Re[3]: Duo authentication issue

2020-04-22 Thread Christian Tardif
Just adjusted the time on the kubernetes node, and it does make a difference... tought that the cookie was good for 300 seconds, as per the code. Apparently, it is shorter than that. Thanks for the tip ! - Christian Christian Tardif

Re[2]: Duo authentication issue

2020-04-22 Thread Christian Tardif
The server where it resides right now (it's on a Kubernetes cluster) is about 1 minute 15 seconds ahead of the UTC right now. Is it too far from the "official" time? - Christian -- Message d'origine -- De: "Mike Jumper" mailto:mjum...@apache.org>> À:

Re: Duo authentication issue

2020-04-22 Thread Mike Jumper
On Wed, Apr 22, 2020, 20:05 Christian Tardif wrote: > Hi, > > I'm using Guacamole 1.1.0 and I no longer can authenticate through Duo. I > have set the debug level to try to figure out what's happening, and here's > what I found: > > 02:52:44.270 [http-nio-8080-exec-6] DEBUG

Duo authentication issue

2020-04-22 Thread Christian Tardif
Hi, I'm using Guacamole 1.1.0 and I no longer can authenticate through Duo. I have set the debug level to try to figure out what's happening, and here's what I found: 02:52:44.270 [http-nio-8080-exec-6] DEBUG o.a.g.auth.duo.api.DuoService - Duo response contained expired cookie(s).

Re: Active Session Shadowing

2020-04-22 Thread Jason Keltz
Hi Nick, The way I see it, there's an in between as well  It would be great to have an option where, when you join the connection, it at least pops up a box at the bottom corner of the users screen and reports the user who has joined the session. This way, at least the user knows that it's

Re: empty recording with rdp audio input

2020-04-22 Thread Nick Couchman
On Fri, Apr 17, 2020 at 8:55 AM Wolfgang Nothdurft wrote: > Hi, > > I'm trying to get audio input to work. > > The guacai lib is in the correct folder: > -rwxr-xr-x. 1 root root 355368 9. Apr 13:32 > /usr/lib64/freerdp2/libguacai-client.so > > The microphone is displayed in the windows device

Re: Active Session Shadowing

2020-04-22 Thread Nick Couchman
On Sun, Apr 19, 2020 at 12:03 AM Chris Misztur wrote: > This is worth bringing up again. As a Guacamole admin I have the ability > to click on any connected user sessions and view/control without the user's > permission. > > This is preventing us from completely eliminating MS RD Gateway for HR

Re: Multiple guacamole servers pointed at the same mariadb?

2020-04-22 Thread Nick Couchman
On Sun, Apr 19, 2020 at 9:25 PM Newman, Dennis wrote: > I “accidentally” had just such a setup when I was attempting a vm backup > of my Guacamole system – seeing this question makes me ask – Why exactly > would you want to do this? Does it help Guac in speed or stability? > > > There are two

Re: ssh to a target with google 2fa auth enabled

2020-04-22 Thread Nick Couchman
On Tue, Apr 21, 2020 at 3:02 PM Immo Wetzel wrote: > HI, > > > > I´m quite new with guacamole. We like to provide some ssh access via the > html5 interface but stuck at the point were the target hosts need a two > factor auth via google auth. > > The client shows first the username request and

Re: Parameter token with HTTP header authentication extension

2020-04-22 Thread Yang Yang
Very helpful info, Nick! Thank you very much! Thanks, Yang > On Apr 23, 2020, at 03:36, Nick Couchman wrote: > > On Wed, Apr 22, 2020 at 5:46 AM Yang Yang wrote: > Hi, > > I am looking to use the string in certain HTTP header as a session id, and > name the record of the session. Is there

Re: Parameter token with HTTP header authentication extension

2020-04-22 Thread Nick Couchman
On Wed, Apr 22, 2020 at 5:46 AM Yang Yang wrote: > Hi, > > I am looking to use the string in certain HTTP header as a session id, and > name the record of the session. Is there any parameter token with HTTP > header authentication extension I can use? If not, could you help to tell > what I

Re: can't type in Word 2016 when I first launch it

2020-04-22 Thread Nick Couchman
On Wed, Apr 22, 2020 at 11:58 AM Joseph Szabo wrote: > I just figured it out myself. The keyboard works in MIcrosoft Word safe > mode (winword /safe), or if I disable the Box add-in for Word. > > > Sorry you didn't get a response on this question, but glad you figured it out. I use Word pretty

Re: Email Notification on Login

2020-04-22 Thread Caleb Crawford
Hello Chris, To add on to Ivan's reply, if you're using syslog you can do this with rsyslog itself (standard syslog daemon on most distributions these days). It would look something like this: Add a file in /etc/rsyslog.d/guac-login.conf with: # If we give out DHCP for a specific network

Re: can't type in Word 2016 when I first launch it

2020-04-22 Thread Joseph Szabo
I just figured it out myself. The keyboard works in MIcrosoft Word safe mode (winword /safe), or if I disable the Box add-in for Word. Joseph Szabo CSS Lab Technical Services NBCS Lab Team System Administrator Rutgers University From: Joseph Szabo Sent:

Parameter token with HTTP header authentication extension

2020-04-22 Thread Yang Yang
Hi, I am looking to use the string in certain HTTP header as a session id, and name the record of the session. Is there any parameter token with HTTP header authentication extension I can use? If not, could you help to tell what I should do to customize the HTTP header authentication extension

Re: Email Notification on Login

2020-04-22 Thread Mike Jumper
On Tue, Apr 21, 2020 at 9:05 PM ivanmarcus wrote: > Chris, > > I'm not aware of any current extension, or facility within Guacamole to do > this - although someone may come up and point something out! > There is indeed no extension provided for doing this, but if interested in the way to