Re: general functioning of guacamole

2018-10-05 Thread Nick Couchman
On Fri, Oct 5, 2018 at 4:04 AM Galyrith wrote: > Hello, > > I have some questions about the general functioning of guacamole. > > So, I am trying to implement it in the structure where I am, but I am asked > for something of a general nature. > If I understand correctly how Guacamole works is

Re: Guacamole in Docker- unable to connect to mysql

2018-10-02 Thread Nick Couchman
On Sun, Sep 30, 2018 at 10:24 PM David Russell-Park < david.russell-p...@fphcare.co.nz> wrote: > Hi all, > > > > I am currently evaluating Guacamole but I’m having a bit of troubling > setting it up within Docker. > > I have followed the docker install instructions from the Guacamole >

Re: http as a guacamole protocol

2018-10-02 Thread Nick Couchman
Warning - TL;DR. Summary version: The decision was not made arbitrarily, there was a reason for it, to keep the features of the project within the defined scope. > Hello > > Thanks for your reply, and the link. I did not find that in my googling. > although i was looking for instruction on how

Re: database and connection rdp

2018-09-28 Thread Nick Couchman
On Fri, Sep 28, 2018 at 6:23 AM Galyrith wrote: > Hi, it's me again, > > Guacamole with database authentication and ldap authentication works > wonders! > > But, because there is always a but, i don't have all users of the ldap > directory in my database but i can loggin with all users. > > And,

Re: VNC connection problem

2018-10-01 Thread Nick Couchman
On Tue, Sep 25, 2018 at 8:19 PM VolandSZ wrote: > I am still struggling on how to run guacd in debug mode (step by step > manual > on how to add -L debug) smiley image="anim_handshake.gif"/> > With Docker, I'm not sure the current released version (0.9.14) has a way to specify the debug level,

Re: LDAP authentication problem

2018-10-01 Thread Nick Couchman
On Mon, Oct 1, 2018 at 5:02 AM Galyrith wrote: > Hello, > I use my old topic to avoid opening another because my problem is still on > LDAP authentication. > > I am simply trying to "point" in the tree of my LDAP directory, after > several attempts to modify in guacamole.properties nothing works

Re: LDAP authentication problem

2018-10-01 Thread Nick Couchman
> > so I modify my guacamole.properties file like that: > > # LDAP Properties > ldap-hostname: pin.isim.intra > ldap-port: 389 > ldap-user-base-dn: OU=Etudiants,OU=Comptes,DC=isim,DC=intra > ldap-search-bind-dn: CN=Bind,OU=Comptes,DC=isim,DC=intra > ldap-search-bind-password: x >

Re: Linux Remote Desktop Application

2018-09-03 Thread Nick Couchman
On Mon, Sep 3, 2018 at 1:27 AM lo...@sanlogic.com wrote: > Hi! > > Guacmole Server Version : > 0.9.13 > > Xfreerdp Version: > 1.1.0 > > guacd is install at Centos7, and connect to a Linux Remote Applciation > > Where i open a application where xfreerdp command: > xfreerdp

Re: LDAP authentication problem

2018-09-26 Thread Nick Couchman
On Wed, Sep 26, 2018 at 6:25 AM Galyrith wrote: > # LDAP Properties > ldap-hostname: pin.isim.intra > ldap-port: 389 > ldap-user-base-dn: UO=Comptes,DC=isim,DC=intra > ldap-search-bind-dn: CN=Bind,UO=Comptes,DC=isim,DC=intra > ldap-search-bind-password: xx > ldap-username-attribute:

Re: VNC connection problem

2018-09-25 Thread Nick Couchman
On Sat, Sep 22, 2018 at 5:44 PM VolandSZ wrote: > Thats why i posted screenshots.. > I didn't see any screenshots. If you're posting from Nabble (looks like you are), and you try to put screenshots inline in the message (insert pictures), the Apache list server tends to strip these out. I

Re: Guacamole performance improvement

2019-01-16 Thread Nick Couchman
On Wed, Jan 16, 2019 at 6:44 AM Shilpa Bhandari < shilpa.bhand...@fonantrix.com> wrote: > In my case I made 3-4 calls to Guac API to delete a token but it didn't > give any response for those and after 4-5 minutes it sent response for > those calls as 404 Token not found. Meanwhile there were

Re: SSL

2019-01-16 Thread Nick Couchman
On Wed, Jan 16, 2019 at 4:19 AM sciUser wrote: > I am going to give a complete step-by-step instruction on how to get SSL on > guacamole running on CentOS7 build. I really wish the Guacamole project > would have more instructions like this, it would help so many. > > Thank you for the detailed

Re: Guacamole performance improvement

2019-01-15 Thread Nick Couchman
On Tue, Jan 15, 2019 at 4:32 AM Shilpa Bhandari < shilpa.bhand...@fonantrix.com> wrote: > No we don't have SFTP enabled on RDP connection. > Are you able to look at the log files and determine where the delay is occurring? If it is a multi-second delay, you should be able to see timestamps in

Re: Guacamole performance improvement

2019-01-15 Thread Nick Couchman
On Tue, Jan 15, 2019 at 6:45 AM Shilpa Bhandari < shilpa.bhand...@fonantrix.com> wrote: > Where to check the logs for this? > > Thanks and regards, > Shilpa Bhandari > For Guacamole Client, check the Tomcat catalina.out file, which logs all of the Java messages for the Guacamole Client

Re: Questions About Using TOTP with LDAP

2019-01-18 Thread Nick Couchman
On Fri, Jan 18, 2019 at 11:59 AM Zer0Cool wrote: > Thanks for the reply. > > So given your insight, does this mean that my setup can/would meet the > prerequisite of users being able to change their passwords or since I use > LDAP for auth would LDAP and TOTP not work together? > > Assuming your

Re: Restricting access to Connections defined in MySQL using LDAP groups?

2019-01-18 Thread Nick Couchman
On Fri, Jan 18, 2019 at 11:58 AM JoelB wrote: > Hi all, I've managed to get Guacamole 1.0.0 working with my connections > defined in MySQL and groups defined in LDAP. However, I cannot seem to > grant > access to connections based on LDAP group membership. If I assign a > connection to a group,

Re: Is it possible to test a connection before trying to establish connection?

2019-01-18 Thread Nick Couchman
On Fri, Jan 18, 2019 at 5:36 PM messido wrote: > I'm trying to ping a host connection every X seconds to see if the host > connection is reachable (online) or not. I was wondering if Guacamole has > any support to help me figure out: > > 1) If connection address and port are live and reachable >

Re: Dumb LDAP Properties Question

2019-01-14 Thread Nick Couchman
On Mon, Jan 14, 2019 at 2:44 PM Zer0Cool wrote: > Ok so from the responses it sounds like typically: > > ldap-user-base-dn: dc=mydomain,dc=com > ldap-search-bind-dn: cn=myuser,ou=user_ou,dc=mydomain,dc=com > > should be using the same DC entries but that: > > ldap-hostname:

Re: Secure restful url

2019-01-14 Thread Nick Couchman
On Mon, Jan 14, 2019 at 2:07 PM Mike Jumper wrote: > On Mon, Jan 14, 2019, 10:56 sciUser >> ... >> >> Looking for something that can generate a one time URL or even a secure >> URL >> per access. >> >> Example 2 of something we do want: >>

Re: Secure restful url

2019-01-14 Thread Nick Couchman
On Mon, Jan 14, 2019 at 2:44 PM sciUser wrote: > Sure, > > We will not be moving to 1.0.0 until its had a full 120 day dev QA, so far > there are a lot of bugs that need to be worked out. > > 1. https://securitytraning.com/ldap-injection-attacks-web-for-pentester/ > 2. > >

Re: SSL

2019-01-15 Thread Nick Couchman
On Tue, Jan 15, 2019 at 17:54 sciUser wrote: > I looked at the other topics about SSL and they where not to the point. > > If I want to run SSL https://guachere/guacamole do I install it on the > nginx > or tomcat? > Technically you can install SSL/TLS in either place. It's generally done on

Re: Restricting access to Connections defined in MySQL using LDAP groups?

2019-01-21 Thread Nick Couchman
On Mon, Jan 21, 2019 at 1:09 PM JoelB wrote: > > So, it appears that Guacamole only checks the LDAP group membership if the > authenticated user has a JDBC account defined. Is there any way around this > so that all LDAP users have their group membership checked? > I believe the other way

Re: Is it possible to test a connection before trying to establish connection?

2019-01-21 Thread Nick Couchman
On Mon, Jan 21, 2019 at 7:58 PM sciUser wrote: > You will need to do this as a third party program. > We handle this by adding a table to the guacamole database called > session_avail looking for yes or no. > Then we have a json api look for this answer. > You can do it this way, but you don't

Re: Restricting access to Connections defined in MySQL using LDAP groups?

2019-01-22 Thread Nick Couchman
On Tue, Jan 22, 2019 at 8:24 AM ek1m92 wrote: > JoelB wrote > > I'm now working on scripting an AD-to-MySQL synchronization tool. > > We've been using a custom tool for this internally for the last couple of > months to be able to manage connection permissions on a group level. We > were >

Re: Restricting access to Connections defined in MySQL using LDAP groups?

2019-01-23 Thread Nick Couchman
On Tue, Jan 22, 2019 at 11:00 AM JoelB wrote: > ek1m92 wrote > > Correct me > > if I'm wrong here Joel, but what I expected to work based on the > > documentation was the following: > > > > 1. Create user group in MySQL with the name of a corresponding user group > > in > > the LDAP directory >

Re: Show custom message on Guacamole application

2019-01-17 Thread Nick Couchman
On Thu, Jan 17, 2019 at 6:19 AM Shilpa Bhandari < shilpa.bhand...@fonantrix.com> wrote: > I've seen that we can modify this message from en.json in Guacamole client > but I've installed Guacamole using docker image. But how can I modify the > client code of that docker image? > You have a couple

Re: Questions About Using TOTP with LDAP

2019-01-17 Thread Nick Couchman
On Thu, Jan 17, 2019 at 17:33 Zer0Cool wrote: > As per the documentation at > https://guacamole.apache.org/doc/gug/totp-auth.html: > > "Prerequisites > ... > > * Another extension must be installed which supports storage of arbitrary > data from other extensions. Currently the only extensions

Re: Disable database authentication but keep connection info there

2019-01-18 Thread Nick Couchman
On Thu, Jan 17, 2019 at 11:16 PM Ben Menadue wrote: > Hi, > > I have Guacamole set up for LDAP authentication with Postgres storing > connection info. To do this, I need equivalent user entities in the > database, with usernames matching LDAP. That’s working fine. However, I > can’t work out how

Re: Guacamole & OpenID

2018-12-13 Thread Nick Couchman
> > The path forward to implement that for OpenID is fairly clear - it > would just need to be done. I don't know what would need to be done > for the generic header authentication, where there's no standard > defining how logout should be signaled to the IDP. > For the header module, we could

Re: MFA Authentication was not working

2018-12-18 Thread Nick Couchman
On Tue, Dec 18, 2018 at 7:20 AM Rajesh Mohan wrote: > Hi Team, > > > > Can you please help us in completely configuring the MFA Authentication in > the Apache guacamole setup please. > > > > https://guacamole.apache.org/doc/gug/duo-auth.html > > > > I have tried with the above mentioned URL but

Re: Built-in reflector/repeater support in guacd daemon (Guacamole protocol)

2018-12-18 Thread Nick Couchman
On Tue, Dec 18, 2018 at 9:22 AM sapphireimsuat wrote: > Hi Nick, > > Thanks for your suggestion. My understanding on your approach is, having > two > guacacd instance between two different network and allow connection. > > My query about roaming users is, assuming I have 100 end users and they

Re: Built-in reflector/repeater support in guacd daemon (Guacamole protocol)

2018-12-18 Thread Nick Couchman
On Tue, Dec 18, 2018 at 8:45 AM sapphireimsuat wrote: > Hi, > > I am looking for a solution where I can take remote connection (direct or > reverse/indirect). For direct connection, there is no issue with existing > implementation. However, if I need to manage reverse connection uniquely, >

Re: Does Guacomole work with dynamic IPs?

2018-12-27 Thread Nick Couchman
On Thu, Dec 27, 2018 at 5:42 AM agupte wrote: > Thanx! I'll investigate this, but it seems like a lot of work - may as > well > just pay for the VNC licenses. :-) > > Also, running the DDNS update on the RPi should be very, very easy, and does not cost anything, so that should be a valid option

Re: Mute Audio on Remote Server

2018-12-11 Thread Nick Couchman
On Fri, Dec 7, 2018 at 22:04 eunosm3 wrote: > How do I mute the audio at the remote server without muting the audio feed > to > my local device? The audio from my remote server makes it to my local > device fine when I use VNC + PulseAudio, but it also plays on the remote > server. > This is

Re: Fw: Using Public/Private key based authenication with LDAP

2018-12-13 Thread Nick Couchman
> guacConfigParameter:: > cHJpdmF0ZS1rZXk9LS0tLS1CRUdJTiBSU0EgUFJJVkFURSBLRVktLS0 > > > > Which, after a relatively large effort, I have gotten imported into my > LDAP directory. > > > But I can't connect to the SSH host I'm trying to get to. > > > Here's the decoded form of that large

Re: Trying to setup fail2ban with guacamole behind an nginx proxy

2018-12-24 Thread Nick Couchman
> > > so my question is is there anything I can edit with tomcat so it will only > connect to the remote IP address and only list the remote IP in the logs > instead of both the remote and proxy IP like I'm seeing now - > [72.143.194.175, 192.168.10.68] > > Have you configured the Remote IP Valve

Re: ask information

2018-12-24 Thread Nick Couchman
> > Unresolved bugs > >- > >Bug #887565 - Please update to new upstream version > >

Re: guacamole 1.0.0 and radius extension

2018-12-01 Thread Nick Couchman
On Sat, Dec 1, 2018 at 7:06 PM Not Speedy wrote: > odd..the only war/app I have is guacamole, and its the only project i > currently have imported into intellij. I'm building off master. It looks > like the lib is being pulled in with the mavin-dependency-plugin, during > the build... but I

Re: guacamole 1.0.0 and radius extension

2018-12-01 Thread Nick Couchman
On Fri, Nov 30, 2018 at 12:47 PM Not Speedy wrote: > I'm struggling with getting this to work. It appears I'm able to build > from source just fine, but then I get the following error and then appears > the extension crashes. Any suggestions? thanks > When you say building from source, can

Re: guacamole radius

2018-12-01 Thread Nick Couchman
On Tue, Nov 20, 2018 at 3:58 PM SergeyKh wrote: > so the steps: > 1. built the documentation from the git > 2. built guacd + guacamole's war + extensions from the git as it described > in the manual > 3. installed all the dependencies on ubuntu 18. mysql 5.7.24, > tomcat 8.5.30.0 and all the

Re: User to see only active sessions

2018-12-05 Thread Nick Couchman
On Wed, Dec 5, 2018 at 9:01 AM Heinz Stolz wrote: > Hello, > > I am wondering if it is possible to give a user the right to see all active > sessions but NOT see History, Users, Connections. > Currently, no. It's been asked quite a bit, but is not currently possible given the way permissions

Re: User to see only active sessions

2018-12-05 Thread Nick Couchman
On Wed, Dec 5, 2018 at 10:06 AM fou fe wrote: > Hello all > > Can someone give us a roadmap to work on it. > Is there any work started in the past ? > Our "Roadmap" is driven by issues in JIRA: https://issues.apache.org/jira/projects/GUACAMOLE/summary So, if it exists there, then it is, to

Re: guacamole 1.0.0 and radius extension

2018-12-04 Thread Nick Couchman
On Sun, Dec 2, 2018 at 5:35 PM Nick Couchman wrote: > On Sun, Dec 2, 2018 at 5:20 PM Not Speedy wrote: > >> OMG! found my issue and boy do I feel stupid! I thought the plugin was >> crashing which was why I wasn't seeing connection attempts to my radius >> serve

Re: Guac Access Over HTTPS w/ NGINX Reverse Proxy

2018-12-03 Thread Nick Couchman
On Sun, Dec 2, 2018 at 7:51 PM Matthew Lawson wrote: > However, I cannot figure out how to reach the guacamole login page from > outside my home network over a secure connection. When I try, I receive an > error message. FF, for instance, indicates that 'SSL received a record that > exceeded

Re: guacamole radius

2018-12-03 Thread Nick Couchman
On Mon, Dec 3, 2018 at 2:18 AM SergeyKh wrote: > I'm glad that you funaly belive me. > It wasn't an issue of believing your or not, it was trying to isolate exactly what conditions produce the problem you're seeing, and determining whether those are code bugs or environment setup issues. My

Re: Guac Access Over HTTPS w/ NGINX Reverse Proxy

2018-12-03 Thread Nick Couchman
On Mon, Dec 3, 2018 at 10:18 AM Matthew Lawson wrote: > In answer to your first question, I can reach the https nginx site > internally - in fact, the http site redirects to the https site. I've not > tried to reach it from outside my home network, though. I'll try after > work today. > > With

Re: guacamole 1.0.0 and radius extension

2018-12-02 Thread Nick Couchman
On Sun, Dec 2, 2018 at 4:32 PM Not Speedy wrote: > Thanks Nick. For whatever reason I still can't get this to work. Its > likely an issue on my end. Are there any nightly builds I could try? > Otherwise, It looks like I'll have to wait until the 1.0.0 > beta/rc/release thanks again for

Re: guacamole 1.0.0 and radius extension

2018-12-02 Thread Nick Couchman
On Sun, Dec 2, 2018 at 5:20 PM Not Speedy wrote: > OMG! found my issue and boy do I feel stupid! I thought the plugin was > crashing which was why I wasn't seeing connection attempts to my radius > server...them maybe I thought it was my properties ...so I check them > against what I found in

Re: guacamole 1.0.0 and radius extension

2018-12-02 Thread Nick Couchman
On Sun, Dec 2, 2018 at 1:21 PM Not Speedy wrote: > fyi...after running mvn dependency:tree, it looks like slf-log4j12 1.5.8 > is being pulling in from jradius-core...not sure why this is causing me > issues and nobody elseodd. > How about SLF4J 1.6 or 1.7? Any idea where that's coming

Re: guacamole 1.0.0 and radius extension

2018-12-02 Thread Nick Couchman
On Sun, Dec 2, 2018 at 2:28 PM Not Speedy wrote: > no idea, although i see that guacamole client is using slf4j-api 1.7.7 > everywhere else. I suspect this whats causing my issue, but I really don't > know. > > For whatever reason the RADIUS module works fine for me, but the CAS module exhibits

Re: guacamole radius

2018-12-02 Thread Nick Couchman
> > The contents of catalina.out would be more useful in diagnosing this. > Additionally, you might want to put Guacamole Client into debug mode and > look at catalina.out and see what message are thrown.: > > > http://guacamole.apache.org/doc/gug/configuring-guacamole.html#webapp-logging > > >>

Re: guacamole radius

2018-12-03 Thread Nick Couchman
On Mon, Dec 3, 2018 at 9:39 AM SergeyKh wrote: > Thank you for the investigation. > but where is the staging branch? can you share the link? > > I've tracked it down to changed introduced in GUACAMOLE-598 and have re-opened that JIRA issue to correct the problem. To get the staging branch, all

Re: Maximized window in Windows Remote Apps

2018-11-20 Thread Nick Couchman
On Tue, Nov 20, 2018 at 12:10 PM Hugo AMG87 wrote: > It's true, the version I really have is the 1.0.2, the 2.0.0 is not > installed. > > Anyway, I am trying to install Freerdp 1.1 and I can't do it. Althought > the build process ends correctly, Guacamole doesn't find it when I run >

Re: guacamole radius

2018-11-20 Thread Nick Couchman
On Tue, Nov 20, 2018 at 1:49 PM SergeyKh wrote: > Yes. 02 is jdbc mysql > > Okay, and, I think you described it elsewhere, but can you provide me the exact list of steps you go through to reproduce the issue, and the exact behavior you're seeing? It sounds like users cannot see the connection

Re: using microsoft access files in shared drive

2018-11-19 Thread Nick Couchman
On Mon, Nov 19, 2018 at 8:15 AM isaac.marco wrote: > > Nobody else with this problem? I don't know how to solve it. > > To be honest, I haven't used Microsoft Access for anything in several years. I avoid it like the plague :-). Obviously it can't always be avoided, but I just don't have any

Re: Help with ldap-user-search-filter and LDAP Query

2018-11-25 Thread Nick Couchman
On Tue, Nov 20, 2018 at 3:54 PM Zer0Cool wrote: > I kind of figured it out. At least the base issue. > > ldap-users-search-filter: (memberOf=CN=Domain > Admins,CN=Users,DC=domain,DC=COM) > > Seems to be the proper syntax for the parameter in the guacamole.properties > file. This pulled in just

Re: Maximized window in Windows Remote Apps

2018-11-20 Thread Nick Couchman
On Tue, Nov 20, 2018 at 4:34 AM Hugo AMG87 wrote: > Hi, > I have a problem when I use any remote app under Windows Server 2016. > Each time I run Chrome, for example, the application window can´t be > maximized. It is like there is an invisible Windows desktop behind it which > doesn't cover

Re: guacamole radius

2018-11-20 Thread Nick Couchman
On Tue, Nov 20, 2018 at 9:19 AM SergeyKh wrote: > Hello Nick! > can you please tell me something about my problem with guacamole and your > radius extension? am i doing something wrong? so i can't get to the web-app > to choose my connections. it only works with one connection that starts >

Re: Help with ldap-user-search-filter and LDAP Query

2018-11-20 Thread Nick Couchman
> > Any help would be great I have been racking my brain and cant work this > out. > I am very new to LDAP queries and ignorance on my part is, I am sure, > largely to blame. > > I have tried something like: > (&(objectCategory=person)(|(OU=Admins)(OU=Domain Users)) > > First, you're missing a

Re: Maximized window in Windows Remote Apps

2018-11-20 Thread Nick Couchman
On Tue, Nov 20, 2018 at 11:06 AM Hugo AMG87 wrote: > Hi, > > My FreeRDP version is 2.0.0-rc3. It should works. > > I'm trying to install FreeRDP 2.0.0-rc4. It seems it has worked, but when > I run "/configure --with-init-dir=/etc/init.d" to rebuild Guacamole server, > the output shows that

Re: guacamole radius

2018-11-20 Thread Nick Couchman
On Tue, Nov 20, 2018 at 10:13 AM SergeyKh wrote: > Ok, thank you very much. If you need some more info or my logs i'm here. > > Can you try something else for me? When you install the RADIUS module, can you install it as: guacamole-auth-0radius-1.0.0.jar (put the 0 in front of the radius part

Re: multiple guacamole to one guacd?

2018-11-28 Thread Nick Couchman
On Wed, Nov 28, 2018 at 1:08 PM Joachim Lindenberg wrote: > Hello, > > right now I am running two complete installations of guacamole on two > different servers. I am considering to consolidate them onto one, with two > guacamole webapps but one guacd. Is this a supported configuration or do I >

Re: Multiple guacamole sessions

2018-11-26 Thread Nick Couchman
On Mon, Nov 26, 2018 at 6:06 AM Julien Gormotte wrote: > Hi all, > > I'm using guacamole in a custom web app, and uses plugin-JWT to create > sessions. > > Eveything works, except that I cannot open more than one session in a > browser, if I connect a second one, the first gets disconnected. > I

Re: Deploy guacd behind NAT

2018-11-26 Thread Nick Couchman
On Mon, Nov 26, 2018 at 2:02 PM ssat wrote: > Hello, > > I am looking to place guacd behind a NAT network as that looks to be the > only way to gain a VNC connection to my destination VMs. This naturally > introduces a challenge in maintaining the connectivity between > guacamole-client cloud

Re: Concurrency limit for LDAP auth?

2019-01-07 Thread Nick Couchman
On Mon, Jan 7, 2019 at 7:06 PM Mike Jumper wrote: > On Fri, Jan 4, 2019 at 12:59 PM Nick Couchman wrote: > >> On Fri, Jan 4, 2019 at 10:34 AM JoelB wrote: >> >>> Is there any way to implement concurrency limits for connections/users >>> defined in LDAP? I'

Re: Guacamole SQL queries...

2019-01-08 Thread Nick Couchman
On Tue, Jan 8, 2019 at 3:13 AM B3r3n wrote: > Hello guys, > > First of all, Happy New Year 2019 to all ! > > This question is for Guacamole SQL wizards :-) > > We have a central password repository and this must be imported into > Guacamole > to avoid manual action. I failed to find some howto

Re: Assistance with PulseAudio & VNC

2019-01-04 Thread Nick Couchman
On Thu, Jan 3, 2019 at 9:08 AM James McClune wrote: > Hello Apache Guacamole Community, > > I'm having issues getting PulseAudio to send audio with Guacamole session. > I'm trying to use PulseAudio & VNC simultaneously, as described here: > > James, Are there any messages in /var/log/messages or

Re: Is there a way to get the list of guacamole users thru API?

2019-01-04 Thread Nick Couchman
On Fri, Jan 4, 2019 at 10:21 AM Duarte Rocha wrote: > There is already this: > > https://github.com/pschmitt/guacapy > > Very cool, thank you! -Nick

Re: User-mapping.xml variable injection

2019-01-11 Thread Nick Couchman
On Fri, Jan 11, 2019 at 2:42 AM sciUser wrote: > Hello, > > Will this work, taking the user-mapping.xml and adding arguments to pass > connections parameters to it on the fly. > > arg=$1 #Lab Name > arg=$2 #IP Address > arg=$3 #Password > > > > rdp > $2 > administrator >

Re: Blank screen after upgrade to 1.0.0.

2019-01-11 Thread Nick Couchman
On Fri, Jan 11, 2019 at 14:06 David Rodriguez wrote: > Hi, > > I have tried to upgrade from 0.9.14 to 1.0.0 and something didn't work as > Im getting a blank screen accesing the login screen. > > In the catalina log file I have seen the below errors, so I assumed this > was something related to

Re: Blank screen after upgrade to 1.0.0.

2019-01-11 Thread Nick Couchman
On Fri, Jan 11, 2019 at 14:47 David Rodriguez wrote: > OMG I have just seen that the login screen Im reaching said > "0.9.13-incubating" so not sure why it is getting this version instead > 1.0.0. > Could someone point me in the right direction? Im really lost > Yeah, that could be a problem.

Re: ldap groups in 1.0.0 RC1

2019-01-13 Thread Nick Couchman
On Sun, Jan 13, 2019 at 16:48 Mike Jumper wrote: > On Sun, Jan 13, 2019 at 11:23 AM Nick Couchman wrote: > >> On Sun, Jan 13, 2019 at 7:43 AM Philip Herbert wrote: >> >>> as it seems impossible to change the structure of an ldap, because a >>> single

Re: ldap groups in 1.0.0 RC1

2019-01-13 Thread Nick Couchman
On Sun, Jan 13, 2019 at 7:43 AM Philip Herbert wrote: > as it seems impossible to change the structure of an ldap, because a > single application expects users and groups > > In different parts oft the ldap directory, I would like to try to find out > why this config is failing > We certainly

Re: ldap groups in 1.0.0 RC1

2019-01-13 Thread Nick Couchman
On Sun, Jan 13, 2019 at 7:43 AM Philip Herbert wrote: > as it seems impossible to change the structure of an ldap, because a > single application expects users and groups > > In different parts oft the ldap directory, I would like to try to find out > why this config is failing > > > > If I set

Re: [ANNOUNCE] Apache Guacamole 1.0.0

2019-01-13 Thread Nick Couchman
On Sun, Jan 13, 2019 at 1:22 PM Joachim Lindenberg wrote: > Hello Mike, all, > > I really love Guacamole! Was using 0.9.14 for almost a year now, and also > did my own extension… > Great, thank you! > Today I installed Guacamole 1.0.0 on a VM with docker and I also updated > my authentication

Re: Guacamole 0.9.12 Printjobs

2019-01-09 Thread Nick Couchman
On Wed, Jan 9, 2019 at 5:09 AM Martin Herold wrote: > Hi all, > > we have installed Guacamole 0.9.12 and have RDP - Connection to Windows > Server 2008. You should probably look at a later version than that - 0.9.14 is the latest released version, but 1.0.0 will be out very soon (by tomorrow,

Re: VNC connect thru Windows Authentication

2019-01-09 Thread Nick Couchman
On Wed, Jan 9, 2019 at 12:08 PM Adrian Owen wrote: > Guacamole 0.9.14 under settings connection VNC, I can only find option for > VNC password. > > > > Can Guacamole support VNC authentication via a Windows Account/Password? > (RealVNC) > > Currently Guacamole only supports password

Re: VNC connection problem

2018-09-18 Thread Nick Couchman
On Tue, Sep 18, 2018 at 1:26 PM VolandSZ wrote: > Hi friends! First of all i must say that i am quite a new user to guacamole > and linux ecosystem in general. So please dont judge me very strict > We're here to help you, not judge you, so don't hesitate to ask any questions you have! > > Now

Re: Lost Password

2018-09-18 Thread Nick Couchman
On Tue, Sep 18, 2018 at 8:06 AM Poteat, William D. wrote: > Could there be an SQL solution? > Reset admin password in the database ? > I don't think this is a Linux issue with respect to Guacamole. Yeah - probably the easiest way to fix this would be to grab the SQL schema file from the MySQL

Re: Lost Password

2018-09-18 Thread Nick Couchman
On Tue, Sep 18, 2018 at 9:17 AM Kaos wrote: > Thanks for the response! > > Could you point me in the direction of the schema file? > This is included in the download for the JDBC extension on the website: http://guacamole.apache.org/releases/ You'll want to identify the version you're running

Re: Issue regarding starting application with Initial program

2019-01-27 Thread Nick Couchman
On Fri, Jan 25, 2019 at 6:43 AM Kashif Sohail wrote: > Any thoughts guys. is it possible to pass on parameters while > using initial Program or not? I understand Nick Couchman has proposed to > run start up script but still wondering if Guacamole allows to run the > comm

Re: Unable to query list of objects from LDAP directory.

2019-01-28 Thread Nick Couchman
On Mon, Jan 28, 2019 at 7:29 AM Daniel Brienza < daniel.brie...@protonmail.com> wrote: > Yes, I think it's related to a large LDAP query, after changing the > LDAP_USER_BASE_DN to an OU with less users the authentication works. > > There are two or three JIRA issues in the works which might help

Re: radius plugin with linotp/privacyidea

2019-03-29 Thread Nick Couchman
On Fri, Mar 29, 2019 at 11:52 AM Not Speedy wrote: > figured it out. I had to change the extension order, putting the radius > extension before the MySQL one. > > Sorry for the lack of response, but glad you figured it out. There is a JIRA issue open for modifying the way credential exceptions

Re: Connection settings

2019-03-29 Thread Nick Couchman
On Fri, Mar 29, 2019 at 10:48 AM Will Payne wrote: > On 2019-03-29 14:18, Mike Jumper wrote: > > You can actually do the latter by placing the new JSON in > > GUACAMOLE_HOME/protocols/. > > Well, that'll do nicely for now :) > We have a page for that!

Re: Authentification using Certificat

2019-04-02 Thread Nick Couchman
On Tue, Apr 2, 2019 at 11:31 AM Kamal Ezzaki wrote: > Hello > > Just a question , is guacamole support authentification with certificat ? > Certificate-based authentication - that is, having the client browser have a private key and certificate pair that the server looks at to determine

Re: Reloading the application

2019-03-26 Thread Nick Couchman
On Tue, Mar 26, 2019 at 10:32 AM Kamal Ezzaki wrote: > Can you please help . > so i need to add new file .html with this content : > > > > > > > translate-values="{{loginError.variables}}"> > > > > > > > > > ** > > So

Re: Reloading the application

2019-03-26 Thread Nick Couchman
On Tue, Mar 26, 2019 at 10:48 AM Kamal Ezzaki wrote: > Okey i get it now , so i need to regenerate the .war isn't ? > > > A JAR file, actually - since it's an extension, you generate an extension JAR, just like the other authentication extensions, and drop it into the GUACAMOLE_HOME/extensions

Re: Setting up HTTP header authentication

2019-03-22 Thread Nick Couchman
> > Yes, we removed the NoAuth module without replacing it. The project > determined that it was not worth continuing to keep it in the code, as the > value was limited and the end-goal of the module - transparently > authenticating users into Guacamole - was possible by several other more >

Re: issue with guacamole user/connection/group config

2019-03-23 Thread Nick Couchman
On Sat, Mar 23, 2019 at 8:15 AM brian mullan wrote: > I have a cloud server with guacamole v1.0.0, tomcat8, mysql, nginx > > I created 100 user accounts and assigned each to a connection to N server > > Later I decided to create a Group and I put all 100 users in that Group > > I configured the

Re: Radius Error Message

2019-04-03 Thread Nick Couchman
On Wed, Apr 3, 2019 at 9:46 AM Kamal Ezzaki wrote: > Okay , happy to help you just this one time . i m gonna try to change the > version to 1.8.0_191 thank you for you help > Great, looking forwarding your testing results! -Nick

Re: OTP Lost

2019-04-01 Thread Nick Couchman
On Mon, Apr 1, 2019 at 3:16 PM Christian Kraus wrote: > AFAIK not this time, only recreate user so far / editing the SQL entries > manually > > > Yes, removing and recreating the user would work; however, this is not necessary. Simply removing the associated rows from the table should do the

Re: Radius Error Message

2019-04-03 Thread Nick Couchman
On Wed, Apr 3, 2019 at 9:34 AM Kamal Ezzaki wrote: > yes i think that's you are right , the probleme is the java version i have > another server running guacamole and the authentification passed with > mschapv2, chap , pap .. . and it running openjdk version "1.8.0_191"but > in the other

Re: HTTP header auth with groups

2019-04-03 Thread Nick Couchman
On Wed, Apr 3, 2019 at 8:45 AM Will Payne wrote: > > I'm assuming groups should work with users authenticated via HTTP > headers? > > If I put a user in a group and allow that group access to a connection, > the user cannot see the connection. > > Is this a bug? > Not really a bug, no, but it

Re: Radius Error Message

2019-04-03 Thread Nick Couchman
On Wed, Apr 3, 2019 at 4:58 AM Kamal Ezzaki wrote: > hello is anyone know why i have this error in my log file > : > *ERROR o.a.g.a.r.RadiusConnectionService - No such RADIUS algorithm: MD4 > MessageDigest not available* > > Interesting. Seems this isn't the only project to encounter that:

Re: Chrome problems

2019-04-04 Thread Nick Couchman
On Thu, Apr 4, 2019 at 19:07 Mike Jumper wrote: > Just retested with Chrome OS 73.0.3683.88 - still working absolutely fine > for me. > > - Mike > Same, here. Multiple revisions of the code from 0.9.14 through git master and some pull requests, and it works fine with the latest chrome. -Nick

Re: LDAP Auth successful, mysql backend fine, but unable to query list from LDAP (I don't want this)

2019-04-05 Thread Nick Couchman
> > Is there anything else I'm missing here? It's an Active Directory setup. > I've tried entering an LDAP user name and invalid password and immediately > get Invalid Login. When I get the proper password, it stalls for a bit then > it throws the error unable to query list. I don't believe I

Re: Importance of JKS Keystore Fields?

2019-04-04 Thread Nick Couchman
> > I am then prompted for things like name, org, city, state, etc. > > I generally leave these all blank (just hitting enter for each until done). > > What I am wondering is if these fields are of any importance in a > production, internet facing setup? (using Lets Encrpyt for an SSL cert, not >

Re: Importance of JKS Keystore Fields?

2019-04-04 Thread Nick Couchman
On Thu, Apr 4, 2019 at 5:34 PM Zer0Cool wrote: > Upon thinking about it however, end users wouldnt see this info for the key > store, would they? > > As far as I understand it, with Nginx being the reverse proxy and handling > SSL, Lets Encrypt providing a valid Cert (and looking at the cert it

Re: OpenID Auth Not Redirecting

2019-04-06 Thread Nick Couchman
On Fri, Apr 5, 2019 at 10:05 AM Craig Bloodworth < craig.bloodwo...@theinformationlab.co.uk> wrote: > Maybe I'm not fully understanding how the OpenID extension should work, > but I believe instead of logging in with the standard Guacamole client > login screen the user should be forwarded to the

Re: radius plugin with linotp/privacyidea

2019-03-29 Thread Nick Couchman
On Fri, Mar 29, 2019 at 3:54 PM Not Speedy wrote: > no problem. I'm grateful for all the help! On more issue, is there a way > to change or remove whats populated in the input field? I'd like to change > the "reply-message = please enter otp:" to be blank or something simple > like "Token" >

<    1   2   3   4   5   6   7   8   9   10   >