libavcodec <> ffmpeg issue with guacamole 1.1.0 building on Centos 7 minimal

2020-05-19 Thread alipawsey
All good with ./configure: guacamole-server version 1.1.0 Library status: freerdp2 yes pango ... yes libavcodec .. yes libavutil ...

Re: Session Token in URL

2020-05-19 Thread sciUser
If you like to see it , you can go to https://academy.securitycentric.net create an account and I will add a demo for you and you can see how we forge the connections. We force the token to expire on exit and a new token to be issued for a new session. - A Cybersecurity Enablement Company

Re: Session Token in URL

2020-05-19 Thread Mike Jumper
On Tue, May 19, 2020, 13:46 Joachim Lindenberg wrote: > Is logging really a concern if you use https and avoid any proxy that > terminates (MitM)? Of course you can argue about the nginx or similar you > put in front of Guacamole, but if both components are administrated by the > same folks you

AW: Session Token in URL

2020-05-19 Thread Joachim Lindenberg
Is logging really a concern if you use https and avoid any proxy that terminates (MitM)? Of course you can argue about the nginx or similar you put in front of Guacamole, but if both components are administrated by the same folks you know whom to trust or fire anyway.. Regards, Joachim

Re: Session Token in URL

2020-05-19 Thread Mike Jumper
On Tue, May 19, 2020, 11:52 sciUser wrote: > What you want is what we do, we built a provisioning system that handles > Just > In time (JIT) tokens and they expire after session is terminated, > preventing > students from book marking the url. > The token is not part of any URL exposed to the

Re: Session Token in URL

2020-05-19 Thread sciUser
What you want is what we do, we built a provisioning system that handles Just In time (JIT) tokens and they expire after session is terminated, preventing students from book marking the url. This is using the POST action with Tomcat. Search for my posts in this forum and you will find your

user restriction to 1 RDP only

2020-05-19 Thread alphablue
Hi, I have a lab with 5 computers. I created a connection group "Lab" of type organizational and set its "Maximum number of connections per user = 1" and checked session affinity. I then added all 5 computers to this connection group and for each computer connect I set "Maximum number of

Session Token in URL

2020-05-19 Thread Madhukar Bhosale
Hi, It has been observed that Sensitive information within URLs is getting logged in various locations, including the user's browser, the web server, and any forward or reverse proxy servers between the two endpoints. URLs may also be displayed on-screen, bookmarked or emailed around by users.

Re: Session replication

2020-05-19 Thread Saxa Egea
We want to have it for HA and Load balance. The main idea is to have both servers active-active. Thanks, Saxa De: "Peter De Tender" A: "user" Enviats: Dilluns, 18 Maig de 2020 18:23:43 Assumpte: Re: Session replication Hi Saxa, Do you point at load balancing for high availability?

Re: Session replication

2020-05-19 Thread Saxa Egea
Thanks for your quick answer... We are using: 2 NGINX 2 Tomcat8 2 guacd 2 PGPOOL 2 PGSQL (clustered Active-Passive) Both guacamole-clients point to the pgpool service which point to the correct database (the one that is in RW mode). Our goal is to have all elements replicated to avoid