AW: ldap groups in 1.0.0 RC1

2019-01-14 Thread Philip Herbert
The group in question is an ldap group. It is shown on the groups tab. Here I configured the additional connection at group level. Is this wrong, or is the ldap group not matched at some level ? --Philip Von: Mike Jumper Gesendet: Montag, 14. Januar 2019 23:41 An: user@guacamole.apache.org

Re: ldap groups in 1.0.0 RC1

2019-01-14 Thread Mike Jumper
On Mon, Jan 14, 2019 at 12:37 PM Philip Herbert wrote: > > Hello, > > I have now created a testuser who is also member in one group. > > The user himself has a connection assigned, and one connection is assigned > to the TestGroup > > with the modification oft the function getGroupSearchFilter,

Re: Secure restful url

2019-01-14 Thread sciUser
I get what you are saying, but you miss what I really said. We are running advanced security labs and hacking labs with tools that can exploit LDAP, Windows Systems, SQL and so much more. Here are some excellent references in the book "The Web Application Hackers handbook second edition" or

Re: Secure restful url

2019-01-14 Thread Mike Jumper
On Mon, Jan 14, 2019 at 12:23 PM Nick Couchman wrote: > On Mon, Jan 14, 2019 at 2:44 PM sciUser > wrote: > >> Sure, >> >> We will not be moving to 1.0.0 until its had a full 120 day dev QA, so far >> there are a lot of bugs that need to be worked out. >> > sciUser, if you have found a bug, and

Re: Dumb LDAP Properties Question

2019-01-14 Thread Nick Couchman
On Mon, Jan 14, 2019 at 2:44 PM Zer0Cool wrote: > Ok so from the responses it sounds like typically: > > ldap-user-base-dn: dc=mydomain,dc=com > ldap-search-bind-dn: cn=myuser,ou=user_ou,dc=mydomain,dc=com > > should be using the same DC entries but that: > > ldap-hostname:

Re: Secure restful url

2019-01-14 Thread Nick Couchman
On Mon, Jan 14, 2019 at 2:44 PM sciUser wrote: > Sure, > > We will not be moving to 1.0.0 until its had a full 120 day dev QA, so far > there are a lot of bugs that need to be worked out. > > 1. https://securitytraning.com/ldap-injection-attacks-web-for-pentester/ > 2. > >

Re: Dumb LDAP Properties Question

2019-01-14 Thread Zer0Cool
Ok so from the responses it sounds like typically: ldap-user-base-dn: dc=mydomain,dc=com ldap-search-bind-dn: cn=myuser,ou=user_ou,dc=mydomain,dc=com should be using the same DC entries but that: ldap-hostname: myserver./mydomain/./com/ could possibly be on another domain. However, it sounds

Re: Secure restful url

2019-01-14 Thread sciUser
Sure, We will not be moving to 1.0.0 until its had a full 120 day dev QA, so far there are a lot of bugs that need to be worked out. 1. https://securitytraning.com/ldap-injection-attacks-web-for-pentester/ 2.

Re: Secure restful url

2019-01-14 Thread Nick Couchman
On Mon, Jan 14, 2019 at 2:07 PM Mike Jumper wrote: > On Mon, Jan 14, 2019, 10:56 sciUser >> ... >> >> Looking for something that can generate a one time URL or even a secure >> URL >> per access. >> >> Example 2 of something we do want: >>

Re: Secure restful url

2019-01-14 Thread Mike Jumper
On Mon, Jan 14, 2019, 10:56 sciUser ... > > Looking for something that can generate a one time URL or even a secure URL > per access. > > Example 2 of something we do want: > https://10.20.20.3/guacamole/#/?labtoken=kjhsdf986sdfgjhsgdf765sdf > > You can do this through writing an extension which

Secure restful url

2019-01-14 Thread sciUser
Hello, Where can I find an example of *secure token generation* and *restful API'*s for Guacamole. Example 1 of what we don't want: http://10.20.20.3/guacamole/#/?username=username=password (not secure) Looking for something that can generate a one time URL or even a secure URL per access.

Re: Guacamole performance improvement

2019-01-14 Thread Mike Jumper
On Mon, Jan 14, 2019 at 12:16 AM Shilpa Bhandari < shilpa.bhand...@fonantrix.com> wrote: > Yes. I want to know if there is any way to reduce that time between login > to remote desktop connection. > There's very little that Guacamole needs to do when establishing a connection. If the remote

Re: WARN : ping query 'SELECT 1' failed in 1.0.0

2019-01-14 Thread Mike Jumper
On Mon, Jan 14, 2019 at 1:43 AM fou fe wrote: > Hi > > In fresh install 1.0.0 I have a warning in catalinat.out . all work > perfect > > 08:13:58.365 [http-nio-8080-exec-2] WARN o.a.i.d.pooled.PooledDataSource > - Execution of ping query 'SELECT 1' failed: The last packet successfully >

WARN : ping query 'SELECT 1' failed in 1.0.0

2019-01-14 Thread fou fe
Hi In fresh install 1.0.0 I have a warning in catalinat.out . all work perfect 08:13:58.365 [http-nio-8080-exec-2] WARN o.a.i.d.pooled.PooledDataSource - Execution of ping query 'SELECT 1' failed: The last packet successfully received from the server was 250 579 368 milliseconds ago. The

Re: Guacamole performance improvement

2019-01-14 Thread Shilpa Bhandari
Yes. I want to know if there is any way to reduce that time between login to remote desktop connection. Thanks and regards, Shilpa Bhandari On Mon, Jan 14, 2019 at 1:26 PM Mike Jumper wrote: > On Sun, Jan 13, 2019 at 11:44 PM Shilpa Bhandari < > shilpa.bhand...@fonantrix.com> wrote: > >>