Re: Can't print in RDP sessions

2019-02-27 Thread Fabián Rodríguez

Le 19-02-27 à 15 h 35, Nick Couchman a écrit :
> On Wed, Feb 27, 2019 at 3:18 PM Fabián Rodríguez
> mailto:magic...@member.fsf.org>> wrote:
>
> Hi,
>
> I am using Guacamole 1.0.0 in Debian 9 with Tomcat 8, database
> authentication with self-sgned SSL certificate.
>
> After following the installation documentation
> <https://guacamole.apache.org/doc/gug/installing-guacamole.html> I
> documented my initial 0.9.14 installation steps here
> <https://wiki.debian.org/Guacamole>. I then recently used this
> script
> 
> <https://raw.githubusercontent.com/MysticRyuujin/guac-install/master/guac-upgrade.sh>
> to update, while working around  a small bug
> <https://github.com/MysticRyuujin/guac-install/issues/77>. VNC,
> SSH and RDP remote sessions are used daily without problems.
>
>
> Just FYI, that script is not maintained by the project.

I know, it automates the native installation steps - I just mentioned it
for context.

> I can't seem to get a prompt to save the PDF file generated when
> printing in RDP sessions.
>
> I initially had to symlink all files in /usr/local/lib/freerdp to
> /usr/lib/x86_64-linux-gnu/freerdp, for example (see this bug
> report <https://github.com/oznu/docker-guacamole/issues/3>):
>
>
> The Docker image you're using is also not the official Guacamole
> project Docker image, and not maintained by the project [...]

Sorry, I am not using Docker. I linked the wrong bug report, I meant to
reference this one:

https://jira.glyptodon.com/browse/GUAC-513

>  ln -s /usr/local/lib/freerdp/guacdr-client.so
> /usr/lib/x86_64-linux-gnu/freerdp/guacdr-client.so
>
> After reboot guacdr started normally:
>
> Feb 27 14:35:19 guacamole guacd[14998]: guacsnd connected.
> Feb 27 14:35:19 guacamole guacd[14998]: guacdr connected.
>
> When connected, a new printer "Guacamole PDF printer" (as I named
> it) showed up. When I start printing there is no error, only a
> message on my local browser notifications "Waiting for
> guacamole.domain.lan...:" and nothing happens.
>
> Ghostscript is installed, in /var/syslog I see:
>
> Feb 27 14:44:51 guacamole guacd[23876]: Device 0 (Imprimante
> Guacamole PDF) connected successfully
> Feb 27 14:45:07 guacamole guacd[23876]: Print job created
> Feb 27 14:45:07 guacamole guacd[23876]: Created PDF filter process
> PID=24158
> Feb 27 14:45:07 guacamole guacd[24158]: Running gs
>
> And a gs process is running continuously:
>
> PID TTY  STAT   TIME COMMAND
> 24158 ?  S  0:06 gs -q -dNOPAUSE -dBATCH -dSAFER
> -dPARANOIDSAFER -sDEVICE=pdfwrite -sOutputFile=- -c .setpdfwrite
> -sstdout=/dev/null -f -
>
> But nothing happens...
>
> If I close the session then a file dialog to save appears, the
> resulting file is very small (255 bytes) and of course corrupted
> but it has PDF headers.
>
>
> The issue you're running into is likely this one:
>
> https://issues.apache.org/jira/browse/GUACAMOLE-506
>
> I don't know anything about how that Docker container you're using is
> set up, but I suspect it's using HTTP(S) and not WebSocket(/WSS).

I am not using Docker so not sure how the default installation would
have the same problem.

F.


-- 
Fabián Rodríguez
http://fsf.magicfab.ca/



Can't print in RDP sessions

2019-02-27 Thread Fabián Rodríguez
Hi,

I am using Guacamole 1.0.0 in Debian 9 with Tomcat 8, database
authentication with self-sgned SSL certificate.

After following the installation documentation
<https://guacamole.apache.org/doc/gug/installing-guacamole.html> I
documented my initial 0.9.14 installation steps here
<https://wiki.debian.org/Guacamole>. I then recently used this script
<https://raw.githubusercontent.com/MysticRyuujin/guac-install/master/guac-upgrade.sh>
to update, while working around  a small bug
<https://github.com/MysticRyuujin/guac-install/issues/77>. VNC, SSH and
RDP remote sessions are used daily without problems.

I can't seem to get a prompt to save the PDF file generated when
printing in RDP sessions.

I initially had to symlink all files in /usr/local/lib/freerdp to
/usr/lib/x86_64-linux-gnu/freerdp, for example (see this bug report
<https://github.com/oznu/docker-guacamole/issues/3>):

ln -s /usr/local/lib/freerdp/guacdr-client.so
/usr/lib/x86_64-linux-gnu/freerdp/guacdr-client.so

After reboot guacdr started normally:

Feb 27 14:35:19 guacamole guacd[14998]: guacsnd connected.
Feb 27 14:35:19 guacamole guacd[14998]: guacdr connected.

When connected, a new printer "Guacamole PDF printer" (as I named it)
showed up. When I start printing there is no error, only a message on my
local browser notifications "Waiting for guacamole.domain.lan...:" and
nothing happens.

Ghostscript is installed, in /var/syslog I see:

Feb 27 14:44:51 guacamole guacd[23876]: Device 0 (Imprimante Guacamole
PDF) connected successfully
Feb 27 14:45:07 guacamole guacd[23876]: Print job created
Feb 27 14:45:07 guacamole guacd[23876]: Created PDF filter process PID=24158
Feb 27 14:45:07 guacamole guacd[24158]: Running gs

And a gs process is running continuously:

PID TTY  STAT   TIME COMMAND
24158 ?  S  0:06 gs -q -dNOPAUSE -dBATCH -dSAFER -dPARANOIDSAFER
-sDEVICE=pdfwrite -sOutputFile=- -c .setpdfwrite -sstdout=/dev/null -f -

But nothing happens...

If I close the session then a file dialog to save appears, the resulting
file is very small (255 bytes) and of course corrupted but it has PDF
headers.

I tested this using both Firefox ESR and 65, Chrome and Chromium, from
Debian 9 and WIndows 7 Pro desktops with the same results. Any ideas or
suggestions on how to troubleshoot further ?

Thanks in advance.

F.

-- 
Fabián Rodríguez
http://fsf.magicfab.ca/



Re: set tomcat user?

2019-02-25 Thread Fabián Rodríguez


Le 19-02-25 à 20 h 09, Robert Dinse a écrit :
>
> I've got a bit of a disaster on my hands. I am in the process of
> installing guacamole. Got guacamole-server and guacamole-client built,
> so far so good. Tried to deploy but guacamole.war would not deploy in
> the Ubuntu 18.10 environment. Discovered this is because the version
> of Java, guacamole won't run in Java 11, needs Java 8. Okay, since I
> have no other java application it seemed reasonable to just de-install
> jdk-11 and install oracle-java-8 (jdk-8 is missing some libraries). So
> installed it and then tomcat wouldn't start. Found out when you build
> Tomcat it has a library that is specific to the Java version. So I
> snagged Tomcat source and built it and now tomcat runs and deploys
> guacamole.war correctly. However it is running as root, when you
> install the package in Ubuntu it runs as tomcat8, and that is how I
> would like it to run. But I can't figure out where in the
> configuration you set that. Does anyone know how to do this?
>
If you are starting from scratch you may find it easier to run this
script, please read it carefuly before using it:

https://github.com/MysticRyuujin/guac-install

May I also ask why use Ubuntu 18.10 ? It's better practice to use Ubuntu
18.04 LTS in a production environment.

F.



-- 
Fabián Rodríguez
http://fsf.magicfab.ca/



Re: GUACAMOLE 0.9.9 - RECORDING

2019-02-22 Thread Fabián Rodríguez


Le 19-02-21 à 17 h 34, Eriel Perez a écrit :
> I have the GUACAMOLE version 0.9.9 and it works well with RDP to a
> computer with windows.
>
> I need to record the sessions. As much as I look for I can not find a
> manual that explains how to do it. 

Search for "Session recording" at this page:

https://guacamole.apache.org/doc/gug/configuring-guacamole.html#connection-configuration

I'd suggest first upgrading to the latest version of Guacamole,
otherwise if you run into problems it makes it harder to help you.

Buen día,

F.


-- 
Fabián Rodríguez
http://fsf.magicfab.ca/



Re: Theme/Logo changing

2018-12-16 Thread Fabián Rodríguez
Thanks for putting this together from the previous ML thread!

I've added Debian information and fixed a few typos:

https://github.com/Zer0CoolX/guacamole-customize-loginscreen-extension/pull/1

F.

Le 18-12-10 à 11 h 49, Zer0Cool a écrit :
> I posted this on my Github 
> https://github.com/Zer0CoolX/guacamole-customize-loginscreen-extension
> <https://github.com/Zer0CoolX/guacamole-customize-loginscreen-extension>  
>
> Should give you a good foundation to start from. I have documented things
> and provided links to sources I used to figure it out.
>
> The easiest way to work this would be use the dev tools built into your
> browser, tweak the things you want to change live on your login page, make
> notes of what you changed and add it to the proper places in the files
> comprising the extension.
>
> I cant help directly with CSS/HTML, etc. but if you have questions about the
> extension let me know.
>
> Hope this helps.
>
>
>
> --
> Sent from: 
> http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/
>
-- 
Fabián Rodríguez
http://debian.magicfab.ca/



Re: New user, Debian HowTo, some suggestions

2018-02-02 Thread Fabián Rodríguez
Hi,


On 01/02/18 04:24 PM, Nick Couchman wrote:
> [..] Yeah, but if you have requests for improvements, they should go
> into JIRA.

OK, will do next time - thanks for clarifying.

>  
>
>   * In Settings > Users > $USER > Permissions, I'd like to be able
> to set two extra permissions:
>   o access sessions History tab
>   o access Active Sessions tab
>
> Can you explain why you think it is useful to have these as separate
> permissions?  I guess I can see this for auditing, perhaps, if you
> want users that have the ability to only audit connections and
> connection history, but I'm curious what your use-case is.

It's sometime required to provide a manager access to history and active
sessions without giving them full admin rights (change/add
users/connections).


>   * When using the filter to find connections, I'd like to see
> which Group they belong to (if any). Sometimes I have
> connections with the same name in different groups, the
> current filtering results don't show group membership
>
>
> That's because the idea of "groups" is not implemented at all in
> Guacamole right now.  There is a current JIRA issue, already, for
> adding groups to Guacamole.  See:
>
> https://issues.apache.org/jira/browse/GUACAMOLE-220

I think I wasn't specific enough. I am referring to connection groups,
not user groups. I may have used the wrong term (folders?), sorry.

>  
>
>   * Timezone for each user should be the same as the server's by
> default (or have an option to use the same as the server's)
>   * When clicking on a group checkbox, the selection should also
> include all members of the group, either checking or
> unchecking all boxes. I have some large groups (40+
> connections) and it would be faster to be able to
> include/exclude all connections in any given group.
>
> This also already has a JIRA issue - I'm not sure that I agree that
> checking a top-level box should result in all children being checked -
> there are situations where you want to, for example, assign
> permissions to a user to access a connection group (load-balanced,
> maybe) but not give them any access to the underlying connections.  I
> do agree that there needs to be a way to select all children more
> easily than you can right now.  See:
>
> https://issues.apache.org/jira/browse/GUACAMOLE-181
>
>   * Selecting a connection in a group is not enough to give
> access, the group also needs to be checked which is not
> obvious (perhaps it should be automatic)
>
> This depends on what you're trying to do, but see the point above. 
> This behavior is intentional.

I am not sure how to indicate this otherwise, but it's not intuitive. I
tested this with 2 sysadmins and they both highlighted this - it's not a
huge issue after our initial setup is done, for sure.  The issue seems
to reflect what can be improved. Is there a mechanism in the project to
make a donation or fund this development otherwise?

> My recent setup of Guacamole on a Debian server wasn't easy as the
> packages are outdated and some manual configuration was required.
>
> I've shared my notes for Debian server installation here if anyone
> is interested:
>
> https://wiki.debian.org/Guacamole <https://wiki.debian.org/Guacamole>
>
>
> Cool :-).
>
> -Nick

Thanks again to everyone involved in this, I hope to be able to
contribute back as time/knowledge permits.

- F.

-- 
Fabián Rodríguez
http://fsf.magicfab.ca/



New user, Debian HowTo, some suggestions

2018-02-01 Thread Fabián Rodríguez
Hello,

Many thanks for this software, it's proving very useful and I am happy I
was able to replace other similar proprietary software in a particular
situation I was dealing with.

I'd like to suggest some improvements, I preferred no to use the bug
tracker yet for this. Here is my short list:

  * In Settings > Users > $USER > Permissions, I'd like to be able to
set two extra permissions:
  o access sessions History tab
  o access Active Sessions tab
  * When using the filter to find connections, I'd like to see which
Group they belong to (if any). Sometimes I have connections with the
same name in different groups, the current filtering results don't
show group membership
  * Timezone for each user should be the same as the server's by default
(or have an option to use the same as the server's)
  * When clicking on a group checkbox, the selection should also include
all members of the group, either checking or unchecking all boxes. I
have some large groups (40+ connections) and it would be faster to
be able to include/exclude all connections in any given group.
  * Selecting a connection in a group is not enough to give access, the
group also needs to be checked which is not obvious (perhaps it
should be automatic)

My recent setup of Guacamole on a Debian server wasn't easy as the
packages are outdated and some manual configuration was required.

I've shared my notes for Debian server installation here if anyone is
interested:

https://wiki.debian.org/Guacamole

Any comments for improvement are most welcome. The goal was to use as
much as Debian provides in terms of official packages and long term use
(and support). I took the opportunity to file a few bug reports in Debian.

Cheers,

F.

-- 
Fabián Rodríguez
http://debian.magicfab.ca