Re: Improve "Wake On Lan" Logging

2020-10-05 Thread Mike Jumper
On Sun, Oct 4, 2020 at 10:26 PM Alexander wrote: > I suggest that the logging of the "Wake on Lan" feature be improved, to > make it easier to find the errors related to this functionality. > Is there something specific that you think is lacking? Wake-on-LAN consists of a single UDP packet

Re: SAML Authentication Extension Group Membership

2020-10-04 Thread Mike Jumper
On Sun, Oct 4, 2020, 12:49 Nick Couchman wrote: > On Sun, Oct 4, 2020 at 3:45 PM MARTINEZ, ARIEL > wrote: > >> Does anyone know if the SAML extension is supposed to take the group >> membership of a user and associate it automatically to a group defined in >> Guacamole that has the same name?

Re: Wake on Lan Doesn't work

2020-10-04 Thread Mike Jumper
On Sun, Oct 4, 2020 at 12:18 PM Alexander wrote: > The environment where apache guacamole runs is: > > ... > Please do not ... triple-post? To any encountering this thread, the original post can be found in response to the thread titled "Guacamole 1.2.0 and Wake-On-Lan":

Re: Wake on Lan Doesn't work

2020-10-04 Thread Mike Jumper
On Sun, Oct 4, 2020 at 12:15 PM Alexander wrote: > The environment where apache guacamole runs is: > > ... > Please do not double-post. To any encountering this thread, the original post can be found in response to the thread titled "Guacamole 1.2.0 and Wake-On-Lan":

Re: color-depth and DPI

2020-09-28 Thread Mike Jumper
On Mon, Sep 28, 2020 at 1:44 AM Vieri wrote: > Hi, > > I'd like to make sure that specific RDP connections get the best image > quality regardless of bandwidth. > ... > Should I leave DPI undefined, or should I manually give it a value of, > say, 300? > Short answer: No. The "dpi" parameter

Re: Default Docker Containers on RaspPi/ARM?

2020-09-26 Thread Mike Jumper
for the quick answer! > > > > Will see about building images myself, but any guidance about a quick path > would be appreciated. > > > > *From:* Mike Jumper > *Sent:* Saturday, September 26, 2020 7:40 PM > *To:* user@guacamole.apache.org > *Subject:* Re: Defau

Re: Default Docker Containers on RaspPi/ARM?

2020-09-26 Thread Mike Jumper
Yes, that's correct, the Docker images are x86 builds. There are no ARM builds of the images (though I'm sure you could build them). I'm surprised the Docker service will even let you run an x86 image on ARM. I'd think there would be sanity checks to prevent exactly that sort of mismatch. - Mike

Re: note when installing on Ubuntu server 20.04

2020-09-19 Thread Mike Jumper
On Sat, Sep 19, 2020, 08:25 Andrew Sedlak wrote: > Just a general note to everyone who is not aware. > > When installing Guacamole 1.2.0 on Ubuntu 20.04 with Tomcat 9 and MYSQL > 8.0.21, a very specific java connector needs to be used: > mysql-connector-java-5.1.48-bin.jar > > This can be found

Re: Memory reserved during file copy via virtual channel is not freed

2020-09-17 Thread Mike Jumper
On Sat, Sep 5, 2020 at 11:09 PM Mike Jumper wrote: > On Thu, Sep 3, 2020 at 1:49 PM alonp wrote: > >> mjumper wrote >> ... >> Do you know of any reason to avoid handling the >> "CHANNEL_EVENT_WRITE_COMPLETE", and release the stream once it receive

Re: How to bind guacamole on a Synology Directory Server

2020-09-17 Thread Mike Jumper
Can you provide the LDIF of a user that is failing? - Mike On Tue, Sep 15, 2020 at 6:46 AM Niubbo75 wrote: > Hello Stefan, thanks for your reply! > I have try changing samAccountName with uid but nothing has changed. > Best regards, > Alessandro > > > > -- > Sent from: >

Re: Font display issue in Chrome

2020-09-15 Thread Mike Jumper
If you haven't already, you should report this to the Chrome folks. There is nothing on the Guacamole side that would do this. It sounds like a bug in Chrome's interpolation of scaled images. - Mike On Tue, Sep 15, 2020, 11:14 Grigory Trenin wrote: > I can confirm that for RDP. > A Chrome

Re: RDF File Transfer for larger files very often causes a disconnect

2020-09-08 Thread Mike Jumper
On Tue, Sep 8, 2020, 04:57 Roemer wrote: > Hello > I am running Guacamole 1.2.0 in Docker (behind nginx). I added a device to > some RDP connections in order to upload/download files. > Now when I upload files of around 200mb size, the files upload correctly > and > are visible in the device in

Re: Cannot Get LDAP authentication to work with Active Directory No DNS resoultion?

2020-09-07 Thread Mike Jumper
On Mon, Sep 7, 2020 at 10:08 AM sysjaj wrote: > ... > > Alas I still could not login with active directory user accounts. Now I > get > this error in "syslog" and user authentication failure. > > Sep 7 09:42:31 guacamole tomcat9[854]: 09:42:31.059 [http-nio-8080-exec-8] > WARN

Re: Memory reserved during file copy via virtual channel is not freed

2020-09-06 Thread Mike Jumper
On Thu, Sep 3, 2020 at 1:49 PM alonp wrote: > mjumper wrote > ... > Do you know of any reason to avoid handling the > "CHANNEL_EVENT_WRITE_COMPLETE", and release the stream once it received? > Perhaps, but: * Care needs to be taken to ensure we remain compatible with older releases of FreeRDP

Re: Cannot Get LDAP authentication to work with Active Directory No DNS resoultion?

2020-09-04 Thread Mike Jumper
On Fri, Sep 4, 2020 at 5:41 PM sysjaj wrote: > Mike, > > I believe this is the requested info on both accounts, including DN's. > > "jaytest' > > objectClass top^person^organizationalPerson^user > cn jaytest > description Just a test account on domain. > givenName jaytest >

Re: Cannot Get LDAP authentication to work with Active Directory No DNS resoultion?

2020-09-04 Thread Mike Jumper
On Fri, Sep 4, 2020 at 2:17 PM sysjaj wrote: > Bogdan, > > Good eyes? SO there was a space before ":" and "admian11.gccaz.edu" which > finally stopped the "host not resolving failure issue.. BUT..(SADLY) I > still > cannot get any user I attempt to authenticate via LDAP and AD. > > The Only

Re: Cannot Get LDAP authentication to work with Active Directory No DNS resoultion?

2020-09-03 Thread Mike Jumper
On Thu, Sep 3, 2020 at 3:38 PM sysjaj wrote: > ... > Sep 3 11:27:13 guacamole tomcat9[862]: 11:27:13.994 [http-nio-8080-exec-8] > ERROR o.a.g.a.ldap.LDAPConnectionService - Binding with the LDAP server at > "ADMAIN11.gccaz.edu " as user "CN=jaytest,OU=DomainUsers,DC=gccaz,DC=edu" > failed:

Re: guacamole-auth-json is not working

2020-09-01 Thread Mike Jumper
On Tue, Sep 1, 2020, 11:09 Prashant K wrote: > Thanks you Nick, with the proper syntax I am able to connect to the > windows RDP using JSON. > > My next question is how I can embed windows login password in the token, > because I have read somewhere that password parameter is not supported in >

Re: guacamole-auth-json is not working

2020-08-31 Thread Mike Jumper
The message below indicates an orderly disconnect on the web application side. Given how brief that connection is, it looks like the underlying RDP connection has failed early in the connection process. You would need to check the guacd logs to see what might be going wrong there, but the cause is

Re: Memory reserved during file copy via virtual channel is not freed

2020-08-31 Thread Mike Jumper
On Mon, Aug 31, 2020 at 1:59 PM JonVol wrote: > ... > Using valgrind we have tracked the problem to guac_rdpdr_fs_process_read > (rdpdr-fs-messages.c). Seems that the wStream object created via the call > to > guac_rdpdr_new_io_completion and is subsequently passed over to freerdp in >

Re: Clipboard: Disable copy is not working if disable paste is unchecked

2020-08-24 Thread Mike Jumper
On Mon, Aug 24, 2020 at 10:03 AM Nick Couchman wrote: > On Mon, Aug 24, 2020 at 6:23 AM faris backer > wrote: > >> Hi, >> >> *UseCase:* Need to disable clipboard for copying data from rdp connection >> to >> client, But users should be able to past copy into rdp instances. >> >> We have checked

Re: Segfault with VNC on 1.2.0

2020-08-19 Thread Mike Jumper
On Wed, Aug 19, 2020 at 12:19 PM Devine, Harry (FAA) wrote: > It looks like when I did the recompile of 1.2.0 server, libvnc didn’t get > updated. I copied those over from another 1.2.0 installation, restarted > guacd and tomcat, and now VNC works properly. Not sure why it didn’t get >

Re: Segfault with VNC on 1.2.0

2020-08-19 Thread Mike Jumper
On Wed, Aug 19, 2020 at 8:21 AM Devine, Harry (FAA) wrote: > Our users are reporting segmentation faults since we upgraded to 1.2.0 > yesterday in regards to VNC: > > > > Aug 18 14:20:31 access guacd[15386]: VNC server supports protocol version > 3.8 (viewer 3.8) > > Aug 18 14:20:31 access

Re: VNC + SFTP cannot upload files larger than a few bytes Guac 1.1.0/1.2.0

2020-08-18 Thread Mike Jumper
On Tue, Aug 18, 2020 at 10:17 AM timeshredder wrote: > So I followed both of the above instructions, and so far it has helped, but > now because I am using a slower connection, I am hitting some kind of > timeout at about 30 minutes. Not sure where to fix that one but I suspect > in tomcat

Re: Upgrade from 1.0.0 to 1.2.0 - load test required?

2020-08-18 Thread Mike Jumper
On Tue, Aug 18, 2020 at 9:07 AM gabriel sztejnworcel wrote: > Hi, > > We are in the process of upgrading Guacamole 1.0.0 to 1.2.0. We are > wondering if we should perform load tests. Since these load tests require a > lot of effort on our side, we would like to skip them if it's not > necessary.

Re: FW: Upgrading Guacamole

2020-08-18 Thread Mike Jumper
Try clearing browser cache. It's likely that the user's browser simply has the old translation strings cached from the previous deployment. - Mike On Tue, Aug 18, 2020 at 10:12 AM Devine, Harry (FAA) wrote: > Can anyone shed some insight on how to correct the labels shown below? > > > >

Re: Really strange LDAP issue

2020-08-16 Thread Mike Jumper
7.8 x64. > > > > *From:* Mike Jumper > *Sent:* Thursday, August 13, 2020 2:00 PM > *To:* user@guacamole.apache.org > *Subject:* Re: Really strange LDAP issue > > > > What OS is Tomcat installed under? There may be additional logs elsewhere. > > > > - Mik

Re: Mapped drive issues - same file name

2020-08-13 Thread Mike Jumper
On Thu, Aug 13, 2020 at 4:09 PM Stefan Bogdan Cimpeanu wrote: > Hello Mike, > > Appreciate the fast answer. > > In our setup we have multiple guacamole servers, which are grouped > geographically due to legal reasons, especially around this mapped drive > feature. > For group A, we use a shared

Re: Mapped drive issues - same file name

2020-08-13 Thread Mike Jumper
On Thu, Aug 13, 2020 at 3:45 PM Stefan Bogdan Cimpeanu wrote: > Hello all, > > We’re experiencing a bug with the mapped drive feature. If you paste a > file with the same name (or twice), in the Download folder of the mapped > drive, the first time the file comes through, but the second time

Re: Really strange LDAP issue

2020-08-13 Thread Mike Jumper
I restart guacamole, no new log files get created under /var/log/tomcat at > all. > > > > Harry > > > > *From:* Mike Jumper > *Sent:* Wednesday, August 12, 2020 5:28 PM > *To:* user@guacamole.apache.org > *Subject:* Re: Really strange LDAP issue > > >

Re: Can't understand the inheritance of user groups

2020-08-13 Thread Mike Jumper
On Thu, Aug 13, 2020, 04:18 Hermann, Uwe wrote: > Hi all, > > I think I don't understand the inheritance of connections (and connection > groups) within user groups. The way I understand it "Member Groups" should > inherit any connections and connection groups from their "Parent Groups", > if

Re: Really strange LDAP issue

2020-08-12 Thread Mike Jumper
On Wed, Aug 12, 2020 at 1:33 PM Devine, Harry (FAA) wrote: > I’m having a really strange LDAP issue on 1 of our Guacamole servers using > LDAP. As far as I can tell, the LDAP is configured the same way (see > below), and both machines can ping the LDAP Server by name, so its not a > DNS issue.

Re: version question

2020-08-10 Thread Mike Jumper
On Mon, Aug 10, 2020 at 10:45 AM Ostrom, Erik wrote: > Hi Guac users, > > A colleague of mine sent over this article ( > https://threatpost.com/apache-guacamole-control-remote-footprint/157124/) > talking > about some CVEs that affected older versions of Apache Guacamole. ... At > the end of

Re:

2020-07-30 Thread Mike Jumper
On Thu, Jul 30, 2020 at 6:06 PM Henri Alves de Godoy wrote: > Hi Nick, thanks for reply. > > I have no configuration that limits my connection or group. > Based on similar reports at my day job, I think recent changes may have inadvertently changed the default concurrency limits for connections

Re: Error when enter to Guacamole Web version 1.2.0

2020-07-29 Thread Mike Jumper
On Wed, Jul 29, 2020, 17:41 Gabriel Huerta Araujo wrote: > These are the URL’s > > Request URL: > http://10.93.5.144:8080/guacamole/api/session/data/mysql/users/gabriel?token=39FAFDC19262B0EAE881EDDEFDD88B46F77846F8E7C83174A34BBBCCF78246F6 > > Request URL: >

Re: Error when enter to Guacamole Web version 1.2.0

2020-07-29 Thread Mike Jumper
On Wed, Jul 29, 2020, 17:02 Gabriel Huerta Araujo wrote: > For my user I have two tokens > > These are their responses > > Token > gabriel?token=8B05F622CBF6CA36C1AF8A805473BB059DF70B9E245832CED820D554621E402D > >

Re: Error when enter to Guacamole Web version 1.2.0

2020-07-29 Thread Mike Jumper
Have you made any changes to the source code of the web application? How have you deployed things? Is a proxy involved? If you open up browser dev tools and then attempt to log in, what do you see in the network tab as the body of the successful response from .../api/tokens (after this error

Re: More than 400 PROCESS is in RECMSG for two days [ RAM CONSUMPTION IS HIGH ]

2020-07-25 Thread Mike Jumper
On Sat, Jul 25, 2020, 05:03 Amarjeet Singh wrote: > ... > >> you've not made any modifications/customizations to the code? > > > I have done few modifications in the logs. > Please retry against an unmodified build of guacamole-server from the latest release.

Re: More than 400 PROCESS is in RECMSG for two days [ RAM CONSUMPTION IS HIGH ]

2020-07-24 Thread Mike Jumper
On Fri, Jul 24, 2020 at 5:24 PM Amarjeet Singh wrote: > Please let me know if you need any logs or any other trace. > What do the guacd logs look like for the processes that are blocked and in CLOSE_WAIT? - Mike

Re: More than 400 PROCESS is in RECMSG for two days [ RAM CONSUMPTION IS HIGH ]

2020-07-24 Thread Mike Jumper
On Fri, Jul 24, 2020 at 4:42 PM Mike Jumper wrote: > You > > On Fri, Jul 24, 2020 at 4:14 PM Amarjeet Singh > wrote: > (E ... not sure how the single word "You" snuck in here, but just in case: this is just a typo, not an expression of loathing). - Mike

Re: More than 400 PROCESS is in RECMSG for two days [ RAM CONSUMPTION IS HIGH ]

2020-07-24 Thread Mike Jumper
On Fri, Jul 24, 2020 at 4:36 PM Amarjeet Singh wrote: > One suggestion would be to make *write *non blocking. > No, there is nothing inherently wrong with leveraging blocking I/O, and no evidence thus far that using blocking I/O is causing any problem. Any other suggestions? > Assuming there

Re: More than 400 PROCESS is in RECMSG for two days [ RAM CONSUMPTION IS HIGH ]

2020-07-24 Thread Mike Jumper
You On Fri, Jul 24, 2020 at 4:14 PM Amarjeet Singh wrote: > Hi Team, > > > More analysis on this :- > > There are threads which are in deadlock: > > THREAD *25377 *is waiting for the mutex lock whereas THREAD *25376 *is > stuck in a *write *system call Because of which there are connections >

Re: securing connection passwords

2020-07-20 Thread Mike Jumper
On Mon, Jul 20, 2020, 00:56 Joachim Lindenberg wrote: > Hello all, > > I have been thinking about the issue a little. > > Afai understand using a key vault implies a user (assuming we talk about > user specific credentials rather than connection specific) has to deposit > and then change his/her

Re: Ctrl key is not working as expected with Unicode server layout setting

2020-07-20 Thread Mike Jumper
On Mon, Jul 20, 2020, 00:47 faris backer wrote: > Hi, > > We have a rdp connection to windows server with Norwegian keyboard. For > proper key binding we have set server layout as unicode in connection > setting. > > Most of the keys are working as expected other than CTRL key. Is this known >

Re: securing connection passwords

2020-07-17 Thread Mike Jumper
On Fri, Jul 17, 2020, 11:36 Joachim Lindenberg wrote: > But why are user passwords encrypted rather than using a one-way-function? > They are not. They are hashed and salted. https://guacamole.apache.org/doc/gug/jdbc-auth.html#jdbc-auth-schema-users - Mike

Re: Stuck key repeat problem

2020-07-15 Thread Mike Jumper
On Wed, Jul 15, 2020, 06:36 brian dodds wrote: > Hello everyone, > > We have an issue with some connections where there appears to be frequent > momentary delays in network traffic to the point that runaway key repeats > get triggered. It seems to only affect certain users who are on a known >

Re: Letsencrypt

2020-07-14 Thread Mike Jumper
On Tue, Jul 14, 2020 at 1:46 PM sciUser wrote: > Hello, > > I am having some issues getting certbot to complete for auto renewal of > letsencrypt ssl. > The program is wanting a verification file located > *.well-known/acme-challenge/* , Where would I create these directories, > since /var/www

Re: Database default group for auto-created accounts?

2020-07-13 Thread Mike Jumper
On Tue, Jun 30, 2020, 16:46 Nick Couchman wrote: > On Tue, Jun 30, 2020 at 18:01 dynz > wrote: > >> Hi, >> >> Great release by the way! >> >> I'm using RADIUS and MySQL for authentication, with MySQL holding >> connections and groups. >> If I use >> mysql-auto-create-accounts: true >> can I

Re: Database default group for auto-created accounts?

2020-07-13 Thread Mike Jumper
On Mon, Jul 13, 2020, 09:17 BolleoOg wrote: > This requested feature is what's holding me off from deploying Guacamole. > I'm > using OpenID for auth and and RDP with NLA. I think allowing the groups associated with users authenticated by OpenID to be defined would be a better approach. New

Re: Altgr Key not working as expected in version 1.2.0

2020-07-09 Thread Mike Jumper
On Thu, Jul 9, 2020 at 11:32 AM Mike Jumper wrote: > On Thu, Jul 9, 2020 at 3:01 AM faris backer > wrote: > >> We have tried alt gr + (2,3, 4) which corresponds to @£$ symbols. > > > OK - I will check. > I am seeing the same behavior you are seeing, specifically

Re: Altgr Key not working as expected in version 1.2.0

2020-07-09 Thread Mike Jumper
On Thu, Jul 9, 2020 at 3:01 AM faris backer wrote: > We have tried alt gr + (2,3, 4) which corresponds to @£$ symbols. OK - I will check. Tried with unicode setting too. Still not happening > I don't mean with the server layout option listed as "Unicode" or "fallback" within the connection

Re: Altgr Key not working as expected in version 1.2.0

2020-07-09 Thread Mike Jumper
On Wed, Jul 8, 2020, 23:55 faris backer wrote: > Hi , > > We have recently updated guacamole to version 1.2.0. > Noticed Altgr key are not getting binded for RDP connections. It was > working > as expected for version 1.1.0. > > > Anything changed in keyboard key binding ? > > > Users are using

Re: olumn guacamole_entity.type does not exist

2020-07-08 Thread Mike Jumper
On Wed, Jul 8, 2020, 14:20 Mike Jumper wrote: > On Wed, Jul 8, 2020, 13:17 mamet007 wrote: > >> Using a fresh copy of RDS on AWS. I initialized the schema few times >> already >> here is the output of my 2nd attempt. >> > > The script is not idempotent,

Re: olumn guacamole_entity.type does not exist

2020-07-08 Thread Mike Jumper
On Wed, Jul 8, 2020, 13:17 mamet007 wrote: > Using a fresh copy of RDS on AWS. I initialized the schema few times > already > here is the output of my 2nd attempt. > The script is not idempotent, and multiple initialization attempts will not be fresh. What was the output of your *first*

Re: Problems with connection sharing

2020-07-07 Thread Mike Jumper
On Sat, Jul 4, 2020 at 2:44 PM Dashamir Hoxha wrote: > On Sat, Jul 4, 2020 at 9:42 PM Nick Couchman wrote: > >> >> I have tested using the following environment: >> - OpenJDK 1.8.0_232 >> - Tomcat 8 >> - MariaDB 5.5.64 >> - MariaDB J/Connection 2.6.1 >> - Guacamole Client 1.2.0 >> - Have

Re: auth-ldap 1.1.0/1.2.0 not bind

2020-07-07 Thread Mike Jumper
Your Tomcat logs are likely in the systemd journal (viewed using journalctl). - Mike On Tue, Jul 7, 2020, 10:17 carlog wrote: > My catalina.out only has 1 line. > > tomcat-7.0.76 RPM installed > > > > -- > Sent from: > http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/ >

Re: FW:

2020-07-06 Thread Mike Jumper
On Sun, Jul 5, 2020 at 6:16 AM Tushar Jain wrote: > Hello, > > > I migrated from guacamole-1.0.0 to guacamole-1.2.0 on Ubuntu 18.04. But my > remoteapp on Windows server 2019, is getting disconnected as soon as I > click/move the mouse over the remote app. > > ... > > 3. remove existing

Re: Home inaccessible

2020-07-06 Thread Mike Jumper
Not a change - that behavior is intentional and has been a standard behavior for Guacamole for quite some time. If a user can only possibly choose one connection, and the user lacks admin privileges, they will be taken to their single connection instead of a home screen. - Mike On Mon, Jul 6,

Re: guacd with SSL

2020-07-05 Thread Mike Jumper
First, if you are trying to set up SSL/TLS in front of the web application, this is not the way. This affects only the (internal) communication between Tomcat and guacd. Assuming this is indeed what you're looking for (you are trying to encrypt the internal, non-user-facing communication between

Re: [SECURITY] CVE-2020-9497: Apache Guacamole: Improper input validation of RDP static virtual channels

2020-07-03 Thread Mike Jumper
On Fri, Jul 3, 2020, 13:55 Daniel Moscovitch wrote: > Hi Mike, > Would the recent CVE's be able to affect a guacserver that did not have > the guacsnd.so and guaccdr.so linked in? (ie no sound and redirection > functional)? No, you would need sound, drive, printing, or audio input enabled.

Re: Problems with connection sharing

2020-07-03 Thread Mike Jumper
On Fri, Jul 3, 2020, 10:25 Dashamir Hoxha wrote: > ... > > Even more easy is by opening https://lab.fs.al/ and login as user > `admin`, pass `ooD9oChi`. > Beware that this is a public and publicly-archived mailing list. - Mike

Re: 1.2 server build fail on el7 and el8

2020-07-02 Thread Mike Jumper
I think I've found the cause: https://github.com/apache/guacamole-server/blob/604d44d3b501defaff3d51be442fae710f06/src/protocols/rdp/user.c#L131-L145 The relevant code looks like this: #ifdef ENABLE_COMMON_SSH guac_rdp_settings* settings = rdp_client->settings; ... #endif /*

[SECURITY] CVE-2020-9498: Apache Guacamole: Dangling pointer in RDP static virtual channel handling

2020-07-01 Thread Mike Jumper
CVE-2020-9498: Dangling pointer in RDP static virtual channel handling Versions affected: Apache Guacamole 1.1.0 and earlier Description: Apache Guacamole 1.1.0 and older may mishandle pointers involved in processing data received via RDP static virtual channels. If a user connects to a

[SECURITY] CVE-2020-9497: Apache Guacamole: Improper input validation of RDP static virtual channels

2020-07-01 Thread Mike Jumper
CVE-2020-9497: Improper input validation of RDP static virtual channels Versions affected: Apache Guacamole 1.1.0 and earlier Description: Apache Guacamole 1.1.0 and older do not properly validate data received from RDP servers via static virtual channels. If a user connects to a malicious or

Re: Initial RDP Session Resolution Is Very Tiny Until Browser Refresh

2020-07-01 Thread Mike Jumper
I'd recommend trying against the latest release (1.2.0). What you're encountering here looks more like the properly-sized display is being scaled way too small due to the browser viewport being mishandled/misdetected. The latest release includes some changes related to handling of browser window

Re: Initial RDP Session Resolution Is Very Tiny Until Browser Refresh

2020-07-01 Thread Mike Jumper
What version of Guacamole is being used in this case? - Mike On Wed, Jul 1, 2020, 09:22 zogden wrote: > < > http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/file/t1358/tinyguac.png> > > > As you can see in the image above, my initial connection to a guac xrdp > session

Re: [ANNOUNCE] Apache Guacamole 1.2.0

2020-06-30 Thread Mike Jumper
uacamole.apache.org < > annou...@guacamole.apache.org>; d...@guacamole.apache.org < > d...@guacamole.apache.org> > *Subject:* RE: [ANNOUNCE] Apache Guacamole 1.2.0 > > > > Hi Mike, > > Looking great! Just deployed and working like a charm  > > Grtz &

[ANNOUNCE] Apache Guacamole 1.2.0

2020-06-30 Thread Mike Jumper
The Apache Guacamole community is proud to announce the release of Apache Guacamole 1.2.0. Apache Guacamole is a clientless remote desktop gateway which supports standard protocols like VNC, RDP, and SSH. We call it "clientless" because no plugins or client software are required; once Guacamole

Re: 1.2.0 WAR build issue guacamole-client

2020-06-29 Thread Mike Jumper
Retesting on a fresh Ubuntu 20.04 VM, the build still seems OK. I'm unsure what could be causing the error you're seeing. Other than having to manually set JAVA_HOME, a git clone of "staging/1.2.0" built without issue. $ sudo apt-get update $ sudo apt-get upgrade $ sudo apt-get install git maven

Re: 1.2.0 WAR build issue guacamole-client

2020-06-27 Thread Mike Jumper
I think that second build attempt of just a single project fails because it's executed out of context of the larger guacamole-client build, and thus is unaware that guacamole-ext is there. Regarding the original error: "[ERROR]

Re: high memory consumption

2020-06-24 Thread Mike Jumper
1) Are you able to test against FreeRDP 2.0.0 to see if this is an issue? I'm starting to suspect that changes in the 2.1.1 release introduced a memory leak or changed the way memory is freed such that a memory leak appeared. There is some precedent for unexpected changes in memory management

Re: Connection Error

2020-06-24 Thread Mike Jumper
On Wed, Jun 24, 2020 at 12:43 AM Prince V S wrote: > Hi Ivanmarcus, > > Please find the system details below. I checked the logs and found VNC > connection error (Error writing to TLS: Error in the push function). Is > it a configuration issue? > This sounds possibly like:

Re: Query for beginner user how to use Guacamole

2020-06-18 Thread Mike Jumper
On Thu, Jun 18, 2020, 07:04 Abdul Qadir (aqadir) wrote: > ... > > I understand your concern, but these url’s are not going to be exposed to > the customer or anyone else. URL will be formed in the application and > internal to our application and anyhow once the url is hit it will change > in

Re: Query for beginner user how to use Guacamole

2020-06-18 Thread Mike Jumper
On Thu, Jun 18, 2020 at 1:00 AM Abdul Qadir (aqadir) wrote: > ... > > From browser above given link was opened but facing issue in login. > > > > From where I can collect the log and information for review? > The Guacamole logs will be the Tomcat logs. Where these logs are specifically will

Re: TOTP 1.1.0

2020-06-17 Thread Mike Jumper
On Wed, Jun 17, 2020 at 8:22 PM sciUser wrote: > Hello, > > We are getting ready to transition out our 9.14 installation of Guacamole > 0.9.14* > with a fresh install of version 1.1.0 stable. We have the following .jar > files in /var/lib/guacamole/extensions > > 1.

Re: Help with TELNET password-regex

2020-06-17 Thread Mike Jumper
On Wed, Jun 17, 2020 at 3:30 PM Adrian Owen wrote: > Hi, > > TELNET logon to Cisco router not accepting username/password > > > User Access Verification > > Username: > Password: > -- > > Anyone have example of

Re: Server specifcations?

2020-06-17 Thread Mike Jumper
I always deploy Guacamole behind an Nginx reverse proxy for SSL termination. There have never been any latency issues. If seeing latency only with Nginx, I suspect either a problem in the configuration (didn't disable buffering?) or an Nginx that is old enough to not support WebSocket. - Mike

Re: Kernel Panic guacd Segfault

2020-06-17 Thread Mike Jumper
On Wed, Jun 17, 2020 at 10:46 AM Guilherme Carvalho wrote: > Hello, guys, i´m using Guacamole 1.1.0 on a Ubuntu 18.04, i have one > installation on my company working perfectly, but the another installation > on my client i have a Kernel Panic 2 a 3 times per day, that last line > before the

Re: Drive shortcut on desktop

2020-06-14 Thread Mike Jumper
By the way, a nice trick is to create a shortcut to the special "Download" folder of the Guacamole drive, such that it's included within the Windows Explorer "Send To" option: https://www.howtogeek.com/howto/windows-vista/customize-the-windows-vista-send-to-menu/ You can then easily download

Re: Where are SMTP settings configured?

2020-06-12 Thread Mike Jumper
On Fri, Jun 12, 2020 at 1:03 PM MARTINEZ, ARIEL wrote: > Hi, > > > > I’m unable to find where the SMTP settings are configured for the emails > that go out to the end users who create reservations. Can someone please > advise? > What emails and what reservations? There is nothing within Apache

Re: Guacamole FreeRDP disconnect

2020-06-04 Thread Mike Jumper
On Wed, Jun 3, 2020, 22:16 ivanmarcus wrote: > Updating with some further information: > > A recompile of Guacamole server did *not* address the issue for me. Please > let us know if it has for you. > > After running a few tests it seems the issue *may* not be present when > connecting to Win10

Re: Security Vulnerability - Guacamole 1.0.0

2020-06-03 Thread Mike Jumper
On Wed, Jun 3, 2020 at 8:54 AM Tushar Jain wrote: > Hi, > > > > My security vulnerability testing group has reported following issues: > Tushar, if you believe you have found security issues, please *DO NOT REPORT THEM IN A PUBLIC FORUM* and instead follow responsible disclosure practices. The

Re: [EXTERNAL] Re: Guacamole Installation with separate servers for DMZ and Internal Setup

2020-06-02 Thread Mike Jumper
On Tue, Jun 2, 2020, 09:07 MARTINEZ, ARIEL wrote: > Got it. In the guacd.conf the bind host should be the server running guacd > correct? > It should be the address that you want guacd to bind to. This will determine which network interface(s) can be used to connect to guacd. Specifying

Re: Guacamole Integration in EGroupware

2020-06-01 Thread Mike Jumper
On Sun, May 31, 2020, 13:04 Nick Couchman wrote: > On Sun, May 31, 2020 at 12:57 PM Stefan Unverricht > wrote: > >> ... >> > Would anyone have the guacamole graphics/logos as svg for me? Then please >> send a PN to s...@egroupware.org. >> >> I'm going to defer to Mike on this one - we do have

Re: AW: [EXTERNAL] Re: Guacamole Installation with separate servers for DMZ and Internal Setup

2020-05-30 Thread Mike Jumper
On Thu, May 28, 2020, 14:18 Nick Couchman wrote: > On Thu, May 28, 2020 at 5:10 PM Peter De Tender wrote: > >> All, >> >> I agree on optimizing documentation could be a good project; maybe it can >> be moved to a GitHub alike scenario where "anyone" can contribute to it and >> improve it? >> >>

Re: AW: [EXTERNAL] Re: Guacamole Installation with separate servers for DMZ and Internal Setup

2020-05-28 Thread Mike Jumper
On Thu, May 28, 2020, 10:29 Joachim Lindenberg wrote: > Can you please elaborate a little to what risk you are referring? Have you > been able to escape a guacd or guacamole or some other container? Via the > network interfaces exposed or how? Is there some thing to be done by the > project to

Re: Error while fetching history in Guacamole

2020-05-22 Thread Mike Jumper
On Thu, May 21, 2020 at 11:25 PM Madhukar Bhosale wrote: > Hi, > > > > Below are the logs, when I hit search in history and using guacamole 1.1.0 > version. > > > > 11:51:48.899 [https-openssl-apr-8443-exec-6] ERROR > o.a.g.rest.RESTExceptionMapper - Unexpected internal error: > > ### Error

Re: Error while fetching history in Guacamole

2020-05-21 Thread Mike Jumper
On Thu, May 21, 2020, 22:07 Madhukar Bhosale wrote: > Hi, > > While fetching history, I am getting below error. Need help. > What version of Guacamole? What do you see in your Tomcat logs when this occurs? - Mike

Re: Duo LOGIN.INFO_DUO_VALIDATION_CODE_INCORRECT

2020-05-21 Thread Mike Jumper
On Thu, May 21, 2020 at 2:37 PM Dino Edwards wrote: > As the subject implies, I’m getting the following error trying to > authenticate through Duo. > > > > The actual error log is below: > > > > 20:41:02.883 [localhost-startStop-1] INFO o.a.g.extension.ExtensionModule > - Extension "Duo TFA

Re: Hardware Acceleration Support

2020-05-21 Thread Mike Jumper
On Thu, May 21, 2020 at 1:39 PM Sean Reid wrote: > On Thu, May 21, 2020 at 4:24 PM sciUser > wrote: > > > > As long as you have a GPU assigned to the VM it will handle the > rendering, > > Guacamole is just the broker for the RDP protocol. > > The pixels that come from RDP or VNC may be

Re: Soon any guackamole package for debian?

2020-05-21 Thread Mike Jumper
On Thu, May 21, 2020 at 12:30 PM Robert Hardy wrote: > Currently the extreme lack of packaging for both guacamole and freerdp2 is > really holding use of both project back. > If you would like to work with Debian to produce packages of Guacamole, I'm sure they would welcome the assistance.

Re: user restriction to 1 RDP only

2020-05-20 Thread Mike Jumper
On Wed, May 20, 2020 at 6:00 PM Nick Couchman wrote: > On Tue, May 19, 2020 at 11:13 AM alphablue wrote: > >> Hi, >> I have a lab with 5 computers. I created a connection group "Lab" of type >> organizational and set its "Maximum number of connections per user = 1" >> and >> checked session

Re: Issue configuring LDAP

2020-05-20 Thread Mike Jumper
On Wed, May 20, 2020 at 1:06 PM Devine, Harry (FAA) wrote: > We have 3 servers all configured this way (I’ve redacted sensitive > information); 2 work and 1 doesn’t: > > > > #LDAP properties > > ldap-hostname:ldapserver > > ldap-port:389 > > ldap-encryption-method:none > >

Re: Issue configuring LDAP

2020-05-20 Thread Mike Jumper
On Wed, May 20, 2020 at 12:51 PM Devine, Harry (FAA) wrote: > We have a server with version 1.0.0 installed on it. We can’t seem to log > in via LDAP at all. We always get the following error: > > > > May 20 15:34:59 armt server: 15:34:59.213 [http-bio-8080-exec-5] ERROR >

Re: Session Token in URL

2020-05-19 Thread Mike Jumper
On Tue, May 19, 2020, 13:46 Joachim Lindenberg wrote: > Is logging really a concern if you use https and avoid any proxy that > terminates (MitM)? Of course you can argue about the nginx or similar you > put in front of Guacamole, but if both components are administrated by the > same folks you

Re: Session Token in URL

2020-05-19 Thread Mike Jumper
On Tue, May 19, 2020, 11:52 sciUser wrote: > What you want is what we do, we built a provisioning system that handles > Just > In time (JIT) tokens and they expire after session is terminated, > preventing > students from book marking the url. > The token is not part of any URL exposed to the

Re: Listing support company on the site

2020-05-14 Thread Mike Jumper
On Fri, Mar 6, 2020 at 6:29 PM Marko Nikolić wrote: > Hello, > > I would like to list our company on the Guacamole site, under > commercial support. > > Based on the previous discussions, I am sending the needed information: > > - Logo: attached > - URL: https://iten.rs/our-services/outsourcing/

Re: Docker automated builds?

2020-05-09 Thread Mike Jumper
So long as the builds are clearly labelled, there's no issue with producing nightlies of the Docker images. We would probably have to use Jenkins for this. Regarding automated build system at Docker Hub, the reason we do not leverage that specific system is one of access level. We simply do not

Re: Error with Guacamole 1.1.0

2020-05-08 Thread Mike Jumper
On Fri, May 8, 2020, 12:44 Michael Bauer wrote: > ... > I just ran the following > > ./configure --with-init-dir=/etc/init.d > make > make install > What about ldconfig? - Mike

Re: Shared Connection URL

2020-05-05 Thread Mike Jumper
On Tue, May 5, 2020 at 1:56 PM Scott Hancock wrote: > I'm new to Guacamole and I need to get a shared connection URL for every > new connection. For reasons, we don't have the REST API available. > What reasons? If using the mainline web application, the web application as a whole would not be

<    1   2   3   4   5   6   7   8   9   10   >