Re: VNC connection problem

2018-09-25 Thread VolandSZ
I am still struggling on how to run guacd in debug mode (step by step manual
on how to add -L debug) smiley image="anim_handshake.gif"/> 

BUT it seems that i have found the cause of my problem and i tend to think
that it could be bug that needs to be fixed.
Long story short. I am from russia and the PC i was trying to connect via
VNC protocol had cyrilic letters in its name (Windows default settings
suggest such naming scheme SOMETHING-ПК (PC in russian letters)) and that
was what caused connection problems. When i removed cyrilic from PC name,
everything works fine.
But since it is Microsoft default naming scheme and i suspect it is
implemented in other countries




--
Sent from: 
http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/


Re: VNC connection problem

2018-09-25 Thread VolandSZ
I did not manage to run guacd in debug, but thats what i see in syslog so
far:
Sep 25 13:01:52 ubuntu guacd[29979]: Creating new client for protocol "vnc"
Sep 25 13:01:52 ubuntu guacd[29979]: Connection ID is
"$bbc812dc-5921-4b97-80f0-e57076005354"
Sep 25 13:01:52 ubuntu guacd[30926]: Cursor rendering: local
Sep 25 13:01:52 ubuntu guacd[30926]: User
"@cc931e51-c1d0-45f2-955f-9f6315479b00" joined connection
"$bbc812dc-5921-4b97-80f0-e57076005354" (1 users now present)
Sep 25 13:01:52 ubuntu guacd[30926]: VNC server supports protocol version
3.8 (viewer 3.8)
Sep 25 13:01:52 ubuntu guacd[30926]: We have 2 security types to read
Sep 25 13:01:52 ubuntu guacd[30926]: 0) Received security type 17
Sep 25 13:01:52 ubuntu guacd[30926]: 1) Received security type 2
Sep 25 13:01:52 ubuntu guacd[30926]: Selecting security type 2 (1/2 in the
list)
Sep 25 13:01:52 ubuntu guacd[30926]: Selected Security Scheme 2
Sep 25 13:01:52 ubuntu guacd[30926]: VNC authentication succeeded

Sep 25 13:01:52 ubuntu guacd[30926]: Connected to VNC server, using protocol
version 3.8
Sep 25 13:01:52 ubuntu guacd[30926]: VNC server default format:
Sep 25 13:01:52 ubuntu guacd[30926]:   32 bits per pixel.
Sep 25 13:01:52 ubuntu guacd[30926]:   Least significant byte first in each
pixel.
Sep 25 13:01:52 ubuntu guacd[30926]:   TRUE colour: max red 255 green 255
blue 255, shift red 16 green 8 blue 0
Sep 25 13:01:52 ubuntu guacd[30926]: User
"@cc931e51-c1d0-45f2-955f-9f6315479b00" disconnected (0 users remain)
Sep 25 13:01:52 ubuntu guacd[30926]: Last user of connection
"$bbc812dc-5921-4b97-80f0-e57076005354" disconnected
Sep 25 13:01:52 ubuntu guacd[30926]: Internal VNC client disconnected
Sep 25 13:01:53 ubuntu guacd[29979]: Connection
"$0aaf2146-9235-47ef-b9e7-99324529c830" removed.
Sep 25 13:01:57 ubuntu guacd[29979]: Connection
"$bbc812dc-5921-4b97-80f0-e57076005354" removed.
Sep 25 13:04:42 ubuntu guacd[29979]: Creating new client for protocol "vnc"
Sep 25 13:04:42 ubuntu guacd[29979]: Connection ID is
"$6757b113-0520-47c2-9cd7-a43034ad4806"
Sep 25 13:04:42 ubuntu guacd[30950]: Cursor rendering: local
Sep 25 13:04:42 ubuntu guacd[30950]: User
"@cd4d389f-6422-495a-aca3-51c72eb03ace" joined connection
"$6757b113-0520-47c2-9cd7-a43034ad4806" (1 users now present)
Sep 25 13:04:42 ubuntu guacd[30950]: VNC server supports protocol version
3.8 (viewer 3.8)
Sep 25 13:04:42 ubuntu guacd[30950]: We have 2 security types to read
Sep 25 13:04:42 ubuntu guacd[30950]: 0) Received security type 17
Sep 25 13:04:42 ubuntu guacd[30950]: 1) Received security type 2
Sep 25 13:04:42 ubuntu guacd[30950]: Selecting security type 2 (1/2 in the
list)
Sep 25 13:04:42 ubuntu guacd[30950]: Selected Security Scheme 2
Sep 25 13:04:42 ubuntu guacd[30950]: VNC authentication succeeded
Sep 25 13:04:43 ubuntu guacd[30950]: Desktop name "t6-pc ( 192.168.1.7 ) -
service mode"
Sep 25 13:04:43 ubuntu guacd[30950]: Connected to VNC server, using protocol
version 3.8
Sep 25 13:04:43 ubuntu guacd[30950]: VNC server default format:
Sep 25 13:04:43 ubuntu guacd[30950]:   32 bits per pixel.
Sep 25 13:04:43 ubuntu guacd[30950]:   Least significant byte first in each
pixel.
Sep 25 13:04:43 ubuntu guacd[30950]:   TRUE colour: max red 255 green 255
blue 255, shift red 16 green 8 blue 0
Sep 25 13:05:00 ubuntu guacd[29979]: Creating new client for protocol "vnc"
Sep 25 13:05:00 ubuntu guacd[29979]: Connection ID is
"$6152796e-b63c-4699-8e8f-456f8fa740e2"
Sep 25 13:05:00 ubuntu guacd[30969]: Cursor rendering: local
Sep 25 13:05:00 ubuntu guacd[30969]: User
"@7917d7ce-ea5b-44dc-98d9-639aff09e2f3" joined connection
"$6152796e-b63c-4699-8e8f-456f8fa740e2" (1 users now present)
Sep 25 13:05:00 ubuntu guacd[30969]: VNC server supports protocol version
3.8 (viewer 3.8)
Sep 25 13:05:00 ubuntu guacd[30969]: We have 2 security types to read
Sep 25 13:05:00 ubuntu guacd[30969]: 0) Received security type 17
Sep 25 13:05:00 ubuntu guacd[30969]: 1) Received security type 2
Sep 25 13:05:00 ubuntu guacd[30969]: Selecting security type 2 (1/2 in the
list)
Sep 25 13:05:00 ubuntu guacd[30969]: Selected Security Scheme 2
Sep 25 13:05:00 ubuntu guacd[30969]: VNC authentication succeeded

Sep 25 13:05:00 ubuntu guacd[30969]: Connected to VNC server, using protocol
version 3.8
Sep 25 13:05:00 ubuntu guacd[30969]: VNC server default format:
Sep 25 13:05:00 ubuntu guacd[30969]:   32 bits per pixel.
Sep 25 13:05:00 ubuntu guacd[30969]:   Least significant byte first in each
pixel.
Sep 25 13:05:00 ubuntu guacd[30969]:   TRUE colour: max red 255 green 255
blue 255, shift red 16 green 8 blue 0
Sep 25 13:05:01 ubuntu guacd[30969]: User
"@7917d7ce-ea5b-44dc-98d9-639aff09e2f3" disconnected (0 users remain)
Sep 25 13:05:01 ubuntu guacd[30969]: Last user of connection
"$6152796e-b63c-4699-8e8f-456f8fa740e2" disconnected
Sep 25 13:05:02 ubuntu guacd[30969]: Internal VNC client disconnected
Sep 25 13:05:05 ubuntu guacd[29979]: Connection
"$6152796e-b63c-4699-8e8f-456f8fa740e2" removed.

Empy lines is where line: Desktop 

Re: VNC connection problem

2018-09-25 Thread VolandSZ
Here is a link to folder wiht screenshots and catalina.out 
https://drive.google.com/open?id=1xJJfa2aitw6k5eLRUeHaGI-_MwVBePF-
good is connection "1"
bad connection "2"

as for running guacd in debug mode and where to find logs of server i would
much appreciate some more help ie console commands how to run it in debug ^^
and where to look for log files.

as for my docker question the lines in manual just plain dont do anything if
you copy|paste them in terminal as they are not accepted as correct command
i understand that "\" symbol is equal to CRLF but this way
$ docker run --name some-guacamole \
--link some-guacd:guacd\
...
-d -p 8080:8080 guacamole/guacamole
or
$ docker run --name some-guacamole --link some-guacd:guacd ... -d -p
8080:8080 guacamole/guacamole
this is not recognised as correct command



--
Sent from: 
http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/


Re: Guacamole - Forcing full remote frame buffer update all the time instead of incremental

2018-09-25 Thread Mike Jumper
On Tue, Sep 25, 2018, 07:31 m99  wrote:

> "What do you mean by this? Inspect/process it how? For what purpose?"
> "How does this relate to your need for full-frame updates?"
>
> Our requirement is to ensure all screen images sent to the end user in the
> Web browser have undergone a jpeg lossy compression (regardless of
> performance).  ...
>
> We want to submit this patch to the Guacamole community for consideration
> to
> improve the security posture.  We understand this change is tailored for a
> very specific use case, but as an optional configuration option, the impact
> of the change is very minimal.
>

The issue is not the size of the patch but the reason(s) for the patch. If
the assertion is that forcing JPEG provides some security benefit, the
benefit needs to be explained.


> Is this patch something the Guacamole community would be interested in?


This will depend on the reasoning behind the change.


> I've found the following link outlining the steps to submit a change to the
> guacamole project, is this the process I
> should follow to submit the patch for consideration?
>
> https://github.com/apache/guacamole-server/blob/master/CONTRIBUTING


Yes, the link describes the correct process.

- Mike


Re: Guacamole - Forcing full remote frame buffer update all the time instead of incremental

2018-09-25 Thread m99
"What do you mean by this? Inspect/process it how? For what purpose?"
"How does this relate to your need for full-frame updates?"

Our requirement is to ensure all screen images sent to the end user in the
Web browser have undergone a jpeg lossy compression (regardless of
performance).  This can be achieved by changing Guacamole to force jpeg
encoding, thus to ensuring the jpeg lossy compression.

Our patch to Guacamole 0.14 adds a new configuration option for the build
(--enable-force-jpeg=yes; default is no).  This patch adds an ifdef to the
surface.c file to force jpeg encoding all the time if enabled during
configure with this new option.

Our original thought was first to perform a jpeg lossy compression on the
actual frame buffer first (which we believed required a full frame buffer
update all the time) then forwarding on to Guacamole, however this turned
out to be a much larger effort than originally anticipated.

We want to submit this patch to the Guacamole community for consideration to
improve the security posture.  We understand this change is tailored for a
very specific use case, but as an optional configuration option, the impact
of the change is very minimal.

Is this patch something the Guacamole community would be interested in?   
I've found the following link outlining the steps to submit a change to the
guacamole project, is this the process I 
should follow to submit the patch for consideration?

https://github.com/apache/guacamole-server/blob/master/CONTRIBUTING



--
Sent from: 
http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/


Re: VNC connection problem

2018-09-25 Thread Nick Couchman
On Sat, Sep 22, 2018 at 5:44 PM VolandSZ  wrote:

> Thats why i posted screenshots..
>

I didn't see any screenshots.  If you're posting from Nabble (looks like
you are), and you try to put screenshots inline in the message (insert
pictures), the Apache list server tends to strip these out.  I think you
can attach them instead of inserting them inline, or you could upload them
somewhere temporary and paste a link to the image.

You also might want to provide full logs for both guacd (in debug mode,
using the "-L debug" startup flag) and the Guacamole Client (catalina.out)
so that we can look and see if anything looks amiss.


> Ok i am trying this another way via docker now and maybe someone can
> explain
> me what does this mean or how to type it in terminal:
>
> $ docker run --name some-guacamole \
> --link some-guacd:guacd\
> ...
> -d -p 8080:8080 guacamole/guacamole
>

This should run the Guacamole client container in Docker, and should link
the guacd container such that the networking functions in the Guacamole
container can access the guacd daemon inside of its container.  It also
forwards the host port 8080 into the guacamole container port 8080, so you
can access docker at http://docker-host:8080/guacamole.


>
> These lines was taken from guacamole docker setup manual, but they dont
> work
> if you copy|paste them or type in.
> I understand that it may be wy to easy to cover it in manual, but still
> why it can be presented the way you can use it?
>
>
You'll have to be more specific about what issues you're running into using
it - either the errors you're receiving, or the steps that are unclear.

-Nick