[jira] [Created] (GUACAMOLE-1232) User session locked in use and cannot reset?
Joseph Gullo created GUACAMOLE-1232:
---
Summary: User session locked in use and cannot reset?
Key: GUACAMOLE-1232
URL: https://issues.apache.org/jira/browse/GUACAMOLE-1232
Project: Guacamole
Issue Type: Bug
Components: guacamole, guacamole-client, guacamole-server, RDP
Affects Versions: 1.2.0
Environment: Ubuntu 20.04 guacamole server, clients range from Windows
10 and Windows Server 2016
Reporter: Joseph Gullo
An RDP session is locked, when I try to connect I get the following message:
The Guacamole server is denying access to this connection because you have
exhausted the limit for simultaneous connection use by an individual user.
Please close one or more connections and try again.
I have logged out of that computer, I have restarted that computer. It is a
Windows 10 computer. My user is able to connect to other computers (Windows 10
and Windows Server 2016) using the same guacamole session. From the other
computers, I am able to successfully RDP into the original problematic
computer. From a different (admin) user account I get the same message trying
to log into the problematic computer. I logged out of guacamole completely and
logged back in, same message. I closed the chrome session entirely, upon
trying again, same message. I closed chrome completely, opened an incognito
tab, same message.
I have restarted guacd AND rebooted the guacamole server. I have edited the
session for this computer to allow "Maximum Number of Connections" to be 5 and
"Maximum Number of connections per user" to be 5. From my admin user I have
been able to kill the user session of the problematic user/computer (or,
confirm it isn't there) and when I re-start the whole process I get the same
connection error.
The windows system logs show no errors, but I do believe I am seeing a
successful authentication attempt.
Somehow, this RDP session is locked and I can't unlock it; my worry is there is
some database artifact triggering guacd to think the session is alive when it
isn't.
The logs in catalina.out show the following:
{code:java}
16:11:18.825 [http-nio-8080-exec-9] ERROR
o.a.g.w.GuacamoleWebSocketTunnelEndpoint - Creation of WebSocket tunnel to
guacd failed: Cannot connect. Connection already in use by this user.
16:11:18.896 [http-nio-8080-exec-6] WARN o.a.g.s.GuacamoleHTTPTunnelServlet -
HTTP tunnel request rejected: Cannot connect. Connection already in use by this
user.{code}
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
[jira] [Created] (GUACAMOLE-969) SSH terminal on Android doesn't bring up keyboard
Joseph Gullo created GUACAMOLE-969: -- Summary: SSH terminal on Android doesn't bring up keyboard Key: GUACAMOLE-969 URL: https://issues.apache.org/jira/browse/GUACAMOLE-969 Project: Guacamole Issue Type: Bug Components: guacamole-client Affects Versions: 1.1.0, 1.0.0 Environment: Ubuntu 19.10 Guacamole 1.1.0 Reporter: Joseph Gullo We have remote SSH connections for both Linux and Powershell sessions on servers. These work perfectly but when we connect from mobile we see the session but can't type. The keyboard doesn't come up; I believe the element doesn't register as a text input area. If this worked it would be awesome as we could do stuff like unlock or disable accounts from Powershell remotely. I have tested on Android but not iOS. -- This message was sent by Atlassian Jira (v8.3.4#803005)
[jira] [Commented] (GUACAMOLE-249) Update RDP plugin support to 2.0.0 releases
[ https://issues.apache.org/jira/browse/GUACAMOLE-249?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16958387#comment-16958387 ] Joseph Gullo commented on GUACAMOLE-249: As soon as this has been committed to master I'm happy to test on Ubuntu 19.10 with freerdp2. > Update RDP plugin support to 2.0.0 releases > --- > > Key: GUACAMOLE-249 > URL: https://issues.apache.org/jira/browse/GUACAMOLE-249 > Project: Guacamole > Issue Type: Improvement > Components: RDP >Reporter: Simone Caronni >Assignee: Mike Jumper >Priority: Critical > Fix For: 1.1.0 > > Attachments: Screenshot_2018-09-01_14-48-56.png > > > The planets have aligned, after 2.5 years FreeRDP has released new snapshots: > https://github.com/FreeRDP/FreeRDP/releases > Thanks, > --Simone -- This message was sent by Atlassian Jira (v8.3.4#803005)
[jira] [Commented] (GUACAMOLE-221) Parameter prompting within client interface
[
https://issues.apache.org/jira/browse/GUACAMOLE-221?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16910586#comment-16910586
]
Joseph Gullo commented on GUACAMOLE-221:
My install is compiled from source, if you have a patch that enables that
feature and you need testing please let me know, I'd be happy to test! My
reading above was that you may have had a solution for username and password,
hence thinking there may be something patchable.
Thank you for your work!
> Parameter prompting within client interface
> ---
>
> Key: GUACAMOLE-221
> URL: https://issues.apache.org/jira/browse/GUACAMOLE-221
> Project: Guacamole
> Issue Type: New Feature
> Components: guacamole
>Reporter: Michael Jumper
>Assignee: Nick Couchman
>Priority: Major
>
> {panel:bgColor=#EE}
> *The description of this issue was copied from
> [GUAC-335|https://glyptodon.org/jira/browse/GUAC-335], an issue in the JIRA
> instance used by the Guacamole project prior to its acceptance into the
> Apache Incubator.*
> Comments, attachments, related issues, and history from prior to acceptance
> *have not been copied* and can be found instead at the original issue.
> {panel}
> Some parameters, such as the username/password for VNC or RDP, are better
> entered manually within the client when connecting rather than stored on the
> server in MySQL or {{user-mapping.xml}}.
> Storing secure data within parameters on the server side has security
> implications that don't fit well with all use cases.
> Further, some connections would benefit if their settings can be modified
> locally before connecting. A user could change the color depth or screen size
> of their RDP session, for example, for the sake of a slower connection.
--
This message was sent by Atlassian Jira
(v8.3.2#803003)
[jira] [Commented] (GUACAMOLE-221) Parameter prompting within client interface
[
https://issues.apache.org/jira/browse/GUACAMOLE-221?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16910573#comment-16910573
]
Joseph Gullo commented on GUACAMOLE-221:
Awesome, I hadn't seen that.
Still, the workflow I'm thinking of is the following:
1) I authenticate into guacamole as my regular user account
2) I connect to my normal desktop using a parameter, no issue.
3) I see a connection to a domain controller, I want to connect to that session
with a separate domain admin account. I'd like to be able to enter credentials.
4) I see a connection to a switch. I want to connect to that session with
separate network admin credentials.
5) I see a connection to a server, I want to connect to that session with
separate server admin credentials.
In theory, the only possible credentials that can successfully authenticate
from the internet are my un-privileged ones, then you would need to know
additional credentials once inside the network. I don't like the idea of
storing my admin credentials, and I don't like the idea of my admin accounts
accessible to a WAN login. I know I can bounce from RDP once inside my regular
session, but RDP-through-RDP starts to feel sloppy.
> Parameter prompting within client interface
> ---
>
> Key: GUACAMOLE-221
> URL: https://issues.apache.org/jira/browse/GUACAMOLE-221
> Project: Guacamole
> Issue Type: New Feature
> Components: guacamole
>Reporter: Michael Jumper
>Assignee: Nick Couchman
>Priority: Major
>
> {panel:bgColor=#EE}
> *The description of this issue was copied from
> [GUAC-335|https://glyptodon.org/jira/browse/GUAC-335], an issue in the JIRA
> instance used by the Guacamole project prior to its acceptance into the
> Apache Incubator.*
> Comments, attachments, related issues, and history from prior to acceptance
> *have not been copied* and can be found instead at the original issue.
> {panel}
> Some parameters, such as the username/password for VNC or RDP, are better
> entered manually within the client when connecting rather than stored on the
> server in MySQL or {{user-mapping.xml}}.
> Storing secure data within parameters on the server side has security
> implications that don't fit well with all use cases.
> Further, some connections would benefit if their settings can be modified
> locally before connecting. A user could change the color depth or screen size
> of their RDP session, for example, for the sake of a slower connection.
--
This message was sent by Atlassian Jira
(v8.3.2#803003)
[jira] [Commented] (GUACAMOLE-221) Parameter prompting within client interface
[
https://issues.apache.org/jira/browse/GUACAMOLE-221?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16908549#comment-16908549
]
Joseph Gullo commented on GUACAMOLE-221:
I saw above that you had less of an issue having a prompt for password
work...is it possible to see a patch to turn this feature on? We're tied into
AD and are experimenting with having an "allow users to access their windows
desktop computers from home over RDP" setup...we don't really want to store the
AD credentials in the guacamole database, and we don't want this to be an
update location for when users change their passwords. If we could globally
have a password prompt for users making RDP connections, I think my management
would approve the use of this.
> Parameter prompting within client interface
> ---
>
> Key: GUACAMOLE-221
> URL: https://issues.apache.org/jira/browse/GUACAMOLE-221
> Project: Guacamole
> Issue Type: New Feature
> Components: guacamole
>Reporter: Michael Jumper
>Assignee: Nick Couchman
>Priority: Major
>
> {panel:bgColor=#EE}
> *The description of this issue was copied from
> [GUAC-335|https://glyptodon.org/jira/browse/GUAC-335], an issue in the JIRA
> instance used by the Guacamole project prior to its acceptance into the
> Apache Incubator.*
> Comments, attachments, related issues, and history from prior to acceptance
> *have not been copied* and can be found instead at the original issue.
> {panel}
> Some parameters, such as the username/password for VNC or RDP, are better
> entered manually within the client when connecting rather than stored on the
> server in MySQL or {{user-mapping.xml}}.
> Storing secure data within parameters on the server side has security
> implications that don't fit well with all use cases.
> Further, some connections would benefit if their settings can be modified
> locally before connecting. A user could change the color depth or screen size
> of their RDP session, for example, for the sake of a slower connection.
--
This message was sent by Atlassian JIRA
(v7.6.14#76016)
