RE: Authentication failed for domain users

[Hawkins, Richard]

I only have one domain..   Not sure if you can use more than one.

 

From: Nuwan Kumara [mailto:nkwor...@gmail.com] 
Sent: Tuesday, February 21, 2017 3:53 PM
To: user@guacamole.incubator.apache.org
Subject: RE: Authentication failed for domain users

 

Gotcha, just the username works even in separate domains.

Regards, 
Nuwan Kanakarathna

 

On 21 Feb 2017 2:37 pm, "Hawkins, Richard" <richard.hawk...@medctrbarbour.org> 
wrote:

You shouldn’t have to do that.

 

From: Nuwan Kumara [mailto:nkwor...@gmail.com] 
Sent: Tuesday, February 21, 2017 2:24 PM
To: user@guacamole.incubator.apache.org
Subject: Authentication failed for domain users

 

Hello Team,

 

I'M getting below error while trying to access with domain credentials

 

 

Feb 21 13:07:41 emulator guacd[9943]: Password authentication failed: 
Authentication failed (username/password)

 

For your information, I used the username as 

 

domain/username and then

password

 




Regards,

Nuwan kanakarathna
https://lk.linkedin.com/in/nuwankanakarathna

RE: Authentication failed for domain users

[Hawkins, Richard]

You shouldn’t have to do that.

 

From: Nuwan Kumara [mailto:nkwor...@gmail.com] 
Sent: Tuesday, February 21, 2017 2:24 PM
To: user@guacamole.incubator.apache.org
Subject: Authentication failed for domain users

 

Hello Team,

 

I'M getting below error while trying to access with domain credentials

 

 

Feb 21 13:07:41 emulator guacd[9943]: Password authentication failed: 
Authentication failed (username/password)

 

For your information, I used the username as 

 

domain/username and then

password

 




Regards,

Nuwan kanakarathna
https://lk.linkedin.com/in/nuwankanakarathna

RE: Ldap & password change

[Hawkins, Richard]

Oh yea.  Password..  IS there a way to use a proxy to change AD
passwords?  At the moment if the users password is expired or needs
changing the change password option will not change the password in the
AD..  Unless,  Maybe I give the lookup user rights to do that...  Will
that work?

-Original Message-
From: Hawkins, Richard [mailto:richard.hawk...@medctrbarbour.org] 
Sent: Wednesday, January 25, 2017 4:18 PM
To: user@guacamole.incubator.apache.org
Subject: Ldap & password change

Is there any way to make the ldap query separate OU's?
Or query a specific Security group?

At the moment I am using my DC=domain, DC=org  It picks up everything..
computers, Users, ect. 1000's of them.

I have several groups where I keep users...   Standard Users, users,
Administrator, Doctors, ect..

Any ideas?

Richard

Show logged in users

[Hawkins, Richard]

Is there anyway to show which users are logged into the system using a
command line?

I made a change that sent tomcat into a panic.  Normally I would just
restart tomcat  but I don't want to disconnect the users.

I wonder if restarting tomcat would even affect a user that is already
logged in.. 

r

RE: Branding the login page

[Hawkins, Richard]

Perfect. Ty

 Original message 
From: Mike Jumper  
Date: 01/20/2017  12:45 PM  (GMT-06:00) 
To: user@guacamole.incubator.apache.org 
Subject: Re: Branding the login page 

On Fri, Jan 20, 2017 at 10:18 AM, Jorge Camara  wrote:
Hi,
The name "Apache Guacamole" you can change on translations files :
...tomcat8/webappas/guacamole/translations/en.json
and the logo you can change in directory:

...tomcat8/webapps/guacamole/images/

It's not recommended to modify these files within Tomcat's webapps directory, 
as it will not be stable across redeploys or upgrades. Part of the point of 
providing this functionality through extensions is to keep these kinds of 
customizations independent from Tomcat, the webapp, upstream changes, etc.
To achieve the same with an extension, you would create a .zip file named 
"whatever-you-want-to-call-it.jar" containing:
* A "guac-manifest.json" file describing the contents of the extension (more on 
this below). The format of this is described here: 
http://guacamole.incubator.apache.org/doc/gug/guacamole-ext.html#ext-manifest* 
An image to be used as the logo (declared within the "resources" section of 
guac-manifest.json)* A translation file overriding the strings you wish to 
override (declared within the "translations" section of guac-manifest.json)* A 
CSS file which overrides the style of the login screen, applying your logo 
(declared within the "css" section of guac-manifest.json)
Your guac-manifest.json would end up looking like:
    {        "guacamoleVersion" : "*",        "name" : "Some meaningful, 
human-readable name",
        "namespace" : "some-unique-namespace",
        "css" : [            "css/login-override.css"        ],
        "resources" : [            "resources/your-logo.png" : "image/png"      
  ],
        "translations" : [            "translations/en.json"        ]
    }
css/login-override.css:
    .login-ui .login-dialog .logo {        background-image: 
url('app/ext/some-unique-namespace/resources/your-logo.png');
    }
translations/en.json:
    {        "APP" : {            "NAME" : "Name of Your Choice",        }    }
And then "resources/your-logo.png" as well.
Once all that is zipped together and dropped into GUACAMOLE_HOME/extensions/ as 
a .jar file, it will automatically be loaded by Guacamole when the webapp 
starts. The custom CSS will be appended to the existing CSS, overriding the 
original styles, the custom translations will be overlaid on the existing 
translations, overriding only the strings you specify, and the custom logo will 
be served dynamically from within a directory named after your chosen 
namespace. You'll probably want to make other changes to the CSS, especially if 
your logo has a different aspect ratio, but this is a start.
Other than overriding the CSS, there's really not much programming involved; 
it's a matter of adding whatever files you need to override what you're looking 
to override, and then declaring those files within "guac-manifest.json":
http://guacamole.incubator.apache.org/doc/gug/guacamole-ext.html#ext-manifest

- Mike

RE: 9.11 testing

[Hawkins, Richard]

[root@guac ~]# mysql -u root -p
Enter password:
Welcome to the MariaDB monitor.  Commands end with ; or \g.
Your MariaDB connection id is 3
Server version: 5.5.50-MariaDB MariaDB Server




-Original Message-
From: Mike Jumper [mailto:mike.jum...@guac-dev.org]
Sent: Tue 1/17/2017 9:38 AM
To: user@guacamole.incubator.apache.org
Subject: RE: 9.11 testing
 
What version of MySQL / MariaDB are you using?


On Jan 17, 2017 05:43, "Hawkins, Richard" <richard.hawk...@medctrbarbour.org>
wrote:

> Looks like the same script to me..
>
> When I run the sql to update...  Her I ran as guacadmin and root..
>
> [root@guac upgrade]# mysql -u guacadmin -p guac_db <
> upgrade-pre-0.9.11.sql
> Enter password:
> ERROR 1067 (42000) at line 24: Invalid default value for 'password_date'
> [root@guac upgrade]# mysql -u root -p guac_db < upgrade-pre-0.9.11.sql
> Enter password:
> ERROR 1067 (42000) at line 24: Invalid default value for 'password_date'
>
> When I try to access the site..   /var/log/messages displays this..
>
> Jan 17 07:27:14 guac server: 07:27:14.448 [http-bio-8080-exec-9] ERROR
> o.a.g.rest.RESTExceptionWrapper - Unexpected internal error:
> Jan 17 07:27:14 guac server: ### Error querying database.  Cause:
> com.mysql.jdbc.exceptions.jdbc4.MySQLSyntaxErrorException: Unknown column
> 'password_date' in 'field list'
> Jan 17 07:27:14 guac server: ### The error may exist in
> org/apache/guacamole/auth/jdbc/user/UserMapper.xml
> Jan 17 07:27:14 guac server: ### The error may involve defaultParameterMap
> Jan 17 07:27:14 guac server: ### The error occurred while setting
> parameters
> Jan 17 07:27:14 guac server: ### SQL: SELECT
> user_id, username, password_hash,
> password_salt, password_date, disabled,
> expired, access_window_start,
> access_window_end, valid_from,
> valid_until, timezone FROM guacamole_user
> WHERE username = ?
> Jan 17 07:27:14 guac server: ### Cause: 
> com.mysql.jdbc.exceptions.jdbc4.MySQLSyntaxErrorException:
> Unknown column 'password_date' in 'field list'
> Jan 17 07:27:14 guac server: Jan 17, 2017 7:27:14 AM
> com.sun.jersey.spi.container.ContainerResponse logException
> Jan 17 07:27:14 guac server: SEVERE: Mapped exception to response: 500
> (Internal Server Error)
> Jan 17 07:27:14 guac server: org.apache.guacamole.rest.APIException
>
> Thanks..
>
>
>
>
>
> -Original Message-
> From: Mike Jumper [mailto:mike.jum...@guac-dev.org
> <mike.jum...@guac-dev.org>]
> Sent: Sun 1/15/2017 11:47 PM
> To: user@guacamole.incubator.apache.org
> Subject: Re: 9.11 testing
>
> On Sun, Jan 15, 2017 at 5:40 AM, Hawkins, Richard
> <richard.hawk...@medctrbarbour.org> wrote:
> >
> > I have been playing around with the latest code.  9.11
> >
>
> 0.9.11*
>
> > I have everything compiled and starting but I am just getting a blank
> > screen.
> >
> > The last time I saw this I needed to update the sql database using the
> > "upgrade-pre-0.9.10.sql"  file
> >
>
> Very plausible. Checking the Tomcat logs should yield some information
> supporting this, too.
>
> > So this time I use the "upgrade-pre-0.9.11.sql"  using the normal
> > command..   mysql -u admin -p guac_db < upgrade-pre-0.9.11.sql
> >
> > But it always comes back..   ERROR 067 (42000) at line 80:  Invalid
> > default value for 'password_date'
> >
>
> Odd ... There isn't a line 80. That script is 49 lines at the moment:
>
> https://github.com/apache/incubator-guacamole-client/blob/
> 72199577634f387cfa809a0c6544aa2c108abf9d/extensions/
> guacamole-auth-jdbc/modules/guacamole-auth-jdbc-mysql/
> schema/upgrade/upgrade-pre-0.9.11.sql
>
> Does the script you're using differ from the above?
>
> - Mike
>
>

<>

RE: 9.11 testing

[Hawkins, Richard]

Looks like the same script to me..

When I run the sql to update...  Her I ran as guacadmin and root..

[root@guac upgrade]# mysql -u guacadmin -p guac_db < upgrade-pre-0.9.11.sql
Enter password:
ERROR 1067 (42000) at line 24: Invalid default value for 'password_date'
[root@guac upgrade]# mysql -u root -p guac_db < upgrade-pre-0.9.11.sql
Enter password:
ERROR 1067 (42000) at line 24: Invalid default value for 'password_date'

When I try to access the site..   /var/log/messages displays this..

Jan 17 07:27:14 guac server: 07:27:14.448 [http-bio-8080-exec-9] ERROR 
o.a.g.rest.RESTExceptionWrapper - Unexpected internal error:
Jan 17 07:27:14 guac server: ### Error querying database.  Cause: 
com.mysql.jdbc.exceptions.jdbc4.MySQLSyntaxErrorException: Unknown column 
'password_date' in 'field list'
Jan 17 07:27:14 guac server: ### The error may exist in 
org/apache/guacamole/auth/jdbc/user/UserMapper.xml
Jan 17 07:27:14 guac server: ### The error may involve defaultParameterMap
Jan 17 07:27:14 guac server: ### The error occurred while setting parameters
Jan 17 07:27:14 guac server: ### SQL: SELECT user_id, 
username, password_hash, password_salt, 
password_date, disabled, expired, 
access_window_start, access_window_end, valid_from, 
valid_until, timezone FROM guacamole_user 
WHERE username = ?
Jan 17 07:27:14 guac server: ### Cause: 
com.mysql.jdbc.exceptions.jdbc4.MySQLSyntaxErrorException: Unknown column 
'password_date' in 'field list'
Jan 17 07:27:14 guac server: Jan 17, 2017 7:27:14 AM 
com.sun.jersey.spi.container.ContainerResponse logException
Jan 17 07:27:14 guac server: SEVERE: Mapped exception to response: 500 
(Internal Server Error)
Jan 17 07:27:14 guac server: org.apache.guacamole.rest.APIException

Thanks..





-Original Message-
From: Mike Jumper [mailto:mike.jum...@guac-dev.org]
Sent: Sun 1/15/2017 11:47 PM
To: user@guacamole.incubator.apache.org
Subject: Re: 9.11 testing
 
On Sun, Jan 15, 2017 at 5:40 AM, Hawkins, Richard
<richard.hawk...@medctrbarbour.org> wrote:
>
> I have been playing around with the latest code.  9.11
>

0.9.11*

> I have everything compiled and starting but I am just getting a blank
> screen.
>
> The last time I saw this I needed to update the sql database using the
> "upgrade-pre-0.9.10.sql"  file
>

Very plausible. Checking the Tomcat logs should yield some information
supporting this, too.

> So this time I use the "upgrade-pre-0.9.11.sql"  using the normal
> command..   mysql -u admin -p guac_db < upgrade-pre-0.9.11.sql
>
> But it always comes back..   ERROR 067 (42000) at line 80:  Invalid
> default value for 'password_date'
>

Odd ... There isn't a line 80. That script is 49 lines at the moment:

https://github.com/apache/incubator-guacamole-client/blob/72199577634f387cfa809a0c6544aa2c108abf9d/extensions/guacamole-auth-jdbc/modules/guacamole-auth-jdbc-mysql/schema/upgrade/upgrade-pre-0.9.11.sql

Does the script you're using differ from the above?

- Mike

9.11 testing

[Hawkins, Richard]

I have been playing around with the latest code.  9.11

I have everything compiled and starting but I am just getting a blank
screen. 

The last time I saw this I needed to update the sql database using the
"upgrade-pre-0.9.10.sql"  file

So this time I use the "upgrade-pre-0.9.11.sql"  using the normal
command..   mysql -u admin -p guac_db < upgrade-pre-0.9.11.sql

But it always comes back..   ERROR 067 (42000) at line 80:  Invalid
default value for 'password_date'

Any ideas?

RE: Scripted Branding

[Hawkins, Richard]

I have read this 20 times, I am not a programmer and I really don't know what 
any of this means.How about a Dummy guide for people like me.   
I am running 9.10 and it is working fine..  easy as pie..  I just can't seem to 
wrap my head around the branding ext.

Love the Guac!!


-Original Message-
From: Mike Jumper [mailto:mike.jum...@guac-dev.org] 
Sent: Thursday, December 29, 2016 1:07 PM
To: Chris Cook
Cc: user@guacamole.incubator.apache.org
Subject: Re: Scripted Branding

There is some basic documentation covering the layout of extensions with 
respect to theming here, though please beware this should be considered a draft 
until the IPMC vote regarding 0.9.10-incubating
(hopefully) passes:

http://guacamole.incubator.apache.org/doc/0.9.10-incubating/gug/guacamole-ext.html#ext-file-format

A Guacamole extension is just a .jar file containing a guac-manifest.json along 
with anything else your extension uses (see above). In the case of an extension 
which does nothing more than theming/branding, the only other things within the 
.jar will be the CSS, HTML, images, etc. you need.

- Mike


On Thu, Dec 29, 2016 at 7:50 AM, Chris Cook  wrote:
> Is there any guidance anywhere that I can refer to on this?  Still 
> looking for the answer…
>
>
>
> From: Chris Cook
> Sent: Friday, October 21, 2016 2:14 PM
> To: 'user@guacamole.incubator.apache.org'; 'mike.jum...@guac-dev.org'
> Subject: RE: Scripted Branding
>
>
>
> Anything?
>
>
>
> From: Chris Cook [mailto:coo...@jlsautomation.com]
> Sent: Monday, October 17, 2016 9:24 PM
> To: user@guacamole.incubator.apache.org
> Subject: RE: Scripted Branding
>
>
>
> Sorry about the brevity of my earlier response; my better-half and I 
> were entertaining a new client - one who is very keen on implementing 
> and experimenting with a Guac based tablet/mobile HMI infrastructure 
> within his factory...
>
>
>
> The logos and the favicons, should both be fixed assets somewhere and 
> should be fairly easy to copy over via script within a BASH 
> environment, following the platform installation/build-out; something 
> like the following should do the trick:
>
> Logo Copyover:
>  cp /media/installationID/logo.png
> /guacamole_fixed-asset_directory/logo_whatever.png
>
> Favicon Copyover:
>  cp /media/installationID/favicon.png
> /guacamole_fixed-asset_directory/favicon_whatever.png
>
> The issue with this scripting methodology is knowing where the fixed 
> assets are located within the default file structure...  If you could 
> provide some illumination as to the path of these static assets, that would 
> be awesome.
>
> Changing the webapp display name and the browser tab display names 
> will be a little more complicated as they are both supposedly 
> generated by a .css file somewhere.  If this .css file is a static 
> asset, where is it located?  If this .css file is dynamically 
> generated, what generates it and how can I edit it to accept a one-time user 
> entry to establish an application name?
>
> To be clear, the project I am working on is based upon a fixed/static 
> and non-updating, configuration-fixed, and revision-controlled 
> appliance build model - i.e. my company builds and installs the 
> appliance within a system which will then be revision-fixed.  If 
> requested/required, I or another engineer would update the core 
> platform, fault test the new core platform, press a new distribution 
> image, and then update/upgrade the production system as specifically 
> requested/contracted.
>
> As such, I am not concerned about an end-client initiated 
> update/upgrade event as my end-client user will not have the ability 
> to independently perform such an operation without the involvement of 
> either myself or one the engineers that works with/for me.
>
> 
>
> From: Chris Cook [coo...@jlsautomation.com]
> Sent: Monday, October 17, 2016 7:14 PM
> To: user@guacamole.incubator.apache.org
> Subject: Re: Scripted Branding
>
> Mike,
>
>
>
> Thanks for your response.  If I am understanding you correctly, I can 
> use a BASH script that includes functions like CAT or an ECHO pipe to 
> write out an installation specific .jar to the guacamole-home folder?
>
> Sent from my iPhone
>
>
> On Oct 17, 2016, at 18:56, Mike Jumper  wrote:
>
> On Mon, Oct 10, 2016 at 10:12 AM, Chris Cook 
> 
> wrote:
>
> Greetings,
>
> I am currently reviewing Guacamole for inclusion in an IIoT platform 
> for industrial equipment - to allow for operator interface access via webpage.
>
> Both I and my team LOVE the default Guac 0.9.9 webapp!
>
>
>
> Thanks!
>
>
>
> However, we have one hurtle that we need some help overcoming...  We 
> are estimating approx. 100 uniquely branded deployments every year.  
> As such, generating a deployment specific branding extension for each 
> and every deployment would become rather cumbersome very quickly.
>
>
>
> Branding extensions