date:20240219

Hi Ivanmarcus,

Sorry for the confusion.

Earlier we used guacamole 1.5.3 which has a ‘disconnection issue’ every few 
minutes after connecting VMs using Guacamole. Then we upgraded to guacamole 
1.5.4 which has a ‘fails after a certain number of connections’ issue only for 
Ubuntu(SSH) and Windows(RDP) is working fine.

Regards,
Viji S

From: Ivanmarcus 
Sent: Tuesday, February 20, 2024 1:14:50 AM
To: user@guacamole.apache.org 
Subject: Re: Creation of WebSocket tunnel to guacd failed - Guacamole 1.5.4

Viji, I understood you were using 1. 5. 4? I am a little confused as to whether 
you are now trying 1. 5. 3 and you have an issue, or whether this is the same 
problem you earlier described and are still using 1. 5. 4? To clarify my 
earlier suggestion;
ZjQcmQRYFpfptBannerStart
CAUTION
This email originated from outside of EXPLEO. Do not click links or open 
attachments unless you recognize the sender and know the content is safe.
In case of any doubt you can forward that message to susp...@expleogroup.com 
for analysis.

ZjQcmQRYFpfptBannerEnd

Viji,

I understood you were using 1.5.4?

I am a little confused as to whether you are now trying 1.5.3 and you
have an issue, or whether this is the same problem you earlier described
and are still using 1.5.4?

To clarify my earlier suggestion; *some* people have experienced a
disconnection issue using 1.5.4. This appears to occur after a certain
number of connections have been initiated. In your second post when you
described the problem you were having (essentially it works ok for some
time, then it doesn't) there seemed to me to be some similarity to this
known issue with 1.5.4.

Therefore, as a quick check, I suggested you could trial 1.5.3, which
doesn't appear to be affected by the disconnection issue.

If the problem remains then it's unlikely to be related to 1.5.4
specifically and you could carry on with fault-finding 1.5.4.

Otherwise if 1.5.3 operates as expected then it *could* be that you are
one of those affected by this issue. At this point there is a thought it
may be related to FreeRDP and some aspect of 1.5.4, but it's yet to be
determined for sure.

On 20/02/24 00:12, Viji Sankar wrote:
> Hi Ivanmarcus,
>
> We have experienced, VM continuously disconnects every few minutes/seconds 
> while using guacamole. That’s the reason we have upgraded to 1.5.3 and we 
> also increased the CPU and memory of the GUACD and GUACAMOLE container.  Is 
> this a known issue or should we need to update any properties file to avoid 
> this issue in 1.5.3?
>
> Regards,
> Viji S
>
> From: Ivanmarcus
> Sent: Monday, February 19, 2024 2:36 PM
> To: user@guacamole.apache.org
> Subject: Re: Creation of WebSocket tunnel to guacd failed - Guacamole 1.5.4
>
> In order to test the hypothesis you could trial 1. 5. 3 I realise that this 
> could be seen as a somewhat crude fault-finding process, and it may turn out 
> that your problem is unrelated to the 'fails after a certain number of 
> connections' issue,
> ZjQcmQRYFpfptBannerStart
> CAUTION
> This email originated from outside of EXPLEO. Do not click links or open 
> attachments unless you recognize the sender and know the content is safe.
> In case of any doubt you can forward that message to susp...@expleogroup.com 
> for analysis.
> ZjQcmQRYFpfptBannerEnd
>
> In order to test the hypothesis you could trial 1.5.3
>
>
>
> I realise that this could be seen as a somewhat crude fault-finding
>
> process, and it may turn out that your problem is unrelated to the
>
> 'fails after a certain number of connections' issue, however in your
>
> description there seemed enough similarity for me to make the
>
> observation regarding 1.5.4.
>
>
>
> If there was a known reason for this issue that's affecting 1.5.4 I'd
>
> suggest addressing that, but it's yet to be determined for sure. In the
>
> meantime trialling 1.5.3 may permit a quick check to see if that is
>
> indeed what you're experiencing, or something else.
>
>
>
>
>
> On 19/02/24 21:53, Viji Sankar wrote:
>
>> Hi Ivanmarcus,
>
>>
>
>> Which recent stable version we can install to avoid our connection issues?
>
>>
>
>> Regards,
>
>> Viji S
>
>>
>
>>
>
>> 
>
>> From: Ivanmarcus 
>
>> Sent: Monday, February 19, 2024 2:11:44 PM
>
>> To: user@guacamole.apache.org 
>
>> Subject: Re: Creation of WebSocket tunnel to guacd failed - Guacamole 1.5.4
>
>>
>
>> Viji, There is a problem that *some* people are experiencing with 1. 5. 4 
>> when a certain number of connections have occurred. It may be that you're, 
>> unfortunately, one of those people. This particular issue has been actively 
>> discussed and worked
>
>> ZjQcmQRYFpfptBannerStart
>
>> CAUTION
>
>> This email originated from outside of EXPLEO. Do not click links or open 
>> attachments unless you recognize the sender and know the content is safe.
>
>> In case of any doubt you can

Re: Creation of WebSocket tunnel to guacd failed - Guacamole 1.5.4


Viji,

I understood you were using 1.5.4?

I am a little confused as to whether you are now trying 1.5.3 and you 
have an issue, or whether this is the same problem you earlier described 
and are still using 1.5.4?


To clarify my earlier suggestion; *some* people have experienced a 
disconnection issue using 1.5.4. This appears to occur after a certain 
number of connections have been initiated. In your second post when you 
described the problem you were having (essentially it works ok for some 
time, then it doesn't) there seemed to me to be some similarity to this 
known issue with 1.5.4.


Therefore, as a quick check, I suggested you could trial 1.5.3, which 
doesn't appear to be affected by the disconnection issue.


If the problem remains then it's unlikely to be related to 1.5.4 
specifically and you could carry on with fault-finding 1.5.4.


Otherwise if 1.5.3 operates as expected then it *could* be that you are 
one of those affected by this issue. At this point there is a thought it 
may be related to FreeRDP and some aspect of 1.5.4, but it's yet to be 
determined for sure.




On 20/02/24 00:12, Viji Sankar wrote:

Hi Ivanmarcus,

We have experienced, VM continuously disconnects every few minutes/seconds 
while using guacamole. That’s the reason we have upgraded to 1.5.3 and we also 
increased the CPU and memory of the GUACD and GUACAMOLE container.  Is this a 
known issue or should we need to update any properties file to avoid this issue 
in 1.5.3?

Regards,
Viji S

From: Ivanmarcus
Sent: Monday, February 19, 2024 2:36 PM
To: user@guacamole.apache.org
Subject: Re: Creation of WebSocket tunnel to guacd failed - Guacamole 1.5.4

In order to test the hypothesis you could trial 1. 5. 3 I realise that this 
could be seen as a somewhat crude fault-finding process, and it may turn out 
that your problem is unrelated to the 'fails after a certain number of 
connections' issue,
ZjQcmQRYFpfptBannerStart
CAUTION
This email originated from outside of EXPLEO. Do not click links or open 
attachments unless you recognize the sender and know the content is safe.
In case of any doubt you can forward that message to susp...@expleogroup.com 
for analysis.
ZjQcmQRYFpfptBannerEnd

In order to test the hypothesis you could trial 1.5.3



I realise that this could be seen as a somewhat crude fault-finding

process, and it may turn out that your problem is unrelated to the

'fails after a certain number of connections' issue, however in your

description there seemed enough similarity for me to make the

observation regarding 1.5.4.



If there was a known reason for this issue that's affecting 1.5.4 I'd

suggest addressing that, but it's yet to be determined for sure. In the

meantime trialling 1.5.3 may permit a quick check to see if that is

indeed what you're experiencing, or something else.





On 19/02/24 21:53, Viji Sankar wrote:


Hi Ivanmarcus,







Which recent stable version we can install to avoid our connection issues?







Regards,



Viji S















From: Ivanmarcus 



Sent: Monday, February 19, 2024 2:11:44 PM



To: user@guacamole.apache.org 



Subject: Re: Creation of WebSocket tunnel to guacd failed - Guacamole 1.5.4







Viji, There is a problem that *some* people are experiencing with 1. 5. 4 when 
a certain number of connections have occurred. It may be that you're, 
unfortunately, one of those people. This particular issue has been actively 
discussed and worked



ZjQcmQRYFpfptBannerStart



CAUTION



This email originated from outside of EXPLEO. Do not click links or open 
attachments unless you recognize the sender and know the content is safe.



In case of any doubt you can forward that message to susp...@expleogroup.com 
for analysis.







ZjQcmQRYFpfptBannerEnd







Viji,







There is a problem that *some* people are experiencing with 1.5.4 when a



certain number of connections have occurred. It may be that you're,



unfortunately, one of those people.







This particular issue has been actively discussed and worked on, it's



possibly related to FreeRDP but is yet to be absolutely pinpointed.







I'm not sure if yours is a new installation, or upgrade from 1.5.3, but



if you wanted to try 1.5.3 it may determine whether what you're



experiencing is related to this issue.







On 19/02/24 21:13, Viji Sankar wrote:



Hi Jimmy,







The guacd container is running in the same pod as well and port 4823 opened.







When we do restart/new deployment, the connections to both Ubuntu and Windows 
VMs are working fine. After some time, Ubuntu connections stopped working and 
Windows connections worked fine.







Attached is the screenshot as well.







Regards,



Viji S







-



To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org



For additional commands, e-mail:

Re: Now with Ubuntu PID error

  Resolved.On Ubuntu it must be configured for /etc/init.dI still had my notes 
for Debian with the configuration in /etc/systemd/system/
I'm sorry.


Il lunedì 19 febbraio 2024 alle ore 17:29:15 CET, Andrea Miconi 
 ha scritto:  
 
 With the installation in Debian 12 I was unable to install the MariaDB 
connector.Since mine is only a test environment, I redid the installation 
starting with Ubuntu 22.04.3.I follow the guide step by step, without any 
errors, until I launch systemctl status guacd
The only difference compared to the previous installation is that on Debian I 
had everything installed as "root" and here with my user always using "sudo".


~$ systemctl status guacd× guacd.service - Guacamole Server     Loaded: loaded 
(/etc/systemd/system/guacd.service; enabled; vendor preset: enabled)     
Active: failed (Result: exit-code) since Mon 2024-02-19 17:21:34 CET; 5s ago    
   Docs: man:guacd(8)    Process: 1363 ExecStart=/usr/local/sbin/guacd -f 
(code=exited, status=1/FAILURE)   Main PID: 1363 (code=exited, 
status=1/FAILURE)        CPU: 35ms
Feb 19 17:21:34 pc-sys systemd[1]: Started Guacamole Server.Feb 19 17:21:34 
pc-sys guacd[1363]: Guacamole proxy daemon (guacd) version 1.5.4 startedFeb 19 
17:21:34 pc-sys guacd[1363]: guacd[1363]: INFO:        Guacamole proxy daemon 
(guacd) version 1.5.4 startedFeb 19 17:21:34 pc-sys guacd[1363]: guacd[1363]: 
ERROR:        Could not write PID file: Permission deniedFeb 19 17:21:34 pc-sys 
guacd[1363]: Could not write PID file: Permission deniedFeb 19 17:21:34 pc-sys 
systemd[1]: guacd.service: Main process exited, code=exited, 
status=1/FAILUREFeb 19 17:21:34 pc-sys systemd[1]: guacd.service: Failed with 
result 'exit-code'.

Now with Ubuntu PID error

With the installation in Debian 12 I was unable to install the MariaDB 
connector.Since mine is only a test environment, I redid the installation 
starting with Ubuntu 22.04.3.I follow the guide step by step, without any 
errors, until I launch systemctl status guacd
The only difference compared to the previous installation is that on Debian I 
had everything installed as "root" and here with my user always using "sudo".


~$ systemctl status guacd× guacd.service - Guacamole Server     Loaded: loaded 
(/etc/systemd/system/guacd.service; enabled; vendor preset: enabled)     
Active: failed (Result: exit-code) since Mon 2024-02-19 17:21:34 CET; 5s ago    
   Docs: man:guacd(8)    Process: 1363 ExecStart=/usr/local/sbin/guacd -f 
(code=exited, status=1/FAILURE)   Main PID: 1363 (code=exited, 
status=1/FAILURE)        CPU: 35ms
Feb 19 17:21:34 pc-sys systemd[1]: Started Guacamole Server.Feb 19 17:21:34 
pc-sys guacd[1363]: Guacamole proxy daemon (guacd) version 1.5.4 startedFeb 19 
17:21:34 pc-sys guacd[1363]: guacd[1363]: INFO:        Guacamole proxy daemon 
(guacd) version 1.5.4 startedFeb 19 17:21:34 pc-sys guacd[1363]: guacd[1363]: 
ERROR:        Could not write PID file: Permission deniedFeb 19 17:21:34 pc-sys 
guacd[1363]: Could not write PID file: Permission deniedFeb 19 17:21:34 pc-sys 
systemd[1]: guacd.service: Main process exited, code=exited, 
status=1/FAILUREFeb 19 17:21:34 pc-sys systemd[1]: guacd.service: Failed with 
result 'exit-code'.

Re: Failed connections RDP

2024-02-19 Thread Nick Couchman

On Mon, Feb 19, 2024 at 4:18 AM Andrea Miconi
 wrote:

> I tried enabling remote desktop on a VM Win11 Pro and a VM Win7 Pro.
> Same result, logs me out immediately.
>
>
What Linux account is guacd running under? Does that account have a
writable home directory?

-Nick

RE: Creation of WebSocket tunnel to guacd failed - Guacamole 1.5.4

Hi Ivanmarcus,

We have experienced, VM continuously disconnects every few minutes/seconds 
while using guacamole. That’s the reason we have upgraded to 1.5.3 and we also 
increased the CPU and memory of the GUACD and GUACAMOLE container.  Is this a 
known issue or should we need to update any properties file to avoid this issue 
in 1.5.3?

Regards,
Viji S

From: Ivanmarcus
Sent: Monday, February 19, 2024 2:36 PM
To: user@guacamole.apache.org
Subject: Re: Creation of WebSocket tunnel to guacd failed - Guacamole 1.5.4

In order to test the hypothesis you could trial 1. 5. 3 I realise that this 
could be seen as a somewhat crude fault-finding process, and it may turn out 
that your problem is unrelated to the 'fails after a certain number of 
connections' issue,
ZjQcmQRYFpfptBannerStart
CAUTION
This email originated from outside of EXPLEO. Do not click links or open 
attachments unless you recognize the sender and know the content is safe.
In case of any doubt you can forward that message to susp...@expleogroup.com 
for analysis.
ZjQcmQRYFpfptBannerEnd

In order to test the hypothesis you could trial 1.5.3



I realise that this could be seen as a somewhat crude fault-finding

process, and it may turn out that your problem is unrelated to the

'fails after a certain number of connections' issue, however in your

description there seemed enough similarity for me to make the

observation regarding 1.5.4.



If there was a known reason for this issue that's affecting 1.5.4 I'd

suggest addressing that, but it's yet to be determined for sure. In the

meantime trialling 1.5.3 may permit a quick check to see if that is

indeed what you're experiencing, or something else.





On 19/02/24 21:53, Viji Sankar wrote:

> Hi Ivanmarcus,

>

> Which recent stable version we can install to avoid our connection issues?

>

> Regards,

> Viji S

>

>

> 

> From: Ivanmarcus 

> Sent: Monday, February 19, 2024 2:11:44 PM

> To: user@guacamole.apache.org 

> Subject: Re: Creation of WebSocket tunnel to guacd failed - Guacamole 1.5.4

>

> Viji, There is a problem that *some* people are experiencing with 1. 5. 4 
> when a certain number of connections have occurred. It may be that you're, 
> unfortunately, one of those people. This particular issue has been actively 
> discussed and worked

> ZjQcmQRYFpfptBannerStart

> CAUTION

> This email originated from outside of EXPLEO. Do not click links or open 
> attachments unless you recognize the sender and know the content is safe.

> In case of any doubt you can forward that message to susp...@expleogroup.com 
> for analysis.

>

> ZjQcmQRYFpfptBannerEnd

>

> Viji,

>

> There is a problem that *some* people are experiencing with 1.5.4 when a

> certain number of connections have occurred. It may be that you're,

> unfortunately, one of those people.

>

> This particular issue has been actively discussed and worked on, it's

> possibly related to FreeRDP but is yet to be absolutely pinpointed.

>

> I'm not sure if yours is a new installation, or upgrade from 1.5.3, but

> if you wanted to try 1.5.3 it may determine whether what you're

> experiencing is related to this issue.

>

> On 19/02/24 21:13, Viji Sankar wrote:

>> Hi Jimmy,

>>

>> The guacd container is running in the same pod as well and port 4823 opened.

>>

>> When we do restart/new deployment, the connections to both Ubuntu and 
>> Windows VMs are working fine. After some time, Ubuntu connections stopped 
>> working and Windows connections worked fine.

>>

>> Attached is the screenshot as well.

>>

>> Regards,

>> Viji S

>

> -

> To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org

> For additional commands, e-mail: user-h...@guacamole.apache.org

>

>

>

> _

>

> EMAIL LEGAL MENTION / DISCLAIMER

>

> This message contains information that may be privileged or confidential and 
> is the property of the Expleo Services SAS, RCS Versailles 831 178 348, 
> located, 3 avenue des Prés, 78180 Montigny Le Bretonneux - France. It is 
> intended only for the person to whom it is addressed. If you are not the 
> intended recipient, you are not authorized to read, print, retain, copy, 
> disseminate, distribute, or use this message or any part thereof. If you 
> receive this message in error, please notify the sender immediately and 
> delete all copies of this message.

>

> Ce message contient des informations qui peuvent être privilégiées ou 
> confidentielles et elles sont de la propriété d'Expleo Services SAS, RCS 
> Versailles 831 178 348, situé, 3 avenue des Prés, 78180 Montigny le 
> Bretonneux-France. Il est destiné uniquement à la personne à qui est adressé. 
> Si vous n'êtes pas le destinataire visé, vous n'êtes pas autorisé à lire, 
> imprimer, conserver, copier,

Re: Configuration from GUI


Andrea,

It's getting late here, so I've not a lot of time now, sorry.

However if you check out 
https://guacamole.apache.org/doc/gug/jdbc-auth.html it should explain 
what you need to do, and where you need to place the relevant files.


Also, while it's been a some time since I installed Guacamole with 
Debian the example steps I referred to earlier (using Ubuntu) should 
give a reasonable idea?


If you're still having problems in a few days, and I have time, I may 
run up a Debian VM and trial install Guacamole. I can't guarantee this 
however, so it would be better if you could persevere yourself (and tell 
us the answer when you sort it out).



On 19/02/24 22:02, Andrea Miconi wrote:

  I use Debian 12 and I haven't found a guide.I couldn't figure out how to 
install the JDBC connector.For Ubuntu there is a .deb, but I don't think there 
is one for Debian.
I saw that version 3.3.2 is available which I can download 
withhttps://dlm.mariadb.com/3700566/Connectors/java/connector-java-3.3.2/mariadb-java-client-3.3.2.jar
On the pagehttps://mariadb.com/kb/en/installing-mariadb-connectorj/it is 
indicated that you just need to copy the .jar into the CLASSPATH, but I don't 
understand where it is.



-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

Re: Failed connections RDP

 I tried enabling remote desktop on a VM Win11 Pro and a VM Win7 Pro.Same 
result, logs me out immediately.

Il lunedì 19 febbraio 2024 alle ore 09:19:55 CET, Horváth Csaba 
 ha scritto:  
 
 Hi,

Strange.
My setup is failing with Gnome Debian remote machines, but works with
Windows RDP VM's flawlessly. This was the only thing which i needed to
add to the config.

Cs.

Andrea Miconi  ezt írta (időpont:
2024. febr. 19., H, 8:52):
>
> In the meantime I had also seen that that parameter was missing, but it still 
> doesn't work.
>
>        
>        
>            rdp
>            192.168.101.98
>            3389
>        
>            nla
>            true
>        
>
>
>
> Il lunedì 19 febbraio 2024 alle ore 08:26:13 CET, Horváth Csaba 
>  ha scritto:
>
>
> Hi,
>
> So your issue is not the same as mine.
>
> Try to add this to the user-mapping.xml to the appropriate connection
> settings  :
>          nla
>            true
>
> NLA is the Network Level Authentication security mode, used by modern
> Windows versions and Gnome-Remote-Desktop.
>
> Cs.
>
> Andrea Miconi  ezt írta (időpont:
> 2024. febr. 19., H, 7:53):
> >
> > Thanks for the reply.
> > Guacamole is on a PC with a Debian 12 server installed.
> > My PC is Win11 Pro.
> > The "remote" PC (on my same table and connected to my same switch) is a 
> > Win10 Pro.
> > Both PCs are updated with the latest WinUpdate.
> >
> > I have also a laptop with Xubuntu 22:04, but I haven't tested whether it 
> > works with that yet.
> >
> > I don't know anything about NLA Security, I don't know it.
> > The two Windows PCs have the "Remote Desktop" feature enabled in the 
> > Windows settings.
> > Win11 PC connects to Win10 using RDP without going through Guacamole.
> >
> >
> >
> > Il domenica 18 febbraio 2024 alle ore 20:36:27 CET, Horváth Csaba 
> >  ha scritto:
> >
> >
> > Hi,
> >
> > This may be the same what i found.
> >
> > What do you use on your PC? Gnome-based DE?
> >
> > What do you get if you specify NLA security?
> >
> > BR,
> >
> > Cs.
> >
> > Andrea Miconi  ezt írta (időpont:
> > 2024. febr. 18., V, 19:12):
> >
> > >
> > > I'm trying to connect to PCs using guacadmin, but only with VNC and SSH I 
> > > work.
> > > With RDP the message "You have been disconnected" immediately appears.
> > >
> > > Reading online it seems that the problem is with the reverse proxy; in 
> > > this I forward only port 8080.
> > > Furthermore, the firewall has no rules, only an "All Open" rule.
> > > Finally, the problem exists both with the connection from the Internet 
> > > (and in this case the proxy comes into play), but also from the LAN where 
> > > I call Guacamole directly with its IP address.
> > >
> > > From my PC I can connect using Windows Remote Desktop, so the problem is 
> > > with Guacamole.
> > >
> > > Here are the parameters in XML.
> > > The guacamole IP address is 192.168.101.17
> > > My PC IP address is 192.168.101.33
> > >
> > >        
> > >        
> > >            rdp
> > >            192.168.101.98
> > >            3389
> > >        
> > >        
> >
> > >
> >
> > -
> > To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
> > For additional commands, e-mail: user-h...@guacamole.apache.org
>
> >
> >
>
> -
> To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
> For additional commands, e-mail: user-h...@guacamole.apache.org
>

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

Re: Creation of WebSocket tunnel to guacd failed - Guacamole 1.5.4


In order to test the hypothesis you could trial 1.5.3

I realise that this could be seen as a somewhat crude fault-finding 
process, and it may turn out that your problem is unrelated to the 
'fails after a certain number of connections' issue, however in your 
description there seemed enough similarity for me to make the 
observation regarding 1.5.4.


If there was a known reason for this issue that's affecting 1.5.4 I'd 
suggest addressing that, but it's yet to be determined for sure. In the 
meantime trialling 1.5.3 may permit a quick check to see if that is 
indeed what you're experiencing, or something else.



On 19/02/24 21:53, Viji Sankar wrote:

Hi Ivanmarcus,

Which recent stable version we can install to avoid our connection issues?

Regards,
Viji S



From: Ivanmarcus 
Sent: Monday, February 19, 2024 2:11:44 PM
To: user@guacamole.apache.org 
Subject: Re: Creation of WebSocket tunnel to guacd failed - Guacamole 1.5.4

Viji, There is a problem that *some* people are experiencing with 1. 5. 4 when 
a certain number of connections have occurred. It may be that you're, 
unfortunately, one of those people. This particular issue has been actively 
discussed and worked
ZjQcmQRYFpfptBannerStart
CAUTION
This email originated from outside of EXPLEO. Do not click links or open 
attachments unless you recognize the sender and know the content is safe.
In case of any doubt you can forward that message to susp...@expleogroup.com 
for analysis.

ZjQcmQRYFpfptBannerEnd

Viji,

There is a problem that *some* people are experiencing with 1.5.4 when a
certain number of connections have occurred. It may be that you're,
unfortunately, one of those people.

This particular issue has been actively discussed and worked on, it's
possibly related to FreeRDP but is yet to be absolutely pinpointed.

I'm not sure if yours is a new installation, or upgrade from 1.5.3, but
if you wanted to try 1.5.3 it may determine whether what you're
experiencing is related to this issue.

On 19/02/24 21:13, Viji Sankar wrote:

Hi Jimmy,

The guacd container is running in the same pod as well and port 4823 opened.

When we do restart/new deployment, the connections to both Ubuntu and Windows 
VMs are working fine. After some time, Ubuntu connections stopped working and 
Windows connections worked fine.

Attached is the screenshot as well.

Regards,
Viji S


-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org



_

EMAIL LEGAL MENTION / DISCLAIMER

This message contains information that may be privileged or confidential and is 
the property of the Expleo Services SAS, RCS Versailles 831 178 348, located, 3 
avenue des Prés, 78180 Montigny Le Bretonneux - France. It is intended only for 
the person to whom it is addressed. If you are not the intended recipient, you 
are not authorized to read, print, retain, copy, disseminate, distribute, or 
use this message or any part thereof. If you receive this message in error, 
please notify the sender immediately and delete all copies of this message.

Ce message contient des informations qui peuvent être privilégiées ou 
confidentielles et elles sont de la propriété d'Expleo Services SAS, RCS 
Versailles 831 178 348, situé, 3 avenue des Prés, 78180 Montigny le 
Bretonneux-France. Il est destiné uniquement à la personne à qui est adressé. 
Si vous n'êtes pas le destinataire visé, vous n'êtes pas autorisé à lire, 
imprimer, conserver, copier, diffuser, distribuer ou utiliser ce message ou 
toute partie de celui-ci. Si vous recevez ce message par erreur, veuillez en 
avertir immédiatement l'expéditeur et supprimer toutes les copies de ce message.


-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

Re: Configuration from GUI

 I use Debian 12 and I haven't found a guide.I couldn't figure out how to 
install the JDBC connector.For Ubuntu there is a .deb, but I don't think there 
is one for Debian.
I saw that version 3.3.2 is available which I can download 
withhttps://dlm.mariadb.com/3700566/Connectors/java/connector-java-3.3.2/mariadb-java-client-3.3.2.jar
On the pagehttps://mariadb.com/kb/en/installing-mariadb-connectorj/it is 
indicated that you just need to copy the .jar into the CLASSPATH, but I don't 
understand where it is.


Il lunedì 19 febbraio 2024 alle ore 09:30:29 CET, Ivanmarcus 
 ha scritto:  
 
 Andrea,

If you want to be able to use the GUI as you describe then you'll need 
to use a database, rather than the XML config.

You don't say what distribution you're using, but I have previously 
described some steps to install Guacamole with or without database for 
Ubuntu 22.04. This was intended as a guide and you may need to make some 
changes, however some aspects of it may be helpful. You can find the 
description here, along with useful comments by others:

https://lists.apache.org/thread/1z7pczcmb9nvo46odo0qyklxn0qvrcxn

On 19/02/24 03:48, Andrea Miconi wrote:
>  Before this installation I had followed a guide to use MariaDB, but then I 
>found myself having difficulty identifying the collector.
> Now that the XML configuration is already there, I was wondering if I can 
> configure it again for the DB or if I have to do everything from the 
> beginning.If I use MariaDB, how do I connect it to Guacamole?
> 
> 
> 
>      Il domenica 18 febbraio 2024 alle ore 13:21:00 CET, Nick Couchman 
> ha scritto:
>  
>  
> 
> On Sun, Feb 18, 2024 at 3:36 AM Andrea Miconi 
>  wrote:
> 
> I am new with Guacamole and to configure it I used the xml file.
> Now I have to report any changes here.
> 
> I had tried Guacamole years ago and I remember that as guacadmin I could 
> configure it from the GUI, creating users, passwords, services to connect to, 
> protocols, etc.
> Again if I remember correctly, I had also changed the logo and installed TOTP 
> for two-factor authentication.
> Starting from this simple installation, how can I complete the configuration?
> 
> 
> FIrst, make sure you have read through the manual and are familiar with its 
> contents. It covers a lot of these configuration topics: 
> https://guacamole.apache.org/doc/gug/.
> To answer your questions a bit more specifically, though:* The default 
> authentication module included with Guacamole is the simple user-mapping.xml 
> file. It is not designed to be a long-term, scalable authentication solution; 
> instead, it's designed just to help you make sure that Guacamole is 
> functioning properly end-to-end.* In order to be able to configure 
> connections in the GUI, you'll need to install one of the database modules 
> and connect it to a database. This is covered in the manual linked above, 
> under the "Database authentication" section.* To configure TOTP, after you 
> have the database authentication working, you can add the totp module in. 
> This is covered in the "TOTP two-factor authentication" section.* To 
> customize the look-and-feel of Guacamole, you can generate your own simple 
> extension to overwrite the CSS and HTML of the interface. This is covered at 
> a high level in the "guacamole-ext" section of the manual, and there's an 
> example "branding" extension in the source repo: 
> https://github.com/apache/guacamole-client/tree/master/doc/guacamole-branding-example.
> -Nick

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

RE: Creation of WebSocket tunnel to guacd failed - Guacamole 1.5.4

Hi Ivanmarcus,

Which recent stable version we can install to avoid our connection issues?

Regards,
Viji S

From: Ivanmarcus 
Sent: Monday, February 19, 2024 2:11:44 PM
To: user@guacamole.apache.org 
Subject: Re: Creation of WebSocket tunnel to guacd failed - Guacamole 1.5.4

Viji, There is a problem that *some* people are experiencing with 1. 5. 4 when 
a certain number of connections have occurred. It may be that you're, 
unfortunately, one of those people. This particular issue has been actively 
discussed and worked
ZjQcmQRYFpfptBannerStart
CAUTION
This email originated from outside of EXPLEO. Do not click links or open 
attachments unless you recognize the sender and know the content is safe.
In case of any doubt you can forward that message to susp...@expleogroup.com 
for analysis.

ZjQcmQRYFpfptBannerEnd

Viji,

There is a problem that *some* people are experiencing with 1.5.4 when a
certain number of connections have occurred. It may be that you're,
unfortunately, one of those people.

This particular issue has been actively discussed and worked on, it's
possibly related to FreeRDP but is yet to be absolutely pinpointed.

I'm not sure if yours is a new installation, or upgrade from 1.5.3, but
if you wanted to try 1.5.3 it may determine whether what you're
experiencing is related to this issue.

On 19/02/24 21:13, Viji Sankar wrote:
> Hi Jimmy,
>
> The guacd container is running in the same pod as well and port 4823 opened.
>
> When we do restart/new deployment, the connections to both Ubuntu and Windows 
> VMs are working fine. After some time, Ubuntu connections stopped working and 
> Windows connections worked fine.
>
> Attached is the screenshot as well.
>
> Regards,
> Viji S

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

_

EMAIL LEGAL MENTION / DISCLAIMER

This message contains information that may be privileged or confidential and is 
the property of the Expleo Services SAS, RCS Versailles 831 178 348, located, 3 
avenue des Prés, 78180 Montigny Le Bretonneux - France. It is intended only for 
the person to whom it is addressed. If you are not the intended recipient, you 
are not authorized to read, print, retain, copy, disseminate, distribute, or 
use this message or any part thereof. If you receive this message in error, 
please notify the sender immediately and delete all copies of this message.

Ce message contient des informations qui peuvent être privilégiées ou 
confidentielles et elles sont de la propriété d'Expleo Services SAS, RCS 
Versailles 831 178 348, situé, 3 avenue des Prés, 78180 Montigny le 
Bretonneux-France. Il est destiné uniquement à la personne à qui est adressé. 
Si vous n'êtes pas le destinataire visé, vous n'êtes pas autorisé à lire, 
imprimer, conserver, copier, diffuser, distribuer ou utiliser ce message ou 
toute partie de celui-ci. Si vous recevez ce message par erreur, veuillez en 
avertir immédiatement l'expéditeur et supprimer toutes les copies de ce message.

Re: Is it possible to connect to a website with Guacamole?

 Do you have an idea of how to do it?I can also use a VPN, but this is not 
always possible.

Il lunedì 19 febbraio 2024 alle ore 09:17:38 CET, Ivanmarcus 
 ha scritto:  
 
 Andrea,

This is not presently possible with Guacamole.

It has been requested in the past, and it may become a feature in the 
future at some stage, but it's unlikely to be any time soon.

On 19/02/24 20:03, Andrea Miconi wrote:
> I have a small server with some "web applications" installed in Apache, for 
> example for time management, my notes, my money.
> These applications can be reached via HTTPS and have login credentials.
> 
> I could log in remotely and I have HAProxy as a reverse proxy.Nonetheless, I 
> would not like to expose them publicly.
> I'd like to use Guacamole (or something similar if it wasn't possible with 
> G.) in the same way I connect to PCs and servers.
> I connect to Guacamole, log in, the list of PCs and Servers appears; here I 
> would like to see the list of my accounts on the web server.I would connect 
> to these with HTTPS:PortNumber and use my credentials here, if they are not 
> already configured in Guacamole.
> In Guacamole I see that I can use RDP, VNC, Telnet; but I don't see the 
> possibility of using HTTPS as well. Or am I wrong?
> 

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

Re: Creation of WebSocket tunnel to guacd failed - Guacamole 1.5.4


Viji,

There is a problem that *some* people are experiencing with 1.5.4 when a 
certain number of connections have occurred. It may be that you're, 
unfortunately, one of those people.


This particular issue has been actively discussed and worked on, it's 
possibly related to FreeRDP but is yet to be absolutely pinpointed.


I'm not sure if yours is a new installation, or upgrade from 1.5.3, but 
if you wanted to try 1.5.3 it may determine whether what you're 
experiencing is related to this issue.


On 19/02/24 21:13, Viji Sankar wrote:

Hi Jimmy,

The guacd container is running in the same pod as well and port 4823 opened.

When we do restart/new deployment, the connections to both Ubuntu and Windows 
VMs are working fine. After some time, Ubuntu connections stopped working and 
Windows connections worked fine.

Attached is the screenshot as well.

Regards,
Viji S


-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

Re: Configuration from GUI

Andrea,

If you want to be able to use the GUI as you describe then you'll need
to use a database, rather than the XML config.

You don't say what distribution you're using, but I have previously
described some steps to install Guacamole with or without database for
Ubuntu 22.04. This was intended as a guide and you may need to make some
changes, however some aspects of it may be helpful. You can find the
description here, along with useful comments by others:

https://lists.apache.org/thread/1z7pczcmb9nvo46odo0qyklxn0qvrcxn

On 19/02/24 03:48, Andrea Miconi wrote:

Before this installation I had followed a guide to use MariaDB, but then I
found myself having difficulty identifying the collector.
Now that the XML configuration is already there, I was wondering if I can
configure it again for the DB or if I have to do everything from the
beginning.If I use MariaDB, how do I connect it to Guacamole?

Il domenica 18 febbraio 2024 alle ore 13:21:00 CET, Nick Couchman
ha scritto:

On Sun, Feb 18, 2024 at 3:36 AM Andrea Miconi
wrote:

I am new with Guacamole and to configure it I used the xml file.
Now I have to report any changes here.

I had tried Guacamole years ago and I remember that as guacadmin I could
configure it from the GUI, creating users, passwords, services to connect to,
protocols, etc.
Again if I remember correctly, I had also changed the logo and installed TOTP
for two-factor authentication.
Starting from this simple installation, how can I complete the configuration?

FIrst, make sure you have read through the manual and are familiar with its
contents. It covers a lot of these configuration topics:
https://guacamole.apache.org/doc/gug/.
To answer your questions a bit more specifically, though:* The default authentication module included with Guacamole is
the simple user-mapping.xml file. It is not designed to be a long-term, scalable authentication solution; instead, it's
designed just to help you make sure that Guacamole is functioning properly end-to-end.* In order to be able to
configure connections in the GUI, you'll need to install one of the database modules and connect it to a database. This
is covered in the manual linked above, under the "Database authentication" section.* To configure TOTP, after
you have the database authentication working, you can add the totp module in. This is covered in the "TOTP
two-factor authentication" section.* To customize the look-and-feel of Guacamole, you can generate your own simple
extension to overwrite the CSS and HTML of the interface. This is covered at a high level in the
"guacamole-ext" section of the manual, and there's an example "branding" extension in the source
repo: https://github.com/apache/guacamole-client/tree/master/doc/guacamole-branding-example.
-Nick

Re: How to make Guacamole safe.


Andrea,

Mike means that you will need to be looking at, and blocking if 
necessary, unique public IP addresses.


Most likely private addresses (eg. 192.168.x.x) would normally be 
'trusted', or in some cases not unique, so there's no point in having 
having fail2ban analyse them.


Also, fail2ban is a separate project and service. It is not affiliated 
with Guacamole, although it may be used with it.


On 19/02/24 21:00, Andrea Miconi wrote:

  My firewall already has an Intrusion Detection function.Guacamole is behind the 
firewall and behind the reverse proxy.When you talk about "is running on the 
public-facing server" are you still talking about Guacamole?
Is Failban already configured for Guacamole or do I have to configure it myself?


 Il lunedì 19 febbraio 2024 alle ore 08:33:41 CET, Michael Jumper 
 ha scritto:
  
  On 2/18/24 23:15, Andrea Miconi wrote:

My Guacamole is installed on a PC with Debian 12 and I use it to connect
to my PCs and servers.
Besides G. there is nothing else installed; maybe later I will want to
install Zabbix.

G. is now behind a firewall with HA-Proxy as reserver proxy.
I wonder if I shouldn't secure the server anyway, for example using UFW
or Failban.



It's always advisable to configure a tool like "fail2ban" - doing so
would allow you to automatically block attempts to brute-force login
credentials.

You will need to make sure that the fail2ban service is running on the
public-facing server. Blocking the IP address of a client machine will
otherwise have no impact if all client machines are actually your
reverse proxy from the perspective of the webapp.

Ensuring your system has a functional firewall, whether with UFW or
otherwise, should be standard practice. This has little to do with
Guacamole, particularly given that you would need to allow access to
Guacamole through your firewall anyway. This has more to do with
ensuring other services that may be running on your system are not
accessible.

- Mike

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

   


-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

Re: Failed connections RDP

2024-02-19 Thread Horváth Csaba

Hi,

Strange.
My setup is failing with Gnome Debian remote machines, but works with
Windows RDP VM's flawlessly. This was the only thing which i needed to
add to the config.

Cs.

Andrea Miconi  ezt írta (időpont:
2024. febr. 19., H, 8:52):
>
> In the meantime I had also seen that that parameter was missing, but it still 
> doesn't work.
>
> 
> 
> rdp
> 192.168.101.98
> 3389
> 
> nla
> true
> 
>
>
>
> Il lunedì 19 febbraio 2024 alle ore 08:26:13 CET, Horváth Csaba 
>  ha scritto:
>
>
> Hi,
>
> So your issue is not the same as mine.
>
> Try to add this to the user-mapping.xml to the appropriate connection
> settings  :
>   nla
> true
>
> NLA is the Network Level Authentication security mode, used by modern
> Windows versions and Gnome-Remote-Desktop.
>
> Cs.
>
> Andrea Miconi  ezt írta (időpont:
> 2024. febr. 19., H, 7:53):
> >
> > Thanks for the reply.
> > Guacamole is on a PC with a Debian 12 server installed.
> > My PC is Win11 Pro.
> > The "remote" PC (on my same table and connected to my same switch) is a 
> > Win10 Pro.
> > Both PCs are updated with the latest WinUpdate.
> >
> > I have also a laptop with Xubuntu 22:04, but I haven't tested whether it 
> > works with that yet.
> >
> > I don't know anything about NLA Security, I don't know it.
> > The two Windows PCs have the "Remote Desktop" feature enabled in the 
> > Windows settings.
> > Win11 PC connects to Win10 using RDP without going through Guacamole.
> >
> >
> >
> > Il domenica 18 febbraio 2024 alle ore 20:36:27 CET, Horváth Csaba 
> >  ha scritto:
> >
> >
> > Hi,
> >
> > This may be the same what i found.
> >
> > What do you use on your PC? Gnome-based DE?
> >
> > What do you get if you specify NLA security?
> >
> > BR,
> >
> > Cs.
> >
> > Andrea Miconi  ezt írta (időpont:
> > 2024. febr. 18., V, 19:12):
> >
> > >
> > > I'm trying to connect to PCs using guacadmin, but only with VNC and SSH I 
> > > work.
> > > With RDP the message "You have been disconnected" immediately appears.
> > >
> > > Reading online it seems that the problem is with the reverse proxy; in 
> > > this I forward only port 8080.
> > > Furthermore, the firewall has no rules, only an "All Open" rule.
> > > Finally, the problem exists both with the connection from the Internet 
> > > (and in this case the proxy comes into play), but also from the LAN where 
> > > I call Guacamole directly with its IP address.
> > >
> > > From my PC I can connect using Windows Remote Desktop, so the problem is 
> > > with Guacamole.
> > >
> > > Here are the parameters in XML.
> > > The guacamole IP address is 192.168.101.17
> > > My PC IP address is 192.168.101.33
> > >
> > >
> > >
> > >rdp
> > >192.168.101.98
> > >3389
> > >
> > >
> >
> > >
> >
> > -
> > To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
> > For additional commands, e-mail: user-h...@guacamole.apache.org
>
> >
> >
>
> -
> To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
> For additional commands, e-mail: user-h...@guacamole.apache.org
>

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

Re: Is it possible to connect to a website with Guacamole?


Andrea,

This is not presently possible with Guacamole.

It has been requested in the past, and it may become a feature in the 
future at some stage, but it's unlikely to be any time soon.


On 19/02/24 20:03, Andrea Miconi wrote:

I have a small server with some "web applications" installed in Apache, for 
example for time management, my notes, my money.
These applications can be reached via HTTPS and have login credentials.

I could log in remotely and I have HAProxy as a reverse proxy.Nonetheless, I 
would not like to expose them publicly.
I'd like to use Guacamole (or something similar if it wasn't possible with G.) 
in the same way I connect to PCs and servers.
I connect to Guacamole, log in, the list of PCs and Servers appears; here I 
would like to see the list of my accounts on the web server.I would connect to 
these with HTTPS:PortNumber and use my credentials here, if they are not 
already configured in Guacamole.
In Guacamole I see that I can use RDP, VNC, Telnet; but I don't see the 
possibility of using HTTPS as well. Or am I wrong?



-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

RE: Creation of WebSocket tunnel to guacd failed - Guacamole 1.5.4

Hi Jimmy,

The guacd container is running in the same pod as well and port 4823 opened.

When we do restart/new deployment, the connections to both Ubuntu and Windows 
VMs are working fine. After some time, Ubuntu connections stopped working and 
Windows connections worked fine.

Attached is the screenshot as well.

Regards,
Viji S

From: Jimmy
Sent: Monday, February 19, 2024 1:27 PM
To: user@guacamole.apache.org
Subject: Re: Creation of WebSocket tunnel to guacd failed - Guacamole 1.5.4

Hi Viji Sankar, From the log message, we can see that the Apache Guacamole 
Client couldn't connect to the guacd (the Apache Guacamole Server). Is the 
guacd running on the same pod as the guacamole client is running? If so, you 
need to check
ZjQcmQRYFpfptBannerStart
CAUTION
This email originated from outside of EXPLEO. Do not click links or open 
attachments unless you recognize the sender and know the content is safe.
In case of any doubt you can forward that message to susp...@expleogroup.com 
for analysis.
ZjQcmQRYFpfptBannerEnd
Hi Viji Sankar,

>From the log message, we can see that the Apache Guacamole Client couldn't 
>connect to the guacd (the Apache Guacamole Server).
Is the guacd running on the same pod as the guacamole client is running?
If so, you need to check if the guacd is running.
If not, you need to check if the port (default 4823) of the guacd is exposed.

Best regards,
Jimmy

On Sunday, February 18th, 2024 at 11:24 PM, Viji Sankar 
 wrote:

Hi Team,

We are using the Guacamole 1.5.4 version and deployed to Azure kubernetes 
server configuring NGINX proxy to expose inside our one pod(NGINX, GUACD, 
GUACAMOLE containers). We are currently facing an issue when connecting the 
Ubuntu server using Guacamole, at the same time windows is connecting using 
Guacamole. Below are logs that we are getting in the container,

ERROR o.a.g.w.GuacamoleWebSocketTunnelEndpoint - Creation of WebSocket tunnel 
to guacd failed: Connection to guacd timed out.

Kindly help us to resolve this issue.

Thank you in Advance.

Regards,
Viji S
_

EMAIL LEGAL MENTION / DISCLAIMER

This message contains information that may be privileged or confidential and is 
the property of the Expleo Services SAS, RCS Versailles 831 178 348, located, 3 
avenue des Prés, 78180 Montigny Le Bretonneux - France. It is intended only for 
the person to whom it is addressed. If you are not the intended recipient, you 
are not authorized to read, print, retain, copy, disseminate, distribute, or 
use this message or any part thereof. If you receive this message in error, 
please notify the sender immediately and delete all copies of this message.

Ce message contient des informations qui peuvent être privilégiées ou 
confidentielles et elles sont de la propriété d'Expleo Services SAS, RCS 
Versailles 831 178 348, situé, 3 avenue des Prés, 78180 Montigny le 
Bretonneux-France. Il est destiné uniquement à la personne à qui est adressé. 
Si vous n'êtes pas le destinataire visé, vous n'êtes pas autorisé à lire, 
imprimer, conserver, copier, diffuser, distribuer ou utiliser ce message ou 
toute partie de celui-ci. Si vous recevez ce message par erreur, veuillez en 
avertir immédiatement l'expéditeur et supprimer toutes les copies de ce message.

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

Re: How to make Guacamole safe.