RE: noauth dynamic things

2019-09-20 Thread Ryan Underwood
auth-json does something like this, but not quite "no" auth https://github.com/glyptodon/guacamole-auth-json -Ryan -Original Message- From: Boby Sent: Friday, September 20, 2019 9:06 AM To: user@guacamole.apache.org Subject: Re: noauth dynamic things Hello, Users are authenticated at

auth-json + simultaneous active connections created at different times

2019-08-28 Thread Ryan Underwood
TL;DR; What is the recommended way to add a connection for an active user (with a tunnel open) and take the user directly into it, without causing their existing session to break? I've got an environment with Mike's auth-json on the latest guacamole from source. It works as I expected with a

RE: OpenID and NoAuth / user-mapping.xml ?

2019-08-22 Thread Ryan Underwood
21, 2019, at 6:55 PM, Ryan Underwood wrote: > > auth-json lives here last I saw: > https://github.com/glyptodon/guacamole-auth-json > It works just fine. > -Ryan > > -Original Message- > From: Nick Couchman > Sent: Tuesday, August 20, 2019 12:27 PM &

RE: OpenID and NoAuth / user-mapping.xml ?

2019-08-21 Thread Ryan Underwood
auth-json lives here last I saw: https://github.com/glyptodon/guacamole-auth-json It works just fine. -Ryan -Original Message- From: Nick Couchman Sent: Tuesday, August 20, 2019 12:27 PM To: user@guacamole.apache.org Subject: Re: OpenID and NoAuth / user-mapping.xml ? On Tue, Aug 20,

RE: Disable SSL certificate verification with OpenID Connect Authentication

2019-07-23 Thread Ryan Underwood
For testing and non-production use (or production at your own peril), you can add ".setSkipSignatureVerification()" to your JWTConsumerBuilder in the o.a.g.a.o.t.TokenValidationService of the OpenID extension. That worked for me but may not solve your exact problem. -Ryan -Original

RE: OpenID / KeyCloak

2019-04-16 Thread Ryan Underwood
A few thoughts: - Are you sure that the asterisk(s) in your URL is what you intended? I know that keycloak will let you specify the valid redirect URLs with wildcards so wasn't sure if that was a failed configuration. The Guacamole angular app rewrites URLs and it's possible this is affecting

RE: OpenID Auth Not Redirecting

2019-04-06 Thread Ryan Underwood
The redirect happens immediately after hitting the login url. IIRC the OpenID extension needs to load alphabetically first for this to work (depending on the other extensions). This is handled in the docker image automatically but otherwise you'll need to rename it to prepend something like 1_

RE: Permissions on screen capture recordings

2018-01-16 Thread Ryan Underwood
(www.symantec.com) -Original Message- From: Mike Jumper [mike.jum...@guac-dev.org] Received: Tuesday, 16 Jan 2018, 12:02AM To: user@guacamole.apache.org [user@guacamole.apache.org] Subject: Re: Permissions on screen capture recordings On Mon, Jan 15, 2018 at 11:59 AM, Ryan Underwood &l

RE: Permissions on screen capture recordings

2018-01-15 Thread Ryan Underwood
Aaron and Mike, This may be an issue in the source for recording.c (line 83 and again for the naming retries): /* Attempt to open recording */ int fd = open(basename, O_CREAT | O_EXCL | O_WRONLY, S_IRUSR | S_IWUSR); man(2) for open states that if you use O_CREAT you must supply the mode