Re: Viewing active connections while using user-mapping.xml

2020-04-04 Thread Nick Couchman
On Sat, Apr 4, 2020 at 5:58 AM Roman V. Isaev wrote: > Is it possible to view active connections while using user-mapping.xml? > > No, the user-mapping.xml file is designed to be a very simple mechanism to test that authentication is working, and does not support most of the extended features

Re: Viewing active connections while using user-mapping.xml

2020-04-05 Thread Nick Couchman
On Sun, Apr 5, 2020 at 2:58 PM Roman V. Isaev wrote: > > One of the key features that the user-mapping.xml authentication > mechanism > > does not support is layering with other modules, so this likely won't > work. > > Ok, I see -- user-mapping.xml is no-go. > It's not really intended to be a

Re: Open ID with Azure AD (see no connections once logged-in)

2020-04-05 Thread Nick Couchman
On Tue, Mar 24, 2020 at 9:25 PM Itzik Bekel wrote: > Hi > > I just managed to implement SSO with guacamole and Azure AD > > however, I do not understand how I can manage the permissions, > > now, when I logged in using the SSO with my Azure AD user, I can see a > blank > page in guacamole

Re: Problems to RDP

2020-04-05 Thread Nick Couchman
On Mon, Mar 23, 2020 at 3:58 PM Guilherme Carvalho wrote: > Hello guys, i made Guacamole Works fine in my Work, but i´m getting to > install it on a Client, i made almost everything ok, LDAP, TOTP etc is > working, but when i try to connect into a RDP i got this messages on the >

Re: Unable to use database authentication in Guacamole 1.1.0

2020-04-05 Thread Nick Couchman
On Fri, Mar 27, 2020 at 3:10 AM Mike Jumper wrote: > On Thu, Mar 26, 2020 at 11:47 PM Kok Hooi Chew > wrote: > >> Hi All, >> I'm having difficulties in connecting using Postgresql or MySql. >> ... >> Error from Tomcat >> [image: image.png] >> > > This error indicates that the required JDBC

Re: Is it possible to reset otp 2fa data for one single user

2020-04-05 Thread Nick Couchman
On Tue, Mar 17, 2020 at 05:45 Marco Agostini < agostinima...@comune.levico-terme.tn.it> wrote: > - Messaggio originale - > > Da: "ccoborgers" > > A: "user" > > Inviato: Martedì, 17 marzo 2020 10:29:35 > > Oggetto: Re: Is it possible to reset otp 2fa data for one single user > > > Thanks

Re: CAS Authentication Behind Apache Proxy not Working

2020-03-25 Thread Nick Couchman
On Wed, Mar 25, 2020 at 4:25 PM angelwine wrote: > I finally found what was wrong. > > I have to add ProxyErrorOverride Off in my Location directive like this > > > Order allow,deny > Allow from all > *ProxyErrorOverride Off* > ProxyPass http://rpx/guacamole/

Re: Samba LDAP AD users no full name/AD groups + Load balacing

2020-04-03 Thread Nick Couchman
On Fri, Apr 3, 2020 at 9:44 AM Jason Keltz wrote: > Hi. > > I have a few questions I was hoping someone might be able to help me with: > > 1) Although I have my Guacamole install retrieving users from my Samba4 > AD server, it does not retrieve the "Full Name" field. As a result, on > the

Re: Samba LDAP AD users no full name/AD groups + Load balacing

2020-04-03 Thread Nick Couchman
On Fri, Apr 3, 2020 at 10:40 AM Jason Keltz wrote: > > On 4/3/2020 10:03 AM, Nick Couchman wrote: > > On Fri, Apr 3, 2020 at 9:44 AM Jason Keltz wrote: > >> Hi. >> >> I have a few questions I was hoping someone might be able to help me with: >> >

Re: Password-Prompt for RDP-Connections

2020-04-03 Thread Nick Couchman
On Wed, Apr 1, 2020 at 1:14 PM wrote: > In the Dec 19,2019 you mentioned the below and that what I am following up > on, same subject matter. My goal is not put the PW in the field and prefer > to be prompted for it. > Yep, it is still in the works, not yet implemented. I think it is getting

Re: How do I configure the server to allow connection sharing?

2020-04-03 Thread Nick Couchman
On Fri, Apr 3, 2020 at 2:14 PM Ben Davis wrote: > The documentation > > states: > > If the Guacamole server is configured to allow connection sharing, and you >> have been granted permission to share the current

Re: TunnelCloseEvent

2020-04-03 Thread Nick Couchman
On Fri, Apr 3, 2020 at 2:29 PM Adrian Owen wrote: > We are building custom event listener. > > > > How to get Authentication Token? > > > > We use custom JSON authentication, and need the hook back to our > application. > > > > We see UUID, but that is not part of the string returned with token

Re: Best Settings for RDP virtual disk drive

2020-03-25 Thread Nick Couchman
Another option, particularly if you are concerned about file permissions, is to utilize the SFTP support in Guacamole. If you're using the ${GUAC_USERNAME} and ${GUAC_PASSWORD} parameters, and you have a SFTP server that integrates with your Windows (AD) authentication, you can do this

Re: LDAP username case sensitivity

2020-03-28 Thread Nick Couchman
On Sat, Mar 28, 2020 at 12:28 PM Chris Misztur wrote: > Has anyone noticed that usernames are case sensitive in relation to the > assigned connections? > > For example, my AD group contains UserName. I create connection and assign > to UserName. The user can still log in with username, but

Re: Could a WebCam be used with Guacamole?

2020-03-28 Thread Nick Couchman
On Sat, Mar 28, 2020 at 9:02 AM bmullan wrote: > Just curious if anyone has used a WebCam with Guacamole? > > If so, can you point me to any information that talks about how/what > to implement/configure? > > The underlying protocol will support it without a problem - it's essentially just

Re: freerdp support for certificate fingerprints - also with Guacamole?

2020-03-28 Thread Nick Couchman
On Sat, Mar 28, 2020 at 2:56 PM Joachim Lindenberg wrote: > Hello all, > > I guess most of us are ignoring certificates with RDP. If you are like me > and looked at Microsofts documentation how to replace a self-signed > certificate, there is a clear trade off… and so far I am running Guacamole

Re: Samba LDAP AD groups in Guacamole

2020-03-30 Thread Nick Couchman
On Mon, Mar 30, 2020 at 8:04 PM Jason Keltz wrote: > Hi. > > I was finally successful in getting my Samba AD users to work in > Guacamole along with the MySQL DB for storing additional information. I > would like for the Samba AD groups to be imported into Guacamole as well > so that I can

Re: Samba LDAP AD users no full name

2020-03-30 Thread Nick Couchman
On Mon, Mar 30, 2020 at 8:09 PM Jason Keltz wrote: > Hi. > > Although I have my Guacamole install retrieving users from my Samba4 AD > server, it does not retrieve the "Full Name" field, so the "Full Name" > field is left blank on the "Users" screen even though I see all the > users. Is this

Re: Active sessions from multiple servers

2020-03-30 Thread Nick Couchman
On Mon, Mar 30, 2020 at 6:15 PM Stefan Bogdan Cimpeanu wrote: > Hello all, > We’re running multiple guacamole servers connected to same database. > I’ve noticed that the “Active sessions” tab shows only connections on the > particular server you’re on (we’re running a load balancer in-front of

Re: RSA Key Fob OTP

2020-03-30 Thread Nick Couchman
On Mon, Mar 30, 2020 at 5:31 PM sciUser wrote: > Hello > > I am looking for documentation on implementing RSA (secureID) key Fob with > one time password tokens. > Does Guacamole support this? > > Directly, no; however, in a past life I implemented this setup using LinOTP to supply the OTP

Re: Guacamole drive name/Path drive setting

2020-03-30 Thread Nick Couchman
On Mon, Mar 30, 2020 at 12:52 PM Giorgio wrote: > Hello, > > Starting version 0.9.14 the guacamole RDP setting for drive path name is > always showing as: "name" on Guacamole RDP > The name given as drive path is not showing anymore , the drive name is > showing. > > To be more specific: > In

Re: Disable Copy Paste on local machine

2020-03-30 Thread Nick Couchman
On Mon, Mar 30, 2020 at 11:33 AM Sebastian Männling < sebastian.maennl...@qubestack.org> wrote: > In xrdp (Linux) you can configure the clipboard to deny copy from remote > to local. > > But I do not know of any functionality like this in windows. > > > On 30. Mar 2020, at 17:22, Allen Chen >

Re: RDP printing not working, v1.1.0

2020-04-01 Thread Nick Couchman
On Wed, Apr 1, 2020 at 12:48 PM bullett wrote: > Hi Nick > > Yes, gs is in the docker image I have running. Version 9.27. > > I'm using the official 'guacamole/guacamole' and 'guacamole/guacd' images, > but I've also tested with oznu's popular all-in-one image and got the same > results and

Re: RDP printing not working, v1.1.0

2020-04-01 Thread Nick Couchman
> > > guacd[6]: INFO: Creating new client for protocol "rdp" > guacd[6]: INFO: Connection ID is "$c4e6a871-1bb4-436e-a96f-cb3332b9c0cd" > guacd[16037]: INFO: Security mode: RDP > guacd[16037]: INFO: Resize method: none > guacd[16037]: INFO: User "@7e24e3b9-e5b5-4cdd-ac57-dad116bcac54"

Re: Password-Prompt for RDP-Connections

2020-04-01 Thread Nick Couchman
On Tue, Mar 31, 2020 at 11:30 PM wrote: > Can someone share screen shot or sample of the configuration where it has > LDAP configuration with tokens? > > > > Thank you in advance. > I don't have an example of this, but, basically, you'd put a guacConfigParameter entry on the LDAP object that

Re: Password-Prompt for RDP-Connections

2020-04-01 Thread Nick Couchman
On Wed, Apr 1, 2020 at 12:42 PM wrote: > Hi Nick, > > > > Would it be something like the below? in the guacamole.properties file? > > > No, sorry, I misunderstood what you were asking, I think. Can you clarify what you mean by "LDAP configuration with tokens"? I assumed you meant you were

Re: OpenID Connect Authentication with LDAP configuration

2020-04-01 Thread Nick Couchman
On Tue, Mar 31, 2020 at 3:42 PM Sebastian Männling < sebastian.maennl...@qubestack.org> wrote: > any comment if openid connect authentication with connection > settings/options from ldap should or should not work at all? > > This is unlikely to work, because the LDAP extension relies on

Re: Shadowing RDP

2020-04-01 Thread Nick Couchman
On Wed, Apr 1, 2020 at 7:56 AM Chris Misztur wrote: > Morning. Wondering if shadowing active connections can be disabled, or > better yet prompt the user to allow or deny shadowing. > > Can you define a little more clearly what you mean by "Shadowing", and what environment you're using (version

Re: Guacamole Menu shortcut

2020-04-01 Thread Nick Couchman
On Wed, Apr 1, 2020 at 5:28 AM Robert Susta wrote: > I've located a part of client code that defines what key-combination to > watch > for in guacamole/app/client/controllers/clientController.js > Modifying the code directly inside the deployed Tomcat application is very unreliable in terms of

Re: Guacamole enable paste & disable copy

2020-04-01 Thread Nick Couchman
On Wed, Apr 1, 2020 at 7:18 PM mekuls DL wrote: > Hi, > > > I'm trying to figure out if I can configure Guacamole only to allow paste > but disable copy. > > > I spent some time chasing the changes in this PR > . I cannot > see the

Re: logging

2020-04-06 Thread Nick Couchman
On Mon, Apr 6, 2020 at 6:41 AM Piviul wrote: > Hi all, > I would like to reduce logs in tomcat catalina.out file. Reading the > catalina.out seems that gucamole logs debug messages too. Reading the > documentation[¹] the file that I have to configure is the logback.xml. > This is the content of

Re: Problems to RDP

2020-04-06 Thread Nick Couchman
On Mon, Apr 6, 2020 at 4:44 AM garvati wrote: > Hello, > I have the same problem > > I just built on centOS8 the Guacamole (1.1.0) service, client , ... > > > Apr 6 10:31:16 swork guacd[2175]: Creating new client for protocol "rdp" > Apr 6 10:31:16 swork guacd[2175]: Connection ID is >

Re: Issue with RDP from VirtualBox with 1.1.0

2020-04-27 Thread Nick Couchman
I believe you're hitting this issue: https://issues.apache.org/jira/browse/GUACAMOLE-962 Should be solved in the 1.2.0 release. -Nick On Mon, Apr 27, 2020 at 9:27 AM danielos wrote: > Hi! > > Today I migrated from guacamole 1.0.0 (docker) to 1.1.0 (docker). > > After migration I'm unable to

Re: ldap-user-search-filter problem

2020-04-28 Thread Nick Couchman
On Tue, Apr 28, 2020 at 10:54 AM Fabio Corsi < fabio1299.discussionli...@gmail.com> wrote: > I’m also still waiting to hear something about this problem. My post dated > March 2, 2020 summarizes the problem and provides my LDAP log entries. > Happy to repost if that makes it easier to find. >

Re: How can I turn on remote PCs?

2020-04-27 Thread Nick Couchman
On Mon, Apr 27, 2020 at 11:36 AM WhiteTiger wrote: > With Guacamole I can access PCs remotely. > But if these are off, how can I turn them on? > In the office I have a Linux Xubuntu PC always on and from this I could > send > a Magic Packet to the other PCs. > But users don't have technical

Re: ldap-user-search-filter problem

2020-04-28 Thread Nick Couchman
On Tue, Apr 28, 2020 at 3:16 PM carlog wrote: > Thank you for posting your working config. I, too, and using staging/1.2.0 > code. I matched mine up to yours, and made sure I had an appropriate line > for each one of your lines, but still, no go. :( > > So far, I have the guacadmin account in

Re: Guacamole Client API

2020-04-24 Thread Nick Couchman
On Fri, Apr 24, 2020 at 10:18 AM netnut wrote: > Reviving an old-ish thread- I need to take users directly to the "desktop" > screen since I don't want to assign my users guacamole user accounts. So > which of the following approaches would work: > > User's browser -> Guacamole Client (tomcat)

Re: VNC 403 JSON API

2020-04-26 Thread Nick Couchman
On Sun, Apr 26, 2020 at 7:43 AM Adrian Owen wrote: > I set logback to trace > > > > VNC connection > > *** event handler 1 > > 20:06:57.191 [http-nio-8080-exec-1] DEBUG > o.a.g.r.auth.AuthenticationService - Anonymous authentication attempt from > [10.10.220.74, 127.0.0.1] failed. > > > > RDP

Re: Guacamole's Session Recording

2020-04-26 Thread Nick Couchman
On Sun, Apr 26, 2020 at 5:25 AM zspmaomao <460012...@qq.com> wrote: > I followed the Documentation > to > record a vnc session. it produce a file for me named "recording" without > any format. I know I can use guacenc to convert it

Re: VNC 403 JSON API

2020-04-24 Thread Nick Couchman
On Fri, Apr 24, 2020 at 3:37 PM Adrian Owen wrote: > Nothing is shown in catalina.out either > > > > Should I update the apache log level?What do you suggest to get at the > error? > > > yes, you might need to bump up Tomcat logging:

Re: VNC 403 JSON API

2020-04-24 Thread Nick Couchman
On Fri, Apr 24, 2020 at 3:15 PM Adrian Owen wrote: > Using JSON API. I occasionally get 403 Forbbidon when I post to get the > Auth Token. > > > > It only happens with VNC connection. When I try RDP connection its ok. > > > > > > Is there way to get more information? I ran guacd with –L trace

Re: VNC 403 JSON API

2020-04-26 Thread Nick Couchman
On Sun, Apr 26, 2020 at 10:32 AM Adrian Owen wrote: > Cleared out calalina.out ready to test, clicked and 403 > > > > I saw hundreds of trace messages, before I cleared it. > > > > But these only ones shown before 403 . V 0.9.14. No Trace only debug > > > > JDBC Connection

Re: ssh to a target with google 2fa auth enabled

2020-04-22 Thread Nick Couchman
On Tue, Apr 21, 2020 at 3:02 PM Immo Wetzel wrote: > HI, > > > > I´m quite new with guacamole. We like to provide some ssh access via the > html5 interface but stuck at the point were the target hosts need a two > factor auth via google auth. > > The client shows first the username request and

Re: Active Session Shadowing

2020-04-22 Thread Nick Couchman
On Sun, Apr 19, 2020 at 12:03 AM Chris Misztur wrote: > This is worth bringing up again. As a Guacamole admin I have the ability > to click on any connected user sessions and view/control without the user's > permission. > > This is preventing us from completely eliminating MS RD Gateway for HR

Re: Multiple guacamole servers pointed at the same mariadb?

2020-04-22 Thread Nick Couchman
On Sun, Apr 19, 2020 at 9:25 PM Newman, Dennis wrote: > I “accidentally” had just such a setup when I was attempting a vm backup > of my Guacamole system – seeing this question makes me ask – Why exactly > would you want to do this? Does it help Guac in speed or stability? > > > There are two

Re: empty recording with rdp audio input

2020-04-22 Thread Nick Couchman
On Fri, Apr 17, 2020 at 8:55 AM Wolfgang Nothdurft wrote: > Hi, > > I'm trying to get audio input to work. > > The guacai lib is in the correct folder: > -rwxr-xr-x. 1 root root 355368 9. Apr 13:32 > /usr/lib64/freerdp2/libguacai-client.so > > The microphone is displayed in the windows device

Re: Login Page customization.

2020-04-23 Thread Nick Couchman
On Thu, Apr 23, 2020 at 10:50 AM Riano De Souza wrote: > Cool so I got the extention template and so on. But where is the > extentions folder located? > > > > And wont it just get overwritten when the container gets reloaded? > > > You'll probably have to modify the startup script for the

Re: Login Page customization.

2020-04-23 Thread Nick Couchman
On Thu, Apr 23, 2020 at 10:14 AM Riano De Souza wrote: > Hi. > > > > I have googled and tried and tried and cant seem to rebrand my guacamole > login screen. > > How do i do this? everytime i chage something and restart the container it > wipes all my changes and everything is lost. > > > >

Re: RHEL/CentOS 8.x Install, Needed Packages?

2020-04-29 Thread Nick Couchman
On Wed, Apr 29, 2020 at 8:21 AM Zer0Cool wrote: > Hello, > > I have been working on adapting my script for installing and configuring > Guac on RHEL/CentOS 7.x to working with 8.x. (current 7.x version here for > reference: https://github.com/Zer0CoolX/guacamole-install-rhel). > > One of the

Re: Ubuntu 20.04 / Guacamole 1.1.0 / FreeRDP preconception PDU Broken

2020-05-01 Thread Nick Couchman
On Fri, May 1, 2020 at 9:11 AM Daniëls, Tom wrote: > Hi guys, > > > > Just finished installing a fresh Ubuntu 20.04 LTS server with the newest > version of Guacamole (1.1.0) and am running into the issue as described in > https://issues.apache.org/jira/browse/GUACAMOLE-952 > > > > When trying to

Re: Tomcat 9, RHEL/CentOS 8.x Setup Questions

2020-05-01 Thread Nick Couchman
On Fri, May 1, 2020 at 10:48 AM Zer0Cool wrote: > I am looking for help with the proper way to "install" and configure > tomcat 9 > with Guac 1.1.0 on RHEL/CentOS 8.x. > > As RHEL 8.x removed the tomcat package from the repos, I now find myself > downloading the .tar.gz and extracting it out

Re: RHEL/CentOS 8.x Install, Needed Packages?

2020-05-01 Thread Nick Couchman
thanks for the updates - see my comments inline... On Fri, May 1, 2020 at 10:25 AM Zer0Cool wrote: > Thanks to both of you. I ended up working this out and figured I would post > back my findings in case they help others. > > -libtelnet | I gave up on this one. Does NOT seem to be in regular

Re: Upgrade from 0.9.14 to 1.1.0 - RDP now doesn't connect

2020-05-01 Thread Nick Couchman
On Fri, May 1, 2020 at 11:30 AM rramalho wrote: > Hi all, > > I tried to upgrade my Guacamole instalation, from version 0.9.14 to 1.1.0. > > I've done the following steps, on a Ubuntu 18.04 machine: > > 1) stopped the tomcat and guacd services; > 2) installed freerdp2-dev library - all the

Re: Translate Extension

2020-04-30 Thread Nick Couchman
On Thu, Apr 30, 2020 at 10:21 AM Neumen - Juan Prigoshin < jprigos...@autoneumen.com> wrote: > Thanks Nick!!! You known date for release of versión 1.2.0? > > Juan > > > We do not have a release date, yet. We're working toward the final items for it:

Re: Translate Extension

2020-04-30 Thread Nick Couchman
On Thu, Apr 30, 2020 at 9:07 AM Neumen - Juan Prigoshin < jprigos...@autoneumen.com> wrote: > Hi. I have installed Extension TOTP and Branding > (https://github.com/Zer0CoolX/guacamole-customize-loginscreen-extension). > TOTP show original name, without use of translations. > Example :

Re: How can Guacamole be customized?

2020-05-02 Thread Nick Couchman
On Sat, May 2, 2020 at 5:56 AM WhiteTiger wrote: > I absolutely need to customize Guacamole. > This is absolutely possible using the extension framework: http://guacamole.apache.org/doc/gug/guacamole-ext.html You can customize a wide variety of aspects of the interface, including styles,

Re: How can Guacamole be customized?

2020-05-02 Thread Nick Couchman
On Sat, May 2, 2020 at 11:17 AM WhiteTiger wrote: > Now I read the framework documentation, but at least all the suggestions > related to Disclaimers and Policy management should be included in a future > release. > But you can do all of that with the extension framework. So, whether we add

Re: How can Guacamole be customized?

2020-05-03 Thread Nick Couchman
On Sun, May 3, 2020 at 12:17 PM Joachim Lindenberg wrote: > I agree with always use https, but disagree with always 2FA, and password > expiries have to be considered a bad practice nowadays. But all of this is > kind of off-topic w.r.t. Gucacamole - ultimately all of us have to make > their own

Re: ldap-user-search-filter problem

2020-05-03 Thread Nick Couchman
On Sun, May 3, 2020 at 9:49 AM Fabio Corsi < fabio1299.discussionli...@gmail.com> wrote: > Thanks Nick. > > Not sure what *above* would be in my case. > Can you suggest what kind of information should I be looking for in my log > file? > > Sorry, after looking at this, again, I see what the issue

Re: Tomcat 9, RHEL/CentOS 8.x Setup Questions

2020-05-02 Thread Nick Couchman
On Fri, May 1, 2020 at 5:11 PM Zer0Cool wrote: > Maybe a better way to ask for your help regarding directories for Guac and > tomcat...(again, if your willing, if not no problem). > > I don't mind at all - just with the caveat that this is just how I do things, and not necessarily "the right

Re: Automatic convert guacenc m4v

2020-04-29 Thread Nick Couchman
You could use something like fanotify on Linux to do this. If you install the inotify-utils package (EL7) you get a utility called "inotifywait" that notifies you of filesystem events. You can use this trigger an action when a filesystem event happens - for example, a file is written and closed

Re: can't type in Word 2016 when I first launch it

2020-04-22 Thread Nick Couchman
On Wed, Apr 22, 2020 at 11:58 AM Joseph Szabo wrote: > I just figured it out myself. The keyboard works in MIcrosoft Word safe > mode (winword /safe), or if I disable the Box add-in for Word. > > > Sorry you didn't get a response on this question, but glad you figured it out. I use Word pretty

Re: Parameter token with HTTP header authentication extension

2020-04-22 Thread Nick Couchman
On Wed, Apr 22, 2020 at 5:46 AM Yang Yang wrote: > Hi, > > I am looking to use the string in certain HTTP header as a session id, and > name the record of the session. Is there any parameter token with HTTP > header authentication extension I can use? If not, could you help to tell > what I

Re: cut in gnome closes session

2020-04-15 Thread Nick Couchman
On Wed, Apr 15, 2020 at 10:51 AM Jason Keltz wrote: > Hi. > > I have an odd situation occurring. I'm connected (through Guac) to a > CentOS 7 machine via RDP. The desktop environment is the standard > GNOME. I have only a terminal window open. When I select text in the > terminal window,

Re: RDP File transfer not working on windows 2016 or 2019

2020-05-11 Thread Nick Couchman
On Mon, May 11, 2020 at 4:06 PM Peter De Tender wrote: > Hey Nick and all, > > > Good news! > > I got this working after running chmod 777 on my "File Exchange" folder on > the Guachost, as well as on the Download subfolder. > > Ah, I would guess instead of "chmod 777" you just need to change

Re: MAJOR issue where-by users with different Guacamole account login share same session

2020-05-11 Thread Nick Couchman
On Mon, May 11, 2020 at 2:14 PM Jason Keltz wrote: > Hi. > > I have a huge problem, and I'm hoping someone can help me. I have > setup a pool of Linux machines where users can login, and access a Linux > environment that resets after each logout. All the users have their own > individual

Re: Turn on two factor authentication in bulk

2020-05-13 Thread Nick Couchman
On Wed, May 13, 2020 at 12:11 PM Richard Diaz wrote: > Hello, > > I am deploying guacamole to a large number of users 1000+, all is well and > ready to launch, but i would like to turn on 2FA, i understand that i can > do this on the GUI on an individual level but this is not realistic for >

Re: Getting guacamole with FreeRDP support on raspbian buster

2020-05-17 Thread Nick Couchman
On Sun, May 17, 2020 at 9:34 AM Alex Zetaeffesse wrote: > Hi, > > it's been a day now that I'm trying to compile guacamole with FreeRDP > support but regardles of the many guides followed and webpage that explain > how add FreeRDP support whatever package I install ./configure always tell > me

Re: Re[2]: capital letters in usernames

2020-05-17 Thread Nick Couchman
On Sun, May 17, 2020 at 3:05 PM Jason Keltz wrote: > > > -- Original Message -- > From: "Nick Couchman" > To: user@guacamole.apache.org; "Jason Keltz" > Sent: 5/16/2020 7:41:24 AM > Subject: Re: capital letters in usernames > > On

Re: Help mapping drive

2020-05-17 Thread Nick Couchman
On Sun, May 17, 2020 at 7:55 PM Stefan Bogdan Cimpeanu wrote: > Hello all, > > I’ve configured on my guacamole servers a shared folder which is a SMB > mount, to serve as “personal user folder”. > In my RDP connections I’ve configured Device rediraction as such: > - Enable drive - checked > -

Re: No sound on RDP connection

2020-05-06 Thread Nick Couchman
On Tue, May 5, 2020 at 11:44 PM Dashamir Hoxha wrote: > Hi, > > I have installed Guacamole 1.1.0, and xrdp on the desktop machine that I > am accessing. I have also installed pulseaudio-module-xrdp (as described > here: https://github.com/neutrinolabs/pulseaudio-module-xrdp/wiki/README) and > on

Re: Session timeout

2020-05-06 Thread Nick Couchman
On Wed, May 6, 2020 at 8:40 AM Kaminski, Thomas wrote: > Hello together, > > > > we have the challenge, that our users use common service accounts to login > into a windows server with rdp. > > This works fine and we are happy. > > > > Sometime a user closes the browser without ending the

Re: The appropriate way to hide/obscure database password in guacamole.properties?

2020-05-05 Thread Nick Couchman
On Tue, May 5, 2020 at 9:42 AM Zer0Cool wrote: > You really shouldn't be running guacd or tomcat as root (or really anything > else you can avoid doing so on). Create service accounts for both and > run/permission them according to those accounts. > > Totally agree. There is no reason to run

Re: How can Guacamole be customized?

2020-05-05 Thread Nick Couchman
On Tue, May 5, 2020 at 10:55 AM Georgе Stoyanov wrote: > > Hey guys, > > I have also recently done just this and downloaded from the internet a > ready-made extension, hereto attached in .zip format. You need to extract > all the files from it and create a .jar file. You can do that by just >

Re: Tomcat 9, RHEL/CentOS 8.x Setup Questions

2020-05-05 Thread Nick Couchman
On Tue, May 5, 2020 at 6:45 PM Zer0Cool wrote: > For the directories/files, what are your thoughts on the file permissions? > > I was thinking 0750 in cases the owner needs write, maybe 0550 when write > is > not needed? > > Not really set on what approach to take here in setting this. I will

Re: SEL Related Issue with Enabling guacd

2020-05-05 Thread Nick Couchman
On Tue, May 5, 2020 at 7:40 PM Zer0Cool wrote: > OS: CentOS 8.1 (fresh minimal install) > Guac: 1.1.0 > > I unpacked guacamole, setup tomcat 9.0.34, etc. I get to the point I need > to > `systemctl enable guacd` to enable the guacd service and it fails with a > message like: > > After installing

Re: Want some Salsa with your guacamole?

2020-05-08 Thread Nick Couchman
On Fri, May 8, 2020 at 7:08 AM Dave Kempe wrote: > > > On Fri, May 8, 2020, 8:52 PM Joachim Lindenberg > wrote: > >> Hi Dave, >> >> I am trying to understand what it does and what it is good for. My take >> is: the user has to authenticate first to salsa, with LDAP credentials, >> which

Re: File transfer via VNC

2020-05-08 Thread Nick Couchman
On Fri, May 8, 2020 at 8:39 AM Adan0s wrote: > Hey there, > > I'm curently evaluating guacamole 1.1.0 with clients connected via vnc > (tigervnc on windows 10). > While the clipboard works, transferring files doesn't. > If I drag a file into the browser window (firefox & chrome) the > following

Re: Check if local user on Win10 are already logged in

2020-05-11 Thread Nick Couchman
On Mon, May 11, 2020 at 8:14 AM Joachim Lindenberg wrote: > Hi Micael, > > while Guacamole could probably know who connected via Guacamole, Guacamole > will not know any user logged in via standard RDP or locally. You can get > that information via qwinsta, query session, or variants thereof,

Re: Error with Guacamole 1.1.0

2020-05-11 Thread Nick Couchman
On Mon, May 11, 2020 at 9:56 AM Nick Couchman wrote: > On Mon, May 11, 2020 at 8:32 AM Michael Bauer wrote: > >> Nick, >> >> When I ran it in debug mode it kept asking for a 2nd password and would >> not accept the passwords I knew. Here is the syslog output:

Re: Error with Guacamole 1.1.0

2020-05-11 Thread Nick Couchman
On Mon, May 11, 2020 at 10:35 AM Mike Bauer wrote: > Nick, > > That is not that actual IP address. The log cleaner used masks IP > addresses. It still doesn't allow complete logins though. > > Mike B. > > That makes sense. However, at this point it looks like Guacamole is connecting correctly

Re: Error with Guacamole 1.1.0

2020-05-11 Thread Nick Couchman
On Mon, May 11, 2020 at 8:32 AM Michael Bauer wrote: > Nick, > > When I ran it in debug mode it kept asking for a 2nd password and would > not accept the passwords I knew. Here is the syslog output: > > May 11 12:13:09 server01 guacd[18809]: Listening on host 127.0.0.1, port > 4822 > May 11

Re: RDP File transfer not working on windows 2016 or 2019

2020-05-11 Thread Nick Couchman
On Mon, May 11, 2020 at 8:32 AM Peter De Tender wrote: > Hi, > > I had an initial support request on RDP File Transfer last week, as I > couldn't get it to work. > > However, that was on my test win2019 VM, where it works fine on 2012R2. > > My security setting is NLA, but I also tried with TLS

Re: Docker automated builds?

2020-05-09 Thread Nick Couchman
On Sat, May 9, 2020 at 9:27 AM Joachim Lindenberg wrote: > Hello Team, > > is there any reason why you don´t leverage automated builds on docker hub? > > The benefit I see is that testing bug fixes or even testing with newer > builds more frequently would become easier if I don´t need to pull

Re: restrict or remove ldap search after login

2020-05-15 Thread Nick Couchman
On Fri, May 15, 2020 at 12:52 PM Carlos Al. wrote: > Thank you for your answer Nick. I have already read all the docs about > ldap. > In fact now we have this in guacamole.properties: > > /ldap-user-base-dn: ou=users,dc=org > ldap-username-attribute: uid > ldap-user-search-filter:

Re: restrict or remove ldap search after login

2020-05-15 Thread Nick Couchman
On Fri, May 15, 2020 at 10:15 AM Carlos Al. wrote: > Hello: > > We are using guacamole and we think it is fantastic. Thank you developers > for the great work. > > We need the ldap server just for authentication, and the database for > everything else (user settings, groups, connections, etc)

Re: Soon any guackamole package for debian?

2020-05-16 Thread Nick Couchman
On Fri, May 15, 2020 at 11:25 PM Reinert Korsnes wrote: > It seems to be no package for guackamole in the standard repositories of > the latest version of debian (10.4, buster). > > Any rumors about when debian will include it? > > The Guacamole project does not maintain packages for any Linux

Re: capital letters in usernames

2020-05-16 Thread Nick Couchman
On Fri, May 15, 2020 at 3:32 PM Jason Keltz wrote: > Hi. > > I notice that if I login to Guacamole with my username in all caps (or > just any letter), then my logins to Linux/Unix systems will fail. I don't > suppose there is a way I can tell Guac to convert usernames to lowercase? > This

Re: Soon any guackamole package for debian?

2020-05-16 Thread Nick Couchman
On Sat, May 16, 2020 at 8:04 AM Dave Kempe wrote: > > > On Sat, May 16, 2020, 9:30 PM Nick Couchman wrote: > >> >> >> For Debian, if you can find an Ubuntu repository with the packages they >> may be compatible, but it's hard to say. >> > > >

Re: Diffie Hellman Kex issue

2020-05-14 Thread Nick Couchman
Abhijeet, First, regarding the Diffie Hellman algorithm issues, there is no update on this. The ticket you referred to is for a very specific set of embedded devices, and, as I do not have access to any devices like that, it is very hard to reproduce. In general issues in Guacamole with key

Re: Group permissions management via REST API

2020-05-14 Thread Nick Couchman
On Thu, May 14, 2020 at 1:42 PM Charaoui, Jérôme < jchara...@cmaisonneuve.qc.ca> wrote: > Hello, > > Following the unofficial REST API docs located at the URL below, I've been > able to create connections and assign permisisons to those. > >

Re: Guacamole 1.1.0: Default connections for LDAP auth

2020-05-14 Thread Nick Couchman
On Thu, May 14, 2020 at 8:28 AM Sven Specker wrote: > On 2020-05-14 13:18, Nick Couchman wrote: > > >> > > Authenticating with LDAP does not require any changes to your LDAP > > directory. Storing the connections themselves within LDAP does require > > sc

Re: Guacamole 1.1.0: Default connections for LDAP auth

2020-05-14 Thread Nick Couchman
On Thu, May 14, 2020 at 5:38 AM Sven Specker wrote: > Hi! > > We are setting up guacamole 1.1.0 to be a RDP-based dispatcher for > virtual Linux desktops. > > The setup would be > > 1 balancing connection group with x servers, each allowing 2 connections > and 1/user. Pretty straightforward. > >

Re: No sound on RDP connection

2020-05-07 Thread Nick Couchman
On Wed, May 6, 2020 at 9:18 PM Dashamir Hoxha wrote: > > > On Wed, May 6, 2020 at 8:37 PM Nick Couchman wrote: > >> On Tue, May 5, 2020 at 11:44 PM Dashamir Hoxha >> wrote: >> >>> Hi, >>> >>> I have installed Guacamole 1.1.0, and xrdp on

Re: Recording in java, windows, tomcat7 not working

2020-05-07 Thread Nick Couchman
On Thu, May 7, 2020 at 6:59 AM erez wrote: > I'm running guacamole-common on java with tomcat7. > As I understand, in order to enable recording I need to set some config > parameters: > > config.setParameter("recording-path", > String.format("C:\\temp\\recordings\\%s", conn.orderedSessionId)); >

Re: TOTP minimun change?

2020-05-08 Thread Nick Couchman
On Fri, May 8, 2020 at 10:04 AM Neumen - Juan Prigoshin < jprigos...@autoneumen.com> wrote: > I have 1 Guacamole up working without problems. I use TOTP for 2FA with > Google Authenticator. > I dont change nothing in guacamole.properties for TOTP. > Default values are used. The TOTP Works great.

Re: TOTP minimun change?

2020-05-08 Thread Nick Couchman
On Fri, May 8, 2020 at 11:21 AM Neumen - Juan Prigoshin < jprigos...@autoneumen.com> wrote: > Nick : > > This is two different standalone servers. Its not Guacamole > problem. Its Google Authenticator problem. > > Ah, okay, I understand, now. > > > First server, QR Code its saved in

Re: Error with Guacamole 1.1.0

2020-05-08 Thread Nick Couchman
On Fri, May 8, 2020 at 2:23 PM Michael Bauer wrote: > > -- Original Message -- > From: Michael Bauer > To: user@guacamole.apache.org > Date: May 8, 2020 at 2:16 PM > Subject: Error with Guacamole 1.1.0 > > Hello, > > I keep getting this error after logging into the Guacamole

Re: Radius auth with groups from ldap or open groups

2020-05-08 Thread Nick Couchman
On Fri, May 8, 2020 at 2:26 PM Erlichman, Zachary wrote: > Hello, > > > > I was searching around and found this question touched on before, but I > was wondering if its at all possible to auth with radius first and still > get ldap groups. Or failing that, make it so a guacamole group is either

Re: counting disconnected sessions toward number of connections

2020-05-12 Thread Nick Couchman
On Tue, May 12, 2020 at 1:29 PM Jason Keltz wrote: > Hi.. > > I have a Guacamole connection that I have added as follows: > > Maximum number of connections: 1 > > Maximum number of connections per user: 1 > > Is there any way in Guacamole to count disconnected sessions that have > yet to be

<    5   6   7   8   9   10   11   12   13   14   >