Re: Log in to Gnome Shell RDP

2024-03-01 Thread Horváth Csaba
Hi,

I did some research sine then.
So grabbed a test computer, and that had Debian Bookworm. libfreeerdp2
2.10, gnome-remote-desktop 43. Running on X. Works flawlessly from
Guacamole, with RDP security.
On my main one, i logged in to an X session, because normally i use
Wayland. Nothing, Guacamole cannot connect.

So the problem is only present on Debian Testing/Trixie, with
libfreerdp2-2/testing,testing,now 2.11.2+dfsg1-1+b1  and
gnome-remote-desktop/testing,testing 44.2-6

On Debian mailing list, i got no answer, and still could not figure
out how to report on BITS. Or can someone please report it?

BR,

Cs.

Invite System  ezt írta (időpont: 2024. márc. 1., P, 0:15):
>
> Hey,
>
> Well, I use docker for Guac, so I was trying to roll back between multiple 
> versions of 1.5.X - and in all situations, the Guac docker container didn't 
> resolve the issues for when something was previously working. I feel like the 
> issue is more specifically with Gnome/Ubuntu Packages on the host and not 
> Guacamole itself. As even now on:
> $ docker images -a | grep -i guac 
>   
> [0:14:50]
> guacamole/guacd   latest
> fddad7763717   21 hours ago   149MB
> guacamole/guacamole   latest
> 93545aa68059   22 hours ago   496MB
>
> This is still failing.
>
> On Thu, Feb 15, 2024 at 9:45 PM Horváth Csaba  
> wrote:
>>
>> Hi,
>>
>> I managed to install a locally compiled guacd on a test machne.
>>
>> The logs show the same.
>>
>> On the remote side :
>> [21:28:49:059] [3505237:3505454] [INFO][com.freerdp.core.connection] -
>> Client Security: NLA:1 TLS:1 RDP:0
>> [21:28:49:059] [3505237:3505454] [INFO][com.freerdp.core.connection] -
>> Server Security: NLA:1 TLS:0 RDP:0
>> [21:28:49:059] [3505237:3505454] [INFO][com.freerdp.core.connection] -
>> Negotiated Security: NLA:1 TLS:0 RDP:0
>> [21:28:49:079] [3505237:3505454] [WARN][com.winpr.negotiate] -
>> AcceptSecurityContext status SEC_I_CONTINUE_NEEDED [0x00090312]
>> [21:28:49:180] [3505237:3505454] [WARN][com.winpr.negotiate] -
>> AcceptSecurityContext status SEC_I_COMPLETE_NEEDED [0x00090313]
>> [21:28:49:281] [3505237:3505454] [INFO][com.freerdp.core.connection] -
>> Accepted client: Guacamole RDP
>> [21:28:49:281] [3505237:3505454] [INFO][com.freerdp.core.connection] -
>> Accepted channels:
>> [21:28:49:281] [3505237:3505454] [INFO][com.freerdp.core.connection] -  
>> cliprdr
>> [21:28:49:281] [3505237:3505454] [INFO][com.freerdp.core.connection] -  rdpdr
>> [21:28:49:281] [3505237:3505454] [INFO][com.freerdp.core.connection] -  
>> rdpsnd
>> [21:28:49:281] [3505237:3505454] [INFO][com.freerdp.core.gcc] - Active
>> rdp encryption level: NONE
>> [21:28:49:281] [3505237:3505454] [INFO][com.freerdp.core.gcc] -
>> Selected rdp encryption method: NONE
>>
>> ** (gnome-remote-desktop-daemon:3505237): WARNING **: 21:28:50.436:
>> [RDP] Client did not advertise support for the Graphics Pipeline,
>> closing connection
>> [21:28:50:086] [3505237:3505454] [ERROR][com.freerdp.core.transport] -
>> transport_check_fds: transport->ReceiveCallback() - -1
>>
>>
>> On the guacd side :
>> guacd[42304]: INFO: Guacamole proxy daemon (guacd) version 1.5.4 started
>> guacd[42304]: INFO: Listening on host 127.0.0.1, port 4822
>> guacd[42304]: INFO: Creating new client for protocol "rdp"
>> guacd[42304]: INFO: Connection ID is "$aad7cb82-9521-49eb-8ca1-596d26a3c61a"
>> guacd[42306]: INFO: Security mode: NLA
>> guacd[42306]: INFO: Resize method: none
>> guacd[42306]: INFO: No clipboard line-ending normalization specified.
>> Defaulting to preserving the format of all line endings.
>> guacd[42306]: INFO: User "@f7065a55-b9e4-4056-92ef-f1491c59d9d9"
>> joined connection "$aad7cb82-9521-49eb-8ca1-596d26a3c61a" (1 users now
>> present)
>> guacd[42306]: INFO: Loading keymap "base"
>> guacd[42306]: INFO: Loading keymap "en-us-qwerty"
>> guacd[42306]: INFO: RDP server closed/refused connection: Server
>> refused connection (wrong security type?)
>> guacd[42306]: INFO: User "@f7065a55-b9e4-4056-92ef-f1491c59d9d9"
>> disconnected (0 users remain)
>> guacd[42306]: INFO: Last user of connection
>> "$aad7cb82-9521-49eb-8ca1-596d26a3c61a" disconnected
>> guacd[42304]: INFO: Connection "$aad7cb82-9521-49eb-8ca1-596d26a3c61a" 
>> removed.
>>
>> Freerdp2 packages installed on the test machine :
>> freerdp2-dev/oldstable,now 2.3.0+dfsg1-2+deb11u1 amd64
>> libfreerdp-client2-2/oldstable,now 2.3.0+dfsg1-2+deb11u1 amd6
>> libfreerdp-server2-2/oldstable,now 2.3.0+dfsg1-2+deb11u1 amd64
>> libfreerdp-shadow-subsystem2-2/oldstable,now 2.3.0+dfsg1-2+deb11u1 amd64
>> libfreerdp-shadow2-2/oldstable,now 2.3.0+dfsg1-2+deb11u1 amd64
>> libfreerdp2-2/oldstable,now 2.3.0+dfsg1-2+deb11u1 amd64
>>
>> Freerdp2 packages installed on my home server, which i normally use as
>> remote gateway :
>> 

Re: Log in to Gnome Shell RDP

2024-02-29 Thread Horváth Csaba
Hi,

What's your libfreerdp2 version?
Are you able to log in from any other computer with an installed RDP cloeint?

I have submitted bugs for Debian, and Gnome, but nothing happened, or
i got redirected to here, because Gnome-RDP is  working well as per
them.
(So i don't know what can be the issue. I can log in to my computer
from any RDP client except Guacamole, and the Gnome-RDP developers
told that the Graphics Pipeline issue should be in Guacd, or
libfreerdp2, as it needs to hook up to the pipeline  when connecting -
and all other do.)
(Sigh, i'll throw a test VM with Gnome and check if guacd can log in.)

Cs.

Invite System  ezt írta (időpont: 2024. márc. 1., P, 0:15):
>
> Hey,
>
> Well, I use docker for Guac, so I was trying to roll back between multiple 
> versions of 1.5.X - and in all situations, the Guac docker container didn't 
> resolve the issues for when something was previously working. I feel like the 
> issue is more specifically with Gnome/Ubuntu Packages on the host and not 
> Guacamole itself. As even now on:
> $ docker images -a | grep -i guac 
>   
> [0:14:50]
> guacamole/guacd   latest
> fddad7763717   21 hours ago   149MB
> guacamole/guacamole   latest
> 93545aa68059   22 hours ago   496MB
>
> This is still failing.
>
> On Thu, Feb 15, 2024 at 9:45 PM Horváth Csaba  
> wrote:
>>
>> Hi,
>>
>> I managed to install a locally compiled guacd on a test machne.
>>
>> The logs show the same.
>>
>> On the remote side :
>> [21:28:49:059] [3505237:3505454] [INFO][com.freerdp.core.connection] -
>> Client Security: NLA:1 TLS:1 RDP:0
>> [21:28:49:059] [3505237:3505454] [INFO][com.freerdp.core.connection] -
>> Server Security: NLA:1 TLS:0 RDP:0
>> [21:28:49:059] [3505237:3505454] [INFO][com.freerdp.core.connection] -
>> Negotiated Security: NLA:1 TLS:0 RDP:0
>> [21:28:49:079] [3505237:3505454] [WARN][com.winpr.negotiate] -
>> AcceptSecurityContext status SEC_I_CONTINUE_NEEDED [0x00090312]
>> [21:28:49:180] [3505237:3505454] [WARN][com.winpr.negotiate] -
>> AcceptSecurityContext status SEC_I_COMPLETE_NEEDED [0x00090313]
>> [21:28:49:281] [3505237:3505454] [INFO][com.freerdp.core.connection] -
>> Accepted client: Guacamole RDP
>> [21:28:49:281] [3505237:3505454] [INFO][com.freerdp.core.connection] -
>> Accepted channels:
>> [21:28:49:281] [3505237:3505454] [INFO][com.freerdp.core.connection] -  
>> cliprdr
>> [21:28:49:281] [3505237:3505454] [INFO][com.freerdp.core.connection] -  rdpdr
>> [21:28:49:281] [3505237:3505454] [INFO][com.freerdp.core.connection] -  
>> rdpsnd
>> [21:28:49:281] [3505237:3505454] [INFO][com.freerdp.core.gcc] - Active
>> rdp encryption level: NONE
>> [21:28:49:281] [3505237:3505454] [INFO][com.freerdp.core.gcc] -
>> Selected rdp encryption method: NONE
>>
>> ** (gnome-remote-desktop-daemon:3505237): WARNING **: 21:28:50.436:
>> [RDP] Client did not advertise support for the Graphics Pipeline,
>> closing connection
>> [21:28:50:086] [3505237:3505454] [ERROR][com.freerdp.core.transport] -
>> transport_check_fds: transport->ReceiveCallback() - -1
>>
>>
>> On the guacd side :
>> guacd[42304]: INFO: Guacamole proxy daemon (guacd) version 1.5.4 started
>> guacd[42304]: INFO: Listening on host 127.0.0.1, port 4822
>> guacd[42304]: INFO: Creating new client for protocol "rdp"
>> guacd[42304]: INFO: Connection ID is "$aad7cb82-9521-49eb-8ca1-596d26a3c61a"
>> guacd[42306]: INFO: Security mode: NLA
>> guacd[42306]: INFO: Resize method: none
>> guacd[42306]: INFO: No clipboard line-ending normalization specified.
>> Defaulting to preserving the format of all line endings.
>> guacd[42306]: INFO: User "@f7065a55-b9e4-4056-92ef-f1491c59d9d9"
>> joined connection "$aad7cb82-9521-49eb-8ca1-596d26a3c61a" (1 users now
>> present)
>> guacd[42306]: INFO: Loading keymap "base"
>> guacd[42306]: INFO: Loading keymap "en-us-qwerty"
>> guacd[42306]: INFO: RDP server closed/refused connection: Server
>> refused connection (wrong security type?)
>> guacd[42306]: INFO: User "@f7065a55-b9e4-4056-92ef-f1491c59d9d9"
>> disconnected (0 users remain)
>> guacd[42306]: INFO: Last user of connection
>> "$aad7cb82-9521-49eb-8ca1-596d26a3c61a" disconnected
>> guacd[42304]: INFO: Connection "$aad7cb82-9521-49eb-8ca1-596d26a3c61a" 
>> removed.
>>
>> Freerdp2 packages installed on the test machine :
>> freerdp2-dev/oldstable,now 2.3.0+dfsg1-2+deb11u1 amd64
>> libfreerdp-client2-2/oldstable,now 2.3.0+dfsg1-2+deb11u1 amd6
>> libfreerdp-server2-2/oldstable,now 2.3.0+dfsg1-2+deb11u1 amd64
>> libfreerdp-shadow-subsystem2-2/oldstable,now 2.3.0+dfsg1-2+deb11u1 amd64
>> libfreerdp-shadow2-2/oldstable,now 2.3.0+dfsg1-2+deb11u1 amd64
>> libfreerdp2-2/oldstable,now 2.3.0+dfsg1-2+deb11u1 amd64
>>
>> Freerdp2 packages installed on my home server, which i normally use as
>> remote gateway :
>> 

Re: Log in to Gnome Shell RDP

2024-02-29 Thread Invite System
Hey,

Well, I use docker for Guac, so I was trying to roll back between multiple
versions of 1.5.X - and in all situations, the Guac docker container didn't
resolve the issues for when something was previously working. I feel like
the issue is more specifically with Gnome/Ubuntu Packages on the host and
not Guacamole itself. As even now on:
$ docker images -a | grep -i guac

[0:14:50]
guacamole/guacd   latest
 fddad7763717   21 hours ago   149MB
guacamole/guacamole   latest
 93545aa68059   22 hours ago   496MB

This is still failing.

On Thu, Feb 15, 2024 at 9:45 PM Horváth Csaba 
wrote:

> Hi,
>
> I managed to install a locally compiled guacd on a test machne.
>
> The logs show the same.
>
> On the remote side :
> [21:28:49:059] [3505237:3505454] [INFO][com.freerdp.core.connection] -
> Client Security: NLA:1 TLS:1 RDP:0
> [21:28:49:059] [3505237:3505454] [INFO][com.freerdp.core.connection] -
> Server Security: NLA:1 TLS:0 RDP:0
> [21:28:49:059] [3505237:3505454] [INFO][com.freerdp.core.connection] -
> Negotiated Security: NLA:1 TLS:0 RDP:0
> [21:28:49:079] [3505237:3505454] [WARN][com.winpr.negotiate] -
> AcceptSecurityContext status SEC_I_CONTINUE_NEEDED [0x00090312]
> [21:28:49:180] [3505237:3505454] [WARN][com.winpr.negotiate] -
> AcceptSecurityContext status SEC_I_COMPLETE_NEEDED [0x00090313]
> [21:28:49:281] [3505237:3505454] [INFO][com.freerdp.core.connection] -
> Accepted client: Guacamole RDP
> [21:28:49:281] [3505237:3505454] [INFO][com.freerdp.core.connection] -
> Accepted channels:
> [21:28:49:281] [3505237:3505454] [INFO][com.freerdp.core.connection] -
> cliprdr
> [21:28:49:281] [3505237:3505454] [INFO][com.freerdp.core.connection] -
> rdpdr
> [21:28:49:281] [3505237:3505454] [INFO][com.freerdp.core.connection] -
> rdpsnd
> [21:28:49:281] [3505237:3505454] [INFO][com.freerdp.core.gcc] - Active
> rdp encryption level: NONE
> [21:28:49:281] [3505237:3505454] [INFO][com.freerdp.core.gcc] -
> Selected rdp encryption method: NONE
>
> ** (gnome-remote-desktop-daemon:3505237): WARNING **: 21:28:50.436:
> [RDP] Client did not advertise support for the Graphics Pipeline,
> closing connection
> [21:28:50:086] [3505237:3505454] [ERROR][com.freerdp.core.transport] -
> transport_check_fds: transport->ReceiveCallback() - -1
>
>
> On the guacd side :
> guacd[42304]: INFO: Guacamole proxy daemon (guacd) version 1.5.4 started
> guacd[42304]: INFO: Listening on host 127.0.0.1, port 4822
> guacd[42304]: INFO: Creating new client for protocol "rdp"
> guacd[42304]: INFO: Connection ID is
> "$aad7cb82-9521-49eb-8ca1-596d26a3c61a"
> guacd[42306]: INFO: Security mode: NLA
> guacd[42306]: INFO: Resize method: none
> guacd[42306]: INFO: No clipboard line-ending normalization specified.
> Defaulting to preserving the format of all line endings.
> guacd[42306]: INFO: User "@f7065a55-b9e4-4056-92ef-f1491c59d9d9"
> joined connection "$aad7cb82-9521-49eb-8ca1-596d26a3c61a" (1 users now
> present)
> guacd[42306]: INFO: Loading keymap "base"
> guacd[42306]: INFO: Loading keymap "en-us-qwerty"
> guacd[42306]: INFO: RDP server closed/refused connection: Server
> refused connection (wrong security type?)
> guacd[42306]: INFO: User "@f7065a55-b9e4-4056-92ef-f1491c59d9d9"
> disconnected (0 users remain)
> guacd[42306]: INFO: Last user of connection
> "$aad7cb82-9521-49eb-8ca1-596d26a3c61a" disconnected
> guacd[42304]: INFO: Connection "$aad7cb82-9521-49eb-8ca1-596d26a3c61a"
> removed.
>
> Freerdp2 packages installed on the test machine :
> freerdp2-dev/oldstable,now 2.3.0+dfsg1-2+deb11u1 amd64
> libfreerdp-client2-2/oldstable,now 2.3.0+dfsg1-2+deb11u1 amd6
> libfreerdp-server2-2/oldstable,now 2.3.0+dfsg1-2+deb11u1 amd64
> libfreerdp-shadow-subsystem2-2/oldstable,now 2.3.0+dfsg1-2+deb11u1 amd64
> libfreerdp-shadow2-2/oldstable,now 2.3.0+dfsg1-2+deb11u1 amd64
> libfreerdp2-2/oldstable,now 2.3.0+dfsg1-2+deb11u1 amd64
>
> Freerdp2 packages installed on my home server, which i normally use as
> remote gateway :
> libfreerdp-client2-2/stable,now 2.10.0+dfsg1-1 amd64
> libfreerdp-server2-2/stable,now 2.10.0+dfsg1-1 amd64
> libfreerdp2-2/stable,now 2.10.0+dfsg1-1 amd64
>
> Freerdp packages installed on the test machine where i managed to
> connect with Gnome Connect via RDP to the target machine :
> freerdp2-x11/testing,testing,now 2.11.2+dfsg1-1+b1 amd64
> libfreerdp-client2-2/testing,testing,now 2.11.2+dfsg1-1+b1 amd64
> libfreerdp-server2-2/testing,testing,now 2.11.2+dfsg1-1+b1 amd64
> libfreerdp2-2/testing,testing,now 2.11.2+dfsg1-1+b1 amd64
>
>
> Freerdp2 packages installed on my daily laptop where i want to connect
> from Guacamole :
> libfreerdp-client2-2/testing,testing,now 2.11.2+dfsg1-1+b1 amd64
> libfreerdp-server2-2/testing,testing,now 2.11.2+dfsg1-1+b1 amd64
> libfreerdp2-2/testing,testing,now 2.11.2+dfsg1-1+b1 amd64
>
> No clue what is the issue.  The test machine was a Debian 11, the
> others are 12, mostly Trixie.
>
> Cs.
>
> Horváth Csaba  

Re: Log in to Gnome Shell RDP

2024-02-15 Thread Horváth Csaba
Hi,

I managed to install a locally compiled guacd on a test machne.

The logs show the same.

On the remote side :
[21:28:49:059] [3505237:3505454] [INFO][com.freerdp.core.connection] -
Client Security: NLA:1 TLS:1 RDP:0
[21:28:49:059] [3505237:3505454] [INFO][com.freerdp.core.connection] -
Server Security: NLA:1 TLS:0 RDP:0
[21:28:49:059] [3505237:3505454] [INFO][com.freerdp.core.connection] -
Negotiated Security: NLA:1 TLS:0 RDP:0
[21:28:49:079] [3505237:3505454] [WARN][com.winpr.negotiate] -
AcceptSecurityContext status SEC_I_CONTINUE_NEEDED [0x00090312]
[21:28:49:180] [3505237:3505454] [WARN][com.winpr.negotiate] -
AcceptSecurityContext status SEC_I_COMPLETE_NEEDED [0x00090313]
[21:28:49:281] [3505237:3505454] [INFO][com.freerdp.core.connection] -
Accepted client: Guacamole RDP
[21:28:49:281] [3505237:3505454] [INFO][com.freerdp.core.connection] -
Accepted channels:
[21:28:49:281] [3505237:3505454] [INFO][com.freerdp.core.connection] -  cliprdr
[21:28:49:281] [3505237:3505454] [INFO][com.freerdp.core.connection] -  rdpdr
[21:28:49:281] [3505237:3505454] [INFO][com.freerdp.core.connection] -  rdpsnd
[21:28:49:281] [3505237:3505454] [INFO][com.freerdp.core.gcc] - Active
rdp encryption level: NONE
[21:28:49:281] [3505237:3505454] [INFO][com.freerdp.core.gcc] -
Selected rdp encryption method: NONE

** (gnome-remote-desktop-daemon:3505237): WARNING **: 21:28:50.436:
[RDP] Client did not advertise support for the Graphics Pipeline,
closing connection
[21:28:50:086] [3505237:3505454] [ERROR][com.freerdp.core.transport] -
transport_check_fds: transport->ReceiveCallback() - -1


On the guacd side :
guacd[42304]: INFO: Guacamole proxy daemon (guacd) version 1.5.4 started
guacd[42304]: INFO: Listening on host 127.0.0.1, port 4822
guacd[42304]: INFO: Creating new client for protocol "rdp"
guacd[42304]: INFO: Connection ID is "$aad7cb82-9521-49eb-8ca1-596d26a3c61a"
guacd[42306]: INFO: Security mode: NLA
guacd[42306]: INFO: Resize method: none
guacd[42306]: INFO: No clipboard line-ending normalization specified.
Defaulting to preserving the format of all line endings.
guacd[42306]: INFO: User "@f7065a55-b9e4-4056-92ef-f1491c59d9d9"
joined connection "$aad7cb82-9521-49eb-8ca1-596d26a3c61a" (1 users now
present)
guacd[42306]: INFO: Loading keymap "base"
guacd[42306]: INFO: Loading keymap "en-us-qwerty"
guacd[42306]: INFO: RDP server closed/refused connection: Server
refused connection (wrong security type?)
guacd[42306]: INFO: User "@f7065a55-b9e4-4056-92ef-f1491c59d9d9"
disconnected (0 users remain)
guacd[42306]: INFO: Last user of connection
"$aad7cb82-9521-49eb-8ca1-596d26a3c61a" disconnected
guacd[42304]: INFO: Connection "$aad7cb82-9521-49eb-8ca1-596d26a3c61a" removed.

Freerdp2 packages installed on the test machine :
freerdp2-dev/oldstable,now 2.3.0+dfsg1-2+deb11u1 amd64
libfreerdp-client2-2/oldstable,now 2.3.0+dfsg1-2+deb11u1 amd6
libfreerdp-server2-2/oldstable,now 2.3.0+dfsg1-2+deb11u1 amd64
libfreerdp-shadow-subsystem2-2/oldstable,now 2.3.0+dfsg1-2+deb11u1 amd64
libfreerdp-shadow2-2/oldstable,now 2.3.0+dfsg1-2+deb11u1 amd64
libfreerdp2-2/oldstable,now 2.3.0+dfsg1-2+deb11u1 amd64

Freerdp2 packages installed on my home server, which i normally use as
remote gateway :
libfreerdp-client2-2/stable,now 2.10.0+dfsg1-1 amd64
libfreerdp-server2-2/stable,now 2.10.0+dfsg1-1 amd64
libfreerdp2-2/stable,now 2.10.0+dfsg1-1 amd64

Freerdp packages installed on the test machine where i managed to
connect with Gnome Connect via RDP to the target machine :
freerdp2-x11/testing,testing,now 2.11.2+dfsg1-1+b1 amd64
libfreerdp-client2-2/testing,testing,now 2.11.2+dfsg1-1+b1 amd64
libfreerdp-server2-2/testing,testing,now 2.11.2+dfsg1-1+b1 amd64
libfreerdp2-2/testing,testing,now 2.11.2+dfsg1-1+b1 amd64


Freerdp2 packages installed on my daily laptop where i want to connect
from Guacamole :
libfreerdp-client2-2/testing,testing,now 2.11.2+dfsg1-1+b1 amd64
libfreerdp-server2-2/testing,testing,now 2.11.2+dfsg1-1+b1 amd64
libfreerdp2-2/testing,testing,now 2.11.2+dfsg1-1+b1 amd64

No clue what is the issue.  The test machine was a Debian 11, the
others are 12, mostly Trixie.

Cs.

Horváth Csaba  ezt írta (időpont: 2024.
febr. 15., Cs, 14:32):
>
> Hi,
>
> I could not figure out. Maybe the problem is in the guacd, or in the
> server. I'm trying to install a self-compiled Guacamole instance on a
> test VM, and check if it is working.
>
> The only thing i figured out that the problem is related to the
> graphics pipeline.
>
> BR,
>
> Cs.
>
> Invite System  ezt írta (időpont: 2024. febr.
> 14., Sze, 22:37):
> >
> > I am having similar issues with Gnome RDP and Guacamole. I have a more "up 
> > to date" server, and an older one.
> >
> > On the currently working machine that can connect:
> > ➜  ~ sudo dpkg -l | grep -i remote
> > ii  gnome-remote-desktop   42.9-0ubuntu0.22.04.1
> >amd64Remote desktop daemon for GNOME using PipeWire
> > ii  iputils-tracepath  3:20211215-1 

Re: Log in to Gnome Shell RDP

2024-02-15 Thread Horváth Csaba
Hi,

I could not figure out. Maybe the problem is in the guacd, or in the
server. I'm trying to install a self-compiled Guacamole instance on a
test VM, and check if it is working.

The only thing i figured out that the problem is related to the
graphics pipeline.

BR,

Cs.

Invite System  ezt írta (időpont: 2024. febr.
14., Sze, 22:37):
>
> I am having similar issues with Gnome RDP and Guacamole. I have a more "up to 
> date" server, and an older one.
>
> On the currently working machine that can connect:
> ➜  ~ sudo dpkg -l | grep -i remote
> ii  gnome-remote-desktop   42.9-0ubuntu0.22.04.1  
>  amd64Remote desktop daemon for GNOME using PipeWire
> ii  iputils-tracepath  3:20211215-1   
>  amd64Tools to trace the network path to a remote host
> ii  libfreerdp-client2-2:amd64 2.6.1+dfsg1-3ubuntu2.5 
>  amd64Free Remote Desktop Protocol library (client library)
> ii  libfreerdp-server2-2:amd64 2.6.1+dfsg1-3ubuntu2.5 
>  amd64Free Remote Desktop Protocol library (server library)
> ii  libfreerdp2-2:amd642.6.1+dfsg1-3ubuntu2.5 
>  amd64Free Remote Desktop Protocol library (core library)
> ii  openssh-client 1:8.9p1-3ubuntu0.6 
>  amd64secure shell (SSH) client, for secure access to remote 
> machines
> ii  openssh-server 1:8.9p1-3ubuntu0.6 
>  amd64secure shell (SSH) server, for secure access from 
> remote machines
> ii  openssh-sftp-server1:8.9p1-3ubuntu0.6 
>  amd64secure shell (SSH) sftp server module, for SFTP access 
> from remote machines
> ii  rsync  3.2.7-0ubuntu0.22.04.2 
>  amd64fast, versatile, remote (and local) file-copying tool
>
> ➜  ~ docker images
> REPOSITORY  TAG   IMAGE ID   CREATEDSIZE
> guacamole/guacamole latest317a7b1b4885   3 weeks ago496MB
> ghcr.io/linuxserver/swaglatest441d2b67b125   3 weeks ago406MB
>
> On my non-working server:
> $ docker images | grep -i guac
>   
> 
> [21:36:33]
> guacamole/guacd   latest
> c26fed464ea8   19 hours ago   149MB
> guacamole/guacamole   latest
> 15626debc58c   20 hours ago   496MB
>
> $ dpkg -l | grep -i remote
>   
> 
> [22:32:21]
> ii  gnome-remote-desktop  45.0-1  
> amd64Remote desktop daemon for GNOME using PipeWire
> ii  iputils-tracepath 3:20221126-1
> amd64Tools to trace the network path to a remote host
> ii  libfreerdp-client2-2:amd642.10.0+dfsg1-1.1ubuntu1.1   
> amd64Free Remote Desktop Protocol library (client library)
> ii  libfreerdp-server2-2:amd642.10.0+dfsg1-1.1ubuntu1.1   
> amd64Free Remote Desktop Protocol library (server library)
> ii  libfreerdp2-2:amd64   2.10.0+dfsg1-1.1ubuntu1.1   
> amd64Free Remote Desktop Protocol library (core library)
> ii  liblirc-client0:amd64 0.10.1-7.2  
> amd64infra-red remote control support - client library
>
> When digging deeper, I found this session, and also a Gnome Issue Tracker:
> https://gitlab.gnome.org/GNOME/gnome-remote-desktop/-/issues/183
>
> Also from the Author of this Mailing List issue.
>
> Were you able to make any headway on resolving this? I am currently blocked 
> on the ability to use guacamole with my host.
>
> Best,
>
> On Thu, Feb 1, 2024 at 2:28 PM Horváth Csaba  
> wrote:
>>
>> Hi,
>>
>> Just for the record, it turned out to be a Gnome-remote-desktop bug. I
>> tried to connect to Windows with
>> rdp://user:password@hostname/?ignore-cert=true=nla , and it
>> works. I checked FreeRDP to connect to my computer from another Linux
>> one, and it said that it's also using NLA, and it connected well. On
>> my home server, where Guacamole sits, Debian12/Bookworm is installed,
>> with libfreerdp-2.10 if i remember correctly. On my other machines,
>> Debian 12/Trixie, libfreerdp-2.11 . (The server is headless, has no
>> GUI.)
>> I have 2 Debian 12/Trixie on 2 computers, 

Re: Log in to Gnome Shell RDP

2024-02-14 Thread Invite System
I am having similar issues with Gnome RDP and Guacamole. I have a more "up
to date" server, and an older one.

On the currently working machine that can connect:
➜  ~ sudo dpkg -l | grep -i remote
ii  gnome-remote-desktop   42.9-0ubuntu0.22.04.1
amd64Remote desktop daemon for GNOME using PipeWire
ii  iputils-tracepath  3:20211215-1
   amd64Tools to trace the network path to a remote host
ii  libfreerdp-client2-2:amd64 2.6.1+dfsg1-3ubuntu2.5
   amd64Free Remote Desktop Protocol library (client
library)
ii  libfreerdp-server2-2:amd64 2.6.1+dfsg1-3ubuntu2.5
   amd64Free Remote Desktop Protocol library (server
library)
ii  libfreerdp2-2:amd642.6.1+dfsg1-3ubuntu2.5
   amd64Free Remote Desktop Protocol library (core library)
ii  openssh-client 1:8.9p1-3ubuntu0.6
   amd64secure shell (SSH) client, for secure access to
remote machines
ii  openssh-server 1:8.9p1-3ubuntu0.6
   amd64secure shell (SSH) server, for secure access from
remote machines
ii  openssh-sftp-server1:8.9p1-3ubuntu0.6
   amd64secure shell (SSH) sftp server module, for SFTP
access from remote machines
ii  rsync  3.2.7-0ubuntu0.22.04.2
   amd64fast, versatile, remote (and local) file-copying
tool

➜  ~ docker images
REPOSITORY  TAG   IMAGE ID   CREATEDSIZE
guacamole/guacamole latest317a7b1b4885   3 weeks ago
 496MB
ghcr.io/linuxserver/swaglatest441d2b67b125   3 weeks ago
 406MB

On my non-working server:
$ docker images | grep -i guac


 [21:36:33]
guacamole/guacd   latest
 c26fed464ea8   19 hours ago   149MB
guacamole/guacamole   latest
 15626debc58c   20 hours ago   496MB

$ dpkg -l | grep -i remote


 [22:32:21]
ii  gnome-remote-desktop  45.0-1
   amd64Remote desktop daemon for GNOME using PipeWire
ii  iputils-tracepath 3:20221126-1
   amd64Tools to trace the network path to a remote host
ii  libfreerdp-client2-2:amd642.10.0+dfsg1-1.1ubuntu1.1
  amd64Free Remote Desktop Protocol library (client
library)
ii  libfreerdp-server2-2:amd642.10.0+dfsg1-1.1ubuntu1.1
  amd64Free Remote Desktop Protocol library (server
library)
ii  libfreerdp2-2:amd64   2.10.0+dfsg1-1.1ubuntu1.1
  amd64Free Remote Desktop Protocol library (core
library)
ii  liblirc-client0:amd64 0.10.1-7.2
   amd64infra-red remote control support - client
library

When digging deeper, I found this session, and also a Gnome Issue Tracker:
https://gitlab.gnome.org/GNOME/gnome-remote-desktop/-/issues/183

Also from the Author of this Mailing List issue.

Were you able to make any headway on resolving this? I am currently blocked
on the ability to use guacamole with my host.

Best,

On Thu, Feb 1, 2024 at 2:28 PM Horváth Csaba 
wrote:

> Hi,
>
> Just for the record, it turned out to be a Gnome-remote-desktop bug. I
> tried to connect to Windows with
> rdp://user:password@hostname/?ignore-cert=true=nla , and it
> works. I checked FreeRDP to connect to my computer from another Linux
> one, and it said that it's also using NLA, and it connected well. On
> my home server, where Guacamole sits, Debian12/Bookworm is installed,
> with libfreerdp-2.10 if i remember correctly. On my other machines,
> Debian 12/Trixie, libfreerdp-2.11 . (The server is headless, has no
> GUI.)
> I have 2 Debian 12/Trixie on 2 computers, they can connect to each
> other with FreeRDP, but Guacamole from the server cannot connect to
> any of them.
> I checked the messages from the gnome-remote-desktop, and turned out
> it has some problem with the graphics pipeline. So with NLA, the
> connection builds up from Guacamole, security is negotiated, user is
> logged in, and the connection is dropped, but the guacd error message
> is not appropriate.
>
> So this is turning the suspect to the gnome-remote-desktop package on
> the Trixie. I file a bug for this.
>
> Hope thisd will be useful for someone, and thanks for help :)
>
> Cs.
>
> Horváth Csaba  ezt írta (időpont: 2024.
> jan. 31., Sze, 21:44):
> >
> > Hi,
> >
> > I had time to continue the investigation.
> > With a more verbose log, i get the stuff at the end of the post.
> >
> > Strange things : the Freerdp messages :
> > guacd[354449]: DEBUG: Remote framebuffer format PIXEL_FORMAT_RGB16
> > guacd[354449]: DEBUG: expected PDU_TYPE_DEMAND_ACTIVE 0001, got 0006
> > guacd[354449]: DEBUG: transport_check_fds: transport->ReceiveCallback()
> - 

Re: Log in to Gnome Shell RDP

2024-02-01 Thread Horváth Csaba
Hi,

Just for the record, it turned out to be a Gnome-remote-desktop bug. I
tried to connect to Windows with
rdp://user:password@hostname/?ignore-cert=true=nla , and it
works. I checked FreeRDP to connect to my computer from another Linux
one, and it said that it's also using NLA, and it connected well. On
my home server, where Guacamole sits, Debian12/Bookworm is installed,
with libfreerdp-2.10 if i remember correctly. On my other machines,
Debian 12/Trixie, libfreerdp-2.11 . (The server is headless, has no
GUI.)
I have 2 Debian 12/Trixie on 2 computers, they can connect to each
other with FreeRDP, but Guacamole from the server cannot connect to
any of them.
I checked the messages from the gnome-remote-desktop, and turned out
it has some problem with the graphics pipeline. So with NLA, the
connection builds up from Guacamole, security is negotiated, user is
logged in, and the connection is dropped, but the guacd error message
is not appropriate.

So this is turning the suspect to the gnome-remote-desktop package on
the Trixie. I file a bug for this.

Hope thisd will be useful for someone, and thanks for help :)

Cs.

Horváth Csaba  ezt írta (időpont: 2024.
jan. 31., Sze, 21:44):
>
> Hi,
>
> I had time to continue the investigation.
> With a more verbose log, i get the stuff at the end of the post.
>
> Strange things : the Freerdp messages :
> guacd[354449]: DEBUG: Remote framebuffer format PIXEL_FORMAT_RGB16
> guacd[354449]: DEBUG: expected PDU_TYPE_DEMAND_ACTIVE 0001, got 0006
> guacd[354449]: DEBUG: transport_check_fds: transport->ReceiveCallback() - -1
> guacd[354449]: DEBUG: rdp_client_connect:freerdp_set_last_error_ex
> ERRCONNECT_CONNECT_TRANSPORT_FAILED [0x0002000D]
> guacd[354449]: DEBUG: expected PDU_TYPE_DEMAND_ACTIVE 0001, got 0006
> guacd[354449]: DEBUG: transport_check_fds: transport->ReceiveCallback() - -1
> guacd[354449]: DEBUG: rdp_client_connect:freerdp_set_last_error_ex
> ERRCONNECT_CONNECT_TRANSPORT_FAILED [0x0002000D]
> guacd[354449]: DEBUG: freerdp_post_connect failed
> guacd[354449]: DEBUG: SVC "rdpdr" disconnected.
> guacd[354449]: DEBUG: SVC "rdpsnd" disconnected.
> guacd[354449]: INFO: RDP server closed/refused connection: Server
> refused connection (wrong security type?)
>
> And the username :
> guacd[354449]: INFO: User "@4a0e0744-34a1-4758-b722-da4dfd44642b"
> joined connection "$0ae5b730-fd3b-494f-957d-00542523a4b5" (1 users now
> present)
>
> Can someone please help to untangle this...?
>
> Thanks :)
>
>
>
> root@homeserver:/usr/sbin#  /usr/sbin/guacd -L debug -f -b 127.0.0.1
> -l 4822 -p /tmp/guacd/guacd.pid
> guacd[354367]: INFO: Guacamole proxy daemon (guacd) version 1.3.0 started
> guacd[354367]: DEBUG: Successfully bound socket to host 127.0.0.1, port 4822
> guacd[354367]: INFO: Listening on host 127.0.0.1, port 4822
> guacd[354367]: INFO: Creating new client for protocol "rdp"
> guacd[354367]: INFO: Connection ID is "$0ae5b730-fd3b-494f-957d-00542523a4b5"
> guacd[354449]: DEBUG: Processing instruction: size
> guacd[354449]: DEBUG: Processing instruction: audio
> guacd[354449]: DEBUG: Processing instruction: video
> guacd[354449]: DEBUG: Processing instruction: image
> guacd[354449]: DEBUG: Processing instruction: timezone
> guacd[354449]: DEBUG: Parameter "console" omitted. Using default value of 0.
> guacd[354449]: DEBUG: Parameter "console-audio" omitted. Using default
> value of 0.
> guacd[354449]: DEBUG: Parameter "disable-auth" omitted. Using default
> value of 0.
> guacd[354449]: INFO: Security mode: NLA
> guacd[354449]: DEBUG: User resolution is 1920x1003 at 96 DPI
> guacd[354449]: DEBUG: Parameter "dpi" omitted. Using default value of 96.
> guacd[354449]: DEBUG: Using resolution of 1920x1003 at 96 DPI
> guacd[354449]: DEBUG: Parameter "read-only" omitted. Using default value of 0.
> guacd[354449]: DEBUG: Parameter "client-name" omitted. Using default
> value of "Guacamole RDP".
> guacd[354449]: DEBUG: Parameter "enable-wallpaper" omitted. Using
> default value of 0.
> guacd[354449]: DEBUG: Parameter "enable-theming" omitted. Using
> default value of 0.
> guacd[354449]: DEBUG: Parameter "enable-font-smoothing" omitted. Using
> default value of 0.
> guacd[354449]: DEBUG: Parameter "enable-full-window-drag" omitted.
> Using default value of 0.
> guacd[354449]: DEBUG: Parameter "enable-desktop-composition" omitted.
> Using default value of 0.
> guacd[354449]: DEBUG: Parameter "enable-menu-animations" omitted.
> Using default value of 0.
> guacd[354449]: DEBUG: Parameter "disable-bitmap-caching" omitted.
> Using default value of 0.
> guacd[354449]: DEBUG: Parameter "disable-offscreen-caching" omitted.
> Using default value of 0.
> guacd[354449]: DEBUG: Parameter "disable-glyph-caching" omitted. Using
> default value of 0.
> guacd[354449]: DEBUG: Parameter "color-depth" omitted. Using default
> value of 16.
> guacd[354449]: DEBUG: Parameter "disable-audio" omitted. Using default
> value of 0.
> guacd[354449]: DEBUG: Parameter "enable-printing" omitted. Using
> 

Re: Log in to Gnome Shell RDP

2024-01-31 Thread Horváth Csaba
Hi,

I had time to continue the investigation.
With a more verbose log, i get the stuff at the end of the post.

Strange things : the Freerdp messages :
guacd[354449]: DEBUG: Remote framebuffer format PIXEL_FORMAT_RGB16
guacd[354449]: DEBUG: expected PDU_TYPE_DEMAND_ACTIVE 0001, got 0006
guacd[354449]: DEBUG: transport_check_fds: transport->ReceiveCallback() - -1
guacd[354449]: DEBUG: rdp_client_connect:freerdp_set_last_error_ex
ERRCONNECT_CONNECT_TRANSPORT_FAILED [0x0002000D]
guacd[354449]: DEBUG: expected PDU_TYPE_DEMAND_ACTIVE 0001, got 0006
guacd[354449]: DEBUG: transport_check_fds: transport->ReceiveCallback() - -1
guacd[354449]: DEBUG: rdp_client_connect:freerdp_set_last_error_ex
ERRCONNECT_CONNECT_TRANSPORT_FAILED [0x0002000D]
guacd[354449]: DEBUG: freerdp_post_connect failed
guacd[354449]: DEBUG: SVC "rdpdr" disconnected.
guacd[354449]: DEBUG: SVC "rdpsnd" disconnected.
guacd[354449]: INFO: RDP server closed/refused connection: Server
refused connection (wrong security type?)

And the username :
guacd[354449]: INFO: User "@4a0e0744-34a1-4758-b722-da4dfd44642b"
joined connection "$0ae5b730-fd3b-494f-957d-00542523a4b5" (1 users now
present)

Can someone please help to untangle this...?

Thanks :)



root@homeserver:/usr/sbin#  /usr/sbin/guacd -L debug -f -b 127.0.0.1
-l 4822 -p /tmp/guacd/guacd.pid
guacd[354367]: INFO: Guacamole proxy daemon (guacd) version 1.3.0 started
guacd[354367]: DEBUG: Successfully bound socket to host 127.0.0.1, port 4822
guacd[354367]: INFO: Listening on host 127.0.0.1, port 4822
guacd[354367]: INFO: Creating new client for protocol "rdp"
guacd[354367]: INFO: Connection ID is "$0ae5b730-fd3b-494f-957d-00542523a4b5"
guacd[354449]: DEBUG: Processing instruction: size
guacd[354449]: DEBUG: Processing instruction: audio
guacd[354449]: DEBUG: Processing instruction: video
guacd[354449]: DEBUG: Processing instruction: image
guacd[354449]: DEBUG: Processing instruction: timezone
guacd[354449]: DEBUG: Parameter "console" omitted. Using default value of 0.
guacd[354449]: DEBUG: Parameter "console-audio" omitted. Using default
value of 0.
guacd[354449]: DEBUG: Parameter "disable-auth" omitted. Using default
value of 0.
guacd[354449]: INFO: Security mode: NLA
guacd[354449]: DEBUG: User resolution is 1920x1003 at 96 DPI
guacd[354449]: DEBUG: Parameter "dpi" omitted. Using default value of 96.
guacd[354449]: DEBUG: Using resolution of 1920x1003 at 96 DPI
guacd[354449]: DEBUG: Parameter "read-only" omitted. Using default value of 0.
guacd[354449]: DEBUG: Parameter "client-name" omitted. Using default
value of "Guacamole RDP".
guacd[354449]: DEBUG: Parameter "enable-wallpaper" omitted. Using
default value of 0.
guacd[354449]: DEBUG: Parameter "enable-theming" omitted. Using
default value of 0.
guacd[354449]: DEBUG: Parameter "enable-font-smoothing" omitted. Using
default value of 0.
guacd[354449]: DEBUG: Parameter "enable-full-window-drag" omitted.
Using default value of 0.
guacd[354449]: DEBUG: Parameter "enable-desktop-composition" omitted.
Using default value of 0.
guacd[354449]: DEBUG: Parameter "enable-menu-animations" omitted.
Using default value of 0.
guacd[354449]: DEBUG: Parameter "disable-bitmap-caching" omitted.
Using default value of 0.
guacd[354449]: DEBUG: Parameter "disable-offscreen-caching" omitted.
Using default value of 0.
guacd[354449]: DEBUG: Parameter "disable-glyph-caching" omitted. Using
default value of 0.
guacd[354449]: DEBUG: Parameter "color-depth" omitted. Using default
value of 16.
guacd[354449]: DEBUG: Parameter "disable-audio" omitted. Using default
value of 0.
guacd[354449]: DEBUG: Parameter "enable-printing" omitted. Using
default value of 0.
guacd[354449]: DEBUG: Parameter "printer-name" omitted. Using default
value of "Guacamole Printer".
guacd[354449]: DEBUG: Parameter "enable-drive" omitted. Using default
value of 0.
guacd[354449]: DEBUG: Parameter "drive-name" omitted. Using default
value of "Guacamole Filesystem".
guacd[354449]: DEBUG: Parameter "drive-path" omitted. Using default value of "".
guacd[354449]: DEBUG: Parameter "create-drive-path" omitted. Using
default value of 0.
guacd[354449]: DEBUG: Parameter "disable-download" omitted. Using
default value of 0.
guacd[354449]: DEBUG: Parameter "disable-upload" omitted. Using
default value of 0.
guacd[354449]: DEBUG: Parameter "timezone" omitted. Using default
value of "Europe/Budapest".
guacd[354449]: DEBUG: Parameter "enable-sftp" omitted. Using default value of 0.
guacd[354449]: DEBUG: Parameter "sftp-hostname" omitted. Using default
value of "t430".
guacd[354449]: DEBUG: Parameter "sftp-port" omitted. Using default
value of "22".
guacd[354449]: DEBUG: Parameter "sftp-username" omitted. Using default
value of "colt".
guacd[354449]: DEBUG: Parameter "sftp-password" omitted. Using default
value of "".
guacd[354449]: DEBUG: Parameter "sftp-passphrase" omitted. Using
default value of "".
guacd[354449]: DEBUG: Parameter "sftp-root-directory" omitted. Using
default value of "/".
guacd[354449]: DEBUG: 

Re: Log in to Gnome Shell RDP

2024-01-26 Thread Horváth Csaba
Hi,

Yes, i mixed up with the shell :D Sry :)

But no success. I changed the permissions to 777, but it does not
change anything.
The /var/run/guacd dir has a .config subdir, in it a certs and server
directory. All empty, except the pid file.

I created a temporary home for it, and it creates the certs and server
directories, but does not write anything. Also creates a 0 bytes
known_hosts file.
Maybe i need to put some TLS certs from the Gnome desktop to here?

This is getting more strange :D

root@homeserver:/etc# ls -la /tmp/guacd/
total 12
drwxrwxrwx  3 guacd guacd 4096 Jan 26 17:43 .
drwxrwxrwt 17 root  root  4096 Jan 26 17:45 ..
drwxr-xr-x  3 guacd guacd 4096 Jan 26 17:43 .config
root@homeserver:/etc# ls -la /tmp/guacd/.config/
total 12
drwxr-xr-x 3 guacd guacd 4096 Jan 26 17:43 .
drwxrwxrwx 3 guacd guacd 4096 Jan 26 17:43 ..
drwxr-xr-x 4 guacd guacd 4096 Jan 26 17:43 freerdp
root@homeserver:/etc# ls -la /tmp/guacd/.config/freerdp/
total 16
drwxr-xr-x 4 guacd guacd 4096 Jan 26 17:43 .
drwxr-xr-x 3 guacd guacd 4096 Jan 26 17:43 ..
drwxr-xr-x 2 guacd guacd 4096 Jan 26 17:43 certs
-rw-r--r-- 1 guacd guacd0 Jan 26 17:43 known_hosts2
drwxr-xr-x 2 guacd guacd 4096 Jan 26 17:43 server
root@homeserver:/etc# ls -la /tmp/guacd/.config/freerdp/certs/
total 8
drwxr-xr-x 2 guacd guacd 4096 Jan 26 17:43 .
drwxr-xr-x 4 guacd guacd 4096 Jan 26 17:43 ..
root@homeserver:/etc# ls -la /tmp/guacd/.config/freerdp/server/
total 8
drwxr-xr-x 2 guacd guacd 4096 Jan 26 17:43 .
drwxr-xr-x 4 guacd guacd 4096 Jan 26 17:43 ..
root@homeserver:/etc# ls -la /tmp/guacd/.config/freerdp/known_hosts2
-rw-r--r-- 1 guacd guacd 0 Jan 26 17:43 /tmp/guacd/.config/freerdp/known_hosts2
root@homeserver:/etc#


Cs.

Nick Couchman  ezt írta (időpont: 2024.
jan. 26., P, 17:28):
>
> On Fri, Jan 26, 2024 at 11:26 AM Horváth Csaba  
> wrote:
>>
>> Hi,
>>
>> I have installed guacd from Debian's repos, and it runs by default in
>> the name of user guacd.
>>
>> guacd3163019  0.0  0.1 246252 10376 ?SJan24   0:00
>> /usr/sbin/guacd -b 127.0.0.1 -l 4822 -p /var/run/guacd/guacd.pid
>>
>> Ang guacd has no home by default (which is acceptable from security
>> viewpoint, but affect usability :D maybe i need to file a bug to
>> Debian team :D )
>> guacd:x:998:996::/var/run/guacd:/bin/false
>
>
> That user does have a home directory - /var/run/guacd - so you need to make 
> sure the guacd user has write access to that directory.
>
> -Nick

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org



Re: Log in to Gnome Shell RDP

2024-01-26 Thread Nick Couchman
On Fri, Jan 26, 2024 at 11:26 AM Horváth Csaba 
wrote:

> Hi,
>
> I have installed guacd from Debian's repos, and it runs by default in
> the name of user guacd.
>
> guacd3163019  0.0  0.1 246252 10376 ?SJan24   0:00
> /usr/sbin/guacd -b 127.0.0.1 -l 4822 -p /var/run/guacd/guacd.pid
>
> Ang guacd has no home by default (which is acceptable from security
> viewpoint, but affect usability :D maybe i need to file a bug to
> Debian team :D )
> guacd:x:998:996::/var/run/guacd:/bin/false
>

That user does have a home directory - /var/run/guacd - so you need to make
sure the guacd user has write access to that directory.

-Nick


Re: Log in to Gnome Shell RDP

2024-01-26 Thread Nick Couchman
On Fri, Jan 26, 2024 at 11:22 AM Horváth Csaba 
wrote:

> Hi,
>
> Thanks for clarification! How i specify the account for guacd? I mean,
> OK, i create the user, but how i specify that guacd should start in
> the account's behalf?
>

That depends on how you're starting guacd, now...
* If you're using systemd, edit the guacd systemd file and change the
"User=" line such that it specifies the user you've just created.
* If you're using init.d, change the init file such that it does a "sudo
-u" when executing the program.
* If you're starting manually, just do "sudo -u guacuser /path/to/guacd",
replacing guacuser with your user account and /path/to/guacd with the
actual path to the guacd program.

-Nick


Re: Log in to Gnome Shell RDP

2024-01-26 Thread Horváth Csaba
Hi,

I have installed guacd from Debian's repos, and it runs by default in
the name of user guacd.

guacd3163019  0.0  0.1 246252 10376 ?SJan24   0:00
/usr/sbin/guacd -b 127.0.0.1 -l 4822 -p /var/run/guacd/guacd.pid

Ang guacd has no home by default (which is acceptable from security
viewpoint, but affect usability :D maybe i need to file a bug to
Debian team :D )
guacd:x:998:996::/var/run/guacd:/bin/false

So i need to specify a home dir for it. I'll see how it will work.

Cs.

Nick Couchman  ezt írta (időpont: 2024.
jan. 26., P, 16:47):
>
> On Wed, Jan 24, 2024 at 3:40 PM Horváth Csaba  
> wrote:
>>
>> Hi,
>>
>> Tried with a Windows VM with NLA turned off; so simple RDP connection
>> works with security=rdp . So the issue is that guacd cannot
>> communicate with TLS and NLA security servers.
>
>
> This means it likely has to do with the issue that David mentioned with the 
> home directory for the user running guacd.
>
> Note that we're talking about the Linux/UNIX home directory for the Linux 
> user running guacd, not the GUACAMOLE_HOME directory. For example, if you run 
> guacd under the "daemon" account, and the daemon account has a home directory 
> of /usr/sbin (as is the case in RHEL8, for example), then the "daemon" user 
> does not have access to write to the /usr/sbin directory and cannot create 
> the host fingerprint file that is required for NLA and TLA connections.
>
> The easiest thing to do is just create a Linux user account for guacd to run 
> under, allowing Linux to create a home directory (useradd with "-m" flag, for 
> example), and then make sure guacd is being started under that account. Then 
> re-try the connection.
>
> -Nick

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org



Re: Log in to Gnome Shell RDP

2024-01-26 Thread Horváth Csaba
Hi,

Thanks for clarification! How i specify the account for guacd? I mean,
OK, i create the user, but how i specify that guacd should start in
the account's behalf?

Thanks,

Cs.

Nick Couchman  ezt írta (időpont: 2024.
jan. 26., P, 16:47):
>
> On Wed, Jan 24, 2024 at 3:40 PM Horváth Csaba  
> wrote:
>>
>> Hi,
>>
>> Tried with a Windows VM with NLA turned off; so simple RDP connection
>> works with security=rdp . So the issue is that guacd cannot
>> communicate with TLS and NLA security servers.
>
>
> This means it likely has to do with the issue that David mentioned with the 
> home directory for the user running guacd.
>
> Note that we're talking about the Linux/UNIX home directory for the Linux 
> user running guacd, not the GUACAMOLE_HOME directory. For example, if you run 
> guacd under the "daemon" account, and the daemon account has a home directory 
> of /usr/sbin (as is the case in RHEL8, for example), then the "daemon" user 
> does not have access to write to the /usr/sbin directory and cannot create 
> the host fingerprint file that is required for NLA and TLA connections.
>
> The easiest thing to do is just create a Linux user account for guacd to run 
> under, allowing Linux to create a home directory (useradd with "-m" flag, for 
> example), and then make sure guacd is being started under that account. Then 
> re-try the connection.
>
> -Nick

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org



Re: Log in to Gnome Shell RDP

2024-01-26 Thread Nick Couchman
On Wed, Jan 24, 2024 at 3:40 PM Horváth Csaba 
wrote:

> Hi,
>
> Tried with a Windows VM with NLA turned off; so simple RDP connection
> works with security=rdp . So the issue is that guacd cannot
> communicate with TLS and NLA security servers.


This means it likely has to do with the issue that David mentioned with the
home directory for the user running guacd.

Note that we're talking about the Linux/UNIX home directory for the Linux
user running guacd, not the GUACAMOLE_HOME directory. For example, if you
run guacd under the "daemon" account, and the daemon account has a home
directory of /usr/sbin (as is the case in RHEL8, for example), then the
"daemon" user does not have access to write to the /usr/sbin directory and
cannot create the host fingerprint file that is required for NLA and TLA
connections.

The easiest thing to do is just create a Linux user account for guacd to
run under, allowing Linux to create a home directory (useradd with "-m"
flag, for example), and then make sure guacd is being started under that
account. Then re-try the connection.

-Nick


Re: Log in to Gnome Shell RDP

2024-01-24 Thread Michael Jumper

On 1/24/24 12:39, Horváth Csaba wrote:

Hi,

Tried with a Windows VM with NLA turned off; so simple RDP connection
works with security=rdp . So the issue is that guacd cannot
communicate with TLS and NLA security servers. If i set f guacd-ssl to
false, even the guacd reports an internal error.  :
"2024-01-24T20:44:51.893769+01:00 homeserver guacd[3114807]: Guacamole
protocol violation. Perhaps the version of guacamole-client is
incompatible with this version of guacd?"



The "guacd-ssl" property has nothing to do with RDP. It configures 
whether the Guacamole webapp should use SSL when communicating 
internally with guacd. See:


https://guacamole.apache.org/doc/gug/configuring-guacamole.html#guacamole-properties

The only things that impact whether an RDP connection uses NLA or TLS are:

1) Whether the RDP server supports either of those methods.
2) The security method you select in the RDP connection configuration.

- Mike

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org



Re: Log in to Gnome Shell RDP

2024-01-24 Thread Horváth Csaba
Hi,

Tried with a Windows VM with NLA turned off; so simple RDP connection
works with security=rdp . So the issue is that guacd cannot
communicate with TLS and NLA security servers. If i set f guacd-ssl to
false, even the guacd reports an internal error.  :
"2024-01-24T20:44:51.893769+01:00 homeserver guacd[3114807]: Guacamole
protocol violation. Perhaps the version of guacamole-client is
incompatible with this version of guacd?"

Sadly the gnome-remote-desktop cannot be forced to RDP security (this
would be acceptable). (Or at least i don't know how.)

Log of the successful connection :
2024-01-24T21:33:55.591413+01:00 homeserver guacd[3163019]: Creating
new client for protocol "rdp"
2024-01-24T21:33:55.592757+01:00 homeserver guacd[3163019]: Connection
ID is "$6d49a235-5e2e-43ff-9271-99daecac8655"
2024-01-24T21:33:55.731513+01:00 homeserver guacd[3166048]: Security mode: RDP
2024-01-24T21:33:55.731893+01:00 homeserver guacd[3166048]: Resize method: none
2024-01-24T21:33:55.732513+01:00 homeserver guacd[3166048]: User
"@3c0da858-d9d1-47f1-bc1f-b92598a72381" joined connection
"$6d49a235-5e2e-43ff-9271-99daecac8655" (1 users now present)
2024-01-24T21:33:55.743179+01:00 homeserver guacd[3166048]: Loading
keymap "base"
2024-01-24T21:33:55.743528+01:00 homeserver guacd[3166048]: Loading
keymap "en-us-qwerty"
2024-01-24T21:33:57.116241+01:00 homeserver guacd[3166048]: Connected
to RDPDR 1.6 as client 0xefb4
2024-01-24T21:34:35.232036+01:00 homeserver guacd[3166048]: Connected
to RDPDR 1.6 as client 0xdbe3
2024-01-24T21:34:35.400752+01:00 homeserver guacd[3166048]: Accepted
format: 16-bit PCM with 2 channels at 22050 Hz
2024-01-24T21:34:35.510675+01:00 homeserver guacd[3166048]: RDPDR user logged on
2024-01-24T21:34:55.084015+01:00 homeserver guacd[3166048]: User
"@3c0da858-d9d1-47f1-bc1f-b92598a72381" disconnected (0 users remain)
2024-01-24T21:34:55.084394+01:00 homeserver guacd[3166048]: Last user
of connection "$6d49a235-5e2e-43ff-9271-99daecac8655" disconnected
2024-01-24T21:34:55.252160+01:00 homeserver guacd[3166048]: Internal
RDP client disconnected
2024-01-24T21:34:55.265855+01:00 homeserver guacd[3163019]: Connection
"$6d49a235-5e2e-43ff-9271-99daecac8655" removed.

Cs.

David Ramirez  ezt írta (időpont: 2024. jan. 24.,
Sze, 20:38):
>
> Maybe your problem is something else altogether.
> Looking at your log:
> 2024-01-24T20:11:37.072480+01:00 homeserver guacd[3080072]: Unable to
> read file "/"
> 2024-01-24T20:11:37.403365+01:00 homeserver guacd[3080072]: RDP server
> closed/refused connection: Security negotiation failed (wrong security
> type?) 2024-01-24T20:11:37.072480+01:00 homeserver guacd[3080072]: Unable to
> read file "/"
> 2024-01-24T20:11:37.403365+01:00 homeserver guacd[3080072]: RDP server
> closed/refused connection: Security negotiation failed (wrong security
> type?)
>
> This is a problem that I believe I have seen in the past where freerdp 
> requires to write something on the guacd server filesystem. Without this, 
> freerdp cannot properly connect to any server.
> This is an issue I have seen before on the list and the archive should have 
> detailed instructions.
> If my memory serves me correctly, what you have to do is be sure that the 
> user that is running guacd on the server has write permissions on the root 
> filesystem of the guacamole installation. If you are running it as a "root" 
> which you should not, you will have to figure out what is that runtime 
> location.
> What I do remember is that if you run guacd as a NON ROOT user, the directory 
> you set as the home directory of the guacamole user is used to run the daemon.
> Hopefully this *may* solve your issue.
> Regards,
> David.
>
> On Wed, Jan 24, 2024 at 1:26 PM Horváth Csaba  
> wrote:
>>
>> Hi,
>>
>> Thanks for the suggestion, but no success. :(
>>
>> I added guacd-ssl:true to guacd properties. Nothing changed; i used
>> the ad-hoc connect extension to test, but the user-mapping configured
>> entry gives the same. At least i get a "Logon failed" so it can reach
>> the target machine.
>>
>> 2024-01-24T20:10:59.160196+01:00 homeserver guacd[3077373]: Creating
>> new client for protocol "rdp"
>> 2024-01-24T20:10:59.160657+01:00 homeserver guacd[3077373]: Connection
>> ID is "$5d3a761f-7756-43e0-9e43-4b49005710cc"
>> 2024-01-24T20:10:59.306310+01:00 homeserver guacd[3079440]: Security mode: 
>> TLS
>> 2024-01-24T20:10:59.306694+01:00 homeserver guacd[3079440]: Resize method: 
>> none
>> 2024-01-24T20:10:59.306901+01:00 homeserver guacd[3079440]: User
>> "@597545e7-c80d-418a-b860-2e3604a2c911" joined connection
>> "$5d3a761f-7756-43e0-9e43-4b49005710cc" (1 users now present)
>> 2024-01-24T20:10:59.323096+01:00 homeserver guacd[3079440]: Loading
>> keymap "base"
>> 2024-01-24T20:10:59.323458+01:00 homeserver guacd[3079440]: Loading
>> keymap "en-us-qwerty"
>> 2024-01-24T20:10:59.709497+01:00 homeserver guacd[3079440]: RDP server
>> closed/refused connection: Security negotiation failed (wrong security
>> type?)
>> 

Re: Log in to Gnome Shell RDP

2024-01-24 Thread Horváth Csaba
Hi,

Thanks to pointing this out! This can be a valid root cause, which i
didn't notice.
I try to check the guacd user... But what directory we say the
guacamole root? The /etc/guacamole?

Cs.

David Ramirez  ezt írta (időpont: 2024. jan. 24.,
Sze, 20:38):
>
> Maybe your problem is something else altogether.
> Looking at your log:
> 2024-01-24T20:11:37.072480+01:00 homeserver guacd[3080072]: Unable to
> read file "/"
> 2024-01-24T20:11:37.403365+01:00 homeserver guacd[3080072]: RDP server
> closed/refused connection: Security negotiation failed (wrong security
> type?) 2024-01-24T20:11:37.072480+01:00 homeserver guacd[3080072]: Unable to
> read file "/"
> 2024-01-24T20:11:37.403365+01:00 homeserver guacd[3080072]: RDP server
> closed/refused connection: Security negotiation failed (wrong security
> type?)
>
> This is a problem that I believe I have seen in the past where freerdp 
> requires to write something on the guacd server filesystem. Without this, 
> freerdp cannot properly connect to any server.
> This is an issue I have seen before on the list and the archive should have 
> detailed instructions.
> If my memory serves me correctly, what you have to do is be sure that the 
> user that is running guacd on the server has write permissions on the root 
> filesystem of the guacamole installation. If you are running it as a "root" 
> which you should not, you will have to figure out what is that runtime 
> location.
> What I do remember is that if you run guacd as a NON ROOT user, the directory 
> you set as the home directory of the guacamole user is used to run the daemon.
> Hopefully this *may* solve your issue.
> Regards,
> David.
>
> On Wed, Jan 24, 2024 at 1:26 PM Horváth Csaba  
> wrote:
>>
>> Hi,
>>
>> Thanks for the suggestion, but no success. :(
>>
>> I added guacd-ssl:true to guacd properties. Nothing changed; i used
>> the ad-hoc connect extension to test, but the user-mapping configured
>> entry gives the same. At least i get a "Logon failed" so it can reach
>> the target machine.
>>
>> 2024-01-24T20:10:59.160196+01:00 homeserver guacd[3077373]: Creating
>> new client for protocol "rdp"
>> 2024-01-24T20:10:59.160657+01:00 homeserver guacd[3077373]: Connection
>> ID is "$5d3a761f-7756-43e0-9e43-4b49005710cc"
>> 2024-01-24T20:10:59.306310+01:00 homeserver guacd[3079440]: Security mode: 
>> TLS
>> 2024-01-24T20:10:59.306694+01:00 homeserver guacd[3079440]: Resize method: 
>> none
>> 2024-01-24T20:10:59.306901+01:00 homeserver guacd[3079440]: User
>> "@597545e7-c80d-418a-b860-2e3604a2c911" joined connection
>> "$5d3a761f-7756-43e0-9e43-4b49005710cc" (1 users now present)
>> 2024-01-24T20:10:59.323096+01:00 homeserver guacd[3079440]: Loading
>> keymap "base"
>> 2024-01-24T20:10:59.323458+01:00 homeserver guacd[3079440]: Loading
>> keymap "en-us-qwerty"
>> 2024-01-24T20:10:59.709497+01:00 homeserver guacd[3079440]: RDP server
>> closed/refused connection: Security negotiation failed (wrong security
>> type?)
>> 2024-01-24T20:10:59.725779+01:00 homeserver guacd[3079440]: User
>> "@597545e7-c80d-418a-b860-2e3604a2c911" disconnected (0 users remain)
>> 2024-01-24T20:10:59.726118+01:00 homeserver guacd[3079440]: Last user
>> of connection "$5d3a761f-7756-43e0-9e43-4b49005710cc" disconnected
>> 2024-01-24T20:10:59.741852+01:00 homeserver guacd[3077373]: Connection
>> "$5d3a761f-7756-43e0-9e43-4b49005710cc" removed.
>> 2024-01-24T20:11:36.856060+01:00 homeserver guacd[3077373]: Creating
>> new client for protocol "rdp"
>> 2024-01-24T20:11:36.856562+01:00 homeserver guacd[3077373]: Connection
>> ID is "$cf1be3df-ebcf-4464-b657-46b0e7fa908e"
>> 2024-01-24T20:11:36.997831+01:00 homeserver guacd[3080072]: Security mode: 
>> RDP
>> 2024-01-24T20:11:36.998197+01:00 homeserver guacd[3080072]: Resize method: 
>> none
>> 2024-01-24T20:11:36.998876+01:00 homeserver guacd[3080072]: User
>> "@b0dbc479-3c17-40a8-8421-5d08678257d3" joined connection
>> "$cf1be3df-ebcf-4464-b657-46b0e7fa908e" (1 users now present)
>> 2024-01-24T20:11:37.012685+01:00 homeserver guacd[3080072]: Loading
>> keymap "base"
>> 2024-01-24T20:11:37.013044+01:00 homeserver guacd[3080072]: Loading
>> keymap "en-us-qwerty"
>> 2024-01-24T20:11:37.072480+01:00 homeserver guacd[3080072]: Unable to
>> read file "/"
>> 2024-01-24T20:11:37.403365+01:00 homeserver guacd[3080072]: RDP server
>> closed/refused connection: Security negotiation failed (wrong security
>> type?)
>> 2024-01-24T20:11:37.417159+01:00 homeserver guacd[3080072]: User
>> "@b0dbc479-3c17-40a8-8421-5d08678257d3" disconnected (0 users remain)
>> 2024-01-24T20:11:37.417489+01:00 homeserver guacd[3080072]: Last user
>> of connection "$cf1be3df-ebcf-4464-b657-46b0e7fa908e" disconnected
>> 2024-01-24T20:11:37.433479+01:00 homeserver guacd[3077373]: Connection
>> "$cf1be3df-ebcf-4464-b657-46b0e7fa908e" removed.
>> 2024-01-24T20:11:44.487691+01:00 homeserver guacd[3077373]: Creating
>> new client for protocol "rdp"
>> 2024-01-24T20:11:44.488106+01:00 homeserver guacd[3077373]: Connection

Re: Log in to Gnome Shell RDP

2024-01-24 Thread David Ramirez
Maybe your problem is something else altogether.
Looking at your log:


*2024-01-24T20:11:37.072480+01:00 homeserver guacd[3080072]: Unable to read
file "/" *2024-01-24T20:11:37.403365+01:00 homeserver guacd[3080072]: RDP
server
closed/refused connection: Security negotiation failed (wrong security
type?) 2024-01-24T20:11:37.072480+01:00 homeserver guacd[3080072]: Unable to
read file "/"
2024-01-24T20:11:37.403365+01:00 homeserver guacd[3080072]: RDP server
closed/refused connection: Security negotiation failed (wrong security
type?)

This is a problem that I believe I have seen in the past where freerdp
requires to write something on the guacd server filesystem. Without this,
freerdp cannot properly connect to any server.
This is an issue I have seen before on the list and the archive should have
detailed instructions.
If my memory serves me correctly, what you have to do is be sure that the
user that is running guacd on the server has write permissions on the root
filesystem of the guacamole installation. If you are running it as a "root"
which you should not, you will have to figure out what is that runtime
location.
What I do remember is that if you run guacd as a NON ROOT user, the
directory you set as the home directory of the guacamole user is used to
run the daemon.
Hopefully this *may* solve your issue.
Regards,
David.

On Wed, Jan 24, 2024 at 1:26 PM Horváth Csaba 
wrote:

> Hi,
>
> Thanks for the suggestion, but no success. :(
>
> I added guacd-ssl:true to guacd properties. Nothing changed; i used
> the ad-hoc connect extension to test, but the user-mapping configured
> entry gives the same. At least i get a "Logon failed" so it can reach
> the target machine.
>
> 2024-01-24T20:10:59.160196+01:00 homeserver guacd[3077373]: Creating
> new client for protocol "rdp"
> 2024-01-24T20:10:59.160657+01:00 homeserver guacd[3077373]: Connection
> ID is "$5d3a761f-7756-43e0-9e43-4b49005710cc"
> 2024-01-24T20:10:59.306310+01:00 homeserver guacd[3079440]: Security mode:
> TLS
> 2024-01-24T20:10:59.306694+01:00 homeserver guacd[3079440]: Resize method:
> none
> 2024-01-24T20:10:59.306901+01:00 homeserver guacd[3079440]: User
> "@597545e7-c80d-418a-b860-2e3604a2c911" joined connection
> "$5d3a761f-7756-43e0-9e43-4b49005710cc" (1 users now present)
> 2024-01-24T20:10:59.323096+01:00 homeserver guacd[3079440]: Loading
> keymap "base"
> 2024-01-24T20:10:59.323458+01:00 homeserver guacd[3079440]: Loading
> keymap "en-us-qwerty"
> 2024-01-24T20:10:59.709497+01:00 homeserver guacd[3079440]: RDP server
> closed/refused connection: Security negotiation failed (wrong security
> type?)
> 2024-01-24T20:10:59.725779+01:00 homeserver guacd[3079440]: User
> "@597545e7-c80d-418a-b860-2e3604a2c911" disconnected (0 users remain)
> 2024-01-24T20:10:59.726118+01:00 homeserver guacd[3079440]: Last user
> of connection "$5d3a761f-7756-43e0-9e43-4b49005710cc" disconnected
> 2024-01-24T20:10:59.741852+01:00 homeserver guacd[3077373]: Connection
> "$5d3a761f-7756-43e0-9e43-4b49005710cc" removed.
> 2024-01-24T20:11:36.856060+01:00 homeserver guacd[3077373]: Creating
> new client for protocol "rdp"
> 2024-01-24T20:11:36.856562+01:00 homeserver guacd[3077373]: Connection
> ID is "$cf1be3df-ebcf-4464-b657-46b0e7fa908e"
> 2024-01-24T20:11:36.997831+01:00 homeserver guacd[3080072]: Security mode:
> RDP
> 2024-01-24T20:11:36.998197+01:00 homeserver guacd[3080072]: Resize method:
> none
> 2024-01-24T20:11:36.998876+01:00 homeserver guacd[3080072]: User
> "@b0dbc479-3c17-40a8-8421-5d08678257d3" joined connection
> "$cf1be3df-ebcf-4464-b657-46b0e7fa908e" (1 users now present)
> 2024-01-24T20:11:37.012685+01:00 homeserver guacd[3080072]: Loading
> keymap "base"
> 2024-01-24T20:11:37.013044+01:00 homeserver guacd[3080072]: Loading
> keymap "en-us-qwerty"
> 2024-01-24T20:11:37.072480+01:00 homeserver guacd[3080072]: Unable to
> read file "/"
> 2024-01-24T20:11:37.403365+01:00 homeserver guacd[3080072]: RDP server
> closed/refused connection: Security negotiation failed (wrong security
> type?)
> 2024-01-24T20:11:37.417159+01:00 homeserver guacd[3080072]: User
> "@b0dbc479-3c17-40a8-8421-5d08678257d3" disconnected (0 users remain)
> 2024-01-24T20:11:37.417489+01:00 homeserver guacd[3080072]: Last user
> of connection "$cf1be3df-ebcf-4464-b657-46b0e7fa908e" disconnected
> 2024-01-24T20:11:37.433479+01:00 homeserver guacd[3077373]: Connection
> "$cf1be3df-ebcf-4464-b657-46b0e7fa908e" removed.
> 2024-01-24T20:11:44.487691+01:00 homeserver guacd[3077373]: Creating
> new client for protocol "rdp"
> 2024-01-24T20:11:44.488106+01:00 homeserver guacd[3077373]: Connection
> ID is "$52d96daa-4011-41b5-8451-aa50dbecb4a1"
> 2024-01-24T20:11:44.629855+01:00 homeserver guacd[3080237]: Security mode:
> TLS
> 2024-01-24T20:11:44.630207+01:00 homeserver guacd[3080237]: Resize method:
> none
> 2024-01-24T20:11:44.630953+01:00 homeserver guacd[3080237]: User
> "@2e2a9ed2-486b-4dbc-ba0c-59b21debcdc7" joined connection
> "$52d96daa-4011-41b5-8451-aa50dbecb4a1" (1 

Re: Log in to Gnome Shell RDP

2024-01-24 Thread Horváth Csaba
Hi,

Thanks for the suggestion, but no success. :(

I added guacd-ssl:true to guacd properties. Nothing changed; i used
the ad-hoc connect extension to test, but the user-mapping configured
entry gives the same. At least i get a "Logon failed" so it can reach
the target machine.

2024-01-24T20:10:59.160196+01:00 homeserver guacd[3077373]: Creating
new client for protocol "rdp"
2024-01-24T20:10:59.160657+01:00 homeserver guacd[3077373]: Connection
ID is "$5d3a761f-7756-43e0-9e43-4b49005710cc"
2024-01-24T20:10:59.306310+01:00 homeserver guacd[3079440]: Security mode: TLS
2024-01-24T20:10:59.306694+01:00 homeserver guacd[3079440]: Resize method: none
2024-01-24T20:10:59.306901+01:00 homeserver guacd[3079440]: User
"@597545e7-c80d-418a-b860-2e3604a2c911" joined connection
"$5d3a761f-7756-43e0-9e43-4b49005710cc" (1 users now present)
2024-01-24T20:10:59.323096+01:00 homeserver guacd[3079440]: Loading
keymap "base"
2024-01-24T20:10:59.323458+01:00 homeserver guacd[3079440]: Loading
keymap "en-us-qwerty"
2024-01-24T20:10:59.709497+01:00 homeserver guacd[3079440]: RDP server
closed/refused connection: Security negotiation failed (wrong security
type?)
2024-01-24T20:10:59.725779+01:00 homeserver guacd[3079440]: User
"@597545e7-c80d-418a-b860-2e3604a2c911" disconnected (0 users remain)
2024-01-24T20:10:59.726118+01:00 homeserver guacd[3079440]: Last user
of connection "$5d3a761f-7756-43e0-9e43-4b49005710cc" disconnected
2024-01-24T20:10:59.741852+01:00 homeserver guacd[3077373]: Connection
"$5d3a761f-7756-43e0-9e43-4b49005710cc" removed.
2024-01-24T20:11:36.856060+01:00 homeserver guacd[3077373]: Creating
new client for protocol "rdp"
2024-01-24T20:11:36.856562+01:00 homeserver guacd[3077373]: Connection
ID is "$cf1be3df-ebcf-4464-b657-46b0e7fa908e"
2024-01-24T20:11:36.997831+01:00 homeserver guacd[3080072]: Security mode: RDP
2024-01-24T20:11:36.998197+01:00 homeserver guacd[3080072]: Resize method: none
2024-01-24T20:11:36.998876+01:00 homeserver guacd[3080072]: User
"@b0dbc479-3c17-40a8-8421-5d08678257d3" joined connection
"$cf1be3df-ebcf-4464-b657-46b0e7fa908e" (1 users now present)
2024-01-24T20:11:37.012685+01:00 homeserver guacd[3080072]: Loading
keymap "base"
2024-01-24T20:11:37.013044+01:00 homeserver guacd[3080072]: Loading
keymap "en-us-qwerty"
2024-01-24T20:11:37.072480+01:00 homeserver guacd[3080072]: Unable to
read file "/"
2024-01-24T20:11:37.403365+01:00 homeserver guacd[3080072]: RDP server
closed/refused connection: Security negotiation failed (wrong security
type?)
2024-01-24T20:11:37.417159+01:00 homeserver guacd[3080072]: User
"@b0dbc479-3c17-40a8-8421-5d08678257d3" disconnected (0 users remain)
2024-01-24T20:11:37.417489+01:00 homeserver guacd[3080072]: Last user
of connection "$cf1be3df-ebcf-4464-b657-46b0e7fa908e" disconnected
2024-01-24T20:11:37.433479+01:00 homeserver guacd[3077373]: Connection
"$cf1be3df-ebcf-4464-b657-46b0e7fa908e" removed.
2024-01-24T20:11:44.487691+01:00 homeserver guacd[3077373]: Creating
new client for protocol "rdp"
2024-01-24T20:11:44.488106+01:00 homeserver guacd[3077373]: Connection
ID is "$52d96daa-4011-41b5-8451-aa50dbecb4a1"
2024-01-24T20:11:44.629855+01:00 homeserver guacd[3080237]: Security mode: TLS
2024-01-24T20:11:44.630207+01:00 homeserver guacd[3080237]: Resize method: none
2024-01-24T20:11:44.630953+01:00 homeserver guacd[3080237]: User
"@2e2a9ed2-486b-4dbc-ba0c-59b21debcdc7" joined connection
"$52d96daa-4011-41b5-8451-aa50dbecb4a1" (1 users now present)
2024-01-24T20:11:44.643049+01:00 homeserver guacd[3080237]: Loading
keymap "base"
2024-01-24T20:11:44.643421+01:00 homeserver guacd[3080237]: Loading
keymap "en-us-qwerty"
2024-01-24T20:11:44.694343+01:00 homeserver guacd[3080237]: Unable to
read file "/"
2024-01-24T20:11:45.013416+01:00 homeserver guacd[3080237]: RDP server
closed/refused connection: Security negotiation failed (wrong security
type?)
2024-01-24T20:11:45.028627+01:00 homeserver guacd[3080237]: User
"@2e2a9ed2-486b-4dbc-ba0c-59b21debcdc7" disconnected (0 users remain)
2024-01-24T20:11:45.029026+01:00 homeserver guacd[3080237]: Last user
of connection "$52d96daa-4011-41b5-8451-aa50dbecb4a

Cs.

David Barber  ezt írta (időpont: 2024. jan.
24., Sze, 19:06):
>
> Not ideal but,  if compatible with your network config,  try forcing the
> connection to tls in the guac connection properties, looking at log it
> is the security type negotiation that is failing
>
> Horváth Csaba wrote:
> > Hi,
> >
> > At least not only Gnome Shell related problem.
> > I tried to log in to a Win10 VM which i created for testing. Remmina
> > works, but i get the same issue with Guacamole in the logs.
> >
> > I used the ad-hoc connection string :
> > rdp://myuser@192.168.1.146/?security=rdp=true
> >
> > Guessing that Guacamole ignores the ignore-cert option?
> >
> > 2024-01-24T18:41:40.780347+01:00 homeserver guacd[257623]: Creating
> > new client for protocol "rdp"
> > 2024-01-24T18:41:40.781719+01:00 homeserver guacd[257623]: Connection
> > ID is 

Re: Log in to Gnome Shell RDP

2024-01-24 Thread David Barber
Not ideal but,  if compatible with your network config,  try forcing the 
connection to tls in the guac connection properties, looking at log it 
is the security type negotiation that is failing


Horváth Csaba wrote:

Hi,

At least not only Gnome Shell related problem.
I tried to log in to a Win10 VM which i created for testing. Remmina
works, but i get the same issue with Guacamole in the logs.

I used the ad-hoc connection string :
rdp://myuser@192.168.1.146/?security=rdp=true

Guessing that Guacamole ignores the ignore-cert option?

2024-01-24T18:41:40.780347+01:00 homeserver guacd[257623]: Creating
new client for protocol "rdp"
2024-01-24T18:41:40.781719+01:00 homeserver guacd[257623]: Connection
ID is "$e73fa88a-7707-4f18-8209-3ee766f87d82"
2024-01-24T18:41:40.924834+01:00 homeserver guacd[2987651]: No
security mode specified. Defaulting to security mode negotiation with
server.
2024-01-24T18:41:40.925192+01:00 homeserver guacd[2987651]: Resize method: none
2024-01-24T18:41:40.926115+01:00 homeserver guacd[2987651]: User
"@f13bfc35-7c25-4268-850f-c504a54d1676" joined connection
"$e73fa88a-7707-4f18-8209-3ee766f87d82" (1 users now present)
2024-01-24T18:41:40.935773+01:00 homeserver guacd[2987651]: Loading
keymap "base"
2024-01-24T18:41:40.936026+01:00 homeserver guacd[2987651]: Loading
keymap "en-us-qwerty"
2024-01-24T18:41:41.436923+01:00 homeserver guacd[2987651]:
Certificate validation failed
2024-01-24T18:41:41.440079+01:00 homeserver guacd[2987651]: RDP server
closed/refused connection: SSL/TLS connection failed
(untrusted/self-signed certificate?)
2024-01-24T18:41:41.446761+01:00 homeserver guacd[2987651]: User
"@f13bfc35-7c25-4268-850f-c504a54d1676" disconnected (0 users remain)
2024-01-24T18:41:41.447198+01:00 homeserver guacd[2987651]: Last user
of connection "$e73fa88a-7707-4f18-8209-3ee766f87d82" disconnected
2024-01-24T18:41:41.460660+01:00 homeserver guacd[257623]: Connection
"$e73fa88a-7707-4f18-8209-3ee766f87d82" removed.
2024-01-24T18:42:16.479436+01:00 homeserver guacd[257623]: Creating
new client for protocol "rdp"
2024-01-24T18:42:16.479757+01:00 homeserver guacd[257623]: Connection
ID is "$975ac828-47e4-4fba-8bb7-c92ad661c5ad"
2024-01-24T18:42:16.624905+01:00 homeserver guacd[2988305]: Security mode: RDP
2024-01-24T18:42:16.625256+01:00 homeserver guacd[2988305]: Resize method: none
2024-01-24T18:42:16.626253+01:00 homeserver guacd[2988305]: User
"@bac1a634-ab13-4618-9322-037912ea98c9" joined connection
"$975ac828-47e4-4fba-8bb7-c92ad661c5ad" (1 users now present)
2024-01-24T18:42:16.636862+01:00 homeserver guacd[2988305]: Loading
keymap "base"
2024-01-24T18:42:16.637155+01:00 homeserver guacd[2988305]: Loading
keymap "en-us-qwerty"
2024-01-24T18:42:17.031774+01:00 homeserver guacd[2988305]: RDP server
closed/refused connection: Server refused connection (wrong security
type?)
2024-01-24T18:42:17.053627+01:00 homeserver guacd[2988305]: User
"@bac1a634-ab13-4618-9322-037912ea98c9" disconnected (0 users remain)
2024-01-24T18:42:17.053968+01:00 homeserver guacd[2988305]: Last user
of connection "$975ac828-47e4-4fba-8bb7-c92ad661c5ad" disconnected
2024-01-24T18:42:17.068018+01:00 homeserver guacd[257623]: Connection
"$975ac828-47e4-4fba-8bb7-c92ad661c5ad" removed.


Cs.

Leslie Mann  ezt írta (időpont: 2024. jan.
24., Sze, 0:32):

I've had success connecting with setting security mode to 'Any' and checking 
the 'Ignore server certificate' box.

Note that the Gnome user has to be logged on in an active session on the Linux 
box (I'm using Fedora) before connecting otherwise you get a 'the remote 
desktop server has forcibly closed the connection'...  I believe there are 
changes coming that will allow a connection at any time but for now an RDP 
connection requires the user to have an active session not locked.

Les

On Tue, 2024-01-23 at 23:33 +0100, Horváth Csaba wrote:

Hi,

Of course i tested the security options, and none succeeded.

In the meantime i checked with Windows RDP client, and it worked. Something 
special needed for Guacamole, but what...? I suspect TLS certs, which is 
provided by Gnome's RDP Server, but don't know how to use with Guacamole.

Cs.

Toine  ezt írta (időpont: 2024. jan. 23., K 22:28):

Le 23/01/2024 à 21:38, Horváth Csaba - horvathcsabalas...@gmail.com a
écrit :

2024-01-23T21:30:20.148883+01:00 homeserver guacd[1689041]: RDP server
closed/refused connection: Server refused connection (wrong security
type?)

Have you tried playing with the security type, for instance with the
param "security" set to "rdp"?

https://guacamole.apache.org/doc/gug/configuring-guacamole.html#authentication-and-security

Toine

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org



-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional 

Re: Log in to Gnome Shell RDP

2024-01-24 Thread Horváth Csaba
Hi,

At least not only Gnome Shell related problem.
I tried to log in to a Win10 VM which i created for testing. Remmina
works, but i get the same issue with Guacamole in the logs.

I used the ad-hoc connection string :
rdp://myuser@192.168.1.146/?security=rdp=true

Guessing that Guacamole ignores the ignore-cert option?

2024-01-24T18:41:40.780347+01:00 homeserver guacd[257623]: Creating
new client for protocol "rdp"
2024-01-24T18:41:40.781719+01:00 homeserver guacd[257623]: Connection
ID is "$e73fa88a-7707-4f18-8209-3ee766f87d82"
2024-01-24T18:41:40.924834+01:00 homeserver guacd[2987651]: No
security mode specified. Defaulting to security mode negotiation with
server.
2024-01-24T18:41:40.925192+01:00 homeserver guacd[2987651]: Resize method: none
2024-01-24T18:41:40.926115+01:00 homeserver guacd[2987651]: User
"@f13bfc35-7c25-4268-850f-c504a54d1676" joined connection
"$e73fa88a-7707-4f18-8209-3ee766f87d82" (1 users now present)
2024-01-24T18:41:40.935773+01:00 homeserver guacd[2987651]: Loading
keymap "base"
2024-01-24T18:41:40.936026+01:00 homeserver guacd[2987651]: Loading
keymap "en-us-qwerty"
2024-01-24T18:41:41.436923+01:00 homeserver guacd[2987651]:
Certificate validation failed
2024-01-24T18:41:41.440079+01:00 homeserver guacd[2987651]: RDP server
closed/refused connection: SSL/TLS connection failed
(untrusted/self-signed certificate?)
2024-01-24T18:41:41.446761+01:00 homeserver guacd[2987651]: User
"@f13bfc35-7c25-4268-850f-c504a54d1676" disconnected (0 users remain)
2024-01-24T18:41:41.447198+01:00 homeserver guacd[2987651]: Last user
of connection "$e73fa88a-7707-4f18-8209-3ee766f87d82" disconnected
2024-01-24T18:41:41.460660+01:00 homeserver guacd[257623]: Connection
"$e73fa88a-7707-4f18-8209-3ee766f87d82" removed.
2024-01-24T18:42:16.479436+01:00 homeserver guacd[257623]: Creating
new client for protocol "rdp"
2024-01-24T18:42:16.479757+01:00 homeserver guacd[257623]: Connection
ID is "$975ac828-47e4-4fba-8bb7-c92ad661c5ad"
2024-01-24T18:42:16.624905+01:00 homeserver guacd[2988305]: Security mode: RDP
2024-01-24T18:42:16.625256+01:00 homeserver guacd[2988305]: Resize method: none
2024-01-24T18:42:16.626253+01:00 homeserver guacd[2988305]: User
"@bac1a634-ab13-4618-9322-037912ea98c9" joined connection
"$975ac828-47e4-4fba-8bb7-c92ad661c5ad" (1 users now present)
2024-01-24T18:42:16.636862+01:00 homeserver guacd[2988305]: Loading
keymap "base"
2024-01-24T18:42:16.637155+01:00 homeserver guacd[2988305]: Loading
keymap "en-us-qwerty"
2024-01-24T18:42:17.031774+01:00 homeserver guacd[2988305]: RDP server
closed/refused connection: Server refused connection (wrong security
type?)
2024-01-24T18:42:17.053627+01:00 homeserver guacd[2988305]: User
"@bac1a634-ab13-4618-9322-037912ea98c9" disconnected (0 users remain)
2024-01-24T18:42:17.053968+01:00 homeserver guacd[2988305]: Last user
of connection "$975ac828-47e4-4fba-8bb7-c92ad661c5ad" disconnected
2024-01-24T18:42:17.068018+01:00 homeserver guacd[257623]: Connection
"$975ac828-47e4-4fba-8bb7-c92ad661c5ad" removed.


Cs.

Leslie Mann  ezt írta (időpont: 2024. jan.
24., Sze, 0:32):
>
> I've had success connecting with setting security mode to 'Any' and checking 
> the 'Ignore server certificate' box.
>
> Note that the Gnome user has to be logged on in an active session on the 
> Linux box (I'm using Fedora) before connecting otherwise you get a 'the 
> remote desktop server has forcibly closed the connection'...  I believe there 
> are changes coming that will allow a connection at any time but for now an 
> RDP connection requires the user to have an active session not locked.
>
> Les
>
> On Tue, 2024-01-23 at 23:33 +0100, Horváth Csaba wrote:
>
> Hi,
>
> Of course i tested the security options, and none succeeded.
>
> In the meantime i checked with Windows RDP client, and it worked. Something 
> special needed for Guacamole, but what...? I suspect TLS certs, which is 
> provided by Gnome's RDP Server, but don't know how to use with Guacamole.
>
> Cs.
>
> Toine  ezt írta (időpont: 2024. jan. 23., K 22:28):
>
> Le 23/01/2024 à 21:38, Horváth Csaba - horvathcsabalas...@gmail.com a
> écrit :
> > 2024-01-23T21:30:20.148883+01:00 homeserver guacd[1689041]: RDP server
> > closed/refused connection: Server refused connection (wrong security
> > type?)
>
> Have you tried playing with the security type, for instance with the
> param "security" set to "rdp"?
>
> https://guacamole.apache.org/doc/gug/configuring-guacamole.html#authentication-and-security
>
> Toine
>
> -
> To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
> For additional commands, e-mail: user-h...@guacamole.apache.org
>
>

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org



Re: Log in to Gnome Shell RDP

2024-01-24 Thread Horváth Csaba
Hi,

I tried all security modes, and ignorig certs...

The computer has a logged in session. (BTW from Remmina, it works for
a locked session also).

@Barnhart, Steven, yes, ignoring certs were tried.

Ill set up a Windows VM in the evening, and check if Guacamole can
connect via RDP, just for checking.

Cs.


Leslie Mann  ezt írta (időpont: 2024. jan.
24., Sze, 0:32):
>
> I've had success connecting with setting security mode to 'Any' and checking 
> the 'Ignore server certificate' box.
>
> Note that the Gnome user has to be logged on in an active session on the 
> Linux box (I'm using Fedora) before connecting otherwise you get a 'the 
> remote desktop server has forcibly closed the connection'...  I believe there 
> are changes coming that will allow a connection at any time but for now an 
> RDP connection requires the user to have an active session not locked.
>
> Les
>
> On Tue, 2024-01-23 at 23:33 +0100, Horváth Csaba wrote:
>
> Hi,
>
> Of course i tested the security options, and none succeeded.
>
> In the meantime i checked with Windows RDP client, and it worked. Something 
> special needed for Guacamole, but what...? I suspect TLS certs, which is 
> provided by Gnome's RDP Server, but don't know how to use with Guacamole.
>
> Cs.
>
> Toine  ezt írta (időpont: 2024. jan. 23., K 22:28):
>
> Le 23/01/2024 à 21:38, Horváth Csaba - horvathcsabalas...@gmail.com a
> écrit :
> > 2024-01-23T21:30:20.148883+01:00 homeserver guacd[1689041]: RDP server
> > closed/refused connection: Server refused connection (wrong security
> > type?)
>
> Have you tried playing with the security type, for instance with the
> param "security" set to "rdp"?
>
> https://guacamole.apache.org/doc/gug/configuring-guacamole.html#authentication-and-security
>
> Toine
>
> -
> To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
> For additional commands, e-mail: user-h...@guacamole.apache.org
>
>

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org



Re: Log in to Gnome Shell RDP

2024-01-23 Thread Leslie Mann
I've had success connecting with setting security mode to 'Any' and
checking the 'Ignore server certificate' box.

Note that the Gnome user has to be logged on in an active session on
the Linux box (I'm using Fedora) before connecting otherwise you get a
'the remote desktop server has forcibly closed the connection'...  I
believe there are changes coming that will allow a connection at any
time but for now an RDP connection requires the user to have an active
session not locked.

Les

On Tue, 2024-01-23 at 23:33 +0100, Horváth Csaba wrote:
> Hi,
> 
> Of course i tested the security options, and none succeeded. 
> 
> In the meantime i checked with Windows RDP client, and it worked.
> Something special needed for Guacamole, but what...? I suspect TLS
> certs, which is provided by Gnome's RDP Server, but don't know how to
> use with Guacamole.
> 
> Cs.
> 
> Toine  ezt írta (időpont: 2024. jan. 23., K
> 22:28):
> > Le 23/01/2024 à 21:38, Horváth Csaba - horvathcsabalas...@gmail.com
> > a 
> > écrit :
> > > 2024-01-23T21:30:20.148883+01:00 homeserver guacd[1689041]: RDP
> > server
> > > closed/refused connection: Server refused connection (wrong
> > security
> > > type?)
> > 
> > Have you tried playing with the security type, for instance with
> > the 
> > param "security" set to "rdp"?
> > 
> > https://guacamole.apache.org/doc/gug/configuring-guacamole.html#authentication-and-security
> > 
> > Toine
> > 
> > ---
> > --
> > To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
> > For additional commands, e-mail: user-h...@guacamole.apache.org
> > 



Re: Log in to Gnome Shell RDP

2024-01-23 Thread Barnhart, Steven
You haven’t tried the ignore cert option?

–Steve

From: Horváth Csaba 
Sent: Tuesday, January 23, 2024 5:33:56 PM
To: user@guacamole.apache.org 
Subject: Re: Log in to Gnome Shell RDP

Hi, Of course i tested the security options, and none succeeded. In the 
meantime i checked with Windows RDP client, and it worked. Something special 
needed for Guacamole, but what. . . ? I suspect TLS certs, which is provided by 
Gnome's RDP

Hi,

Of course i tested the security options, and none succeeded.

In the meantime i checked with Windows RDP client, and it worked. Something 
special needed for Guacamole, but what...? I suspect TLS certs, which is 
provided by Gnome's RDP Server, but don't know how to use with Guacamole.

Cs.

Toine mailto:guacamole.to...@placi.de>> ezt írta 
(időpont: 2024. jan. 23., K 22:28):
Le 23/01/2024 à 21:38, Horváth Csaba - 
horvathcsabalas...@gmail.com<mailto:horvathcsabalas...@gmail.com> a
écrit :
> 2024-01-23T21:30:20.148883+01:00 homeserver guacd[1689041]: RDP server
> closed/refused connection: Server refused connection (wrong security
> type?)

Have you tried playing with the security type, for instance with the
param "security" set to "rdp"?

https://guacamole.apache.org/doc/gug/configuring-guacamole.html#authentication-and-security<https://urldefense.com/v3/__https://guacamole.apache.org/doc/gug/configuring-guacamole.html*authentication-and-security__;Iw!!KGKeukY!xMpPqnP5cZFHAGaIaQk3mK_d46jhrGYBXgY55qGBpxbg6mJb8uZYNF9KvQgUUZJOZk6O1bqukl1Sil474HWJcJe3CLgK5TY$>

Toine

-
To unsubscribe, e-mail: 
user-unsubscr...@guacamole.apache.org<mailto:user-unsubscr...@guacamole.apache.org>
For additional commands, e-mail: 
user-h...@guacamole.apache.org<mailto:user-h...@guacamole.apache.org>



Re: Log in to Gnome Shell RDP

2024-01-23 Thread Horváth Csaba
Hi,

Of course i tested the security options, and none succeeded.

In the meantime i checked with Windows RDP client, and it worked. Something
special needed for Guacamole, but what...? I suspect TLS certs, which is
provided by Gnome's RDP Server, but don't know how to use with Guacamole.

Cs.

Toine  ezt írta (időpont: 2024. jan. 23., K
22:28):

> Le 23/01/2024 à 21:38, Horváth Csaba - horvathcsabalas...@gmail.com a
> écrit :
> > 2024-01-23T21:30:20.148883+01:00 homeserver guacd[1689041]: RDP server
> > closed/refused connection: Server refused connection (wrong security
> > type?)
>
> Have you tried playing with the security type, for instance with the
> param "security" set to "rdp"?
>
>
> https://guacamole.apache.org/doc/gug/configuring-guacamole.html#authentication-and-security
>
> Toine
>
> -
> To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
> For additional commands, e-mail: user-h...@guacamole.apache.org
>
>


Re: Log in to Gnome Shell RDP

2024-01-23 Thread Toine
Le 23/01/2024 à 21:38, Horváth Csaba - horvathcsabalas...@gmail.com a 
écrit :

2024-01-23T21:30:20.148883+01:00 homeserver guacd[1689041]: RDP server
closed/refused connection: Server refused connection (wrong security
type?)


Have you tried playing with the security type, for instance with the 
param "security" set to "rdp"?


https://guacamole.apache.org/doc/gug/configuring-guacamole.html#authentication-and-security

Toine

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org



Re: Log in to Gnome Shell RDP

2024-01-23 Thread Horváth Csaba
Hi,

Sorry, i forgot to mention : with RDP clients, like Remmina, the
connection is working perfectly.
I'll try the MS-RRP client from my company laptop, but i'm pretty sure
it will also work (i have no other Windows stuff at home).

Thanks,

Cs.

Jimmy  ezt írta (időpont: 2024. jan.
23., K, 21:45):
>
> Hi Horváth Csaba,
>
> Did you try to connect to your Gnome's built-in RDP server with the MS
> Remote Desktop Connection application (mstsc.exe)?
> I'd like to know if you're able to connect to it with mstsc.exe.
>
> Best regards,
> Jimmy
>
>
> On Tuesday, January 23rd, 2024 at 12:38 PM, Horváth Csaba 
>  wrote:
>
> > Hi,
> >
> > I recently switched to Gnome3/Gnome Shell from KDE, and set up
> > Gnome-Remote-Desktop. This is Gnome's built-in RDP server, mostly
> > replacing VNC. (Gnome by default runs on Wayland, which is not
> > supporting VNC.) The OS is Debian Testing (12).
> >
> > So i had a working Guacamole installation, set up for VNC, worked
> > well, for my home computers. Now i try to set a connection for the
> > Gnome-style RDP, this doesn't.
> >
> > This is my user-mapping, of course i altered hostname, username, password
> >
> > 
> >
> > rdp
> >
> > myhostname
> >
> > 3389
> >
> > myuser
> >
> > mypassword
> >
> > any
> >
> > true
> >
> > WORKGROUP
> >
> > 
> >
> >
> > No matter what i set for security, and ignore-cert. I get this in syslog :
> >
> > 2024-01-23T21:30:17.343814+01:00 homeserver guacd[257623]: Connection
> > ID is "$8bd99bb8-018e-4c41-8794-ce4588d9c6a1"
> > 2024-01-23T21:30:17.494015+01:00 homeserver guacd[1689041]: Security
> > mode: Negotiate (ANY)
> > 2024-01-23T21:30:17.494382+01:00 homeserver guacd[1689041]: Resize method: 
> > none
> > 2024-01-23T21:30:17.495475+01:00 homeserver guacd[1689041]: User
> > "@cd339928-f5a6-4e50-8eef-9bab5f96d204" joined connection
> > "$8bd99bb8-018e-4c41-8794-ce4588d9c6a1" (1 users now present)
> > 2024-01-23T21:30:17.505494+01:00 homeserver guacd[1689041]: Loading
> > keymap "base"
> > 2024-01-23T21:30:17.505820+01:00 homeserver guacd[1689041]: Loading
> > keymap "en-us-qwerty"
> > 2024-01-23T21:30:20.148883+01:00 homeserver guacd[1689041]: RDP server
> > closed/refused connection: Server refused connection (wrong security
> > type?)
> > 2024-01-23T21:30:20.163722+01:00 homeserver guacd[1689041]: User
> > "@cd339928-f5a6-4e50-8eef-9bab5f96d204" disconnected (0 users remain)
> > 2024-01-23T21:30:20.164061+01:00 homeserver guacd[1689041]: Last user
> > of connection "$8bd99bb8-018e-4c41-8794-ce4588d9c6a1" disconnected
> > 2024-01-23T2uspect1:30:20.179494+01:00 homeserver guacd[257623]:
> > Connection "$8bd99bb8-018e-4c41-8794-ce4588d9c6a1" removed.
> >
> > The guacamole.war is the latest, but this was the situation with 1.3 too,
> >
> > The question is, has anyone specific experience with Gnome Shell's
> > RDP? I suspect the problem there. There are tons of results in Google
> > for "install Vino and turn on VNC" but those are irrelevant since most
> > Linux distros switched to Wayland.
> >
> > Thanks for any help :)
> >
> > Cs.
> >
> > -
> > To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
> > For additional commands, e-mail: user-h...@guacamole.apache.org
>
> -
> To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
> For additional commands, e-mail: user-h...@guacamole.apache.org
>

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org



Re: Log in to Gnome Shell RDP

2024-01-23 Thread Jimmy
Hi Horváth Csaba,

Did you try to connect to your Gnome's built-in RDP server with the MS
Remote Desktop Connection application (mstsc.exe)?
I'd like to know if you're able to connect to it with mstsc.exe.

Best regards,
Jimmy


On Tuesday, January 23rd, 2024 at 12:38 PM, Horváth Csaba 
 wrote:

> Hi,
> 
> I recently switched to Gnome3/Gnome Shell from KDE, and set up
> Gnome-Remote-Desktop. This is Gnome's built-in RDP server, mostly
> replacing VNC. (Gnome by default runs on Wayland, which is not
> supporting VNC.) The OS is Debian Testing (12).
> 
> So i had a working Guacamole installation, set up for VNC, worked
> well, for my home computers. Now i try to set a connection for the
> Gnome-style RDP, this doesn't.
> 
> This is my user-mapping, of course i altered hostname, username, password
> 
> 
> 
> rdp
> 
> myhostname
> 
> 3389
> 
> myuser
> 
> mypassword
> 
> any
> 
> true
> 
> WORKGROUP
> 
> 
> 
> 
> No matter what i set for security, and ignore-cert. I get this in syslog :
> 
> 2024-01-23T21:30:17.343814+01:00 homeserver guacd[257623]: Connection
> ID is "$8bd99bb8-018e-4c41-8794-ce4588d9c6a1"
> 2024-01-23T21:30:17.494015+01:00 homeserver guacd[1689041]: Security
> mode: Negotiate (ANY)
> 2024-01-23T21:30:17.494382+01:00 homeserver guacd[1689041]: Resize method: 
> none
> 2024-01-23T21:30:17.495475+01:00 homeserver guacd[1689041]: User
> "@cd339928-f5a6-4e50-8eef-9bab5f96d204" joined connection
> "$8bd99bb8-018e-4c41-8794-ce4588d9c6a1" (1 users now present)
> 2024-01-23T21:30:17.505494+01:00 homeserver guacd[1689041]: Loading
> keymap "base"
> 2024-01-23T21:30:17.505820+01:00 homeserver guacd[1689041]: Loading
> keymap "en-us-qwerty"
> 2024-01-23T21:30:20.148883+01:00 homeserver guacd[1689041]: RDP server
> closed/refused connection: Server refused connection (wrong security
> type?)
> 2024-01-23T21:30:20.163722+01:00 homeserver guacd[1689041]: User
> "@cd339928-f5a6-4e50-8eef-9bab5f96d204" disconnected (0 users remain)
> 2024-01-23T21:30:20.164061+01:00 homeserver guacd[1689041]: Last user
> of connection "$8bd99bb8-018e-4c41-8794-ce4588d9c6a1" disconnected
> 2024-01-23T2uspect1:30:20.179494+01:00 homeserver guacd[257623]:
> Connection "$8bd99bb8-018e-4c41-8794-ce4588d9c6a1" removed.
> 
> The guacamole.war is the latest, but this was the situation with 1.3 too,
> 
> The question is, has anyone specific experience with Gnome Shell's
> RDP? I suspect the problem there. There are tons of results in Google
> for "install Vino and turn on VNC" but those are irrelevant since most
> Linux distros switched to Wayland.
> 
> Thanks for any help :)
> 
> Cs.
> 
> -
> To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
> For additional commands, e-mail: user-h...@guacamole.apache.org

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org