RE: [EXTERNAL] [Suspected SPAM] Re: Guacamole Installation with separate servers for DMZ and Internal Setup

2020-06-03 Thread MARTINEZ, ARIEL
That was spot on. Thanks so much. From: Charaoui, Jérôme Sent: Wednesday, June 3, 2020 1:55 PM To: user@guacamole.apache.org Subject: Re: [EXTERNAL] [Suspected SPAM] Re: Guacamole Installation with separate servers for DMZ and Internal Setup Hello, Le 20-06-03 à 13 h 52, MARTINEZ, ARIEL a

Re: [EXTERNAL] [Suspected SPAM] Re: Guacamole Installation with separate servers for DMZ and Internal Setup

2020-06-03 Thread Charaoui , Jérôme
Hello, Le 20-06-03 à 13 h 52, MARTINEZ, ARIEL a écrit : I got to Chapter 7 for the LDAP configuration after configuring the DB authentication and am having issues logging in with Active Directory accounts. I looked at the logs and the LDAP binding is working properly because it finds the user.

RE: [EXTERNAL] [Suspected SPAM] Re: Guacamole Installation with separate servers for DMZ and Internal Setup

2020-06-03 Thread MARTINEZ, ARIEL
I got to Chapter 7 for the LDAP configuration after configuring the DB authentication and am having issues logging in with Active Directory accounts. I looked at the logs and the LDAP binding is working properly because it finds the user. But when I try to log in, nothing happens. I will not

Re: [EXTERNAL] [Suspected SPAM] Re: Guacamole Installation with separate servers for DMZ and Internal Setup

2020-06-03 Thread Nick Couchman
On Wed, Jun 3, 2020 at 11:34 AM MARTINEZ, ARIEL wrote: > In case someone else has this issue, using the mysql Connector/J 5.1.49 > worked. It does not work with the latest GA release and mariadb 5.5.65. > > > This is slated to be fixed in 1.2.0:

RE: [EXTERNAL] [Suspected SPAM] Re: Guacamole Installation with separate servers for DMZ and Internal Setup

2020-06-03 Thread MARTINEZ, ARIEL
In case someone else has this issue, using the mysql Connector/J 5.1.49 worked. It does not work with the latest GA release and mariadb 5.5.65. From: MARTINEZ, ARIEL Sent: Wednesday, June 3, 2020 11:01 AM To: 'user@guacamole.apache.org' Subject: RE: [EXTERNAL] [Suspected SPAM] Re: Guacamole

RE: [EXTERNAL] [Suspected SPAM] Re: Guacamole Installation with separate servers for DMZ and Internal Setup

2020-06-03 Thread MARTINEZ, ARIEL
My setup is Server 1: guacd service Server 2: Tomcat + Guacamole client WAR (guacamole.properties) Server 3: MariaDB I tried disabling SELINUX and it had no effect. From: MARTINEZ, ARIEL Sent: Wednesday, June 3, 2020 10:29 AM To: user@guacamole.apache.org Subject: RE: [EXTERNAL] [Suspected

RE: [EXTERNAL] [Suspected SPAM] Re: Guacamole Installation with separate servers for DMZ and Internal Setup

2020-06-03 Thread MARTINEZ, ARIEL
I have an entry that allows any host for testing. Also I confirmed that the Client server can get to the database server over 3306. I saw another thread in the mailing list about SELINUX possibly needing to be disabled. I am going to try that. Other than that, I’m wondering if I need to use an

Re: Guacamole Installation with separate servers for DMZ and Internal Setup

2020-06-03 Thread Neumen - Juan Prigoshin
Both jar files and guacamole.properties, are they in the Server with Guacamole Client? The client it’s the one connecting to database. I think MariaDB it’s only necesary for Client not guacd server. A imaginary installation : · Server 1 : guacd service · Server 2 :

RE: [Suspected SPAM] RE: [EXTERNAL] Re: Guacamole Installation with separate servers for DMZ and Internal Setup

2020-06-03 Thread MARTINEZ, ARIEL
I have both .jar files in their respective locations in the extensions and lib directories. My DB is mariadb and I have added the authentication settings to guacamole.properties. I’m able to connect to the Guacamole database running the command mysql –user=guacamole_user –-password

RE: [EXTERNAL] Re: Guacamole Installation with separate servers for DMZ and Internal Setup

2020-06-02 Thread Neumen - Juan Prigoshin
Have you copy guacamole-auth-jdbc-mysql-1.1.0.jar to extensions directory? And mysql-connector-java-8.0.20.jar to lib directory? In the guacamole.properties you add the auth for the database?? # MySQL properties mysql-hostname: localhost mysql-port: 3306 mysql-database: guacamole_db

RE: [EXTERNAL] Re: Guacamole Installation with separate servers for DMZ and Internal Setup

2020-06-02 Thread MARTINEZ, ARIEL
In configuring the database authentication after going through all the steps I am now getting an error in the guacamole login page. Disabling the database connection info in the guacamole.properties file removes the error, so I know it is a db issue. I tried looking at the catalina.out file to

Re: [EXTERNAL] Re: Guacamole Installation with separate servers for DMZ and Internal Setup

2020-06-02 Thread Nick Couchman
On Tue, Jun 2, 2020 at 4:26 PM MARTINEZ, ARIEL wrote: > Thanks. I am making progress and have moved on to the database > authentication extension. I want to be sure I am configuring things in the > right place. The instructions outlined in Chapter 6 of the instructions, > all of this is

RE: [EXTERNAL] Re: Guacamole Installation with separate servers for DMZ and Internal Setup

2020-06-02 Thread MARTINEZ, ARIEL
Thanks. I am making progress and have moved on to the database authentication extension. I want to be sure I am configuring things in the right place. The instructions outlined in Chapter 6 of the instructions, all of this is happening on the server with tomcat or is it happening on the server

Re: [EXTERNAL] Re: Guacamole Installation with separate servers for DMZ and Internal Setup

2020-06-02 Thread Mike Jumper
On Tue, Jun 2, 2020, 09:07 MARTINEZ, ARIEL wrote: > Got it. In the guacd.conf the bind host should be the server running guacd > correct? > It should be the address that you want guacd to bind to. This will determine which network interface(s) can be used to connect to guacd. Specifying

RE: [EXTERNAL] Re: Guacamole Installation with separate servers for DMZ and Internal Setup

2020-06-02 Thread MARTINEZ, ARIEL
Got it. In the guacd.conf the bind host should be the server running guacd correct? Also, once I do something similar with the guacamole.properties file, if communication between the components is working properly, should I at least get the guacamole login page or will I need to also go through

Re: [EXTERNAL] Re: Guacamole Installation with separate servers for DMZ and Internal Setup

2020-06-02 Thread Nick Couchman
On Tue, Jun 2, 2020 at 10:26 AM MARTINEZ, ARIEL wrote: > Hello, > > > > I installed guacd and the guacamole-client on different servers and am > stuck at the step where I need to edit guacd.conf, because I cannot locate > it. In what directory would this file be located on a standard

RE: [EXTERNAL] Re: Guacamole Installation with separate servers for DMZ and Internal Setup

2020-06-02 Thread MARTINEZ, ARIEL
Hello, I installed guacd and the guacamole-client on different servers and am stuck at the step where I need to edit guacd.conf, because I cannot locate it. In what directory would this file be located on a standard installation? Thanks From: Nick Couchman Sent: Thursday, May 28, 2020 12:21

Re: AW: [EXTERNAL] Re: Guacamole Installation with separate servers for DMZ and Internal Setup

2020-05-30 Thread Nick Couchman
On Sat, May 30, 2020 at 3:13 AM Mike Jumper wrote: > On Thu, May 28, 2020, 14:18 Nick Couchman wrote: > >> On Thu, May 28, 2020 at 5:10 PM Peter De Tender wrote: >> >>> All, >>> >>> I agree on optimizing documentation could be a good project; maybe it >>> can be moved to a GitHub alike

Re: AW: [EXTERNAL] Re: Guacamole Installation with separate servers for DMZ and Internal Setup

2020-05-30 Thread Mike Jumper
On Thu, May 28, 2020, 14:18 Nick Couchman wrote: > On Thu, May 28, 2020 at 5:10 PM Peter De Tender wrote: > >> All, >> >> I agree on optimizing documentation could be a good project; maybe it can >> be moved to a GitHub alike scenario where "anyone" can contribute to it and >> improve it? >> >>

Re: AW: [EXTERNAL] Re: Guacamole Installation with separate servers for DMZ and Internal Setup

2020-05-28 Thread Nick Couchman
On Thu, May 28, 2020 at 5:10 PM Peter De Tender wrote: > All, > > I agree on optimizing documentation could be a good project; maybe it can > be moved to a GitHub alike scenario where "anyone" can contribute to it and > improve it? > > It already is :-)

Re: AW: [EXTERNAL] Re: Guacamole Installation with separate servers for DMZ and Internal Setup

2020-05-28 Thread Mike Jumper
On Thu, May 28, 2020, 10:29 Joachim Lindenberg wrote: > Can you please elaborate a little to what risk you are referring? Have you > been able to escape a guacd or guacamole or some other container? Via the > network interfaces exposed or how? Is there some thing to be done by the > project to

AW: AW: [EXTERNAL] Re: Guacamole Installation with separate servers for DMZ and Internal Setup

2020-05-28 Thread Joachim Lindenberg
Can you please elaborate a little to what risk you are referring? Have you been able to escape a guacd or guacamole or some other container? Via the network interfaces exposed or how? Is there some thing to be done by the project to improve container security? Actually I´d be willing to spend

Re: AW: [EXTERNAL] Re: Guacamole Installation with separate servers for DMZ and Internal Setup

2020-05-28 Thread sciUser
Docker is popular however it comes with a serious security risk, its always better to build your own Guacamole instance over using Docker. The risk is in exploiting the host server through Docker container. I have actually done this and it can be pretty nasty if someone wanted to be malicious.

AW: [EXTERNAL] Re: Guacamole Installation with separate servers for DMZ and Internal Setup

2020-05-28 Thread Joachim Lindenberg
I am wondering why the docker containers are not more popular – they are ideal for not having to worry about dependencies. Probably better documentation could help, like how to use extensions with docker, how to map volumes for extensions int guacamole, or RDP drive directories into guacd,

Re: [EXTERNAL] Re: Guacamole Installation with separate servers for DMZ and Internal Setup

2020-05-28 Thread Nick Couchman
On Thu, May 28, 2020 at 11:57 AM MARTINEZ, ARIEL wrote: > Hi Nick, > > > > Thank you for this information. Does the Guacamole client and guacd have > the same required dependencies? In other words do I need to install > Cairo, libjpeg, libpng, and the OSSP UUID library only on the Guacamole >

RE: [EXTERNAL] Re: Guacamole Installation with separate servers for DMZ and Internal Setup

2020-05-28 Thread MARTINEZ, ARIEL
Hi Nick, Thank you for this information. Does the Guacamole client and guacd have the same required dependencies? In other words do I need to install Cairo, libjpeg, libpng, and the OSSP UUID library only on the Guacamole Client server and things like ffmpeg, freerdp, pango, etc. only on the

Re: Guacamole Installation with separate servers for DMZ and Internal Setup

2020-05-27 Thread Nick Couchman
On Wed, May 27, 2020 at 7:10 PM MARTINEZ, ARIEL wrote: > Hello, > > From reviewing the documentation, I gather it is possible to install the > tomcat Guacamole component on one server and have the guacd proxy on > another. But I am unsure how to configure it as such. Can anyone provide > some

Guacamole Installation with separate servers for DMZ and Internal Setup

2020-05-27 Thread MARTINEZ, ARIEL
Hello, From reviewing the documentation, I gather it is possible to install the tomcat Guacamole component on one server and have the guacd proxy on another. But I am unsure how to configure it as such. Can anyone provide some pointers or more detailed info how to get this done? Thanks.