Re: server fails to compile

[Nick Couchman]

On Fri, Jan 26, 2024 at 6:40 PM Jim Ham  wrote:

> Guacamole 1.5.4, from the tar on the website. I did the ./configure and
> then ./make. Many files compile just fine, but the task ends with the
> following error:
>
> 
> CC   guacenc-video.o
> video.c: In function ‘guacenc_video_alloc’:
> video.c:64:22: error: assignment discards ‘const’ qualifier from pointer
> target type [-Werror=discarded-qualifiers]
> 64 | container_format = container_format_context->oformat;
>|  ^
> video.c:67:22: error: initialization discards ‘const’ qualifier from
> pointer target type [-Werror=discarded-qualifiers]
> 67 | AVCodec* codec = avcodec_find_encoder_by_name(codec_name);
>|  ^~~~
> cc1: all warnings being treated as errors
>
> <\code>
>
> I'm compiling on a Raspberry Pi 4. GCC gives me the following version:
>
> gcc (Raspbian 12.2.0-14+rpi1) 12.2.0
> Copyright (C) 2022 Free Software Foundation, Inc.
>
> Any suggestions?
>

This has already been fixed in the Git code in the master branch, targeted
for version 1.6.0:

https://issues.apache.org/jira/browse/GUACAMOLE-1714

You can back-port the patch to your source tree code if you'd like to fix
it immediately:

https://patch-diff.githubusercontent.com/raw/apache/guacamole-server/pull/399.patch

-Nick

server fails to compile - found a work-around

[Jim Ham]

It's a kludge, but by disabling the warnings on those two lines the 
project compiled without errors. Diff below.


Regards, Jim



*** video.c~    2023-11-26 11:10:14.0 -0800
--- video.c    2024-01-26 16:19:19.158357528 -0800
***
*** 61,70 
  goto fail_codec;
  }

! container_format = container_format_context->oformat;

  /* Pull codec based on name */
  AVCodec* codec = avcodec_find_encoder_by_name(codec_name);
  if (codec == NULL) {
  guacenc_log(GUAC_LOG_ERROR, "Failed to locate codec \"%s\".",
  codec_name);
--- 61,74 
  goto fail_codec;
  }

!  _Pragma("GCC diagnostic push")
!  _Pragma("GCC diagnostic ignored \"-Wdiscarded-qualifiers\"")
!
!    container_format = container_format_context->oformat;

  /* Pull codec based on name */
  AVCodec* codec = avcodec_find_encoder_by_name(codec_name);
+  _Pragma("GCC diagnostic pop")
  if (codec == NULL) {
  guacenc_log(GUAC_LOG_ERROR, "Failed to locate codec \"%s\".",
  codec_name);
<\code>

Guacamole 1.5.4, from the tar on the website. I did the ./configure 
and then ./make. Many files compile just fine, but the task ends with 
the following error:



CC       guacenc-video.o
video.c: In function ‘guacenc_video_alloc’:
video.c:64:22: error: assignment discards ‘const’ qualifier from 
pointer target type [-Werror=discarded-qualifiers]

   64 |     container_format = container_format_context->oformat;
      |                      ^
video.c:67:22: error: initialization discards ‘const’ qualifier from 
pointer target type [-Werror=discarded-qualifiers]

   67 |     AVCodec* codec = avcodec_find_encoder_by_name(codec_name);
      |                      ^~~~
cc1: all warnings being treated as errors

<\code>

I'm compiling on a Raspberry Pi 4. GCC gives me the following version:

gcc (Raspbian 12.2.0-14+rpi1) 12.2.0
Copyright (C) 2022 Free Software Foundation, Inc.

Any suggestions?


Regards, Jim Ham

--
Porcine Associates LLC
244 O'Connor St.
Menlo Park, CA 94025
USA
+1(650)326-2669 fax +1(650)326-1071


-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

server fails to compile

[Jim Ham]

Guacamole 1.5.4, from the tar on the website. I did the ./configure and 
then ./make. Many files compile just fine, but the task ends with the 
following error:



CC       guacenc-video.o
video.c: In function ‘guacenc_video_alloc’:
video.c:64:22: error: assignment discards ‘const’ qualifier from pointer 
target type [-Werror=discarded-qualifiers]

   64 |     container_format = container_format_context->oformat;
      |                      ^
video.c:67:22: error: initialization discards ‘const’ qualifier from 
pointer target type [-Werror=discarded-qualifiers]

   67 |     AVCodec* codec = avcodec_find_encoder_by_name(codec_name);
      |                      ^~~~
cc1: all warnings being treated as errors

<\code>

I'm compiling on a Raspberry Pi 4. GCC gives me the following version:

gcc (Raspbian 12.2.0-14+rpi1) 12.2.0
Copyright (C) 2022 Free Software Foundation, Inc.

Any suggestions?

Regards, Jim Ham

--
Porcine Associates LLC
244 O'Connor St.
Menlo Park, CA 94025
USA
+1(650)326-2669 fax +1(650)326-1071


-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

Re: Log in to Gnome Shell RDP

[Horváth Csaba]

Hi,

Yes, i mixed up with the shell :D Sry :)

But no success. I changed the permissions to 777, but it does not
change anything.
The /var/run/guacd dir has a .config subdir, in it a certs and server
directory. All empty, except the pid file.

I created a temporary home for it, and it creates the certs and server
directories, but does not write anything. Also creates a 0 bytes
known_hosts file.
Maybe i need to put some TLS certs from the Gnome desktop to here?

This is getting more strange :D

root@homeserver:/etc# ls -la /tmp/guacd/
total 12
drwxrwxrwx  3 guacd guacd 4096 Jan 26 17:43 .
drwxrwxrwt 17 root  root  4096 Jan 26 17:45 ..
drwxr-xr-x  3 guacd guacd 4096 Jan 26 17:43 .config
root@homeserver:/etc# ls -la /tmp/guacd/.config/
total 12
drwxr-xr-x 3 guacd guacd 4096 Jan 26 17:43 .
drwxrwxrwx 3 guacd guacd 4096 Jan 26 17:43 ..
drwxr-xr-x 4 guacd guacd 4096 Jan 26 17:43 freerdp
root@homeserver:/etc# ls -la /tmp/guacd/.config/freerdp/
total 16
drwxr-xr-x 4 guacd guacd 4096 Jan 26 17:43 .
drwxr-xr-x 3 guacd guacd 4096 Jan 26 17:43 ..
drwxr-xr-x 2 guacd guacd 4096 Jan 26 17:43 certs
-rw-r--r-- 1 guacd guacd0 Jan 26 17:43 known_hosts2
drwxr-xr-x 2 guacd guacd 4096 Jan 26 17:43 server
root@homeserver:/etc# ls -la /tmp/guacd/.config/freerdp/certs/
total 8
drwxr-xr-x 2 guacd guacd 4096 Jan 26 17:43 .
drwxr-xr-x 4 guacd guacd 4096 Jan 26 17:43 ..
root@homeserver:/etc# ls -la /tmp/guacd/.config/freerdp/server/
total 8
drwxr-xr-x 2 guacd guacd 4096 Jan 26 17:43 .
drwxr-xr-x 4 guacd guacd 4096 Jan 26 17:43 ..
root@homeserver:/etc# ls -la /tmp/guacd/.config/freerdp/known_hosts2
-rw-r--r-- 1 guacd guacd 0 Jan 26 17:43 /tmp/guacd/.config/freerdp/known_hosts2
root@homeserver:/etc#


Cs.

Nick Couchman  ezt írta (időpont: 2024.
jan. 26., P, 17:28):
>
> On Fri, Jan 26, 2024 at 11:26 AM Horváth Csaba  
> wrote:
>>
>> Hi,
>>
>> I have installed guacd from Debian's repos, and it runs by default in
>> the name of user guacd.
>>
>> guacd3163019  0.0  0.1 246252 10376 ?SJan24   0:00
>> /usr/sbin/guacd -b 127.0.0.1 -l 4822 -p /var/run/guacd/guacd.pid
>>
>> Ang guacd has no home by default (which is acceptable from security
>> viewpoint, but affect usability :D maybe i need to file a bug to
>> Debian team :D )
>> guacd:x:998:996::/var/run/guacd:/bin/false
>
>
> That user does have a home directory - /var/run/guacd - so you need to make 
> sure the guacd user has write access to that directory.
>
> -Nick

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

Re: Log in to Gnome Shell RDP

[Nick Couchman]

On Fri, Jan 26, 2024 at 11:26 AM Horváth Csaba 
wrote:

> Hi,
>
> I have installed guacd from Debian's repos, and it runs by default in
> the name of user guacd.
>
> guacd3163019  0.0  0.1 246252 10376 ?SJan24   0:00
> /usr/sbin/guacd -b 127.0.0.1 -l 4822 -p /var/run/guacd/guacd.pid
>
> Ang guacd has no home by default (which is acceptable from security
> viewpoint, but affect usability :D maybe i need to file a bug to
> Debian team :D )
> guacd:x:998:996::/var/run/guacd:/bin/false
>

That user does have a home directory - /var/run/guacd - so you need to make
sure the guacd user has write access to that directory.

-Nick

Re: Log in to Gnome Shell RDP

[Nick Couchman]

On Fri, Jan 26, 2024 at 11:22 AM Horváth Csaba 
wrote:

> Hi,
>
> Thanks for clarification! How i specify the account for guacd? I mean,
> OK, i create the user, but how i specify that guacd should start in
> the account's behalf?
>

That depends on how you're starting guacd, now...
* If you're using systemd, edit the guacd systemd file and change the
"User=" line such that it specifies the user you've just created.
* If you're using init.d, change the init file such that it does a "sudo
-u" when executing the program.
* If you're starting manually, just do "sudo -u guacuser /path/to/guacd",
replacing guacuser with your user account and /path/to/guacd with the
actual path to the guacd program.

-Nick

Re: Log in to Gnome Shell RDP

[Horváth Csaba]

Hi,

I have installed guacd from Debian's repos, and it runs by default in
the name of user guacd.

guacd3163019  0.0  0.1 246252 10376 ?SJan24   0:00
/usr/sbin/guacd -b 127.0.0.1 -l 4822 -p /var/run/guacd/guacd.pid

Ang guacd has no home by default (which is acceptable from security
viewpoint, but affect usability :D maybe i need to file a bug to
Debian team :D )
guacd:x:998:996::/var/run/guacd:/bin/false

So i need to specify a home dir for it. I'll see how it will work.

Cs.

Nick Couchman  ezt írta (időpont: 2024.
jan. 26., P, 16:47):
>
> On Wed, Jan 24, 2024 at 3:40 PM Horváth Csaba  
> wrote:
>>
>> Hi,
>>
>> Tried with a Windows VM with NLA turned off; so simple RDP connection
>> works with security=rdp . So the issue is that guacd cannot
>> communicate with TLS and NLA security servers.
>
>
> This means it likely has to do with the issue that David mentioned with the 
> home directory for the user running guacd.
>
> Note that we're talking about the Linux/UNIX home directory for the Linux 
> user running guacd, not the GUACAMOLE_HOME directory. For example, if you run 
> guacd under the "daemon" account, and the daemon account has a home directory 
> of /usr/sbin (as is the case in RHEL8, for example), then the "daemon" user 
> does not have access to write to the /usr/sbin directory and cannot create 
> the host fingerprint file that is required for NLA and TLA connections.
>
> The easiest thing to do is just create a Linux user account for guacd to run 
> under, allowing Linux to create a home directory (useradd with "-m" flag, for 
> example), and then make sure guacd is being started under that account. Then 
> re-try the connection.
>
> -Nick

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

Re: Log in to Gnome Shell RDP

[Horváth Csaba]

Hi,

Thanks for clarification! How i specify the account for guacd? I mean,
OK, i create the user, but how i specify that guacd should start in
the account's behalf?

Thanks,

Cs.

Nick Couchman  ezt írta (időpont: 2024.
jan. 26., P, 16:47):
>
> On Wed, Jan 24, 2024 at 3:40 PM Horváth Csaba  
> wrote:
>>
>> Hi,
>>
>> Tried with a Windows VM with NLA turned off; so simple RDP connection
>> works with security=rdp . So the issue is that guacd cannot
>> communicate with TLS and NLA security servers.
>
>
> This means it likely has to do with the issue that David mentioned with the 
> home directory for the user running guacd.
>
> Note that we're talking about the Linux/UNIX home directory for the Linux 
> user running guacd, not the GUACAMOLE_HOME directory. For example, if you run 
> guacd under the "daemon" account, and the daemon account has a home directory 
> of /usr/sbin (as is the case in RHEL8, for example), then the "daemon" user 
> does not have access to write to the /usr/sbin directory and cannot create 
> the host fingerprint file that is required for NLA and TLA connections.
>
> The easiest thing to do is just create a Linux user account for guacd to run 
> under, allowing Linux to create a home directory (useradd with "-m" flag, for 
> example), and then make sure guacd is being started under that account. Then 
> re-try the connection.
>
> -Nick

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

Re: Log in to Gnome Shell RDP

[Nick Couchman]

On Wed, Jan 24, 2024 at 3:40 PM Horváth Csaba 
wrote:

> Hi,
>
> Tried with a Windows VM with NLA turned off; so simple RDP connection
> works with security=rdp . So the issue is that guacd cannot
> communicate with TLS and NLA security servers.


This means it likely has to do with the issue that David mentioned with the
home directory for the user running guacd.

Note that we're talking about the Linux/UNIX home directory for the Linux
user running guacd, not the GUACAMOLE_HOME directory. For example, if you
run guacd under the "daemon" account, and the daemon account has a home
directory of /usr/sbin (as is the case in RHEL8, for example), then the
"daemon" user does not have access to write to the /usr/sbin directory and
cannot create the host fingerprint file that is required for NLA and TLA
connections.

The easiest thing to do is just create a Linux user account for guacd to
run under, allowing Linux to create a home directory (useradd with "-m"
flag, for example), and then make sure guacd is being started under that
account. Then re-try the connection.

-Nick

Re: RDP / Load Balancing

[Barnhart, Steven]

Depends what you’re looking for. There is connection pooling, which can load 
balance across a group of RDP connections and there is some persistence 
built-in. You can also set a max concurrent connections as well.

--Steve

From: Brad Turnbough 
Date: Friday, January 26, 2024 at 9:53 AM
To: user@guacamole.apache.org 
Subject: RDP / Load Balancing
I know RDP in general has a connection broker for load balancing / session 
persistence, but I have to ask… Does Guacamole do something like this as well, 
since it has basically a database of who is logged into what sessions on what 
machine?

I know RDP in general has a connection broker for load balancing / session 
persistence, but I have to ask… Does Guacamole do something like this as well, 
since it has basically a database of who is logged into what sessions on what 
machine?




Thank you,

Brad Turnbough
Senior Technology Analyst

[cid:Backlund-Investment-logo_20ce9d6e-04b9-4d73-9d17-cfc69decf4cc.gif]

P: 309.272.2739 F: 309.272.2839

www.betterbanks.com
www.statestreetbank.com

NOTICE: The information contained in this email and any document attached 
hereto is intended only for the named recipient(s). If you are not the intended 
recipient, nor the employee or agent responsible for delivering this message in 
confidence to the intended recipient(s), you are hereby notified that you have 
received this transmittal in error, and any review, dissemination, distribution 
or copying of this transmittal or its attachments is strictly prohibited. If 
you have received this transmittal and/or attachments in error, please notify 
me immediately by reply e-mail and then delete this message, including any 
attachments.

RDP / Load Balancing

[Brad Turnbough]

I know RDP in general has a connection broker for load balancing / session 
persistence, but I have to ask... Does Guacamole do something like this as 
well, since it has basically a database of who is logged into what sessions on 
what machine?




Thank you,

Brad Turnbough
Senior Technology Analyst

[cid:Backlund-Investment-logo_20ce9d6e-04b9-4d73-9d17-cfc69decf4cc.gif]

P: 309.272.2739 F: 309.272.2839

www.betterbanks.com
www.statestreetbank.com

NOTICE: The information contained in this email and any document attached 
hereto is intended only for the named recipient(s). If you are not the intended 
recipient, nor the employee or agent responsible for delivering this message in 
confidence to the intended recipient(s), you are hereby notified that you have 
received this transmittal in error, and any review, dissemination, distribution 
or copying of this transmittal or its attachments is strictly prohibited. If 
you have received this transmittal and/or attachments in error, please notify 
me immediately by reply e-mail and then delete this message, including any 
attachments.