshot

[cid:2b9cf18a-7076-4642-a193-d546e24a2fe8]
Not that it affects the guacamole operations, but for sure something is not 
right. Where am I going wrong?

-Tushar

Re: Guacamole Upgrade from 1.2 to 1.4

[Tushar Jain]

Thanks for the inputs.On 19-May-2022 4:54 am, Michael Jumper  wrote:On Thu, May 12, 2022 at 6:23 AM Tushar Jain <tush...@hotmail.com> wrote:








Hi,
 
I am planning to upgrade guacamole from 1.2 to 1.4. Is it okay to download the server and client files from
https://guacamole.apache.org/releases/1.4.0/ or should I take the latest for both from github ?It is definitely OK to download the release from the release page.If you want to download via git instead of the release page, you will need to specifically check out the "1.4.0" tag to get the source of the 1.4.0 release. The current contents of git will otherwise be the primary active development branch. Also, I see a staging/1.5.0 branch. Is it around the corner, or will it take some time?It's going to take some time. My optimistic gut says next month is likely, all of our time permitting, but I wouldn't recommend holding off on upgrading when you are two releases behind the latest stable.- Mike

Guacamole Upgrade from 1.2 to 1.4

[Tushar Jain]

Hi,

I am planning to upgrade guacamole from 1.2 to 1.4. Is it okay to download the 
server and client files from https://guacamole.apache.org/releases/1.4.0/ or 
should I take the latest for both from github ? Also, I see a staging/1.5.0 
branch. Is it around the corner, or will it take some time?

Thanks
Tushar Jain

Re: PSGuacamole, a PowerShell module for Guacamole

[Tushar Jain]

Hi,

Sounds interesting! Thanks for sharing.

>>If need, I've a script that combine creation of account in Guacamole
(only email for linking with LDAP to get connection history), create the
RDP connection and if >>it's possible, enable RDP and assign permission to
the user on the computer (through remote powershell).

Kindly share this script as well.

Thanks again,
Tushar Jain



On Mon, Aug 24, 2020 at 11:45 PM Matthieu Courtois <
courtois.matthieu...@gmail.com> wrote:

> Hi,
>
>
>
> I've been using Apache Guacamole because COVID-19, and we had to create a
> lot of access quickly. So I created a PowerShell module to manage Guacamole.
>
> This uses the REST API.
>
>
>
> Tested on 1.1.0, but there is no reason it won't work on the latest
> version.
>
>
>
> If need, I've a script that combine creation of account in Guacamole (only
> email for linking with LDAP to get connection history), create the RDP
> connection and if it's possible, enable RDP and assign permission to the
> user on the computer (through remote powershell).
>
>
>
> https://github.com/UpperM/guacamole-powershell
>
>
>
> Matthieu Courtois.
>

-- 
**Disclaimer:* This message and any attachment may contain confidential, 
proprietary information and is intended only for the individual named. If 
you are not the original intended recipient and have erroneously received 
this message, you should not disseminate, distribute or copy this e-mail. 
Please notify the sender immediately by e-mail if you have received this 
e-mail by mistake and delete this e-mail from your system. Hitachi MGRM Net 
E-mail transmission cannot be guaranteed to be secure or error-free as 
information could be intercepted, corrupted, lost, destroyed, arrive late 
or incomplete, or contain viruses. Hitachi MGRM Net therefore does not 
accept liability for any errors or omissions in the contents of this 
message, which arise as a result of e-mail transmission. If verification is 
required, please request a hard-copy version. Hitachi MGRM Net Ltd, C - 
6/5, Safdarjung Development Area, New Delhi - 110016, India*
*
*
*'Please 
consider the environment before printing this e-mail'.*

RE: RDP disconnects after a few seconds

[Tushar Jain]

Did you try guacamole 1.2.0 instead of 1.1.0?

 

 

 

From: Nick Couchman [mailto:vn...@apache.org] 
Sent: 25 August 2020 11:09 PM
To: user@guacamole.apache.org
Subject: Re: RDP disconnects after a few seconds

 

On Tue, Aug 25, 2020 at 11:06 AM rramalho mailto:rrama...@gmail.com> > wrote:

Hi all,

I'm having a strange thing happening to my guacamole installation, since
I've upgraded to guacamole 1.1.0.
Clients to RDP servers disconnect after a few seconds. I've set guacd to
debug and got this. I'm running Guacamole on Ubuntu Server 20.04.1.

Aug 25 15:25:19 molerat guacd[3090]: Internal RDP client disconnected
Aug 25 15:25:19 molerat guacd[3090]: User
"@493c7148-b53e-49f1-85cd-ac3e3ff0b7b8" disconnected (0 users remain)
Aug 25 15:25:19 molerat guacd[3090]: Last user of connection
"$9e67fe50-37d9-4677-be10-ca83885fb515" disconnected
Aug 25 15:25:19 molerat guacd[3090]: Requesting termination of client...
Aug 25 15:25:19 molerat guacd[3090]: Client terminated successfully.
Aug 25 15:25:19 molerat guacd[3076]: Connection
"$9e67fe50-37d9-4677-be10-ca83885fb515" removed.
Aug 25 15:36:30 molerat guacd[12627]: Stopping guacd: SUCCESS
Aug 25 15:36:30 molerat systemd[1]: guacd.service: Succeeded.
Aug 25 15:37:40 molerat guacd[14185]: Guacamole proxy daemon (guacd) version
1.1.0 started
Aug 25 15:37:40 molerat guacd[14183]: Starting guacd:
Aug 25 15:37:40 molerat guacd[14185]: guacd[14185]: INFO:#011Guacamole proxy
daemon (guacd) version 1.1.0 started
Aug 25 15:37:40 molerat guacd[14185]: guacd[14185]: DEBUG:#011Unable to bind
socket to host ::1, port 4822: Address family not supported by protocol
Aug 25 15:37:40 molerat guacd[14185]: guacd[14185]: DEBUG:#011Successfully
bound socket to host 127.0.0.1, port 4822
Aug 25 15:37:40 molerat guacd[14185]: Unable to bind socket to host ::1,
port 4822: Address family not supported by protocol
Aug 25 15:37:40 molerat guacd[14185]: guacd[14185]: DEBUG:#011Exiting and
passing control to PID 14186
Aug 25 15:37:40 molerat guacd[14185]: Successfully bound socket to host
127.0.0.1, port 4822
Aug 25 15:37:40 molerat guacd[14183]: SUCCESS
Aug 25 15:37:40 molerat guacd[14185]: Exiting and passing control to PID
14186
Aug 25 15:37:40 molerat guacd[14186]: guacd[14186]: DEBUG:#011Exiting and
passing control to PID 14187
Aug 25 15:37:40 molerat guacd[14186]: Exiting and passing control to PID
14187
Aug 25 15:37:40 molerat guacd[14187]: Listening on host 127.0.0.1, port 4822
Aug 25 15:39:16 molerat guacd[14187]: Creating new client for protocol "rdp"
Aug 25 15:39:16 molerat guacd[14187]: Connection ID is
"$f4711187-83f6-4684-b5ce-a08b79a38390"
Aug 25 15:39:16 molerat guacd[14194]: "HOME" environment variable was unset
and has been automatically set to "/root"
Aug 25 15:39:16 molerat guacd[14194]: Processing instruction: size
Aug 25 15:39:16 molerat guacd[14194]: Processing instruction: audio
Aug 25 15:39:16 molerat guacd[14194]: Processing instruction: video
Aug 25 15:39:16 molerat guacd[14194]: Processing instruction: image
Aug 25 15:39:16 molerat guacd[14194]: Processing instruction: timezone
Aug 25 15:39:16 molerat guacd[14194]: Parameter "console" omitted. Using
default value of 0.
Aug 25 15:39:16 molerat guacd[14194]: Parameter "console-audio" omitted.
Using default value of 0.
Aug 25 15:39:16 molerat guacd[14194]: Parameter "disable-auth" omitted.
Using default value of 0.
Aug 25 15:39:16 molerat guacd[14194]: No security mode specified. Defaulting
to security mode negotiation with server.
Aug 25 15:39:16 molerat guacd[14194]: Parameter "port" omitted. Using
default value of 3389.
Aug 25 15:39:16 molerat guacd[14194]: User resolution is 1582x828 at 96 DPI
Aug 25 15:39:16 molerat guacd[14194]: Parameter "dpi" omitted. Using default
value of 96.
Aug 25 15:39:16 molerat guacd[14194]: Using resolution of 1580x828 at 96 DPI
Aug 25 15:39:16 molerat guacd[14194]: Parameter "read-only" omitted. Using
default value of 0.
Aug 25 15:39:16 molerat guacd[14194]: Parameter "client-name" omitted. Using
default value of "Guacamole RDP".
Aug 25 15:39:16 molerat guacd[14194]: Parameter "enable-wallpaper" omitted.
Using default value of 0.
Aug 25 15:39:16 molerat guacd[14194]: Parameter "enable-theming" omitted.
Using default value of 0.
Aug 25 15:39:16 molerat guacd[14194]: Parameter "enable-font-smoothing"
omitted. Using default value of 0.
Aug 25 15:39:16 molerat guacd[14194]: Parameter "enable-full-window-drag"
omitted. Using default value of 0.
Aug 25 15:39:16 molerat guacd[14194]: Parameter "enable-desktop-composition"
omitted. Using default value of 0.
Aug 25 15:39:16 molerat guacd[14194]: Parameter "enable-menu-animations"
omitted. Using default value of 0.
Aug 25 15:39:16 molerat guacd[14194]: Parameter "disable-bitmap-caching"
omitted. Using default value of 0.
Aug 25 15:39:16 molerat guacd[14194]: Parameter "disable-offscreen-caching"
omitted. Using default value of 0.
Aug 25 15:39:16 molerat guacd[14194]: Parameter "disable-glyph-caching"
omitted. Using default value of 0.
Aug 25 

RE: Upgrading from version 1.0.0 to 1.2.0

[Tushar Jain]

You could upgrade directly from 1.0.0 to 1.2.0. Just ensure all dependencies
(as per following URL) are installed/upgraded first. There has been a change
in the version of dependencies and the one for 1.0.0 may not work for 1.2.0

http://guacamole.apache.org/doc/gug/installing-guacamole.html#required-depen
dencies

-Tushar Jain

-Original Message-
From: paulr [mailto:g.paul.r...@gmail.com] 
Sent: 04 August 2020 01:09 AM
To: user@guacamole.apache.org
Subject: Upgrading from version 1.0.0 to 1.2.0

I didn't see any mention of this but wanted to ask if I can preform a
upgrade from version 1.0.0 to 1.2.0 directly or do i need to upgrade to
version
1.1.0 then 1.2.0.

Thanks

Paul



--
Sent from:
http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org



-- 
**Disclaimer:* This message and any attachment may contain confidential, 
proprietary information and is intended only for the individual named. If 
you are not the original intended recipient and have erroneously received 
this message, you should not disseminate, distribute or copy this e-mail. 
Please notify the sender immediately by e-mail if you have received this 
e-mail by mistake and delete this e-mail from your system. Hitachi MGRM Net 
E-mail transmission cannot be guaranteed to be secure or error-free as 
information could be intercepted, corrupted, lost, destroyed, arrive late 
or incomplete, or contain viruses. Hitachi MGRM Net therefore does not 
accept liability for any errors or omissions in the contents of this 
message, which arise as a result of e-mail transmission. If verification is 
required, please request a hard-copy version. Hitachi MGRM Net Ltd, C - 
6/5, Safdarjung Development Area, New Delhi - 110016, India*
*
*
*'Please 
consider the environment before printing this e-mail'.*

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

Gaucamole Session Timeout

[Tushar Jain]

Hi,

Have been trying to figure out the various timeouts for guacamole. If I
understand correctly, the property api-session-timeout in
guacamole.properties is for the web application and as i read in one of the
previous posts, it overrides the session timeout of application's web.xml.
Infact the session timeout of web.xml has no effect.

What i didn't understand was that is there a separate timeout for guacd? I
am getting the below message in tomcat logs:

[Thread-1115] ERROR o.a.g.w.GuacamoleWebSocketTunnelEndpoint - Connection
to guacd terminated abnormally: Connection to guacd timed out.

I am getting this error for few users and not for everyone. The guacamole
session remains active but features like file download from the mapped
drive do not work.

What could be the problem here? Is there somewhere I could configure this
timeout?

Thanks & Regards,
Tushar Jain

-- 
**Disclaimer:* This message and any attachment may contain confidential, 
proprietary information and is intended only for the individual named. If 
you are not the original intended recipient and have erroneously received 
this message, you should not disseminate, distribute or copy this e-mail. 
Please notify the sender immediately by e-mail if you have received this 
e-mail by mistake and delete this e-mail from your system. Hitachi MGRM Net 
E-mail transmission cannot be guaranteed to be secure or error-free as 
information could be intercepted, corrupted, lost, destroyed, arrive late 
or incomplete, or contain viruses. Hitachi MGRM Net therefore does not 
accept liability for any errors or omissions in the contents of this 
message, which arise as a result of e-mail transmission. If verification is 
required, please request a hard-copy version. Hitachi MGRM Net Ltd, C - 
6/5, Safdarjung Development Area, New Delhi - 110016, India*
*
*
*'Please 
consider the environment before printing this e-mail'.*

RE: include a web browser in Guacamole

[Tushar Jain]

Stephane,

As per your initial requirement(and if I have understood it correctly), you 
have to open a web-browser as a connection within guacamole. Guacamole has an 
excellent feature of RemoteApp which helps you do that. I have myself tried the 
same and it works. You could have web applications which may work only on your 
internal network or anywhere in the world, but your guacamole server should be 
able to access the same.  You could then publish the link of your 
web-application as a browser shortcut on a Windows Session Host(what I tried 
with) and then create a guacamole connection with RemoteApp configured. And if 
it's just a browser that you want to publish(& not a web-application), you 
could do that too. The only thing which you would have to ensure is the network 
connectivity between your guacamole server and the application server where 
your web-application(s) are hosted.

If how the end-user would perceive a browser within a browser is not something 
you are concerned about, this should work for you as well.

Maybe there are better ways to do the same, but I have tried this and it works 
for me.

-Original Message-
From: stephane.lhotellier [mailto:stephane.lhotell...@cgi.com] 
Sent: 10 July 2020 01:45 PM
To: user@guacamole.apache.org
Subject: Re: include a web browser in Guacamole


Changements à venir concernant l'historique L'historique de traduction ne sera 
bientôt disponible que lorsque vous serez connecté. Vous pourrez le gérer dans 
Mon activité. Votre historique existant sera effacé lors de cette mise à jour. 
Nous vous invitons à enregistrer les traductions que vous voulez conserver.
OK
bonjour
Je suis désolé Tushar Jain mais je rejoint les avis de  Vieri-2, vnick et 
shr0ded. 
Mes utilisateurs (environ 300 aujourd'hui) ont besoin de se connecter, non pas 
a des ressources internes, mais à des serveurs chez des clients ou dans des 
datacenter (quelques miliers). je n epeux donc pas utiliser un simple reverse 
proxy.

Pour faire simple j'ai principalement 2 services : 
- Intégration
- hotline

2 types d'environements : 
- production
- pré-production

3 type de connexions :
- RDP (de moins en moins)
- SSH
- web (HTTP et HTTPS)(pour des application, CUPS, ...)

la hotline doit accèder à tout les environement de production

le service integration est divisé en équipe par client.
Les personnes travaillant sur le client A ne doivent pas avoir accès au client 
B mais l'équipe d'integration doit accèder à la production et à la 
pré-production.

En ce sens, avoir un navigateur web à l'intérieur de Guacamole (comme le client 
RDP ou VNC) ou au moins un affichage d'URL pour servir de liens serait un bon 
complément. 
Cela permettrai d'avoir accès à plus de possibilité, un peu comme ce qui est 
fait dans MRemoteNG avec les outils externes.


1156/5000
Hello
I'm sorry Tushar Jain but I agree with the opinions of Vieri-2, vnick and 
shr0ded.
My users (around 300 today) need to connect, not to internal resources, but to 
servers with clients or in data centers (a few thousand). I therefore cannot 
use a simple reverse proxy.

To make it simple I mainly have 2 services:
- Integration
- hotline

2 types of environments:
- production
- pre-production

3 types of connections:
- RDP (less and less)
- SSH
- web (HTTP and HTTPS) (for applications, CUPS, ...)

the hotline must access all production environments

the integration service is divided into teams per client.
People working on client A should not have access to client B but the 
integration team must have access to production and pre-production.

In this sense, having a web browser inside Guacamole (like the RDP or VNC
client) or at least a display of URLs to serve as links would be a good 
addition.
This will allow access to more possibilities, a bit like what is done in 
MRemoteNG with external tools.



--
Sent from: 
http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org



-- 
**Disclaimer:* This message and any attachment may contain confidential, 
proprietary information and is intended only for the individual named. If 
you are not the original intended recipient and have erroneously received 
this message, you should not disseminate, distribute or copy this e-mail. 
Please notify the sender immediately by e-mail if you have received this 
e-mail by mistake and delete this e-mail from your system. Hitachi MGRM Net 
E-mail transmission cannot be guaranteed to be secure or error-free as 
information could be intercepted, corrupted, lost, destroyed, arrive late 
or incomplete, or contain viruses. Hitachi MGRM Net therefore does not 
accept liability for any errors or omissions in the contents of this 
message, which arise as a result of e-mail transmission. If verification is 
required, please request a hard-

RE: include a web browser in Guacamole

[Tushar Jain]

You could use the feature of RemoteApp. It works over RDP only, as far as I 
know.  Of course as you said, a browser within browser looks awkward, but it 
works like a charm. I have tried publishing both web and legacy applications 
through this feature.

 

More details are available in the documentation in the following link:

https://guacamole.apache.org/doc/gug/configuring-guacamole.html#rdp

 

 

From: Georgе Stoyanov [mailto:gstoya...@gmail.com] 
Sent: 09 July 2020 10:51 PM
To: user@guacamole.apache.org
Subject: Re: include a web browser in Guacamole

 

install Linux/Windows and access it with VNC.


 

Other than that I would also love such a feature.

 

 

 

On Thu, Jul 9, 2020 at 6:16 PM stephane.lhotellier mailto:stephane.lhotell...@cgi.com> > wrote:

Hello
I'm new here, and I'm looking for a way to use Guacamole to allow my users
to connect to web applications (URLs).
is there a way to include a web browser in Guacamole.
I know, it may seem silly to put a web browser in another, but the goal is
to reference all our environments and the corresponding access rights on a
single platform for several services.
Thank you for your help



--
Sent from: 
http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org 
 
For additional commands, e-mail: user-h...@guacamole.apache.org 
 


-- 
**Disclaimer:* This message and any attachment may contain confidential, 
proprietary information and is intended only for the individual named. If 
you are not the original intended recipient and have erroneously received 
this message, you should not disseminate, distribute or copy this e-mail. 
Please notify the sender immediately by e-mail if you have received this 
e-mail by mistake and delete this e-mail from your system. Hitachi MGRM Net 
E-mail transmission cannot be guaranteed to be secure or error-free as 
information could be intercepted, corrupted, lost, destroyed, arrive late 
or incomplete, or contain viruses. Hitachi MGRM Net therefore does not 
accept liability for any errors or omissions in the contents of this 
message, which arise as a result of e-mail transmission. If verification is 
required, please request a hard-copy version. Hitachi MGRM Net Ltd, C - 
6/5, Safdarjung Development Area, New Delhi - 110016, India*
*
*
*'Please 
consider the environment before printing this e-mail'.*

Re: Guacamole 1.2.0 remoteapp connection disconnection

[Tushar Jain]

I tried to debug this today and following is my observation:

I tried a fresh install of guac 1.2.0 components on the same VM but the same
problem continued and the connection got disconnected as soon as
clicked/moved the mouse over the browser. I then reverted to
guacamole-1.0.0. The problem of disconnection disappeared, but I had a drive
enabled for my connection, which I was not able to view from within my
remoteapp. This was a mounted drive on the server and for some mysterious
reason (still working to identify the reason), it was deleted while
upgrading to guac 1.2.0

I re-instated the drive from our backups and re-installed/migrated to
guacamole-1.2.0 on the same VM. The remoteapp now seems to work fine without
any disconnections (though I would keep testing it for 1 more day). 

>From this I am led to understand that the drive disappearance was the cause
for guac 1.2.0 connections to get continuously disconnected after login 

I am not sure if this qualifies as a bug; just sharing this information so
that it could benefit someone in future.




--
Sent from: 
http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

FW:

[Tushar Jain]

Hello,

 

I migrated from guacamole-1.0.0 to guacamole-1.2.0 on Ubuntu 18.04. But my 
remoteapp on Windows server 2019,  is getting disconnected as soon as I 
click/move the mouse over the remote app.

 

I did the following steps 

 

1. Ensure all required dependencies are in place for 1.2.0

 

sudo apt install -y libcairo2-dev libjpeg-turbo8-dev libpng-dev libtool-bin 
libossp-uuid-dev
Note: It did not accept libpng12-dev as per guacamole manual 
 
sudo apt install -y libavcodec-dev libavformat-dev libavutil-dev libswscale-dev 
freerdp2-dev libpango1.0-dev libssh2-1-dev libtelnet-dev libvncserver-dev 
libpulse-dev libssl-dev libvorbis-dev libwebp-dev

2. stop tomcat and guacd

 

3. remove existing guacamole-server directory

sudo rm -r /etc/guacamole-server-1.0.0

4.  Install guacamole server 1.2.0 in /etc/

sudo tar -xzf guacamole-server-1.2.0.tar.gz

cd guacamole-server-1.2.0/

sudo./configure --with-init-dir=/etc/init.d

sudo make

sudo make install

sudo ldconfig

sudo update-rc.d guacd defaults

5. Remove guacamole.war and guacamole/ from /var/lib/tomcat8/webapps

 

6. Copy guacamole.war to tomcat8 

cp guacamole-1.2.0.war /var/lib/tomcat8/webapps/guacamole.war

 

7. Restart tomcat8 and guacd

 

Tomcat8 logs:

Sun Jul 05 18:19:25 IST 2020 WARN: Establishing SSL connection without server's 
identity verification is not recommended. According to MySQL 5.5.45+, 5.6.26+ 
and 5.7.6+ requirements SSL connection must be established by default if 
explicit option isn't set. For compliance with existing applications not using 
SSL the verifyServerCertificate property is set to 'false'. You need either to 
explicitly disable SSL by setting useSSL=false, or set useSSL=true and provide 
truststore for server certificate verification.
WARNING: An illegal reflective access operation has occurred
WARNING: Illegal reflective access by org.apache.ibatis.ognl.OgnlRuntime 
(file:/etc/guacamole/extensions/guacamole-auth-jdbc-mysql-1.2.0.jar) to method 
java.util.Collections$EmptySet.isEmpty()
WARNING: Please consider reporting this to the maintainers of 
org.apache.ibatis.ognl.OgnlRuntime
WARNING: Use --illegal-access=warn to enable warnings of further illegal 
reflective access operations
WARNING: All illegal access operations will be denied in a future release
18:19:35.948 [http-nio-8080-exec-3] INFO  o.a.g.r.auth.AuthenticationService - 
User "username" successfully authenticated from 45.127.44.89.
Sun Jul 05 18:19:36 IST 2020 WARN: Establishing SSL connection without server's 
identity verification is not recommended. According to MySQL 5.5.45+, 5.6.26+ 
and 5.7.6+ requirements SSL connection must be established by default if 
explicit option isn't set. For compliance with existing applications not using 
SSL the verifyServerCertificate property is set to 'false'. You need either to 
explicitly disable SSL by setting useSSL=false, or set useSSL=true and provide 
truststore for server certificate verification.
18:19:37.431 [http-nio-8080-exec-1] INFO  o.a.g.environment.LocalEnvironment - 
GUACAMOLE_HOME is "/etc/guacamole".
18:19:38.401 [http-nio-8080-exec-3] INFO  o.a.g.tunnel.TunnelRequestService - 
User "username" connected to connection "1".
18:19:57.172 [Thread-4] INFO  o.a.g.tunnel.TunnelRequestService - User 
"username" disconnected from connection "1". Duration: 18768 milliseconds

 

Error in syslog

guacd[10659]: segfault at 7f3488003e20 ip 7f3488003e20 sp 7f3476141d48 
error 15

Please suggest where I could have gone wrong.

 

Thanks in advance

-Tushar


-- 
**Disclaimer:* This message and any attachment may contain confidential, 
proprietary information and is intended only for the individual named. If 
you are not the original intended recipient and have erroneously received 
this message, you should not disseminate, distribute or copy this e-mail. 
Please notify the sender immediately by e-mail if you have received this 
e-mail by mistake and delete this e-mail from your system. Hitachi MGRM Net 
E-mail transmission cannot be guaranteed to be secure or error-free as 
information could be intercepted, corrupted, lost, destroyed, arrive late 
or incomplete, or contain viruses. Hitachi MGRM Net therefore does not 
accept liability for any errors or omissions in the contents of this 
message, which arise as a result of e-mail transmission. If verification is 
required, please request a hard-copy version. Hitachi MGRM Net Ltd, C - 
6/5, Safdarjung Development Area, New Delhi - 110016, India*
*
*
*'Please 
consider the environment before printing this e-mail'.*

RE: Disable Client side caching of User Credentials

[Tushar Jain]

Thanks for your response.

I want to achieve this from Guacamole itself than leaving it on the user to
configure their browsers, something similar to what most banking site do.  

Your 2nd link talk about disabling "auto-complete" from the web-page itself.
That is what actually I am looking for, but I am not sure how to achieve the
same in guacamole login page.

Thanks,
Tushar

-Original Message-
From: Ghost_Knight [mailto:timothy.worces...@gmail.com] 
Sent: 12 June 2020 04:02 PM
To: user@guacamole.apache.org
Subject: Re: Disable Client side caching of User Credentials

If I am reading this correctly this is more of a browser setting issue.

I would look at things like this:
https://support.dashlane.com/hc/en-us/articles/36051065-How-to-turn-off-
the-built-in-password-manager-in-your-browser

A more officially recognized reference here that talks about this:
https://developer.mozilla.org/en-US/docs/Web/Security/Securing_your_site/Tur
ning_off_form_autocompletion#The_autocomplete_attribute_and_login_fields



--
Sent from:
http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org



-- 
**Disclaimer:* This message and any attachment may contain confidential, 
proprietary information and is intended only for the individual named. If 
you are not the original intended recipient and have erroneously received 
this message, you should not disseminate, distribute or copy this e-mail. 
Please notify the sender immediately by e-mail if you have received this 
e-mail by mistake and delete this e-mail from your system. Hitachi MGRM Net 
E-mail transmission cannot be guaranteed to be secure or error-free as 
information could be intercepted, corrupted, lost, destroyed, arrive late 
or incomplete, or contain viruses. Hitachi MGRM Net therefore does not 
accept liability for any errors or omissions in the contents of this 
message, which arise as a result of e-mail transmission. If verification is 
required, please request a hard-copy version. Hitachi MGRM Net Ltd, C - 
6/5, Safdarjung Development Area, New Delhi - 110016, India*
*
*
*'Please 
consider the environment before printing this e-mail'.*

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

Disable Client side caching of User Credentials

[Tushar Jain]

Hi,

 

Looking for a way to disable storage of user credentials in the browser. The
user can select to save the credentials in the browser accidently or
unknowingly. And if it is a shared computer, anyone who opens the login page
again, can just select the username and the password automatically gets
displayed in the password box. Want to disable this auto-complete feature
from Guacamole itself, something similar to what happens on net banking
sites

 

 



Thanks,

Tushar Jain


-- 
**Disclaimer:* This message and any attachment may contain confidential, 
proprietary information and is intended only for the individual named. If 
you are not the original intended recipient and have erroneously received 
this message, you should not disseminate, distribute or copy this e-mail. 
Please notify the sender immediately by e-mail if you have received this 
e-mail by mistake and delete this e-mail from your system. Hitachi MGRM Net 
E-mail transmission cannot be guaranteed to be secure or error-free as 
information could be intercepted, corrupted, lost, destroyed, arrive late 
or incomplete, or contain viruses. Hitachi MGRM Net therefore does not 
accept liability for any errors or omissions in the contents of this 
message, which arise as a result of e-mail transmission. If verification is 
required, please request a hard-copy version. Hitachi MGRM Net Ltd, C - 
6/5, Safdarjung Development Area, New Delhi - 110016, India*
*
*
*'Please 
consider the environment before printing this e-mail'.*

RE: Security Vulnerability - Guacamole 1.0.0

[Tushar Jain]

HI Mike,

 

Tushar, if you believe you have found security issues, please DO NOT REPORT 
THEM IN A PUBLIC FORUM and instead follow responsible disclosure practices. The 
user@ mailing list is not the place to report such things. See:

 

http://guacamole.apache.org/security/

 

My apologies. Wasn’t aware of this and will be more careful from next time.

 

I would try out your suggestions and will post in the security mailing list for 
any follow-up questions I may have.

 

Thanks again.

 

-Tushar

 

From: Mike Jumper [mailto:mjum...@apache.org] 
Sent: 04 June 2020 12:44 AM
To: user@guacamole.apache.org
Subject: Re: Security Vulnerability - Guacamole 1.0.0

 

On Wed, Jun 3, 2020 at 8:54 AM Tushar Jain mailto:tushar.j...@hitachi.mgrmnet.com> > wrote:

Hi,

 

My security vulnerability testing group has reported following issues:

 

Tushar, if you believe you have found security issues, please DO NOT REPORT 
THEM IN A PUBLIC FORUM and instead follow responsible disclosure practices. The 
user@ mailing list is not the place to report such things. See:

 

http://guacamole.apache.org/security/

 

Thankfully, the issues you have noted are not actually vulnerabilities (see 
details below). Going forward, please do not do this.

 

1.  Reflected XSS – In the username field, while creating a new user

2.  HTML Injection – In the group name field while creating a new group

 

Both of the above are actually the same issue and have been fixed via: 
https://issues.apache.org/jira/browse/GUACAMOLE-955

 

>From GUACAMOLE-955:

 

"... This doesn't happen to have security implications in our case, as the 
behavior is isolated to error message rendering (it cannot be stored, can only 
be self-inflicted, and can only occur through manually interacting with the 
UI), but it really should be addressed. ..."

 

3.  Implementation of Captcha or a lockout in-case of consecutive incorrect 
logins. I am using both mysql and LDAP (AD) authentication

This would be a useful feature, but its absence is not a vulnerability. If 
interested in this, I would recommend following the corresponding issue in 
JIRA, as a general configurable rate limit / lockout for authentication is on 
the radar. See:

 

https://issues.apache.org/jira/browse/GUACAMOLE-990

 

Your best option for now is to use an existing lockout tool like fail2ban.

 

- Mike

 


-- 
**Disclaimer:* This message and any attachment may contain confidential, 
proprietary information and is intended only for the individual named. If 
you are not the original intended recipient and have erroneously received 
this message, you should not disseminate, distribute or copy this e-mail. 
Please notify the sender immediately by e-mail if you have received this 
e-mail by mistake and delete this e-mail from your system. Hitachi MGRM Net 
E-mail transmission cannot be guaranteed to be secure or error-free as 
information could be intercepted, corrupted, lost, destroyed, arrive late 
or incomplete, or contain viruses. Hitachi MGRM Net therefore does not 
accept liability for any errors or omissions in the contents of this 
message, which arise as a result of e-mail transmission. If verification is 
required, please request a hard-copy version. Hitachi MGRM Net Ltd, C - 
6/5, Safdarjung Development Area, New Delhi - 110016, India*
*
*
*'Please 
consider the environment before printing this e-mail'.*

Security Vulnerability - Guacamole 1.0.0

[Tushar Jain]

Hi,

 

My security vulnerability testing group has reported following issues:

 

1.  Reflected XSS - In the username field, while creating a new user

2.  HTML Injection - In the group name field while creating a new group

3.  Implementation of Captcha or a lockout in-case of consecutive
incorrect logins. I am using both mysql and LDAP (AD) authentication

 

He further suggested to implement HTML encoding for special tags like <, >,
", ' for 1 and 2 above.

 

It would be really helpful if anyone can direct me the resolution I need to
take to fix the above. 

 

 

Thanks in advance

Tushar Jain


-- 
**Disclaimer:* This message and any attachment may contain confidential, 
proprietary information and is intended only for the individual named. If 
you are not the original intended recipient and have erroneously received 
this message, you should not disseminate, distribute or copy this e-mail. 
Please notify the sender immediately by e-mail if you have received this 
e-mail by mistake and delete this e-mail from your system. Hitachi MGRM Net 
E-mail transmission cannot be guaranteed to be secure or error-free as 
information could be intercepted, corrupted, lost, destroyed, arrive late 
or incomplete, or contain viruses. Hitachi MGRM Net therefore does not 
accept liability for any errors or omissions in the contents of this 
message, which arise as a result of e-mail transmission. If verification is 
required, please request a hard-copy version. Hitachi MGRM Net Ltd, C - 
6/5, Safdarjung Development Area, New Delhi - 110016, India*
*
*
*'Please 
consider the environment before printing this e-mail'.*

Re: Guacamole FreeRDP disconnect

[Tushar Jain]

Yes there was an issue with 1.1.0 and Windows , where windows rdp session
was disconnected automatically after some time due to missing handshake
between freerdp2 and windows. This issue was resolved in the github version
which you can download and build. I had done that but an old CAPS Key
problem re-appeared. This was about a month back and not sure of the
current status. Eagerly waiting for 1.2.0 in anticipation that these issues
will be resolved.




On Tue, Jun 2, 2020 at 7:26 PM Tim Worcester 
wrote:

> What version Guacamole are you using?  Have you updated to 1.1.0 recently?
>
> For logging, I would look at the guacamole-server piece and try and pull
> some context logs from there and post those on this thread :)
>
> On Tue, Jun 2, 2020 at 9:38 AM Walter Laub 
> wrote:
>
>> Yeah, in my installation.
>>
>> In the meantime, I checked autoupdate, which installed an update of the
>> freerdp2 libraries. This caused the problem, I think.
>>
>>
>>
>> *Von:* Neumen - Juan Prigoshin 
>> *Gesendet:* Dienstag, 2. Juni 2020 15:35
>> *An:* user@guacamole.apache.org
>> *Betreff:* RE: Guacamole FreeRDP disconnect
>>
>>
>>
>> Same Ubuntu. With recompile the problema dissapear?
>>
>>
>>
>>
>>
>> *De:* Walter Laub [mailto:walter.l...@schwindt.eu
>> ]
>> *Enviado el:* martes, 02 de junio de 2020 10:06 a.m.
>> *Para:* user@guacamole.apache.org
>> *Asunto:* AW: Guacamole FreeRDP disconnect
>>
>>
>>
>> It should say "Ubuntu 18.04.4”
>>
>>
>>
>> *Von:* Walter Laub 
>> *Gesendet:* Dienstag, 2. Juni 2020 15:04
>> *An:* user@guacamole.apache.org
>> *Betreff:* AW: Guacamole FreeRDP disconnect
>>
>>
>>
>> I had same(?) issue today.
>>
>> Recompile guacd and restart it and report the result.
>>
>>
>>
>> Do you have “Ubuntu 18.5.4”?
>>
>> Maybe the libraries have been updated?
>>
>>
>>
>>
>>
>> *Von:* Neumen - Juan Prigoshin 
>> *Gesendet:* Dienstag, 2. Juni 2020 14:34
>> *An:* user@guacamole.apache.org
>> *Betreff:* Guacamole FreeRDP disconnect
>>
>>
>>
>> Hi, we have using Guacamole for about 2 months. We use a user-mapping
>> auth.
>>
>> Everything Works fine.
>>
>> Today, the users cannot use RDP for conections.
>>
>> Login ok, Windows Login ok. 15 secs later, disconnect.
>>
>>
>>
>> Any help what i need see?
>>
>> The syslog shows no errors, but 4 diferent W7 machines shows the same
>> behavior.
>>
>> The machine disconnect when we click in Start Menu.
>>
>>
>>
>> I have disabled remote disk, remote printing, same problem.
>>
>>
>>
>> Any help??
>>
>>
>>
>> Juan
>>
>>
>>
>>
>>
>>
>>
>

-- 
**Disclaimer:* This message and any attachment may contain confidential, 
proprietary information and is intended only for the individual named. If 
you are not the original intended recipient and have erroneously received 
this message, you should not disseminate, distribute or copy this e-mail. 
Please notify the sender immediately by e-mail if you have received this 
e-mail by mistake and delete this e-mail from your system. Hitachi MGRM Net 
E-mail transmission cannot be guaranteed to be secure or error-free as 
information could be intercepted, corrupted, lost, destroyed, arrive late 
or incomplete, or contain viruses. Hitachi MGRM Net therefore does not 
accept liability for any errors or omissions in the contents of this 
message, which arise as a result of e-mail transmission. If verification is 
required, please request a hard-copy version. Hitachi MGRM Net Ltd, C - 
6/5, Safdarjung Development Area, New Delhi - 110016, India*
*
*
*'Please 
consider the environment before printing this e-mail'.*

Re: 1.2 Release news

[Tushar Jain]

Yes, eagerly waiting for it

Thanks,
Tushar Jain

On Sat, May 30, 2020 at 7:11 PM Adrian Owen  wrote:

> Is there a date planned for 1.2 release yet?
>
>
>
> Thanks, Adrian
>

-- 
**Disclaimer:* This message and any attachment may contain confidential, 
proprietary information and is intended only for the individual named. If 
you are not the original intended recipient and have erroneously received 
this message, you should not disseminate, distribute or copy this e-mail. 
Please notify the sender immediately by e-mail if you have received this 
e-mail by mistake and delete this e-mail from your system. Hitachi MGRM Net 
E-mail transmission cannot be guaranteed to be secure or error-free as 
information could be intercepted, corrupted, lost, destroyed, arrive late 
or incomplete, or contain viruses. Hitachi MGRM Net therefore does not 
accept liability for any errors or omissions in the contents of this 
message, which arise as a result of e-mail transmission. If verification is 
required, please request a hard-copy version. Hitachi MGRM Net Ltd, C - 
6/5, Safdarjung Development Area, New Delhi - 110016, India*
*
*
*'Please 
consider the environment before printing this e-mail'.*

RE: RDP issue Guacamole 1.1.0 new install, SSH works

[Tushar Jain]

>>SSH sessions through guacamole work totally fine, but when I try an RDP 
>>session, it appears the >>child process is suddenly exiting silently.  

Does the RDP session get disconnected suddenly after about a couple of minutes? 
If yes, I had the same issue, and was advised in this forum that I should take 
& build the latest source code from github for deployment, as the official 
1.1.o release had a bug. This problem did go away with the latest source code, 
but unfortunately the CAPS lock key stopped working. You can try this and hope 
& pray everything works for you!



-Original Message-
From: Steve Williams [mailto:st...@williamsitconsulting.com] 
Sent: 19 April 2020 04:47 AM
To: user@guacamole.apache.org
Subject: RDP issue Guacamole 1.1.0 new install, SSH works

Hi,

I have recently installed guacamole 1.1.0 running under Tomcat 9.0.22.

Right now, this is only running local to my Intranet, it's not publicly 
accessible for security reasons until I get it working.

SSH sessions through guacamole work totally fine, but when I try an RDP 
session, it appears the child process is suddenly exiting silently.  I have 
looked for a "core" file, but there isn't one.

pcengine$ guacd -f -L debug
guacd[28399]: INFO: Guacamole proxy daemon (guacd) version 1.1.0 started
guacd[28399]: DEBUG:Successfully bound socket to host 127.0.0.1, port 4822
guacd[28399]: INFO: Listening on host 127.0.0.1, port 4822
guacd[28399]: INFO: Creating new client for protocol "rdp"
guacd[28399]: INFO: Connection ID is "$eb17d7b3-8e23-42f5-8265-7d2f718a4188"
guacd[53664]: DEBUG:Processing instruction: size
guacd[53664]: DEBUG:Processing instruction: audio
guacd[53664]: DEBUG:Processing instruction: video
guacd[53664]: DEBUG:Processing instruction: image
guacd[53664]: DEBUG:Processing instruction: timezone
guacd[53664]: DEBUG:Parameter "console" omitted. Using default value of 0.
guacd[53664]: DEBUG:Parameter "console-audio" omitted. Using default value 
of 0.
guacd[53664]: DEBUG:Parameter "disable-auth" omitted. Using default value 
of 0.
guacd[53664]: INFO: No security mode specified. Defaulting to security mode 
negotiation with server.
guacd[53664]: DEBUG:User resolution is 1557x831 at 96 DPI
guacd[53664]: DEBUG:Parameter "dpi" omitted. Using default value of 96.
guacd[53664]: DEBUG:Using resolution of 1556x831 at 96 DPI
guacd[53664]: DEBUG:Parameter "read-only" omitted. Using default value of 0.
guacd[53664]: DEBUG:Parameter "client-name" omitted. Using default value of 
"Guacamole RDP".
guacd[53664]: DEBUG:Parameter "enable-wallpaper" omitted. Using default 
value of 0.
guacd[53664]: DEBUG:Parameter "enable-theming" omitted. Using default value 
of 0.
guacd[53664]: DEBUG:Parameter "enable-font-smoothing" omitted. Using 
default value of 0.
guacd[53664]: DEBUG:Parameter "enable-full-window-drag" omitted. 
Using default value of 0.
guacd[53664]: DEBUG:Parameter "enable-desktop-composition" omitted. 
Using default value of 0.
guacd[53664]: DEBUG:Parameter "enable-menu-animations" omitted. 
Using default value of 0.
guacd[53664]: DEBUG:Parameter "disable-bitmap-caching" omitted. 
Using default value of 0.
guacd[53664]: DEBUG:Parameter "disable-offscreen-caching" omitted. 
Using default value of 0.
guacd[53664]: DEBUG:Parameter "disable-glyph-caching" omitted. Using 
default value of 0.
guacd[53664]: DEBUG:Parameter "color-depth" omitted. Using default value of 
16.
guacd[53664]: DEBUG:Parameter "disable-audio" omitted. Using default value 
of 0.
guacd[53664]: DEBUG:Parameter "enable-printing" omitted. Using default 
value of 0.
guacd[53664]: DEBUG:Parameter "printer-name" omitted. Using default value 
of "Guacamole Printer".
guacd[53664]: DEBUG:Parameter "enable-drive" omitted. Using default value 
of 0.
guacd[53664]: DEBUG:Parameter "drive-name" omitted. Using default value of 
"Guacamole Filesystem".
guacd[53664]: DEBUG:Parameter "drive-path" omitted. Using default value of 
"".
guacd[53664]: DEBUG:Parameter "create-drive-path" omitted. Using default 
value of 0.
guacd[53664]: DEBUG:Parameter "timezone" omitted. Using default value of 
"America/Edmonton".
guacd[53664]: DEBUG:Parameter "enable-sftp" omitted. Using default value of 
0.
guacd[53664]: DEBUG:Parameter "sftp-hostname" omitted. Using default value 
of "192.168.124.101".
guacd[53664]: DEBUG:Parameter "sftp-port" omitted. Using default value of 
"22".
guacd[53664]: DEBUG:Parameter "sftp-username" omitted. Using default value 
of "".
guacd[53664]: DEBUG:Parameter "sftp-password" omitted. Using default value 
of "".
guacd[53664]: DEBUG:Parameter "sftp-passphrase" omitted. Using default 
value of "".
guacd[53664]: DEBUG:Parameter "sftp-root-directory" omitted. Using default 
value of "/".
guacd[53664]: DEBUG:Parameter "sftp-server-alive-interval" omitted. 
Using default value of 0.

RE: NGINX + TOMCAT 9 + Guacamole

[Tushar Jain]

Hi

 

Inside Tomcat's conf/server.xml, copy and paste the following inside "Host"
tag(generally at the end of the file)

 

  

 

 

More details are available at following URL

https://guacamole.apache.org/doc/gug/proxying-guacamole.html#tomcat-remote-i
p

 

 

 

From: Niubbo75 [mailto:a.sir...@me.com.INVALID] 
Sent: 14 April 2020 07:07 PM
To: user@guacamole.apache.org
Subject: NGINX + TOMCAT 9 + Guacamole

 

Hello, I have configured Guacamole 1.1.0 on CentOS 7 with Tomcat 9.0.33, I
have use NGINX to let users to login on guacamole via https://mydomain.name
instead of http://my.guacamole.server:8080/guacamole all work good except
that in Guacamole all users seems to login from 127.0.0.1. I have use this
nginx.conf: (guacamole side) # GUACAMOLE SERVER SETTINGS server { listen 443
ssl; #listen [::]:443 ssl; server_name mydomain.name; proxy_buffering off;
#proxy_redirect off; proxy_http_version 1.1; proxy_set_header
X-Forwarded_For $proxy_add_x_forwarded_for; proxy_set_header Upgrade
$http_upgrade; proxy_set_header Connection $http_upgrade; proxy_cookie_path
/guacamole/ /; location ~ /.well-known/acme-challenge { root /var/www/html/;
} location / { proxy_pass http://127.0.0.1:8080/guacamole/; proxy_buffering
off; proxy_http_version 1.1; proxy_set_header X-Forwarded_For
$proxy_add_x_forwarded_for; proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $http_connection; proxy_cookie_path /guacamole/
/; access_log off; } } I have read that i need to set up a "valve" also in
Tomcat, but I don't know where and how, can someone please help me solve
this issue? Thanks, Alessandro 

  _  

Sent from the Apache Guacamole - General/User Mailing List mailing list
archive

at Nabble.com.


-- 
**Disclaimer:* This message and any attachment may contain confidential, 
proprietary information and is intended only for the individual named. If 
you are not the original intended recipient and have erroneously received 
this message, you should not disseminate, distribute or copy this e-mail. 
Please notify the sender immediately by e-mail if you have received this 
e-mail by mistake and delete this e-mail from your system. Hitachi MGRM Net 
E-mail transmission cannot be guaranteed to be secure or error-free as 
information could be intercepted, corrupted, lost, destroyed, arrive late 
or incomplete, or contain viruses. Hitachi MGRM Net therefore does not 
accept liability for any errors or omissions in the contents of this 
message, which arise as a result of e-mail transmission. If verification is 
required, please request a hard-copy version. Hitachi MGRM Net Ltd, C - 
6/5, Safdarjung Development Area, New Delhi - 110016, India*
*
*
*'Please 
consider the environment before printing this e-mail'.*

RE: Customize the text "on Guacamole RDP" for mapped drives

[Tushar Jain]

Did a bit of digging myself on connection arguments and found that if we put
a value to "Client Name" parameter under "Basic Settings", the same get
displayed instead of "Guacamole RDP".

 

Just sharing if anyone stumbles upon this in future.

 

From: Tushar Jain [mailto:tushar.j...@hitachi.mgrmnet.com] 
Sent: 10 April 2020 01:57 PM
To: user@guacamole.apache.org
Subject: Customize the text "on Guacamole RDP" for mapped drives

 

Hello Everyone,

 

When we enable a drive for a connection and give a Drive Name (e.g.
MyDrive), it gets mapped with Windows destination server and gets displayed
as "MyDrive on Guacamole RDP" in Windows explorer. Is there a way I could
configure or customise the text "on Guacamole RDP" as well?

 

If it required to change in code, please direct to the path & file(s) which
needs to be changed.

 

Thanks in advance.

 

Tushar Jain


-- 
**Disclaimer:* This message and any attachment may contain confidential, 
proprietary information and is intended only for the individual named. If 
you are not the original intended recipient and have erroneously received 
this message, you should not disseminate, distribute or copy this e-mail. 
Please notify the sender immediately by e-mail if you have received this 
e-mail by mistake and delete this e-mail from your system. Hitachi MGRM Net 
E-mail transmission cannot be guaranteed to be secure or error-free as 
information could be intercepted, corrupted, lost, destroyed, arrive late 
or incomplete, or contain viruses. Hitachi MGRM Net therefore does not 
accept liability for any errors or omissions in the contents of this 
message, which arise as a result of e-mail transmission. If verification is 
required, please request a hard-copy version. Hitachi MGRM Net Ltd, C - 
6/5, Safdarjung Development Area, New Delhi - 110016, India*
*
*
*'Please 
consider the environment before printing this e-mail'.*

Customize the text "on Guacamole RDP" for mapped drives

[Tushar Jain]

Hello Everyone,

 

When we enable a drive for a connection and give a Drive Name (e.g.
MyDrive), it gets mapped with Windows destination server and gets displayed
as "MyDrive on Guacamole RDP" in Windows explorer. Is there a way I could
configure or customise the text "on Guacamole RDP" as well?

 

If it required to change in code, please direct to the path & file(s) which
needs to be changed.

 

Thanks in advance.

 

Tushar Jain


-- 
**Disclaimer:* This message and any attachment may contain confidential, 
proprietary information and is intended only for the individual named. If 
you are not the original intended recipient and have erroneously received 
this message, you should not disseminate, distribute or copy this e-mail. 
Please notify the sender immediately by e-mail if you have received this 
e-mail by mistake and delete this e-mail from your system. Hitachi MGRM Net 
E-mail transmission cannot be guaranteed to be secure or error-free as 
information could be intercepted, corrupted, lost, destroyed, arrive late 
or incomplete, or contain viruses. Hitachi MGRM Net therefore does not 
accept liability for any errors or omissions in the contents of this 
message, which arise as a result of e-mail transmission. If verification is 
required, please request a hard-copy version. Hitachi MGRM Net Ltd, C - 
6/5, Safdarjung Development Area, New Delhi - 110016, India*
*
*
*'Please 
consider the environment before printing this e-mail'.*

RE: randomely showing localhost IP in guacamole user history

[Tushar Jain]

Hi Daniel,

 

0:0:0:0:0:0:0:1 is the loopback address for IPv6 as compared to 127.0.0.1 in 
IPv4. You may be getting this for the users who are trying to access guacamole 
from the same system where it is installed, and that too using either 
‘localhost” or the loopback address.

You should try what Thiago mentioned and let us know the results.

 

 

From: Thiago Cruz [mailto:thiagoc...@gmail.com] 
Sent: 10 April 2020 12:51 AM
To: user@guacamole.apache.org
Subject: Re: randomely showing localhost IP in guacamole user history

 

Daniel,

 

Try insert "0:0:0:0:0:0:0:1" into your "internalProxies" parameter at 
RemoteIpValve.

 

Thiago Cruz

 

On Thu, Apr 9, 2020 at 4:15 PM mailto:dmoscovi...@simard.ca> > wrote:

Hi 
Tushar 

from catalina.out , and its the 0:0:0:0:0:0:0:1 that seems to be an issue. 

good user 
14:32:54.531 [http-bio-8080-exec-2857] INFO  o.a.g.r.auth.AuthenticationService 
- User "USER123" successfully authenticated from 123.123.123.123. 
14:33:12.408 [http-bio-8080-exec-2858] INFO  o.a.g.r.auth.AuthenticationService 
- User "USER123" successfully authenticated from 123.123.123.123. 

picky user 
14:59:19.947 [http-bio-8080-exec-3271] INFO  o.a.g.r.auth.AuthenticationService 
- User "USER456" successfully authenticated from 222.222.222.222. 
14:59:48.577 [http-bio-8080-exec-3272] INFO  o.a.g.r.auth.AuthenticationService 
- User "USER456" successfully authenticated from [222.222.222.222, 
0:0:0:0:0:0:0:1]. 

The only thing i can say is...maybe... the ORDER of the lines in the log file 
seem to sometimes be reversed? meaning sometimes the one with [ xxx . 0::] is 
first. but it's hard to tell. 


which ssl file do you mean? 
currently its setup under nginx/sites-enabled/default 

just this and some SSL certificate things... 

server { 
listen 443 ssl; 

server_name guacamole.localdomain.local MyServerr.myrealdomainname.com 
<http://MyServerr.myrealdomainname.com> ; 
root /usr/share/nginx/MyRoot; 
index index.html; 


 location /MYSUBDIRECTORY/ { 
# I am running the Tomcat7 and Guacamole on the local server 
proxy_pass  <http://localhost:8080/guacamole/> 
http://localhost:8080/guacamole/; 
proxy_redirect  off; 
proxy_buffering off; 
proxy_http_version 1.1; 
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; 
proxy_set_header Upgrade $http_upgrade; 
proxy_set_header Connection "upgrade"; 
proxy_cookie_path /guacamole/ /MYSUBDIRECTORY/; 
    access_log off; 
#  break; 
} 


\danielm 



From:"Tushar Jain" mailto:tushar.j...@hitachi.mgrmnet.com> > 
To:mailto:user@guacamole.apache.org> > 
Date:04/09/20 09:00 AM 
Subject:RE: randomely showing localhost IP in guacamole user history 

  _  




Please share the contents of nginx –guacamole-ssl file as well. Assuming there 
is nothing else configured on nginx like in default etc. 
  
Please also share the 2 lines you are seeing against the real IP for some 
users. 
  
  
  
Yes, as far as I can tell. I've gone through this so many times. 
I thought also i needed to set maybe the 0:0:... address into the proxies also 
but that didnt seem to have any affect either. 
The odd thing is it does work some of the time...
== 

=== 



/danielm 



From:"Nick Couchman" < <mailto:vn...@apache.org> vn...@apache.org> 
To: <mailto:user@guacamole.apache.org> user@guacamole.apache.org 
Date:04/08/20 10:18 PM 
Subject:Re: randomely showing localhost IP in guacamole user history 

  _  






So if it works some of the time, the headers must be getting sent correctly? 
so the 
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; 
must be working from nginx? 


Have you also set the RemoteIPValve correctly in Tomcat? 

http://guacamole.apache.org/doc/gug/proxying-guacamole.html#tomcat-remote-ip 

-Nick 


Disclaimer: This message and any attachment may contain confidential, 
proprietary information and is intended only for the individual named. If you 
are not the original intended recipient and have erroneously received this 
message, you should not disseminate, distribute or copy this e-mail. Please 
notify the sender immediately by e-mail if you have received this e-mail by 
mistake and delete this e-mail from your system. Hitachi MGRM Net E-mail 
transmission cannot be guaranteed to be secure or error-free as information 
could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or 
contain viruses. Hitachi MGRM Net therefore does not accept liability for any 
errors or omissions in the contents of this message, which arise as a result of 
e-mail transmission. If verification is required, please request a hard-copy 
version. Hitachi MGRM Net Ltd, C - 6/5, Safda

RE: Guacamole Shared Drive

[Tushar Jain]

Hi,

Yes, with the PC one can, but I am not publishing the entire PC on
guacamole, but just a Remote App. Hence was looking for an option in
guacamole menu itself, where one could create subfolders and delete existing
files.

Thanks.

-Original Message-
From: Piviul [mailto:piv...@riminilug.it] 
Sent: 09 April 2020 06:50 PM
To: user@guacamole.apache.org
Subject: Re: Guacamole Shared Drive

Tushar Jain ha scritto il 03/04/20 alle 17:56:
> Hi
> 
> Is there a way in Guacamole Menu, that while uploading files in shared 
> drive (which was enabled from Connection properties), the user is 
> allowed to create sub-folders, and to delete existing files, if any?
in guacamole menu I think no but on the PC you can. If you have checked
 in the section  of the connection, you
should have a network  where you can see, delete or add files to
the shared folder.

Piviul

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org



-- 
**Disclaimer:* This message and any attachment may contain confidential, 
proprietary information and is intended only for the individual named. If 
you are not the original intended recipient and have erroneously received 
this message, you should not disseminate, distribute or copy this e-mail. 
Please notify the sender immediately by e-mail if you have received this 
e-mail by mistake and delete this e-mail from your system. Hitachi MGRM Net 
E-mail transmission cannot be guaranteed to be secure or error-free as 
information could be intercepted, corrupted, lost, destroyed, arrive late 
or incomplete, or contain viruses. Hitachi MGRM Net therefore does not 
accept liability for any errors or omissions in the contents of this 
message, which arise as a result of e-mail transmission. If verification is 
required, please request a hard-copy version. Hitachi MGRM Net Ltd, C - 
6/5, Safdarjung Development Area, New Delhi - 110016, India*
*
*
*'Please 
consider the environment before printing this e-mail'.*

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

RE: randomely showing localhost IP in guacamole user history

[Tushar Jain]

Please share the contents of nginx -guacamole-ssl file as well. Assuming
there is nothing else configured on nginx like in default etc.

 

Please also share the 2 lines you are seeing against the real IP for some
users.

 

 

 

Yes, as far as I can tell. I've gone through this so many times. 
I thought also i needed to set maybe the 0:0:... address into the proxies
also but that didnt seem to have any affect either. 
The odd thing is it does work some of the time...
== 
 
=== 



/danielm 



From:"Nick Couchman" <  vn...@apache.org> 
To:  user@guacamole.apache.org 
Date:04/08/20 10:18 PM 
Subject:Re: randomely showing localhost IP in guacamole user history


  _  





So if it works some of the time, the headers must be getting sent correctly?

so the 
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; 
must be working from nginx? 


Have you also set the RemoteIPValve correctly in Tomcat? 

http://guacamole.apache.org/doc/gug/proxying-guacamole.html#tomcat-remote-ip


-Nick 


-- 
**Disclaimer:* This message and any attachment may contain confidential, 
proprietary information and is intended only for the individual named. If 
you are not the original intended recipient and have erroneously received 
this message, you should not disseminate, distribute or copy this e-mail. 
Please notify the sender immediately by e-mail if you have received this 
e-mail by mistake and delete this e-mail from your system. Hitachi MGRM Net 
E-mail transmission cannot be guaranteed to be secure or error-free as 
information could be intercepted, corrupted, lost, destroyed, arrive late 
or incomplete, or contain viruses. Hitachi MGRM Net therefore does not 
accept liability for any errors or omissions in the contents of this 
message, which arise as a result of e-mail transmission. If verification is 
required, please request a hard-copy version. Hitachi MGRM Net Ltd, C - 
6/5, Safdarjung Development Area, New Delhi - 110016, India*
*
*
*'Please 
consider the environment before printing this e-mail'.*

RE: mysql auth configuration problem

[Tushar Jain]

Hi Piviul,

You could try with mysql-connector-java-5.1.47-bin.jar instead of
mysql-connector-java-8.0.19.jar in 'lib' directory. I am not sure if it
would work for you, but that is what is working for me. Sometimes version
compatibility between MySQL and its driver can cause issues listed by you.

Also assuming that you have installed mysql on the same server as guacamole
and have configured its port correctly in guacamole.properties


-Original Message-
From: Piviul [mailto:piv...@riminilug.it] 
Sent: 08 April 2020 06:42 PM
To: user@guacamole.apache.org
Subject: mysql auth configuration problem

Hi all, I have installed guacamole and I would like to install mysql as
auth; I have followed the guacamole manual: created the guacamole_db, the
guacamole_user and installed the schemas. Then I have load the mysql
extension and the mysql driver:
> $ ls -l /etc/guacamole/{extensions,lib}
> /etc/guacamole/extensions:
> total 4916
> -rw-r--r-- 1 root root 5030106 Apr  8 12:55 
> guacamole-auth-jdbc-mysql-1.1.0.jar
>
> /etc/guacamole/lib:
> total 2304
> -rw-r--r-- 1 root root 2356711 Apr  8 12:59 
> mysql-connector-java-8.0.19.jar

Then if I enable mysql auth in guacamole.properties on the web page I get
the error:
> An error has occurred and this action cannot be completed. If the 
> problem persists, please notify your system administrator or check 
> your system logs.

If I check the mysql error.log I find this error:
> 2020-04-08 14:53:27 46 [Warning] Aborted connection 46 to db: 
> 'guacamole_db' user: 'guacamole_user' host: 'localhost' (Got an error 
> reading communication packets)
> 2020-04-08 14:53:27 47 [Warning] Aborted connection 47 to db: 
> 'guacamole_db' user: 'guacamole_user' host: 'localhost' (Got an error 
> reading communication packets)

Someone can help me to solve this problem?

Piviul

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org



-- 
**Disclaimer:* This message and any attachment may contain confidential, 
proprietary information and is intended only for the individual named. If 
you are not the original intended recipient and have erroneously received 
this message, you should not disseminate, distribute or copy this e-mail. 
Please notify the sender immediately by e-mail if you have received this 
e-mail by mistake and delete this e-mail from your system. Hitachi MGRM Net 
E-mail transmission cannot be guaranteed to be secure or error-free as 
information could be intercepted, corrupted, lost, destroyed, arrive late 
or incomplete, or contain viruses. Hitachi MGRM Net therefore does not 
accept liability for any errors or omissions in the contents of this 
message, which arise as a result of e-mail transmission. If verification is 
required, please request a hard-copy version. Hitachi MGRM Net Ltd, C - 
6/5, Safdarjung Development Area, New Delhi - 110016, India*
*
*
*'Please 
consider the environment before printing this e-mail'.*

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

RE: Capslock not working in RDP

[Tushar Jain]

Yes, I am facing the same issue, even with the latest code of guacamole from 
git.

 

 

 

From: Wesley de Graaf [mailto:wes...@workspace365.net] 
Sent: 07 April 2020 01:23 PM
To: user@guacamole.apache.org
Subject: RE: Capslock not working in RDP

 

Hi Allen,

 

Later on, I did find out when setting the keyboard on “Unicode” it is working 
as expected. Our default keyboard layout is the US English (qwerty). So when 
using the US English (Qwerty) keyboard layout its not working.

 

We cant use the Unicode, because then our other keyboard shortcuts are not 
working like CTRL + A or CTRL + C. 

 

Thanks,

 

Wesley. 

 

From: Allen Chen mailto:ac...@harbourfrontcentre.com> > 
Sent: Monday, April 6, 2020 5:53 PM
To: user@guacamole.apache.org  
Subject: Re: Capslock not working in RDP

 

For somehow the CAPS LOCK works for me with compiled 
guacamole-server-1.1.0.tar.gz and freerdp-2.0.0-1.rc4 on CentOS 7.

Allen

On 4/6/20 8:28 AM, Wesley de Graaf wrote:

Hi,

 

It looks like CAPS Lock is not working in the latest stable guacamole version, 
build 1.1, xFreeRDP 2.0.0-rc4, keyboard layout: Default.

 

1.  Open RDP session via guacamole
2.  Open Wordpad for example
3.  Press CAPS LOCK on your keyboard, You’ll see that the CAPS LOCK is 
activated in WordPad but the keys you send are still received in lower case.

 

I’ve found this article on the internet:  
 
https://kb.virginiacyberrange.org/troubleshooting/caps-lock-bug.html 

 

The Workaround they specify here is working, but that’s not a workable 
situation if you want to use the caps lock. It looks like when the CAPS LOCK is 
enabled the keys are still forwarded lower case ? 

 

Kind regards,

 

Wesley


-- 
**Disclaimer:* This message and any attachment may contain confidential, 
proprietary information and is intended only for the individual named. If 
you are not the original intended recipient and have erroneously received 
this message, you should not disseminate, distribute or copy this e-mail. 
Please notify the sender immediately by e-mail if you have received this 
e-mail by mistake and delete this e-mail from your system. Hitachi MGRM Net 
E-mail transmission cannot be guaranteed to be secure or error-free as 
information could be intercepted, corrupted, lost, destroyed, arrive late 
or incomplete, or contain viruses. Hitachi MGRM Net therefore does not 
accept liability for any errors or omissions in the contents of this 
message, which arise as a result of e-mail transmission. If verification is 
required, please request a hard-copy version. Hitachi MGRM Net Ltd, C - 
6/5, Safdarjung Development Area, New Delhi - 110016, India*
*
*
*'Please 
consider the environment before printing this e-mail'.*

RE: Guacamole Version identification

[Tushar Jain]

Thanks Sebastian for the inputs. 

 

Guacamole 1.1.0 mandatorily required Freerdp2. But since I am using Ubuntu 
16.04, Freerdp2 does not get installed on this version. Hence I reverted back 
to Guacamole 1.0.0. i.e. Reinstalled the server and client components for 1.0.0 
and everything works fine for now.

 

Even with Ubuntu 18.04, I have observed multiple issues with Guacamole 1.1.0, 
especially for Windows RDP connections. I even took the latest code from git 
master for both server and client (1.2.0), but still running into a few issues. 
It seems 1.1.0 is still not stable for this use case. It may not necessarily be 
a Guacamole problem, but may be a problem of the underlying dependencies like 
FreeRDP2 or Windows 2019 RDP server I am trying to connect with.

 

Hence for now, I am staying with the last code I downloaded from git for 1.0.0, 
back in first week of Jan 2020.

 

Thanks again.

 

 

From: Sebastian Männling [mailto:sebastian.maennl...@qubestack.org] 
Sent: 30 March 2020 06:06 PM
To: user@guacamole.apache.org
Subject: RE: Guacamole Version identification

 

what i actually meant was the end of the `./configure` ...

i just installed the minimal necessary libs to get guacd compiled (gcc 
libjpeg-dev libpng-dev libcairo2-dev libossp-uuid-dev)
but as you can see, none of the libraries are found, and so also none of the 
protocols are supported...


you may get something like this:

```
./configure
...
config.status: executing depfiles commands
config.status: executing libtool commands


guacamole-server version 1.1.0


   Library status:

 freerdp2  no
 pango ... no
 libavcodec .. no
 libavutil ... no
 libssh2 . no
 libssl .. no
 libswscale .. no
 libtelnet ... no
 libVNCServer  no
 libvorbis ... no
 libpulse  no
 libwebsockets ... no
 libwebp . no
 wsock32 . no

   Protocol support:

  Kubernetes  no
  RDP ... no
  SSH ... no
  Telnet  no
  VNC ... no

   Services / tools:

  guacd .. yes
  guacenc  no
  guaclog  yes

   FreeRDP plugins: no
   Init scripts: no
   Systemd units: no

Type "make" to compile guacamole-server.
```

installing the following package `freerdp2-dev` (ubuntu 18.04) will give you 
the following output of `./configure`
```
./configure
...

guacamole-server version 1.1.0


   Library status:

 freerdp2  yes
 pango ... no
 libavcodec .. no
 libavutil ... no
 libssh2 . no
 libssl .. yes
 libswscale .. no
 libtelnet ... no
 libVNCServer  no
 libvorbis ... no
 libpulse  no
 libwebsockets ... no
 libwebp . no
 wsock32 . no

   Protocol support:

  Kubernetes  no
  RDP ... yes
  SSH ... no
  Telnet  no
  VNC ... no

   Services / tools:

  guacd .. yes
  guacenc  no
  guaclog  yes

   FreeRDP plugins: /usr/lib/x86_64-linux-gnu/freerdp2
   Init scripts: no
   Systemd units: no

Type "make" to compile guacamole-server.
```


so, as you already mentioned... you should try to go with freerdp2 dev-libs... 
and make sure that you get a 'yes' behind the protocols you want to use with 
guacamole...

hope that helps ...


On Monday, March 30, 2020 09:08 CEST, "Tushar Jain" 
mailto:tushar.j...@hitachi.mgrmnet.com> > 
wrote:
 

 

>> Support for protocol "rdp" is not installed

>>this has (as far as i know) nothing to do with the installed version (neither 
>>guacamole-client nor guacamole-server)

>>maybe you explain how you installed guacamole... (if you compiled guacd from 
>>source, check the last lines and make sure that rdp is enabled...)  

Yes I compiled from source, as suggested in the manual. Last steps are 

Ldconfig

Systemctl enable guacd

 

I did the above.

 

Another thing I wanted to highlight was I have installed libfreerdp-dev instead 
of libfreerdp2-dev. Can that be a problem. I am using Ubuntu 16.04 and the 
latter is not supported.

 

 

From: Sebastian Männling [mailto:sebastian.maennl...@qubestack.org]
Sent: 30 March 2020 12:09 PM
To: user@guacamole.apache.org <mailto:user@guacamole.apache.org> 
Subject: Re: Guacamole Version identification

 

but from your posted log it looks like guacd is not correctly installed (at 
least support for rdp is missing)

>> Support for protocol "rdp" is not installed

this has (as far as i know) no

RE: RDP Session automatically logged off

[Tushar Jain]

Hi,

 

I have reinstalled later version of guacamole server and guacamole client
from git master. The automatic log off problem is solved, but unfortunately
the CAPS lock problem is back. CAPS lock is not working any more

 

Any help is highly appreciated. 

 

 

Thanks

 

From: Tushar Jain [mailto:tushar.j...@hitachi.mgrmnet.com] 
Sent: 06 April 2020 01:33 PM
To: user@guacamole.apache.org
Subject: RE: RDP Session automatically logged off

 

Hi,

 

Awaiting help on this. 

 

Thanks.

 

From: Tushar Jain [mailto:tushar.j...@hitachi.mgrmnet.com]

Sent: 04 April 2020 01:36 PM
To: user@guacamole.apache.org <mailto:user@guacamole.apache.org> 
Subject: RDP Session automatically logged off

 

Hi,

 

My Remote App session is automatically getting logged off after about 2 min
and 20 sec. The log is mentioned below:

 

Apr  4 07:28:02 m20-ub18-dguac1 guacd[9423]: Creating new client for
protocol "rdp"

Apr  4 07:28:02 m20-ub18-dguac1 guacd[9423]: Connection ID is
"$61e9356b-2934-4b92-84f4-b0c61e7ecf2a"

Apr  4 07:28:02 m20-ub18-dguac1 guacd[3110]: Security mode: Negotiate (ANY)

Apr  4 07:28:02 m20-ub18-dguac1 guacd[3110]: Resize method: none

Apr  4 07:28:02 m20-ub18-dguac1 guacd[3110]: User
"@35aec43a-b1ff-4e3c-9f10-a3204faf3fa7" joined connection
"$61e9356b-2934-4b92-84f4-b0c61e7ecf2a" (1 users now present)

Apr  4 07:28:02 m20-ub18-dguac1 guacd[3110]: Loading keymap "base"

Apr  4 07:28:02 m20-ub18-dguac1 guacd[3110]: Loading keymap "en-us-qwerty"

Apr  4 07:28:03 m20-ub18-dguac1 guacd[3110]: Connected to RDPDR 1.13 as
client 0x0008

Apr  4 07:28:09 m20-ub18-dguac1 guacd[3110]: RDPDR user logged on

Apr  4 07:30:24 m20-ub18-dguac1 guacd[3110]: RDP server closed connection:
Manually logged off.

Apr  4 07:30:24 m20-ub18-dguac1 guacd[3110]: Internal RDP client
disconnected

Apr  4 07:30:24 m20-ub18-dguac1 guacd[3110]: User
"@35aec43a-b1ff-4e3c-9f10-a3204faf3fa7" disconnected (0 users remain)

Apr  4 07:30:24 m20-ub18-dguac1 guacd[3110]: Last user of connection
"$61e9356b-2934-4b92-84f4-b0c61e7ecf2a" disconnected

Apr  4 07:30:24 m20-ub18-dguac1 kernel: [1415238.172972] guacd[3128]:
segfault at 18 ip 7ff0b3602f21 sp 7ff0ad52ec30 error 4 in
libc-2.27.so[7ff0b356e000+1e7000]

Apr  4 07:30:25 m20-ub18-dguac1 guacd[9423]: Connection
"$61e9356b-2934-4b92-84f4-b0c61e7ecf2a" removed.

 

With the below  line,

Apr  4 07:30:24 m20-ub18-dguac1 guacd[3110]: RDP server closed connection:
Manually logged off.

It seems something on the Windows Server is triggering the log off process.
But my windows administrator is not acknowledging the same, and is pointing
to the line:

Apr  4 07:30:24 m20-ub18-dguac1 kernel: [1415238.172972] guacd[3128]:
segfault at 18 ip 7ff0b3602f21 sp 7ff0ad52ec30 error 4 in
libc-2.27.so[7ff0b356e000+1e7000]

Could this be the reason for automatic log off?

 

 

Windows: Windows 2016

Apache Guacamole: 1.1.0

Guacamole Host: Ubuntu 18.04

Freerdp: 2.0.0

 

I googled and found this reported bug, which looks similar

https://issues.apache.org/jira/browse/GUACAMOLE-978

 

But I am not using docker. Will building with the latest guacamole client
code from git help?

 

Thanks & Regards,


-- 
**Disclaimer:* This message and any attachment may contain confidential, 
proprietary information and is intended only for the individual named. If 
you are not the original intended recipient and have erroneously received 
this message, you should not disseminate, distribute or copy this e-mail. 
Please notify the sender immediately by e-mail if you have received this 
e-mail by mistake and delete this e-mail from your system. Hitachi MGRM Net 
E-mail transmission cannot be guaranteed to be secure or error-free as 
information could be intercepted, corrupted, lost, destroyed, arrive late 
or incomplete, or contain viruses. Hitachi MGRM Net therefore does not 
accept liability for any errors or omissions in the contents of this 
message, which arise as a result of e-mail transmission. If verification is 
required, please request a hard-copy version. Hitachi MGRM Net Ltd, C - 
6/5, Safdarjung Development Area, New Delhi - 110016, India*
*
*
*'Please 
consider the environment before printing this e-mail'.*

RE: RDP Session automatically logged off

[Tushar Jain]

Hi,

 

Awaiting help on this. 

 

Thanks.

 

From: Tushar Jain [mailto:tushar.j...@hitachi.mgrmnet.com]

Sent: 04 April 2020 01:36 PM
To: user@guacamole.apache.org
Subject: RDP Session automatically logged off

 

Hi,

 

My Remote App session is automatically getting logged off after about 2 min
and 20 sec. The log is mentioned below:

 

Apr  4 07:28:02 m20-ub18-dguac1 guacd[9423]: Creating new client for
protocol "rdp"

Apr  4 07:28:02 m20-ub18-dguac1 guacd[9423]: Connection ID is
"$61e9356b-2934-4b92-84f4-b0c61e7ecf2a"

Apr  4 07:28:02 m20-ub18-dguac1 guacd[3110]: Security mode: Negotiate (ANY)

Apr  4 07:28:02 m20-ub18-dguac1 guacd[3110]: Resize method: none

Apr  4 07:28:02 m20-ub18-dguac1 guacd[3110]: User
"@35aec43a-b1ff-4e3c-9f10-a3204faf3fa7" joined connection
"$61e9356b-2934-4b92-84f4-b0c61e7ecf2a" (1 users now present)

Apr  4 07:28:02 m20-ub18-dguac1 guacd[3110]: Loading keymap "base"

Apr  4 07:28:02 m20-ub18-dguac1 guacd[3110]: Loading keymap "en-us-qwerty"

Apr  4 07:28:03 m20-ub18-dguac1 guacd[3110]: Connected to RDPDR 1.13 as
client 0x0008

Apr  4 07:28:09 m20-ub18-dguac1 guacd[3110]: RDPDR user logged on

Apr  4 07:30:24 m20-ub18-dguac1 guacd[3110]: RDP server closed connection:
Manually logged off.

Apr  4 07:30:24 m20-ub18-dguac1 guacd[3110]: Internal RDP client
disconnected

Apr  4 07:30:24 m20-ub18-dguac1 guacd[3110]: User
"@35aec43a-b1ff-4e3c-9f10-a3204faf3fa7" disconnected (0 users remain)

Apr  4 07:30:24 m20-ub18-dguac1 guacd[3110]: Last user of connection
"$61e9356b-2934-4b92-84f4-b0c61e7ecf2a" disconnected

Apr  4 07:30:24 m20-ub18-dguac1 kernel: [1415238.172972] guacd[3128]:
segfault at 18 ip 7ff0b3602f21 sp 7ff0ad52ec30 error 4 in
libc-2.27.so[7ff0b356e000+1e7000]

Apr  4 07:30:25 m20-ub18-dguac1 guacd[9423]: Connection
"$61e9356b-2934-4b92-84f4-b0c61e7ecf2a" removed.

 

With the below  line,

Apr  4 07:30:24 m20-ub18-dguac1 guacd[3110]: RDP server closed connection:
Manually logged off.

It seems something on the Windows Server is triggering the log off process.
But my windows administrator is not acknowledging the same, and is pointing
to the line:

Apr  4 07:30:24 m20-ub18-dguac1 kernel: [1415238.172972] guacd[3128]:
segfault at 18 ip 7ff0b3602f21 sp 7ff0ad52ec30 error 4 in
libc-2.27.so[7ff0b356e000+1e7000]

Could this be the reason for automatic log off?

 

 

Windows: Windows 2016

Apache Guacamole: 1.1.0

Guacamole Host: Ubuntu 18.04

Freerdp: 2.0.0

 

I googled and found this reported bug, which looks similar

https://issues.apache.org/jira/browse/GUACAMOLE-978

 

But I am not using docker. Will building with the latest guacamole client
code from git help?

 

Thanks & Regards,


-- 
**Disclaimer:* This message and any attachment may contain confidential, 
proprietary information and is intended only for the individual named. If 
you are not the original intended recipient and have erroneously received 
this message, you should not disseminate, distribute or copy this e-mail. 
Please notify the sender immediately by e-mail if you have received this 
e-mail by mistake and delete this e-mail from your system. Hitachi MGRM Net 
E-mail transmission cannot be guaranteed to be secure or error-free as 
information could be intercepted, corrupted, lost, destroyed, arrive late 
or incomplete, or contain viruses. Hitachi MGRM Net therefore does not 
accept liability for any errors or omissions in the contents of this 
message, which arise as a result of e-mail transmission. If verification is 
required, please request a hard-copy version. Hitachi MGRM Net Ltd, C - 
6/5, Safdarjung Development Area, New Delhi - 110016, India*
*
*
*'Please 
consider the environment before printing this e-mail'.*

RDP Session automatically logged off

[Tushar Jain]

Hi,

 

My Remote App session is automatically getting logged off after about 2 min
and 20 sec. The log is mentioned below:

 

Apr  4 07:28:02 m20-ub18-dguac1 guacd[9423]: Creating new client for
protocol "rdp"

Apr  4 07:28:02 m20-ub18-dguac1 guacd[9423]: Connection ID is
"$61e9356b-2934-4b92-84f4-b0c61e7ecf2a"

Apr  4 07:28:02 m20-ub18-dguac1 guacd[3110]: Security mode: Negotiate (ANY)

Apr  4 07:28:02 m20-ub18-dguac1 guacd[3110]: Resize method: none

Apr  4 07:28:02 m20-ub18-dguac1 guacd[3110]: User
"@35aec43a-b1ff-4e3c-9f10-a3204faf3fa7" joined connection
"$61e9356b-2934-4b92-84f4-b0c61e7ecf2a" (1 users now present)

Apr  4 07:28:02 m20-ub18-dguac1 guacd[3110]: Loading keymap "base"

Apr  4 07:28:02 m20-ub18-dguac1 guacd[3110]: Loading keymap "en-us-qwerty"

Apr  4 07:28:03 m20-ub18-dguac1 guacd[3110]: Connected to RDPDR 1.13 as
client 0x0008

Apr  4 07:28:09 m20-ub18-dguac1 guacd[3110]: RDPDR user logged on

Apr  4 07:30:24 m20-ub18-dguac1 guacd[3110]: RDP server closed connection:
Manually logged off.

Apr  4 07:30:24 m20-ub18-dguac1 guacd[3110]: Internal RDP client
disconnected

Apr  4 07:30:24 m20-ub18-dguac1 guacd[3110]: User
"@35aec43a-b1ff-4e3c-9f10-a3204faf3fa7" disconnected (0 users remain)

Apr  4 07:30:24 m20-ub18-dguac1 guacd[3110]: Last user of connection
"$61e9356b-2934-4b92-84f4-b0c61e7ecf2a" disconnected

Apr  4 07:30:24 m20-ub18-dguac1 kernel: [1415238.172972] guacd[3128]:
segfault at 18 ip 7ff0b3602f21 sp 7ff0ad52ec30 error 4 in
libc-2.27.so[7ff0b356e000+1e7000]

Apr  4 07:30:25 m20-ub18-dguac1 guacd[9423]: Connection
"$61e9356b-2934-4b92-84f4-b0c61e7ecf2a" removed.

 

With the below  line,

Apr  4 07:30:24 m20-ub18-dguac1 guacd[3110]: RDP server closed connection:
Manually logged off.

It seems something on the Windows Server is triggering the log off process.
But my windows administrator is not acknowledging the same, and is pointing
to the line:

Apr  4 07:30:24 m20-ub18-dguac1 kernel: [1415238.172972] guacd[3128]:
segfault at 18 ip 7ff0b3602f21 sp 7ff0ad52ec30 error 4 in
libc-2.27.so[7ff0b356e000+1e7000]

Could this be the reason for automatic log off?

 

 

Windows: Windows 2016

Apache Guacamole: 1.1.0

Guacamole Host: Ubuntu 18.04

Freerdp: 2.0.0

 

I googled and found this reported bug, which looks similar

https://issues.apache.org/jira/browse/GUACAMOLE-978

 

But I am not using docker. Will building with the latest guacamole client
code from git help?

 

Thanks & Regards,


-- 
**Disclaimer:* This message and any attachment may contain confidential, 
proprietary information and is intended only for the individual named. If 
you are not the original intended recipient and have erroneously received 
this message, you should not disseminate, distribute or copy this e-mail. 
Please notify the sender immediately by e-mail if you have received this 
e-mail by mistake and delete this e-mail from your system. Hitachi MGRM Net 
E-mail transmission cannot be guaranteed to be secure or error-free as 
information could be intercepted, corrupted, lost, destroyed, arrive late 
or incomplete, or contain viruses. Hitachi MGRM Net therefore does not 
accept liability for any errors or omissions in the contents of this 
message, which arise as a result of e-mail transmission. If verification is 
required, please request a hard-copy version. Hitachi MGRM Net Ltd, C - 
6/5, Safdarjung Development Area, New Delhi - 110016, India*
*
*
*'Please 
consider the environment before printing this e-mail'.*

Guacamole Shared Drive

[Tushar Jain]

Hi

 

Is there a way in Guacamole Menu, that while uploading files in shared drive
(which was enabled from Connection properties), the user is allowed to
create sub-folders, and to delete existing files, if any?

 

Thanks!

 

 


-- 
**Disclaimer:* This message and any attachment may contain confidential, 
proprietary information and is intended only for the individual named. If 
you are not the original intended recipient and have erroneously received 
this message, you should not disseminate, distribute or copy this e-mail. 
Please notify the sender immediately by e-mail if you have received this 
e-mail by mistake and delete this e-mail from your system. Hitachi MGRM Net 
E-mail transmission cannot be guaranteed to be secure or error-free as 
information could be intercepted, corrupted, lost, destroyed, arrive late 
or incomplete, or contain viruses. Hitachi MGRM Net therefore does not 
accept liability for any errors or omissions in the contents of this 
message, which arise as a result of e-mail transmission. If verification is 
required, please request a hard-copy version. Hitachi MGRM Net Ltd, C - 
6/5, Safdarjung Development Area, New Delhi - 110016, India*
*
*
*'Please 
consider the environment before printing this e-mail'.*

RE: Guacamole Version identification

[Tushar Jain]

Also is there a way I could re-install just the server component again? I don’t 
want to do a complete re-install of guacamole, just the server.

 

Thanks again.

 

From: Tushar Jain [mailto:tushar.j...@hitachi.mgrmnet.com] 
Sent: 30 March 2020 12:38 PM
To: user@guacamole.apache.org
Subject: RE: Guacamole Version identification

 

>> Support for protocol "rdp" is not installed

>>this has (as far as i know) nothing to do with the installed version (neither 
>>guacamole-client nor guacamole-server)

>>maybe you explain how you installed guacamole... (if you compiled guacd from 
>>source, check the last lines and make sure that rdp is enabled...)  

Yes I compiled from source, as suggested in the manual. Last steps are 

Ldconfig

Systemctl enable guacd

 

I did the above.

 

Another thing I wanted to highlight was I have installed libfreerdp-dev instead 
of libfreerdp2-dev. Can that be a problem. I am using Ubuntu 16.04 and the 
latter is not supported.

 

 

From: Sebastian Männling [mailto:sebastian.maennl...@qubestack.org] 
Sent: 30 March 2020 12:09 PM
To: user@guacamole.apache.org <mailto:user@guacamole.apache.org> 
Subject: Re: Guacamole Version identification

 

but from your posted log it looks like guacd is not correctly installed (at 
least support for rdp is missing)

>> Support for protocol "rdp" is not installed

this has (as far as i know) nothing to do with the installed version (neither 
guacamole-client nor guacamole-server)

maybe you explain how you installed guacamole... (if you compiled guacd from 
source, check the last lines and make sure that rdp is enabled...)  



On Monday, March 30, 2020 08:06 CEST, Tushar Jain 
mailto:tushar.j...@hitachi.mgrmnet.com> > 
wrote:
 

Just to add on to why i need this is that i am not able to connect to Windows 
VM through RDP connection.

My Tomcat Log has following entries:

19:00:33.144 [http-nio-8080-exec-6] ERROR 
o.a.g.w.GuacamoleWebSocketTunnelEndpoint - Creation of WebSocket tunnel to 
guacd failed: Connection to guacd timed out.
19:01:03.145 [http-nio-8080-exec-10] ERROR 
o.a.g.w.GuacamoleWebSocketTunnelEndpoint - Creation of WebSocket tunnel to 
guacd failed: Connection to guacd timed out.
19:01:33.232 [http-nio-8080-exec-5] ERROR 
o.a.g.w.GuacamoleWebSocketTunnelEndpoint - Creation of WebSocket tunnel to 
guacd failed: Connection to guacd timed out.
19:02:03.253 [http-nio-8080-exec-3] ERROR 
o.a.g.w.GuacamoleWebSocketTunnelEndpoint - Creation of WebSocket tunnel to 
guacd failed: Connection to guacd timed out.
19:02:33.407 [http-nio-8080-exec-4] ERROR 
o.a.g.w.GuacamoleWebSocketTunnelEndpoint - Creation of WebSocket tunnel to 
guacd failed: Connection to guacd timed out.

 

When I check the status of guacd (systemctl status guacd), i get the following:

 

Mar 29 19:02:48 ubuntu-virtual guacd[22310]: Support for protocol "rdp" is not 
installed
Mar 29 19:02:48 ubuntu-virtual guacd[22073]: Connection 
"$303b37f8-ecff-48cd-a1ec-c00b7ecd70c0" removed.
Mar 29 19:03:23 ubuntu-virtual guacd[22073]: Creating new client for protocol 
"rdp"
Mar 29 19:03:23 ubuntu-virtual guacd[22073]: Connection ID is 
"$76c9a9a2-278d-42e2-b011-3a744c344b27"
Mar 29 19:03:23 ubuntu-virtual guacd[22073]: Connection 
"$76c9a9a2-278d-42e2-b011-3a744c344b27" removed.
Mar 29 19:07:53 ubuntu-virtual guacd[22073]: Creating new client for protocol 
"rdp"
Mar 29 19:07:53 ubuntu-virtual guacd[22073]: Connection ID is 
"$648184dc-4c04-4f59-a1c2-6e2efdb1ec50"
Mar 29 19:07:53 ubuntu-virtual guacd[22367]: Support for protocol "rdp" is not 
installed
Mar 29 19:07:53 ubuntu-virtual guacd[22073]: Connection 
"$648184dc-4c04-4f59-a1c2-6e2efdb1ec50" removed.
Mar 29 19:09:10 ubuntu-virtual guacd[22073]: Guacamole protocol violation. 
Perhaps the version of guacamole-client is incompatible with this

 

On Mon, Mar 30, 2020 at 11:24 AM Tushar Jain mailto:tushar.j...@hitachi.mgrmnet.com> > wrote:

Hi,

 

Is there a way to identify the version of Guacamole client and Guacamole Server 
that has been installed on an Ubuntu VM?

 

Thanks,

 

Disclaimer: This message and any attachment may contain confidential, 
proprietary information and is intended only for the individual named. If you 
are not the original intended recipient and have erroneously received this 
message, you should not disseminate, distribute or copy this e-mail. Please 
notify the sender immediately by e-mail if you have received this e-mail by 
mistake and delete this e-mail from your system. Hitachi MGRM Net E-mail 
transmission cannot be guaranteed to be secure or error-free as information 
could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or 
contain viruses. Hitachi MGRM Net therefore does not accept liability for any 
errors or omissions in the contents of this message, which arise as a result of 
e-mail transmission. 

RE: Guacamole Version identification

[Tushar Jain]

>> Support for protocol "rdp" is not installed

>>this has (as far as i know) nothing to do with the installed version (neither 
>>guacamole-client nor guacamole-server)

>>maybe you explain how you installed guacamole... (if you compiled guacd from 
>>source, check the last lines and make sure that rdp is enabled...)  



Yes I compiled from source, as suggested in the manual. Last steps are 

Ldconfig

Systemctl enable guacd

 

I did the above.

 

Another thing I wanted to highlight was I have installed libfreerdp-dev instead 
of libfreerdp2-dev. Can that be a problem. I am using Ubuntu 16.04 and the 
latter is not supported.

 

 

From: Sebastian Männling [mailto:sebastian.maennl...@qubestack.org] 
Sent: 30 March 2020 12:09 PM
To: user@guacamole.apache.org
Subject: Re: Guacamole Version identification

 

but from your posted log it looks like guacd is not correctly installed (at 
least support for rdp is missing)

>> Support for protocol "rdp" is not installed

this has (as far as i know) nothing to do with the installed version (neither 
guacamole-client nor guacamole-server)

maybe you explain how you installed guacamole... (if you compiled guacd from 
source, check the last lines and make sure that rdp is enabled...)  



On Monday, March 30, 2020 08:06 CEST, Tushar Jain 
mailto:tushar.j...@hitachi.mgrmnet.com> > 
wrote:
 

Just to add on to why i need this is that i am not able to connect to Windows 
VM through RDP connection.

My Tomcat Log has following entries:

19:00:33.144 [http-nio-8080-exec-6] ERROR 
o.a.g.w.GuacamoleWebSocketTunnelEndpoint - Creation of WebSocket tunnel to 
guacd failed: Connection to guacd timed out.
19:01:03.145 [http-nio-8080-exec-10] ERROR 
o.a.g.w.GuacamoleWebSocketTunnelEndpoint - Creation of WebSocket tunnel to 
guacd failed: Connection to guacd timed out.
19:01:33.232 [http-nio-8080-exec-5] ERROR 
o.a.g.w.GuacamoleWebSocketTunnelEndpoint - Creation of WebSocket tunnel to 
guacd failed: Connection to guacd timed out.
19:02:03.253 [http-nio-8080-exec-3] ERROR 
o.a.g.w.GuacamoleWebSocketTunnelEndpoint - Creation of WebSocket tunnel to 
guacd failed: Connection to guacd timed out.
19:02:33.407 [http-nio-8080-exec-4] ERROR 
o.a.g.w.GuacamoleWebSocketTunnelEndpoint - Creation of WebSocket tunnel to 
guacd failed: Connection to guacd timed out.

 

When I check the status of guacd (systemctl status guacd), i get the following:

 

Mar 29 19:02:48 ubuntu-virtual guacd[22310]: Support for protocol "rdp" is not 
installed
Mar 29 19:02:48 ubuntu-virtual guacd[22073]: Connection 
"$303b37f8-ecff-48cd-a1ec-c00b7ecd70c0" removed.
Mar 29 19:03:23 ubuntu-virtual guacd[22073]: Creating new client for protocol 
"rdp"
Mar 29 19:03:23 ubuntu-virtual guacd[22073]: Connection ID is 
"$76c9a9a2-278d-42e2-b011-3a744c344b27"
Mar 29 19:03:23 ubuntu-virtual guacd[22073]: Connection 
"$76c9a9a2-278d-42e2-b011-3a744c344b27" removed.
Mar 29 19:07:53 ubuntu-virtual guacd[22073]: Creating new client for protocol 
"rdp"
Mar 29 19:07:53 ubuntu-virtual guacd[22073]: Connection ID is 
"$648184dc-4c04-4f59-a1c2-6e2efdb1ec50"
Mar 29 19:07:53 ubuntu-virtual guacd[22367]: Support for protocol "rdp" is not 
installed
Mar 29 19:07:53 ubuntu-virtual guacd[22073]: Connection 
"$648184dc-4c04-4f59-a1c2-6e2efdb1ec50" removed.
Mar 29 19:09:10 ubuntu-virtual guacd[22073]: Guacamole protocol violation. 
Perhaps the version of guacamole-client is incompatible with this

 

On Mon, Mar 30, 2020 at 11:24 AM Tushar Jain mailto:tushar.j...@hitachi.mgrmnet.com> > wrote:

Hi,

 

Is there a way to identify the version of Guacamole client and Guacamole Server 
that has been installed on an Ubuntu VM?

 

Thanks,

 

Disclaimer: This message and any attachment may contain confidential, 
proprietary information and is intended only for the individual named. If you 
are not the original intended recipient and have erroneously received this 
message, you should not disseminate, distribute or copy this e-mail. Please 
notify the sender immediately by e-mail if you have received this e-mail by 
mistake and delete this e-mail from your system. Hitachi MGRM Net E-mail 
transmission cannot be guaranteed to be secure or error-free as information 
could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or 
contain viruses. Hitachi MGRM Net therefore does not accept liability for any 
errors or omissions in the contents of this message, which arise as a result of 
e-mail transmission. If verification is required, please request a hard-copy 
version. Hitachi MGRM Net Ltd, C - 6/5, Safdarjung Development Area, New Delhi 
- 110016, India

 

'Please consider the environment before printing this e-mail'.


 


-- 
**Disclaimer:* This message and any attachment may contain confidential, 
proprietary information and is intended only for the individual 

Re: Guacamole Version identification

[Tushar Jain]

Just to add on to why i need this is that i am not able to connect to
Windows VM through RDP connection.
My Tomcat Log has following entries:
19:00:33.144 [http-nio-8080-exec-6] ERROR
o.a.g.w.GuacamoleWebSocketTunnelEndpoint - Creation of WebSocket tunnel to
guacd failed: Connection to guacd timed out.
19:01:03.145 [http-nio-8080-exec-10] ERROR
o.a.g.w.GuacamoleWebSocketTunnelEndpoint - Creation of WebSocket tunnel to
guacd failed: Connection to guacd timed out.
19:01:33.232 [http-nio-8080-exec-5] ERROR
o.a.g.w.GuacamoleWebSocketTunnelEndpoint - Creation of WebSocket tunnel to
guacd failed: Connection to guacd timed out.
19:02:03.253 [http-nio-8080-exec-3] ERROR
o.a.g.w.GuacamoleWebSocketTunnelEndpoint - Creation of WebSocket tunnel to
guacd failed: Connection to guacd timed out.
19:02:33.407 [http-nio-8080-exec-4] ERROR
o.a.g.w.GuacamoleWebSocketTunnelEndpoint - Creation of WebSocket tunnel to
guacd failed: Connection to guacd timed out.

When I check the status of guacd (systemctl status guacd), i get the
following:

Mar 29 19:02:48 ubuntu-virtual guacd[22310]: Support for protocol "rdp" is
not installed
Mar 29 19:02:48 ubuntu-virtual guacd[22073]: Connection
"$303b37f8-ecff-48cd-a1ec-c00b7ecd70c0" removed.
Mar 29 19:03:23 ubuntu-virtual guacd[22073]: Creating new client for
protocol "rdp"
Mar 29 19:03:23 ubuntu-virtual guacd[22073]: Connection ID is
"$76c9a9a2-278d-42e2-b011-3a744c344b27"
Mar 29 19:03:23 ubuntu-virtual guacd[22073]: Connection
"$76c9a9a2-278d-42e2-b011-3a744c344b27" removed.
Mar 29 19:07:53 ubuntu-virtual guacd[22073]: Creating new client for
protocol "rdp"
Mar 29 19:07:53 ubuntu-virtual guacd[22073]: Connection ID is
"$648184dc-4c04-4f59-a1c2-6e2efdb1ec50"
Mar 29 19:07:53 ubuntu-virtual guacd[22367]: Support for protocol "rdp" is
not installed
Mar 29 19:07:53 ubuntu-virtual guacd[22073]: Connection
"$648184dc-4c04-4f59-a1c2-6e2efdb1ec50" removed.
Mar 29 19:09:10 ubuntu-virtual guacd[22073]: Guacamole protocol violation.
Perhaps the version of guacamole-client is incompatible with this

On Mon, Mar 30, 2020 at 11:24 AM Tushar Jain <
tushar.j...@hitachi.mgrmnet.com> wrote:

> Hi,
>
>
>
> Is there a way to identify the version of Guacamole client and Guacamole
> Server that has been installed on an Ubuntu VM?
>
>
>
> Thanks,
>

-- 
**Disclaimer:* This message and any attachment may contain confidential, 
proprietary information and is intended only for the individual named. If 
you are not the original intended recipient and have erroneously received 
this message, you should not disseminate, distribute or copy this e-mail. 
Please notify the sender immediately by e-mail if you have received this 
e-mail by mistake and delete this e-mail from your system. Hitachi MGRM Net 
E-mail transmission cannot be guaranteed to be secure or error-free as 
information could be intercepted, corrupted, lost, destroyed, arrive late 
or incomplete, or contain viruses. Hitachi MGRM Net therefore does not 
accept liability for any errors or omissions in the contents of this 
message, which arise as a result of e-mail transmission. If verification is 
required, please request a hard-copy version. Hitachi MGRM Net Ltd, C - 
6/5, Safdarjung Development Area, New Delhi - 110016, India*
*
*
*'Please 
consider the environment before printing this e-mail'.*

Guacamole Version identification

[Tushar Jain]

Hi,

 

Is there a way to identify the version of Guacamole client and Guacamole
Server that has been installed on an Ubuntu VM?

 

Thanks,


-- 
**Disclaimer:* This message and any attachment may contain confidential, 
proprietary information and is intended only for the individual named. If 
you are not the original intended recipient and have erroneously received 
this message, you should not disseminate, distribute or copy this e-mail. 
Please notify the sender immediately by e-mail if you have received this 
e-mail by mistake and delete this e-mail from your system. Hitachi MGRM Net 
E-mail transmission cannot be guaranteed to be secure or error-free as 
information could be intercepted, corrupted, lost, destroyed, arrive late 
or incomplete, or contain viruses. Hitachi MGRM Net therefore does not 
accept liability for any errors or omissions in the contents of this 
message, which arise as a result of e-mail transmission. If verification is 
required, please request a hard-copy version. Hitachi MGRM Net Ltd, C - 
6/5, Safdarjung Development Area, New Delhi - 110016, India*
*
*
*'Please 
consider the environment before printing this e-mail'.*

RE: Cloning Guac VM

[Tushar Jain]

I may do the load balancer – thanks.

You can put the two VMs behind the same reverse proxy (nginx or Apache) and 
configure load balancer on them. So, if you have already have a reverse proxy 
on 1 VM, you may configure the same to connect to the 2nd VM. The reverse proxy 
on the 2nd VM becomes redundant. The advantage with load balancing is that you 
do not need to split the users between the two databases.

 

So with two servers one IP x.x.x.150 and the other x.x.x.151 how and this 
config, how would they “share” a database?  If I log into 1 and make a change – 
it shows up in the other – Is there somewhere in the install that logs the 
install IP and uses it for anything?

Not sure if its mapped internally the same VM. One thing which you could try is 
that instead of “localhost”, try using the specific IP address of the local 
server, in guacamole.properties

 

From: Newman, Dennis [mailto:dennis.new...@spglobal.com] 
Sent: 23 March 2020 11:07 PM
To: user@guacamole.apache.org
Subject: RE: Cloning Guac VM

 

I may do the load balancer – thanks.

 

Interesting, so what “seems” to have happened is that because server #2 was a 
clone – and is on the same network, it just “sees” the original MySql database 
(by name) and links up?

 

Mt guacamole.properties is simple 

# Hostname and port of guacamole proxy

guacd-hostname: localhost

guacd-port: 4822

# MySQL properties

mysql-hostname: localhost

mysql-port: 3306

mysql-database: guac_db

mysql-username: 

mysql-password: *

mysql-default-max-connections-per-user: 0

mysql-default-max-group-connections-per-user: 0

 

So with two servers one IP x.x.x.150 and the other x.x.x.151 how and this 
config, how would they “share” a database?  If I log into 1 and make a change – 
it shows up in the other – Is there somewhere in the install that logs the 
install IP and uses it for anything?

 

From: Tushar Jain mailto:tushar.j...@hitachi.mgrmnet.com> > 
Sent: Monday, March 23, 2020 11:55 AM
To: user@guacamole.apache.org <mailto:user@guacamole.apache.org> 
Subject: Re: Cloning Guac VM

 

Instead of "splitting" users, have you thought about putting them behind a load 
balancer?

 

 

Incase you still want to split the users, you will also have point each guac 
client to their own MySQL databases and it's own guacd instance. You would have 
to change these in guacamole.properties.

 

On Mon, 23 Mar, 2020, 9:54 PM Newman, Dennis, mailto:dennis.new...@spglobal.com> > wrote:

Guac 1.1.0 set up on CentOs7 used for Windows virtual desktop RDP

All systems on vmware esxi 6.7 – everything works

 

Everything works, 

We are trying to split our two divisions as we now have everyone working from 
home constantly instead of occasionally, 

so I cloned the Guac VM to the second esxi host on my Vcenter,

Changed the new vm’s IP (nat set to a different public IP) and fired it up to 
test.

It seems that now both systems are sharing a user and connection database – 
shutting one down seems to “kill” the other

Where other than the CentOs ip addressing and machine name would I need to make 
changes to “split” these two virtual servers.

 

I would rather not install fully new – had assumed I could clone then delete 
half of the users from one and half from the other.

 

Any thoughts?

 

Dennis Newman

 

  _  


The information contained in this message is intended only for the recipient, 
and may be a confidential attorney-client communication or may otherwise be 
privileged and confidential and protected from disclosure. If the reader of 
this message is not the intended recipient, or an employee or agent responsible 
for delivering this message to the intended recipient, please be aware that any 
dissemination or copying of this communication is strictly prohibited. If you 
have received this communication in error, please immediately notify us by 
replying to the message and deleting it from your computer. S Global Inc. 
reserves the right, subject to applicable local law, to monitor, review and 
process the content of any electronic message or information sent to or from 
S Global Inc. e-mail addresses without informing the sender or recipient of 
the message. By sending electronic message or information to S Global Inc. 
e-mail addresses you, as the sender, are consenting to S Global Inc. 
processing any of your personal data therein.


-- 
**Disclaimer:* This message and any attachment may contain confidential, 
proprietary information and is intended only for the individual named. If 
you are not the original intended recipient and have erroneously received 
this message, you should not disseminate, distribute or copy this e-mail. 
Please notify the sender immediately by e-mail if you have received this 
e-mail by mistake and delete this e-mail from your system. Hitachi MGRM Net 
E-mail transmission cannot be guaranteed to be secure or error-free as 
information could be intercepted, corrupted, 

Re: Cloning Guac VM

[Tushar Jain]

Instead of "splitting" users, have you thought about putting them behind a
load balancer?


Incase you still want to split the users, you will also have point each
guac client to their own MySQL databases and it's own guacd instance. You
would have to change these in guacamole.properties.


On Mon, 23 Mar, 2020, 9:54 PM Newman, Dennis, 
wrote:

> Guac 1.1.0 set up on CentOs7 used for Windows virtual desktop RDP
>
> All systems on vmware esxi 6.7 – everything works
>
>
>
> Everything works,
>
> We are trying to split our two divisions as we now have everyone working
> from home constantly instead of occasionally,
>
> so I cloned the Guac VM to the second esxi host on my Vcenter,
>
> Changed the new vm’s IP (nat set to a different public IP) and fired it up
> to test.
>
> It seems that now both systems are sharing a user and connection database
> – shutting one down seems to “kill” the other
>
> Where other than the CentOs ip addressing and machine name would I need to
> make changes to “split” these two virtual servers.
>
>
>
> I would rather not install fully new – had assumed I could clone then
> delete half of the users from one and half from the other.
>
>
>
> Any thoughts?
>
>
>
> *Dennis Newman*
>
> *Senior Infrastructure Engineer*  |  *Wisconsin office*
>
>
>
> *RateWatch + S Global Market Intelligence *
>
> 201 N. Main Street, Suite 4
>
> Fort Atkinson, WI 53538
>
> T: 920.568.1401 x4300
>
> C: +1.920.397.1344
>
> S ext 2684300
>
> dennis.new...@spglobal.com
>
>
>
> [image: rtwtchspg_mrkt_vt_emailSign_RGB_pos]
>
>
>
> --
>
> The information contained in this message is intended only for the
> recipient, and may be a confidential attorney-client communication or may
> otherwise be privileged and confidential and protected from disclosure. If
> the reader of this message is not the intended recipient, or an employee or
> agent responsible for delivering this message to the intended recipient,
> please be aware that any dissemination or copying of this communication is
> strictly prohibited. If you have received this communication in error,
> please immediately notify us by replying to the message and deleting it
> from your computer. S Global Inc. reserves the right, subject to
> applicable local law, to monitor, review and process the content of any
> electronic message or information sent to or from S Global Inc. e-mail
> addresses without informing the sender or recipient of the message. By
> sending electronic message or information to S Global Inc. e-mail
> addresses you, as the sender, are consenting to S Global Inc. processing
> any of your personal data therein.
>

-- 
**Disclaimer:* This message and any attachment may contain confidential, 
proprietary information and is intended only for the individual named. If 
you are not the original intended recipient and have erroneously received 
this message, you should not disseminate, distribute or copy this e-mail. 
Please notify the sender immediately by e-mail if you have received this 
e-mail by mistake and delete this e-mail from your system. Hitachi MGRM Net 
E-mail transmission cannot be guaranteed to be secure or error-free as 
information could be intercepted, corrupted, lost, destroyed, arrive late 
or incomplete, or contain viruses. Hitachi MGRM Net therefore does not 
accept liability for any errors or omissions in the contents of this 
message, which arise as a result of e-mail transmission. If verification is 
required, please request a hard-copy version. Hitachi MGRM Net Ltd, C - 
6/5, Safdarjung Development Area, New Delhi - 110016, India*
*
*
*'Please 
consider the environment before printing this e-mail'.*

Re: You have exhausted the limit for simultaneous connection use by an individual user

[Tushar Jain]

Hi,

It is under "Concurrency Limit" section of Connection settings page, and
the property name is  "Maximum number of connections per user"



On Tue, Mar 10, 2020 at 6:25 PM Ignacio Turegano <
ignacio.tureg...@eu.equinix.com> wrote:

> What is the parameter to set this limit? (6 by default)
>
> "ERROR_CLIENT_31D" : "The Guacamole server is denying access to this
> connection because you have exhausted the limit for simultaneous connection
> use by an individual user.
>
> Thank you
>
> This email is from Equinix (EMEA) B.V. or one of its associated companies
> in the territory from where this email has been sent. This email, and any
> files transmitted with it, contains information which is confidential, is
> solely for the use of the intended recipient and may be legally privileged.
> If you have received this email in error, please notify the sender and
> delete this email immediately. Equinix (EMEA) B.V.. Registered Office:
> Amstelplein 1, 1096 HA Amsterdam, The Netherlands. Registered in The
> Netherlands No. 57577889.
>

-- 
**Disclaimer:* This message and any attachment may contain confidential, 
proprietary information and is intended only for the individual named. If 
you are not the original intended recipient and have erroneously received 
this message, you should not disseminate, distribute or copy this e-mail. 
Please notify the sender immediately by e-mail if you have received this 
e-mail by mistake and delete this e-mail from your system. Hitachi MGRM Net 
E-mail transmission cannot be guaranteed to be secure or error-free as 
information could be intercepted, corrupted, lost, destroyed, arrive late 
or incomplete, or contain viruses. Hitachi MGRM Net therefore does not 
accept liability for any errors or omissions in the contents of this 
message, which arise as a result of e-mail transmission. If verification is 
required, please request a hard-copy version. Hitachi MGRM Net Ltd, C - 
6/5, Safdarjung Development Area, New Delhi - 110016, India*
*
*
*'Please 
consider the environment before printing this e-mail'.*

Re: Guacamole Session & thread information in tomcat 8

[Tushar Jain]

I'm not sure why zero threads would be shown, but perhaps one of the Tomcat
lists would be of better help in debugging the Tomcat manager webapp?
If you just want to inspect what threads are running, there are generic
Java debugging tools that would let you obtain overall JVM thread dumps.
Is there something you're trying to solve by doing this?

---I am just trying to arrive at the optimum value of "MaxThreads" for
Tomcat. 200 is the default value in Tomcat and I want to monitor them to
see if I need more than 200 threads when the concurrency increases.

The fact that the connection uses RemoteApp (or RDP, or VNC, or SSH, etc.)
is opaque to the client and webapp. Everything is just the Guacamole
protocol at that level.
What do you mean by "do the Java Threads get busy"?
---What i meant was that when the user is interacting within a RemoteApp
(like any legacy applications) i.e. clicking buttons, selecting dropdown
values, typing some text etc. does it use Tomcat threads? My understanding
is it should, but just wanted to confirm.

On Wed, Feb 26, 2020 at 11:19 AM Mike Jumper  wrote:

> On Tue, Feb 25, 2020, 19:39 Tushar Jain 
> wrote:
>
>> ...
>> ---I am not seeing even a single busy thread when users are logging into
>> Guacamole. What could be the problem?
>>
>
> I'm not sure why zero threads would be shown, but perhaps one of the
> Tomcat lists would be of better help in debugging the Tomcat manager webapp?
>
> If you just want to inspect what threads are running, there are generic
> Java debugging tools that would let you obtain overall JVM thread dumps.
>
> Is there something you're trying to solve by doing this?
>
> Also, once a user opens a RemoteApp from Guacamole and *starts working
>> within the RemoteApp*, do the Java Threads get busy for every
>> interaction(mouse clicks/text input etc) the user has within the RemoteApp?
>>
>
> The fact that the connection uses RemoteApp (or RDP, or VNC, or SSH, etc.)
> is opaque to the client and webapp. Everything is just the Guacamole
> protocol at that level.
>
> What do you mean by "do the Java Threads get busy"?
>
> - Mike
>
>

-- 
**Disclaimer:* This message and any attachment may contain confidential, 
proprietary information and is intended only for the individual named. If 
you are not the original intended recipient and have erroneously received 
this message, you should not disseminate, distribute or copy this e-mail. 
Please notify the sender immediately by e-mail if you have received this 
e-mail by mistake and delete this e-mail from your system. Hitachi MGRM Net 
E-mail transmission cannot be guaranteed to be secure or error-free as 
information could be intercepted, corrupted, lost, destroyed, arrive late 
or incomplete, or contain viruses. Hitachi MGRM Net therefore does not 
accept liability for any errors or omissions in the contents of this 
message, which arise as a result of e-mail transmission. If verification is 
required, please request a hard-copy version. Hitachi MGRM Net Ltd, C - 
6/5, Safdarjung Development Area, New Delhi - 110016, India*
*
*
*'Please 
consider the environment before printing this e-mail'.*

Re: Guacamole Session & thread information in tomcat 8

[Tushar Jain]

Guacamole uses its own session implementation. It does not use the Java
servlet API for sessions, which is what would be tracked by something like
Tomcat's manager webapp. You will not be able to see Guacamole sessions
there.
---Okay, Thanks

I would expect all Java threads to be visible within Tomcat's manager,
though there isn't really going to be a correspondence between Guacamole
user sessions and the number of threads. Threads aren't created on a per
session basis.
---I am not seeing even a single busy thread when users are logging into
Guacamole. What could be the problem?. Also, once a user opens a RemoteApp
from Guacamole and *starts working within the RemoteApp*, do the Java
Threads get busy for every interaction(mouse clicks/text input etc) the
user has within the RemoteApp?


On Wed, Feb 26, 2020 at 12:44 AM Mike Jumper  wrote:

> Guacamole uses its own session implementation. It does not use the Java
> servlet API for sessions, which is what would be tracked by something like
> Tomcat's manager webapp. You will not be able to see Guacamole sessions
> there.
>
> I would expect all Java threads to be visible within Tomcat's manager,
> though there isn't really going to be a correspondence between Guacamole
> user sessions and the number of threads. Threads aren't created on a per
> session basis.
>
> - Mike
>
> On Tue, Feb 25, 2020, 09:36 Tushar Jain 
> wrote:
>
>> Hi Nick,
>>
>> In Tomcat 8 manager, I am expecting to see "active sessions " and "Busy
>> Threads" for every guacamole session created by our users. Currently Active
>> sessions are displayed as zero, irrespective of any number of users who
>> login to guacamole. I also do not see any busy threads in the manager
>>
>> Thanks
>>
>> On Tue, 25 Feb, 2020, 10:58 PM Nick Couchman,  wrote:
>>
>>> On Tue, Feb 25, 2020 at 3:55 AM Tushar Jain <
>>> tushar.j...@hitachi.mgrmnet.com> wrote:
>>>
>>>> Hi,
>>>>
>>>> I have guacamole setup on Ubuntu 18.04. The client is installed on
>>>> Tomcat 8 and it is behind nginx proxy. SSL is enable don Nginx. The steps
>>>> followed for Tomcat 8 and nginx are same as per guacamole documentation.
>>>> The problem i am facing is that the Session and Thread information for user
>>>> guacamole sessions is not reflecting in Tomcat 8 manager
>>>> application(localhost:8080/manager). My nginx.conf looks like
>>>>
>>>>
>>> Can you clarify what you mean by this?  What information are you seeing,
>>> and what are you expecting to see in Tomcat 8 manager?
>>>
>>> -Nick
>>>
>>
>> *Disclaimer: This message and any attachment may contain confidential,
>> proprietary information and is intended only for the individual named. If
>> you are not the original intended recipient and have erroneously received
>> this message, you should not disseminate, distribute or copy this e-mail.
>> Please notify the sender immediately by e-mail if you have received this
>> e-mail by mistake and delete this e-mail from your system. Hitachi MGRM Net
>> E-mail transmission cannot be guaranteed to be secure or error-free as
>> information could be intercepted, corrupted, lost, destroyed, arrive late
>> or incomplete, or contain viruses. Hitachi MGRM Net therefore does not
>> accept liability for any errors or omissions in the contents of this
>> message, which arise as a result of e-mail transmission. If verification is
>> required, please request a hard-copy version. Hitachi MGRM Net Ltd, C -
>> 6/5, Safdarjung Development Area, New Delhi - 110016, India*
>>
>> *'Please consider the environment before printing this e-mail'.*
>>
>

-- 
**Disclaimer:* This message and any attachment may contain confidential, 
proprietary information and is intended only for the individual named. If 
you are not the original intended recipient and have erroneously received 
this message, you should not disseminate, distribute or copy this e-mail. 
Please notify the sender immediately by e-mail if you have received this 
e-mail by mistake and delete this e-mail from your system. Hitachi MGRM Net 
E-mail transmission cannot be guaranteed to be secure or error-free as 
information could be intercepted, corrupted, lost, destroyed, arrive late 
or incomplete, or contain viruses. Hitachi MGRM Net therefore does not 
accept liability for any errors or omissions in the contents of this 
message, which arise as a result of e-mail transmission. If verification is 
required, please request a hard-copy version. Hitachi MGRM Net Ltd, C - 
6/5, Safdarjung Development Area, New Delhi - 110016, India*
*
*
*'Please 
consider the environment before printing this e-mail'.*

Re: Guacamole Session & thread information in tomcat 8

[Tushar Jain]

Hi Nick,

In Tomcat 8 manager, I am expecting to see "active sessions " and "Busy
Threads" for every guacamole session created by our users. Currently Active
sessions are displayed as zero, irrespective of any number of users who
login to guacamole. I also do not see any busy threads in the manager

Thanks

On Tue, 25 Feb, 2020, 10:58 PM Nick Couchman,  wrote:

> On Tue, Feb 25, 2020 at 3:55 AM Tushar Jain <
> tushar.j...@hitachi.mgrmnet.com> wrote:
>
>> Hi,
>>
>> I have guacamole setup on Ubuntu 18.04. The client is installed on Tomcat
>> 8 and it is behind nginx proxy. SSL is enable don Nginx. The steps followed
>> for Tomcat 8 and nginx are same as per guacamole documentation. The problem
>> i am facing is that the Session and Thread information for user guacamole
>> sessions is not reflecting in Tomcat 8 manager
>> application(localhost:8080/manager). My nginx.conf looks like
>>
>>
> Can you clarify what you mean by this?  What information are you seeing,
> and what are you expecting to see in Tomcat 8 manager?
>
> -Nick
>

-- 
**Disclaimer:* This message and any attachment may contain confidential, 
proprietary information and is intended only for the individual named. If 
you are not the original intended recipient and have erroneously received 
this message, you should not disseminate, distribute or copy this e-mail. 
Please notify the sender immediately by e-mail if you have received this 
e-mail by mistake and delete this e-mail from your system. Hitachi MGRM Net 
E-mail transmission cannot be guaranteed to be secure or error-free as 
information could be intercepted, corrupted, lost, destroyed, arrive late 
or incomplete, or contain viruses. Hitachi MGRM Net therefore does not 
accept liability for any errors or omissions in the contents of this 
message, which arise as a result of e-mail transmission. If verification is 
required, please request a hard-copy version. Hitachi MGRM Net Ltd, C - 
6/5, Safdarjung Development Area, New Delhi - 110016, India*
*
*
*'Please 
consider the environment before printing this e-mail'.*

Re: Guacamole RDP Session disconnection after 20 sec

[Tushar Jain]

Thanks for the update.
We found out that Windows RDP server was taking about that much time to
logoff, once the remote application is closed. What we found is it is a
default Windows behaviour and there is no configuration in Windows or
Remote Desktop Services, where we could change that. As a workaround, we
explicitly called logoff.exe on the exit of the remote application.


On Sat, Feb 1, 2020 at 11:55 AM Nick Couchman  wrote:

> On Thu, Jan 30, 2020 at 5:40 AM Tushar Jain <
> tushar.j...@hitachi.mgrmnet.com> wrote:
>
>> Hi,
>>
>> Just to add on to my previous email, after i exit my RDP application, if
>> i click on "Disconnect" link of Guacamole menu, the session immediately
>> disconnects. Can i make this happen on the click of "Exit" button of RDP
>> application itself, instead of user having to ? Basically i want to
>> disconnect the RDP session as soon as exist the application.
>>
>> On Thu, Jan 30, 2020 at 3:46 PM Tushar Jain <
>> tushar.j...@hitachi.mgrmnet.com> wrote:
>>
>>> Hi,
>>>
>>> I have published an RDP Application hosted on a remote server. After
>>> connecting through guacamole, the application works fine. But, when i exit
>>> the application, guacamole takes about 20 seconds to disconnect the RDP
>>> session. After 20 seconds i get the message "You have been disconnected".
>>> At the same time, when i check the RDP Session Host, it marks the session
>>> as "Disconnected". What could be the reason? Can i change this 20 sec to
>>> say 5 sec?
>>>
>>> Thanks!
>>>
>>
>
> A couple of things come to mind...
>
> First, the session disconnection, in this particular case, is managed
> mostly by the RDP server and not Guacamole.  So, something on the RDP
> server side is causing a delay in the disconnection of the session such
> that it takes a few seconds for the session to actually close out.
> Depending on what RDP server you're using, this could be caused by
> processes shutting down, profiles being saved, or several other things.  My
> suggestion would be to monitor the server during the time when you
> disconnect and try to see what's happening.
>
> Another possibility would be to make sure you're using RemoteApp (RAILS)
> functionality, which may handle this type of disconnect situation a little
> more cleanly.  Depending on your RDP server (Windows vs xRDP) your level of
> success in using this will vary, but Guacamole does support this
> functionality as long as the RDP server does.
>
> -Nick
>

-- 
**Disclaimer:* This message and any attachment may contain confidential, 
proprietary information and is intended only for the individual named. If 
you are not the original intended recipient and have erroneously received 
this message, you should not disseminate, distribute or copy this e-mail. 
Please notify the sender immediately by e-mail if you have received this 
e-mail by mistake and delete this e-mail from your system. Hitachi MGRM Net 
E-mail transmission cannot be guaranteed to be secure or error-free as 
information could be intercepted, corrupted, lost, destroyed, arrive late 
or incomplete, or contain viruses. Hitachi MGRM Net therefore does not 
accept liability for any errors or omissions in the contents of this 
message, which arise as a result of e-mail transmission. If verification is 
required, please request a hard-copy version. Hitachi MGRM Net Ltd, C - 
6/5, Safdarjung Development Area, New Delhi - 110016, India*
*
*
*'Please 
consider the environment before printing this e-mail'.*

Re: [ANNOUNCE] Apache Guacamole 1.1.0

[Tushar Jain]

Okay. Will do. Thanks again.

On Fri, Jan 31, 2020 at 11:15 AM Mike Jumper  wrote:

> On Thu, Jan 30, 2020, 21:40 Tushar Jain 
> wrote:
>
>> Thanks for the info.
>> I had recently (about a month back) downloaded the latest source from
>> git. built and deployed both the client and the server. Is it still a good
>> idea to update the latest version?
>>
>
> Yes. You should not use an older git snapshot in favor of an actual
> release. You should update when you can.
>
> - Mike
>
>

-- 
**Disclaimer:* This message and any attachment may contain confidential, 
proprietary information and is intended only for the individual named. If 
you are not the original intended recipient and have erroneously received 
this message, you should not disseminate, distribute or copy this e-mail. 
Please notify the sender immediately by e-mail if you have received this 
e-mail by mistake and delete this e-mail from your system. Hitachi MGRM Net 
E-mail transmission cannot be guaranteed to be secure or error-free as 
information could be intercepted, corrupted, lost, destroyed, arrive late 
or incomplete, or contain viruses. Hitachi MGRM Net therefore does not 
accept liability for any errors or omissions in the contents of this 
message, which arise as a result of e-mail transmission. If verification is 
required, please request a hard-copy version. Hitachi MGRM Net Ltd, C - 
6/5, Safdarjung Development Area, New Delhi - 110016, India*
*
*
*'Please 
consider the environment before printing this e-mail'.*

Re: [ANNOUNCE] Apache Guacamole 1.1.0

[Tushar Jain]

Thanks for the info.
I had recently (about a month back) downloaded the latest source from git.
built and deployed both the client and the server. Is it still a good idea
to update the latest version?


On Fri, Jan 31, 2020 at 9:10 AM Mike Jumper  wrote:

> The Apache Guacamole community is proud to announce the release of Apache
> Guacamole 1.1.0.
>
> Apache Guacamole is a clientless remote desktop gateway which supports
> standard
> protocols like VNC, RDP, and SSH. We call it "clientless" because no
> plugins or
> client software are required; once Guacamole is installed on a server, all
> you
> need to access your desktops is a web browser.
>
> The 1.1.0 release features support for dynamic image quality and for
> connecting directly to the terminals of Kubernetes pods. Issues with
> user group support discovered following the 1.0.0 release have been
> fixed, issues with LDAP support have been resolved through migrating
> to the Apache Directory API, and issues with RDP support have been
> resolved through migrating to FreeRDP 2.0.0.
>
> A full list of the changes in this release, along with links to downloads
> and updated documentation, can be found in the release notes:
>
> http://guacamole.apache.org/releases/1.1.0/
>
> For more information on Apache Guacamole, please see:
>
> http://guacamole.apache.org/
>
> Thanks!
>
> The Apache Guacamole Community
>
> -
> To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
> For additional commands, e-mail: user-h...@guacamole.apache.org
>
>

-- 
**Disclaimer:* This message and any attachment may contain confidential, 
proprietary information and is intended only for the individual named. If 
you are not the original intended recipient and have erroneously received 
this message, you should not disseminate, distribute or copy this e-mail. 
Please notify the sender immediately by e-mail if you have received this 
e-mail by mistake and delete this e-mail from your system. Hitachi MGRM Net 
E-mail transmission cannot be guaranteed to be secure or error-free as 
information could be intercepted, corrupted, lost, destroyed, arrive late 
or incomplete, or contain viruses. Hitachi MGRM Net therefore does not 
accept liability for any errors or omissions in the contents of this 
message, which arise as a result of e-mail transmission. If verification is 
required, please request a hard-copy version. Hitachi MGRM Net Ltd, C - 
6/5, Safdarjung Development Area, New Delhi - 110016, India*
*
*
*'Please 
consider the environment before printing this e-mail'.*

Re: Guacamole RDP Session disconnection after 20 sec

[Tushar Jain]

Hi,

Just to add on to my previous email, after i exit my RDP application, if i
click on "Disconnect" link of Guacamole menu, the session immediately
disconnects. Can i make this happen on the click of "Exit" button of RDP
application itself, instead of user having to ? Basically i want to
disconnect the RDP session as soon as exist the application.

On Thu, Jan 30, 2020 at 3:46 PM Tushar Jain 
wrote:

> Hi,
>
> I have published an RDP Application hosted on a remote server. After
> connecting through guacamole, the application works fine. But, when i exit
> the application, guacamole takes about 20 seconds to disconnect the RDP
> session. After 20 seconds i get the message "You have been disconnected".
> At the same time, when i check the RDP Session Host, it marks the session
> as "Disconnected". What could be the reason? Can i change this 20 sec to
> say 5 sec?
>
> Thanks!
>

-- 
**Disclaimer:* This message and any attachment may contain confidential, 
proprietary information and is intended only for the individual named. If 
you are not the original intended recipient and have erroneously received 
this message, you should not disseminate, distribute or copy this e-mail. 
Please notify the sender immediately by e-mail if you have received this 
e-mail by mistake and delete this e-mail from your system. Hitachi MGRM Net 
E-mail transmission cannot be guaranteed to be secure or error-free as 
information could be intercepted, corrupted, lost, destroyed, arrive late 
or incomplete, or contain viruses. Hitachi MGRM Net therefore does not 
accept liability for any errors or omissions in the contents of this 
message, which arise as a result of e-mail transmission. If verification is 
required, please request a hard-copy version. Hitachi MGRM Net Ltd, C - 
6/5, Safdarjung Development Area, New Delhi - 110016, India*
*
*
*'Please 
consider the environment before printing this e-mail'.*

Guacamole RDP Session disconnection after 20 sec

[Tushar Jain]

Hi,

I have published an RDP Application hosted on a remote server. After
connecting through guacamole, the application works fine. But, when i exit
the application, guacamole takes about 20 seconds to disconnect the RDP
session. After 20 seconds i get the message "You have been disconnected".
At the same time, when i check the RDP Session Host, it marks the session
as "Disconnected". What could be the reason? Can i change this 20 sec to
say 5 sec?

Thanks!

-- 
**Disclaimer:* This message and any attachment may contain confidential, 
proprietary information and is intended only for the individual named. If 
you are not the original intended recipient and have erroneously received 
this message, you should not disseminate, distribute or copy this e-mail. 
Please notify the sender immediately by e-mail if you have received this 
e-mail by mistake and delete this e-mail from your system. Hitachi MGRM Net 
E-mail transmission cannot be guaranteed to be secure or error-free as 
information could be intercepted, corrupted, lost, destroyed, arrive late 
or incomplete, or contain viruses. Hitachi MGRM Net therefore does not 
accept liability for any errors or omissions in the contents of this 
message, which arise as a result of e-mail transmission. If verification is 
required, please request a hard-copy version. Hitachi MGRM Net Ltd, C - 
6/5, Safdarjung Development Area, New Delhi - 110016, India*
*
*
*'Please 
consider the environment before printing this e-mail'.*

Re: Installed guacamole from Git but didn't get /etc/guacamole directory

[Tushar Jain]

You have to create it manually.


On Thu, Jan 16, 2020 at 7:26 PM BenDDD  wrote:

> Hi everyone,
>
> I have installed Guacamole server and client from Git by following this doc
> :  https://guacamole.apache.org/doc/gug/installing-guacamole.html
>   .
>
> I had some problems with JDK11 and maven but i have finally managed to
> complete the instructions and try to pass to the configuration :
> https://guacamole.apache.org/doc/gug/configuring-guacamole.html
>   .
>
> My problem is that i don't have the /etc/guacamole/ directory. Is it
> somewhere else or i have missed something ?
>
> Thank you in advance.
>
>
>
> --
> Sent from:
> http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/
>
> -
> To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
> For additional commands, e-mail: user-h...@guacamole.apache.org
>
>

-- 
**Disclaimer:* This message and any attachment may contain confidential, 
proprietary information and is intended only for the individual named. If 
you are not the original intended recipient and have erroneously received 
this message, you should not disseminate, distribute or copy this e-mail. 
Please notify the sender immediately by e-mail if you have received this 
e-mail by mistake and delete this e-mail from your system. Hitachi MGRM Net 
E-mail transmission cannot be guaranteed to be secure or error-free as 
information could be intercepted, corrupted, lost, destroyed, arrive late 
or incomplete, or contain viruses. Hitachi MGRM Net therefore does not 
accept liability for any errors or omissions in the contents of this 
message, which arise as a result of e-mail transmission. If verification is 
required, please request a hard-copy version. Hitachi MGRM Net Ltd, C - 
6/5, Safdarjung Development Area, New Delhi - 110016, India*
*
*
*'Please 
consider the environment before printing this e-mail'.*

Re: Re: Re: Re: concurrent performance of Guacamole

[Tushar Jain]

> 1. Remote VMs refusing the connection to Guacamole, instead of it being a
problem with Guacamole itself. This could be due to connectivity problem
between Guacamole server and your openstack VM. This could also be due to
max resource utilization on your openstack VM
I don't understand "max resource utilization on your openstack VM". What
exactly do you mean?
The utilization of CPU & RAM should not be more than 70%. Besides, there
should not be consistent Disk IOPS and 100% bandwidth utilization

> 2. Number of concurrent connections exceeding the "maximum number of
connections" property under connections
This "maximum number of connections" property is Whose? Where to view and
set？
When you login with admin (e.g. guacadmin), go to Settings-->Connections.
Select a Connection to open "Edit Connections" page. Under heading
"Concurrency Limits", you will find "Maximum number of connections"



On Thu, Jan 16, 2020 at 1:56 PM 崔**  wrote:

> OK! Thanks! And there are a few questions.
>
> > 1. Remote VMs refusing the connection to Guacamole, instead of it being
> a problem with Guacamole itself. This could be due to connectivity problem
> between Guacamole server and your openstack VM. This could also be due to
> max resource utilization on your openstack VM
> I don't understand "max resource utilization on your openstack VM". What
> exactly do you mean?
>
> > 2. Number of concurrent connections exceeding the "maximum number of
> connections" property under connections
> This "maximum number of connections" property is Whose? Where to view and
> set？
>
>
>
>
> 在 2020-01-16 15:23:05，"Tushar Jain"  写道：
>
> Hi Cuihx,
>
> > What resources do you currently have allocated?
>
> I don't understand what resources you mean.
> This means RAM, CPU, HDD, Network Bandwidth (between Guacamole server and 
> OpenStack server/VM). Can you use some kind of performance monitor to see 
> what is the utilization of each during concurrency peak? Please let us know 
> for both.
>
> > What kind of usage is expected in general within your users' remote desktop 
> > sessions?
> We don't care this, the problem is “multiple reconnections during the initial 
> access”.
> What this means is that you do not have any concurrent performance problem 
> once the user is connected. Your problem is just initial reconnections. Is 
> that a right assumption?
>
> What i have observed in my implementation of Guacamole is that initial 
> reconnections are primarily due to one of the following:
>
> 1. Remote VMs refusing the connection to Guacamole, instead of it being a 
> problem with Guacamole itself. This could be due to connectivity problem 
> between Guacamole server and your openstack VM. This could also be due to max 
> resource utilization on your openstack VM
> 2. Number of concurrent connections exceeding the "maximum number of 
> connections" property under connections
> 3. Previous connection of the same user with same VM is not completely 
> disconnected.
> You may want to check one of these as well.
>
>
>
>
> On Thu, Jan 16, 2020 at 12:00 PM 崔**  wrote:
>
>> About 20% of the users had multiple reconnections during the initial
>> access, but they were able to connect successfully in the end.
>> Everything is OK after connecting successfully.
>> Network is OK, this is a concurrent test within the same network.
>>
>> > What resources do you currently have allocated?
>> I don't understand what resources you mean.
>>
>> > What kind of usage is expected in general within your users' remote
>> desktop sessions?
>> We don't care this, the problem is “multiple reconnections during the
>> initial access”.
>>
>>
>>
>>
>>
>>
>>
>> 在 2020-01-15 15:45:45，"Mike Jumper"  写道：
>>
>> On Tue, Jan 14, 2020, 22:27 崔恒香  wrote:
>>
>>> My application connects VMs in openstack through guacamole.
>>>
>>
>>> The concurrent number is about three hundred.
>>>
>>> Some users saw multiple reconnections and were finally able to connect.
>>>
>>> We want to reduce the incidence of reconnection.
>>>
>>
>> This is still fairly vague. Are you referring to users being unable to
>> connect, being unexpectedly disconnected, or both?
>>
>> How many do you mean by "some"? What is the general experience for users
>> that are able to establish a connection? Have you been able to confirm that
>> network disruption on the user side is not a factor?
>>
>> Also, from the previous email:
>>
>

Re: Change Guacamole banner

[Tushar Jain]

Hi,

Do you mean that you want to customize the default login page?

1. Writing Guacamole extensions is one of the most popular options and
often recommended in the forums.

2. If you are comfortable with Angular JS, you could directly download and
update the code. This is not recommended, primarily for the reason that in
future, for every update, you would have to re-do the changes.



On Thu, Jan 16, 2020 at 12:23 PM Rom@n  wrote:

> Hello guys!
>
>
>
> Is it possible to replace Guacamole banner with my own one ?
>
> And if it possible, how to do it?
>

-- 
**Disclaimer:* This message and any attachment may contain confidential, 
proprietary information and is intended only for the individual named. If 
you are not the original intended recipient and have erroneously received 
this message, you should not disseminate, distribute or copy this e-mail. 
Please notify the sender immediately by e-mail if you have received this 
e-mail by mistake and delete this e-mail from your system. Hitachi MGRM Net 
E-mail transmission cannot be guaranteed to be secure or error-free as 
information could be intercepted, corrupted, lost, destroyed, arrive late 
or incomplete, or contain viruses. Hitachi MGRM Net therefore does not 
accept liability for any errors or omissions in the contents of this 
message, which arise as a result of e-mail transmission. If verification is 
required, please request a hard-copy version. Hitachi MGRM Net Ltd, C - 
6/5, Safdarjung Development Area, New Delhi - 110016, India*
*
*
*'Please 
consider the environment before printing this e-mail'.*

Re: Re: Re: concurrent performance of Guacamole

[Tushar Jain]

Also, having a look at Syslog and servlet container logs(e.g. Tomcat) will
be a good idea to start troubleshooting. Do share the  details, if you see
any errors in these logs





On Thu, Jan 16, 2020 at 12:53 PM Tushar Jain <
tushar.j...@hitachi.mgrmnet.com> wrote:

> Hi Cuihx,
>
> > What resources do you currently have allocated?
>
> I don't understand what resources you mean.
> This means RAM, CPU, HDD, Network Bandwidth (between Guacamole server and 
> OpenStack server/VM). Can you use some kind of performance monitor to see 
> what is the utilization of each during concurrency peak? Please let us know 
> for both.
>
> > What kind of usage is expected in general within your users' remote desktop 
> > sessions?
> We don't care this, the problem is “multiple reconnections during the initial 
> access”.
> What this means is that you do not have any concurrent performance problem 
> once the user is connected. Your problem is just initial reconnections. Is 
> that a right assumption?
>
> What i have observed in my implementation of Guacamole is that initial 
> reconnections are primarily due to one of the following:
>
> 1. Remote VMs refusing the connection to Guacamole, instead of it being a 
> problem with Guacamole itself. This could be due to connectivity problem 
> between Guacamole server and your openstack VM. This could also be due to max 
> resource utilization on your openstack VM
> 2. Number of concurrent connections exceeding the "maximum number of 
> connections" property under connections
> 3. Previous connection of the same user with same VM is not completely 
> disconnected.
> You may want to check one of these as well.
>
>
>
>
> On Thu, Jan 16, 2020 at 12:00 PM 崔**  wrote:
>
>> About 20% of the users had multiple reconnections during the initial
>> access, but they were able to connect successfully in the end.
>> Everything is OK after connecting successfully.
>> Network is OK, this is a concurrent test within the same network.
>>
>> > What resources do you currently have allocated?
>> I don't understand what resources you mean.
>>
>> > What kind of usage is expected in general within your users' remote
>> desktop sessions?
>> We don't care this, the problem is “multiple reconnections during the
>> initial access”.
>>
>>
>>
>>
>>
>>
>>
>> 在 2020-01-15 15:45:45，"Mike Jumper"  写道：
>>
>> On Tue, Jan 14, 2020, 22:27 崔恒香  wrote:
>>
>>> My application connects VMs in openstack through guacamole.
>>>
>>
>>> The concurrent number is about three hundred.
>>>
>>> Some users saw multiple reconnections and were finally able to connect.
>>>
>>> We want to reduce the incidence of reconnection.
>>>
>>
>> This is still fairly vague. Are you referring to users being unable to
>> connect, being unexpectedly disconnected, or both?
>>
>> How many do you mean by "some"? What is the general experience for users
>> that are able to establish a connection? Have you been able to confirm that
>> network disruption on the user side is not a factor?
>>
>> Also, from the previous email:
>>
>> > What resources do you currently have allocated?
>>
>> > What kind of usage is expected in general within your users' remote
>> desktop sessions?
>>
>> - Mike
>>
>>
>>
>>
>>
>

-- 
**Disclaimer:* This message and any attachment may contain confidential, 
proprietary information and is intended only for the individual named. If 
you are not the original intended recipient and have erroneously received 
this message, you should not disseminate, distribute or copy this e-mail. 
Please notify the sender immediately by e-mail if you have received this 
e-mail by mistake and delete this e-mail from your system. Hitachi MGRM Net 
E-mail transmission cannot be guaranteed to be secure or error-free as 
information could be intercepted, corrupted, lost, destroyed, arrive late 
or incomplete, or contain viruses. Hitachi MGRM Net therefore does not 
accept liability for any errors or omissions in the contents of this 
message, which arise as a result of e-mail transmission. If verification is 
required, please request a hard-copy version. Hitachi MGRM Net Ltd, C - 
6/5, Safdarjung Development Area, New Delhi - 110016, India*
*
*
*'Please 
consider the environment before printing this e-mail'.*

Re: Re: Re: concurrent performance of Guacamole

[Tushar Jain]

Hi Cuihx,

> What resources do you currently have allocated?

I don't understand what resources you mean.
This means RAM, CPU, HDD, Network Bandwidth (between Guacamole server
and OpenStack server/VM). Can you use some kind of performance monitor
to see what is the utilization of each during concurrency peak? Please
let us know for both.

> What kind of usage is expected in general within your users' remote desktop 
> sessions?
We don't care this, the problem is “multiple reconnections during the
initial access”.
What this means is that you do not have any concurrent performance
problem once the user is connected. Your problem is just initial
reconnections. Is that a right assumption?

What i have observed in my implementation of Guacamole is that initial
reconnections are primarily due to one of the following:

1. Remote VMs refusing the connection to Guacamole, instead of it
being a problem with Guacamole itself. This could be due to
connectivity problem between Guacamole server and your openstack VM.
This could also be due to max resource utilization on your openstack
VM
2. Number of concurrent connections exceeding the "maximum number of
connections" property under connections
3. Previous connection of the same user with same VM is not completely
disconnected.
You may want to check one of these as well.




On Thu, Jan 16, 2020 at 12:00 PM 崔**  wrote:

> About 20% of the users had multiple reconnections during the initial
> access, but they were able to connect successfully in the end.
> Everything is OK after connecting successfully.
> Network is OK, this is a concurrent test within the same network.
>
> > What resources do you currently have allocated?
> I don't understand what resources you mean.
>
> > What kind of usage is expected in general within your users' remote
> desktop sessions?
> We don't care this, the problem is “multiple reconnections during the
> initial access”.
>
>
>
>
>
>
>
> 在 2020-01-15 15:45:45，"Mike Jumper"  写道：
>
> On Tue, Jan 14, 2020, 22:27 崔恒香  wrote:
>
>> My application connects VMs in openstack through guacamole.
>>
>
>> The concurrent number is about three hundred.
>>
>> Some users saw multiple reconnections and were finally able to connect.
>>
>> We want to reduce the incidence of reconnection.
>>
>
> This is still fairly vague. Are you referring to users being unable to
> connect, being unexpectedly disconnected, or both?
>
> How many do you mean by "some"? What is the general experience for users
> that are able to establish a connection? Have you been able to confirm that
> network disruption on the user side is not a factor?
>
> Also, from the previous email:
>
> > What resources do you currently have allocated?
>
> > What kind of usage is expected in general within your users' remote
> desktop sessions?
>
> - Mike
>
>
>
>
>

-- 
**Disclaimer:* This message and any attachment may contain confidential, 
proprietary information and is intended only for the individual named. If 
you are not the original intended recipient and have erroneously received 
this message, you should not disseminate, distribute or copy this e-mail. 
Please notify the sender immediately by e-mail if you have received this 
e-mail by mistake and delete this e-mail from your system. Hitachi MGRM Net 
E-mail transmission cannot be guaranteed to be secure or error-free as 
information could be intercepted, corrupted, lost, destroyed, arrive late 
or incomplete, or contain viruses. Hitachi MGRM Net therefore does not 
accept liability for any errors or omissions in the contents of this 
message, which arise as a result of e-mail transmission. If verification is 
required, please request a hard-copy version. Hitachi MGRM Net Ltd, C - 
6/5, Safdarjung Development Area, New Delhi - 110016, India*
*
*
*'Please 
consider the environment before printing this e-mail'.*

Re: Why should I use Guacamole?

[Tushar Jain]

In addition, it is also helping us publish our legacy applications
remotely/on the cloud, which otherwise require a local LAN setup.




On Mon, Jan 13, 2020 at 11:33 PM Michael Ballard 
wrote:

> I use it myself to act as my gateway into my network. Instead of opening
> several ports for RDP/VNC/SSH to various machines (I used non-standard
> ports, so 3389 is not open), I instead have https access to guacamole on my
> webserver, and then from there I can connect to whichever systems I have
> enabled.
>
> This provides me one way in to manage; I don't need multiple firewall
> rules, I don't have to maintain VPN, I don't need any software on the
> machine I'm connecting from: just a web browser. I also don't need
> outbound firewall rules from where I'm connecting from; https is already
> allowed (whereas my non-standard and even standard outbound ports at work
> are blocked).
>
> For myself, it eliminates the need for TeamViewer or other similar
> products.
>
> If you're still requiring connecting to a VPN, then yes, it is not
> accomplishing much for you besides ACLs and centralization.
>
> If all you're looking for is simpler management of remote connections only
> internally to your network, and maintaining VPN access, I'd recommend
> Devolutions' Remote Access Management.
>
> On Mon, Jan 13, 2020 at 8:41 AM WhiteTiger
>  wrote:
>
>> Forgive my perhaps too naive question, but I'm trying to understand.
>> If I have to connect to the Guacamole Server via VPN and the server is
>> located in the LAN, then, why should I use it to connect to PCs for
>> example
>> with RDP?
>> If I am in the LAN, with the VPN, then I can already connect directly to
>> the
>> PCs via RDP  without the need for an intermediate server.
>> I'm missing something, but what?
>>
>>
>>
>> --
>> Sent from:
>> http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/
>>
>> -
>> To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
>> For additional commands, e-mail: user-h...@guacamole.apache.org
>>
>>

-- 
**Disclaimer:* This message and any attachment may contain confidential, 
proprietary information and is intended only for the individual named. If 
you are not the original intended recipient and have erroneously received 
this message, you should not disseminate, distribute or copy this e-mail. 
Please notify the sender immediately by e-mail if you have received this 
e-mail by mistake and delete this e-mail from your system. Hitachi MGRM Net 
E-mail transmission cannot be guaranteed to be secure or error-free as 
information could be intercepted, corrupted, lost, destroyed, arrive late 
or incomplete, or contain viruses. Hitachi MGRM Net therefore does not 
accept liability for any errors or omissions in the contents of this 
message, which arise as a result of e-mail transmission. If verification is 
required, please request a hard-copy version. Hitachi MGRM Net Ltd, C - 
6/5, Safdarjung Development Area, New Delhi - 110016, India*
*
*
*'Please 
consider the environment before printing this e-mail'.*

Re: CAPS Lock Key!!!

[Tushar Jain]

Hi Nick,

Thanks for these inputs. I took the client code from current git master,
compiled and deployed it this time on a Ubuntu 18.04 server (instead of
Ubuntu 16.04). Both CAPS Lock key and Ctrl Key are working like a charm!!
You rock!!

Thanks again,
Tushar

On Fri, Nov 29, 2019 at 10:51 PM Nick Couchman  wrote:

> On Wed, Nov 27, 2019 at 9:41 AM Tushar Jain <
> tushar.j...@hitachi.mgrmnet.com> wrote:
>
>> Hi,
>>
>> There are a few posts in the forum related to non-functioning of CAPS
>> Lock key. Have tried a majority of options, but am still stuck. Below is
>> the summary of what i have tried and the observations:
>>
>> 1. By default, when we connect to Windows 2016/10/7 machine from
>> guacamole over rdp, CAPS Lock does not work. What ever is the state before
>> opening the connection gets carried forward to the Windows machine and then
>> it stops working.
>>
>> 2. We changed the keyboard layout to "Unicode" for the connections
>> as recommended in previous posts. Post update, CAPS lock key starts
>> working, but Ctrl key stops working
>>
>> 3. Though the CAPS lock does not work after opening the connection, but
>> if we click on local machine outside guacamole browser instance and change
>> the CAPS lock and then go back to guacamole rdp connection, the change gets
>> reflected. But whenever CAPS lock key is on, Ctrl Key stops working within
>> rdp connection. Whenever CAPS lock key is off Ctrl key works.
>> ,
>> 4. Have downloaded the latest source of guacamole client 1.0.0, build and
>> redeployed, but the problem persists.
>>
>> Environment
>> 1. Local Machine: Windows 10 laptop
>> 2. Guacamole server: Ubuntu 16.04.4 LTS (Xenial), libfreerdp-1.1.0; xrdp:
>> 0.6
>> 3. Remote Desktop Machine: Windows 2016/2012 server / Windows 10/7
>>
>> Any help to resolve this is appreciated. May be i have missed out some
>> options. It is such a big bummer in otherwise fantastic product!
>>
>>
> A few general thoughts, here...
>
> First, Caps Lock is one of those keys that is going to be tricky to
> capture at the browser level.  If the O/S or browser intercept any of the
> keypresses that occur when Caps Lock is enabled, then it will be impossible
> to send that on to the remote display.  If those key presses are captured,
> then it may be possible to send it on; however, the current state also has
> to be detected so that you know whether caps lock is being turned on or off
> and send the proper/matching keypress into the remote session.  However, if
> the remote session happens to have the opposite state of the local session,
> you could end up simply toggling back-and-forth.  My point is not that it's
> impossible, just difficult, and there are likely to be bugs to be worked
> out along the way.
>
> Speaking of bugs, there are two issues that seem like they may be
> applicable, here:
> https://issues.apache.org/jira/browse/GUACAMOLE-161
> https://issues.apache.org/jira/browse/GUACAMOLE-859
>
> The first, 161, was fixed in 1.0.0, so you should have that fix in.  It
> also deals with Mac OS, which you do not appear to be using, so it is
> likely not the source of your issue, but may be worth looking at to get a
> sense for what was done to fix things in the past.  The second, 859, seems
> more likely to be related to at least one of the issues you are seeing, and
> it is fixed in the current git master code, not in 1.0.0 or even in the
> staging code for 1.1.0.  So, if you're up for a little more work, you might
> grab the latest git master code for Guacamole Client, download, compile,
> and deploy it, and see if your Caps Lock issues are different, same,
> resolved, or still present.
>
> -Nick
>

-- 
**Disclaimer:* This message and any attachment may contain confidential, 
proprietary information and is intended only for the individual named. If 
you are not the original intended recipient and have erroneously received 
this message, you should not disseminate, distribute or copy this e-mail. 
Please notify the sender immediately by e-mail if you have received this 
e-mail by mistake and delete this e-mail from your system. Hitachi MGRM Net 
E-mail transmission cannot be guaranteed to be secure or error-free as 
information could be intercepted, corrupted, lost, destroyed, arrive late 
or incomplete, or contain viruses. Hitachi MGRM Net therefore does not 
accept liability for any errors or omissions in the contents of this 
message, which arise as a result of e-mail transmission. If verification is 
required, please request a hard-copy version. Hitachi MGRM Net Ltd, C - 
6/5, Safdarjung Development Area, New Delhi - 110016, India*
*
*
*'Please 
consider the environment before printing this e-mail'.*

PrtScr & copy/paste images

[Tushar Jain]

Hi,

Can i take a PrintScreen(PrtScr key) on windows local machine and paste in
an application published as remote app in guacamole?

I found a Mar 2018 mail in the general list, but not sure if any further
work has been done on it:
http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/Send-PrintScreen-key-to-the-Remote-Desktop-td2691.html#a2700


Also can i copy/paste images from local windows machine to remote windows
machine?

Thanks,
Tushar Jain

-- 
**Disclaimer:* This message and any attachment may contain confidential, 
proprietary information and is intended only for the individual named. If 
you are not the original intended recipient and have erroneously received 
this message, you should not disseminate, distribute or copy this e-mail. 
Please notify the sender immediately by e-mail if you have received this 
e-mail by mistake and delete this e-mail from your system. Hitachi MGRM Net 
E-mail transmission cannot be guaranteed to be secure or error-free as 
information could be intercepted, corrupted, lost, destroyed, arrive late 
or incomplete, or contain viruses. Hitachi MGRM Net therefore does not 
accept liability for any errors or omissions in the contents of this 
message, which arise as a result of e-mail transmission. If verification is 
required, please request a hard-copy version. Hitachi MGRM Net Ltd, C - 
6/5, Safdarjung Development Area, New Delhi - 110016, India*
*
*
*'Please 
consider the environment before printing this e-mail'.*

Re: Bulk Authorisation - LDAP or MySQL

[Tushar Jain]

Thanks Nick. Just a small extension question - For the production
environment, is it better to store connection details of a user in MySQL or
LDAP?

Thanks
Tushar Jain

On Fri, Nov 29, 2019 at 10:56 PM Nick Couchman  wrote:

> On Wed, Nov 27, 2019 at 10:37 AM Tushar Jain <
> tushar.j...@hitachi.mgrmnet.com> wrote:
>
>> Hi,
>>
>> I have more than a million users in LDAP to whom i have to give access to
>> the same set of connections/connection groups. What would be the easiest
>> and the fastest way to do so.
>>
>> Will writing a small program to upload directly from Excel to Guacamole
>> Mysql be a good idea?
>>
>
> I wouldn't go to Excel - I'd write a program in one of any number of
> languages that queries LDAP for the user and/or group accounts, and inserts
> them into the database.  Bindings for both LDAP and MySQL (or PostgreSQL or
> SQL Server) are readily available for all sorts of languages - C, C++, C#,
> Java, Python - so writing something to do this translation ought to be
> reasonably easy.  You can also just do a shell script of some sort - for
> example, in bash, use "ldapsearch" to query ldap for the required
> information, parse it out into some intermediate format (CSV, for example),
> and then use the mysql command line to read the data from stdin and insert
> it into the database.
>
> Plenty of options :-).
>
> -Nick
>

-- 
**Disclaimer:* This message and any attachment may contain confidential, 
proprietary information and is intended only for the individual named. If 
you are not the original intended recipient and have erroneously received 
this message, you should not disseminate, distribute or copy this e-mail. 
Please notify the sender immediately by e-mail if you have received this 
e-mail by mistake and delete this e-mail from your system. Hitachi MGRM Net 
E-mail transmission cannot be guaranteed to be secure or error-free as 
information could be intercepted, corrupted, lost, destroyed, arrive late 
or incomplete, or contain viruses. Hitachi MGRM Net therefore does not 
accept liability for any errors or omissions in the contents of this 
message, which arise as a result of e-mail transmission. If verification is 
required, please request a hard-copy version. Hitachi MGRM Net Ltd, C - 
6/5, Safdarjung Development Area, New Delhi - 110016, India*
*
*
*'Please 
consider the environment before printing this e-mail'.*

Bulk Authorisation - LDAP or MySQL

[Tushar Jain]

Hi,

I have more than a million users in LDAP to whom i have to give access to
the same set of connections/connection groups. What would be the easiest
and the fastest way to do so.

Will writing a small program to upload directly from Excel to Guacamole
Mysql be a good idea?

Thanks,
Tushar Jain

-- 
**Disclaimer:* This message and any attachment may contain confidential, 
proprietary information and is intended only for the individual named. If 
you are not the original intended recipient and have erroneously received 
this message, you should not disseminate, distribute or copy this e-mail. 
Please notify the sender immediately by e-mail if you have received this 
e-mail by mistake and delete this e-mail from your system. Hitachi MGRM Net 
E-mail transmission cannot be guaranteed to be secure or error-free as 
information could be intercepted, corrupted, lost, destroyed, arrive late 
or incomplete, or contain viruses. Hitachi MGRM Net therefore does not 
accept liability for any errors or omissions in the contents of this 
message, which arise as a result of e-mail transmission. If verification is 
required, please request a hard-copy version. Hitachi MGRM Net Ltd, C - 
6/5, Safdarjung Development Area, New Delhi - 110016, India*
*
*
*'Please 
consider the environment before printing this e-mail'.*

CAPS Lock Key!!!

[Tushar Jain]

Hi,

There are a few posts in the forum related to non-functioning of CAPS Lock
key. Have tried a majority of options, but am still stuck. Below is the
summary of what i have tried and the observations:

1. By default, when we connect to Windows 2016/10/7 machine from guacamole
over rdp, CAPS Lock does not work. What ever is the state before opening
the connection gets carried forward to the Windows machine and then it
stops working.

2. We changed the keyboard layout to "Unicode" for the connections
as recommended in previous posts. Post update, CAPS lock key starts
working, but Ctrl key stops working

3. Though the CAPS lock does not work after opening the connection, but if
we click on local machine outside guacamole browser instance and change the
CAPS lock and then go back to guacamole rdp connection, the change gets
reflected. But whenever CAPS lock key is on, Ctrl Key stops working within
rdp connection. Whenever CAPS lock key is off Ctrl key works.
,
4. Have downloaded the latest source of guacamole client 1.0.0, build and
redeployed, but the problem persists.

Environment
1. Local Machine: Windows 10 laptop
2. Guacamole server: Ubuntu 16.04.4 LTS (Xenial), libfreerdp-1.1.0; xrdp:
0.6
3. Remote Desktop Machine: Windows 2016/2012 server / Windows 10/7

Any help to resolve this is appreciated. May be i have missed out some
options. It is such a big bummer in otherwise fantastic product!

Thanks,
Tushar Jain

-- 
**Disclaimer:* This message and any attachment may contain confidential, 
proprietary information and is intended only for the individual named. If 
you are not the original intended recipient and have erroneously received 
this message, you should not disseminate, distribute or copy this e-mail. 
Please notify the sender immediately by e-mail if you have received this 
e-mail by mistake and delete this e-mail from your system. Hitachi MGRM Net 
E-mail transmission cannot be guaranteed to be secure or error-free as 
information could be intercepted, corrupted, lost, destroyed, arrive late 
or incomplete, or contain viruses. Hitachi MGRM Net therefore does not 
accept liability for any errors or omissions in the contents of this 
message, which arise as a result of e-mail transmission. If verification is 
required, please request a hard-copy version. Hitachi MGRM Net Ltd, C - 
6/5, Safdarjung Development Area, New Delhi - 110016, India*
*
*
*'Please 
consider the environment before printing this e-mail'.*

Re: Display default value of username in Login screen

[Tushar Jain]

Hi Nick,

Thanks for the suggestion. Will try to develop and a custom extension and
will reach out incase i run into any issues.

Thanks
Tushar Jain

On Sat, Nov 23, 2019 at 8:49 PM Nick Couchman  wrote:

> On Wed, Nov 20, 2019 at 23:20 Tushar Jain 
> wrote:
>
>> Hi Nick,
>>
>> Thanks for the response.
>> We are trying to integrate smart card with the login page. Our users are
>> provided with a unique 16 digit card number which acts as their identity
>> and the username. Instead of them typing it out everytime, we want
>> guacamole to fetch it from the card. We have written a custom js to fetch
>> the card number(i.e the username) and it is working fine. But are not able
>> to display the card number in the username textfield. Please suggest how to
>> go about this.
>>
>
> Based on what you're trying to do - authenticate with smart cards, which
> is essentially certificate-based, or X509, authentication - I would suggest
> that you write a custom authentication extension that handles that
> mechanism, rather than trying to squeeze the method you're using into the
> existing username and password authentication.  While this isn't identical
> to SSO authentication, looking at those modules may help you understand how
> they "replace" the standard username and password requirements with
> something else - in those cases a redirect to another page and processing
> of a SSO ticket, in your case the validation and parsing of a certificate
> stored on a smart card.
>
> Besides avoiding trying to hack the angularjs pages, it will allow you to
> make sure that the authentication happens securely by writing the module in
> such a way that the front end (angularjs) and back end (Java application)
> are "synchronized" in their conversation for authenticating the user.
>
> The manual has information on the extensions, and, honestly, just looking
> at the existing code will probably be as much help as anything.  And, of
> course, we are happy to help out here, as well .
>
> -Nick
>

-- 
**Disclaimer:* This message and any attachment may contain confidential, 
proprietary information and is intended only for the individual named. If 
you are not the original intended recipient and have erroneously received 
this message, you should not disseminate, distribute or copy this e-mail. 
Please notify the sender immediately by e-mail if you have received this 
e-mail by mistake and delete this e-mail from your system. Hitachi MGRM Net 
E-mail transmission cannot be guaranteed to be secure or error-free as 
information could be intercepted, corrupted, lost, destroyed, arrive late 
or incomplete, or contain viruses. Hitachi MGRM Net therefore does not 
accept liability for any errors or omissions in the contents of this 
message, which arise as a result of e-mail transmission. If verification is 
required, please request a hard-copy version. Hitachi MGRM Net Ltd, C - 
6/5, Safdarjung Development Area, New Delhi - 110016, India*
*
*
*'Please 
consider the environment before printing this e-mail'.*

Re: Display default value of username in Login screen

[Tushar Jain]

Hi Nick,

Thanks for the response.
We are trying to integrate smart card with the login page. Our users are
provided with a unique 16 digit card number which acts as their identity
and the username. Instead of them typing it out everytime, we want
guacamole to fetch it from the card. We have written a custom js to fetch
the card number(i.e the username) and it is working fine. But are not able
to display the card number in the username textfield. Please suggest how to
go about this.

Thanks again
Tushar

On Wed, Nov 20, 2019 at 11:57 PM Nick Couchman  wrote:

> On Wed, Nov 20, 2019 at 3:19 AM Tushar Jain <
> tushar.j...@hitachi.mgrmnet.com> wrote:
>
>> Hi,
>>
>> How can one display default value of username in login screen? The
>> default value in my case is returned by Javascript function.
>>
>> Since in 1.1.0, the login fields are generated dynamically, i tried
>> displaying the default value in 0.9.6 where login screen was independent. I
>> wasnt successful in either versions.
>>
>> In 0.9.6, I have already tried modifying LoginController.js
>> ($scope.username="Joe"), but the default value does not reflect
>>
>>
> What do you mean by "default value" for the username?  The username field
> in a login box doesn't generally have a "default value," at least, not in
> my experience.  What is it you're trying to accomplish by putting some
> value in there??
>
> -Nick
>

-- 
**Disclaimer:* This message and any attachment may contain confidential, 
proprietary information and is intended only for the individual named. If 
you are not the original intended recipient and have erroneously received 
this message, you should not disseminate, distribute or copy this e-mail. 
Please notify the sender immediately by e-mail if you have received this 
e-mail by mistake and delete this e-mail from your system. Hitachi MGRM Net 
E-mail transmission cannot be guaranteed to be secure or error-free as 
information could be intercepted, corrupted, lost, destroyed, arrive late 
or incomplete, or contain viruses. Hitachi MGRM Net therefore does not 
accept liability for any errors or omissions in the contents of this 
message, which arise as a result of e-mail transmission. If verification is 
required, please request a hard-copy version. Hitachi MGRM Net Ltd, C - 
6/5, Safdarjung Development Area, New Delhi - 110016, India*
*
*
*'Please 
consider the environment before printing this e-mail'.*

Display default value of username in Login screen

[Tushar Jain]

Hi,

How can one display default value of username in login screen? The default
value in my case is returned by Javascript function.

Since in 1.1.0, the login fields are generated dynamically, i tried
displaying the default value in 0.9.6 where login screen was independent. I
wasnt successful in either versions.

In 0.9.6, I have already tried modifying LoginController.js
($scope.username="Joe"), but the default value does not reflect

Any help for 1.1.0 and 0.9.6 is appreciated.

Thanks,
Tushar Jain

-- 
**Disclaimer:* This message and any attachment may contain confidential, 
proprietary information and is intended only for the individual named. If 
you are not the original intended recipient and have erroneously received 
this message, you should not disseminate, distribute or copy this e-mail. 
Please notify the sender immediately by e-mail if you have received this 
e-mail by mistake and delete this e-mail from your system. Hitachi MGRM Net 
E-mail transmission cannot be guaranteed to be secure or error-free as 
information could be intercepted, corrupted, lost, destroyed, arrive late 
or incomplete, or contain viruses. Hitachi MGRM Net therefore does not 
accept liability for any errors or omissions in the contents of this 
message, which arise as a result of e-mail transmission. If verification is 
required, please request a hard-copy version. Hitachi MGRM Net Ltd, C - 
6/5, Safdarjung Development Area, New Delhi - 110016, India*
*
*
*'Please 
consider the environment before printing this e-mail'.*