RE: Issue with VNC on new 1.5.4 installation
Update: after some playing around and digging around, it appears as though the VNC connections work when we disable FIPS on the RHEL 8 Guacamole server. However, it is a security requirement set by our organization to have FIPS enabled, so how can we make this work with FIPS enabled? Thanks, Harry -Original Message- From: Devine, Harry (FAA) Sent: Thursday, April 25, 2024 9:55 AM To: user@guacamole.apache.org Subject: RE: Issue with VNC on new 1.5.4 installation CAUTION: This email originated from outside of the Federal Aviation Administration (FAA). Do not click on links or open attachments unless you recognize the sender and know the content is safe. I am now running guacd in Debug mode via "/usr/local/sbin/guacd -f -L debug", and here's what I see when I try to connect to a VNC connection: guacd[4319]: INFO: Creating new client for protocol "vnc" guacd[4319]: INFO: Connection ID is "$b2d849e6-b5e5-4b56-94e6-839c29da92c6" guacd[4369]: DEBUG: Processing instruction: size guacd[4369]: DEBUG: Processing instruction: audio guacd[4369]: DEBUG: Processing instruction: video guacd[4369]: DEBUG: Processing instruction: image guacd[4369]: DEBUG: Processing instruction: timezone guacd[4369]: DEBUG: Processing instruction: name guacd[4369]: INFO: Cursor rendering: local guacd[4369]: DEBUG: Parameter "swap-red-blue" omitted. Using default value of 0. guacd[4369]: DEBUG: Parameter "color-depth" omitted. Using default value of 0. guacd[4369]: DEBUG: Parameter "force-lossless" omitted. Using default value of 0. guacd[4369]: DEBUG: Parameter "dest-port" omitted. Using default value of 0. guacd[4369]: DEBUG: Parameter "encodings" omitted. Using default value of "zrle ultra copyrect hextile zlib corre rre raw". guacd[4369]: DEBUG: Parameter "autoretry" omitted. Using default value of 0. guacd[4369]: DEBUG: Parameter "reverse-connect" omitted. Using default value of 0. guacd[4369]: DEBUG: Parameter "listen-timeout" omitted. Using default value of 5000. guacd[4369]: DEBUG: Parameter "enable-audio" omitted. Using default value of 0. guacd[4369]: DEBUG: Parameter "enable-sftp" omitted. Using default value of 0. guacd[4369]: DEBUG: Parameter "sftp-hostname" omitted. Using default value of "xxx.xxx.xxx.xxx". guacd[4369]: DEBUG: Parameter "sftp-port" omitted. Using default value of "22". guacd[4369]: DEBUG: Parameter "sftp-username" omitted. Using default value of "". guacd[4369]: DEBUG: Parameter "sftp-password" omitted. Using default value of "". guacd[4369]: DEBUG: Parameter "sftp-passphrase" omitted. Using default value of "". guacd[4369]: DEBUG: Parameter "sftp-root-directory" omitted. Using default value of "/". guacd[4369]: DEBUG: Parameter "sftp-server-alive-interval" omitted. Using default value of 0. guacd[4369]: DEBUG: Parameter "sftp-disable-download" omitted. Using default value of 0. guacd[4369]: DEBUG: Parameter "sftp-disable-upload" omitted. Using default value of 0. guacd[4369]: DEBUG: Parameter "recording-name" omitted. Using default value of "recording". guacd[4369]: DEBUG: Parameter "recording-exclude-output" omitted. Using default value of 0. guacd[4369]: DEBUG: Parameter "recording-exclude-mouse" omitted. Using default value of 0. guacd[4369]: DEBUG: Parameter "recording-include-keys" omitted. Using default value of 0. guacd[4369]: DEBUG: Parameter "create-recording-path" omitted. Using default value of 0. guacd[4369]: DEBUG: Parameter "disable-copy" omitted. Using default value of 0. guacd[4369]: DEBUG: Parameter "disable-paste" omitted. Using default value of 0. guacd[4369]: DEBUG: Parameter "wol-send-packet" omitted. Using default value of 0. guacd[4369]: INFO: User "@8f157edc-f209-45de-808e-734861dd5816" joined connection "$b2d849e6-b5e5-4b56-94e6-839c29da92c6" (1 users now present) guacd[4369]: DEBUG: Client is using protocol version "VERSION_1_5_0" guacd[4369]: DEBUG: GCrypt initialization started. guacd[4369]: DEBUG: GCrypt initialization completed. guacd[4369]: ERROR: Unable to connect to VNC server. guacd[4369]: INFO: User "@8f157edc-f209-45de-808e-734861dd5816" disconnected (0 users remain) guacd[4369]: INFO: Last user of connection "$b2d849e6-b5e5-4b56-94e6-839c29da92c6" disconnected guacd[4369]: DEBUG: Requesting termination of client... guacd[4369]: DEBUG: Client terminated successfully. guacd[4319]: INFO: Connection "$b2d8
RE: Issue with VNC on new 1.5.4 installation
I am now running guacd in Debug mode via "/usr/local/sbin/guacd -f -L debug", and here's what I see when I try to connect to a VNC connection: guacd[4319]: INFO: Creating new client for protocol "vnc" guacd[4319]: INFO: Connection ID is "$b2d849e6-b5e5-4b56-94e6-839c29da92c6" guacd[4369]: DEBUG: Processing instruction: size guacd[4369]: DEBUG: Processing instruction: audio guacd[4369]: DEBUG: Processing instruction: video guacd[4369]: DEBUG: Processing instruction: image guacd[4369]: DEBUG: Processing instruction: timezone guacd[4369]: DEBUG: Processing instruction: name guacd[4369]: INFO: Cursor rendering: local guacd[4369]: DEBUG: Parameter "swap-red-blue" omitted. Using default value of 0. guacd[4369]: DEBUG: Parameter "color-depth" omitted. Using default value of 0. guacd[4369]: DEBUG: Parameter "force-lossless" omitted. Using default value of 0. guacd[4369]: DEBUG: Parameter "dest-port" omitted. Using default value of 0. guacd[4369]: DEBUG: Parameter "encodings" omitted. Using default value of "zrle ultra copyrect hextile zlib corre rre raw". guacd[4369]: DEBUG: Parameter "autoretry" omitted. Using default value of 0. guacd[4369]: DEBUG: Parameter "reverse-connect" omitted. Using default value of 0. guacd[4369]: DEBUG: Parameter "listen-timeout" omitted. Using default value of 5000. guacd[4369]: DEBUG: Parameter "enable-audio" omitted. Using default value of 0. guacd[4369]: DEBUG: Parameter "enable-sftp" omitted. Using default value of 0. guacd[4369]: DEBUG: Parameter "sftp-hostname" omitted. Using default value of "172.25.123.152". guacd[4369]: DEBUG: Parameter "sftp-port" omitted. Using default value of "22". guacd[4369]: DEBUG: Parameter "sftp-username" omitted. Using default value of "". guacd[4369]: DEBUG: Parameter "sftp-password" omitted. Using default value of "". guacd[4369]: DEBUG: Parameter "sftp-passphrase" omitted. Using default value of "". guacd[4369]: DEBUG: Parameter "sftp-root-directory" omitted. Using default value of "/". guacd[4369]: DEBUG: Parameter "sftp-server-alive-interval" omitted. Using default value of 0. guacd[4369]: DEBUG: Parameter "sftp-disable-download" omitted. Using default value of 0. guacd[4369]: DEBUG: Parameter "sftp-disable-upload" omitted. Using default value of 0. guacd[4369]: DEBUG: Parameter "recording-name" omitted. Using default value of "recording". guacd[4369]: DEBUG: Parameter "recording-exclude-output" omitted. Using default value of 0. guacd[4369]: DEBUG: Parameter "recording-exclude-mouse" omitted. Using default value of 0. guacd[4369]: DEBUG: Parameter "recording-include-keys" omitted. Using default value of 0. guacd[4369]: DEBUG: Parameter "create-recording-path" omitted. Using default value of 0. guacd[4369]: DEBUG: Parameter "disable-copy" omitted. Using default value of 0. guacd[4369]: DEBUG: Parameter "disable-paste" omitted. Using default value of 0. guacd[4369]: DEBUG: Parameter "wol-send-packet" omitted. Using default value of 0. guacd[4369]: INFO: User "@8f157edc-f209-45de-808e-734861dd5816" joined connection "$b2d849e6-b5e5-4b56-94e6-839c29da92c6" (1 users now present) guacd[4369]: DEBUG: Client is using protocol version "VERSION_1_5_0" guacd[4369]: DEBUG: GCrypt initialization started. guacd[4369]: DEBUG: GCrypt initialization completed. guacd[4369]: ERROR: Unable to connect to VNC server. guacd[4369]: INFO: User "@8f157edc-f209-45de-808e-734861dd5816" disconnected (0 users remain) guacd[4369]: INFO: Last user of connection "$b2d849e6-b5e5-4b56-94e6-839c29da92c6" disconnected guacd[4369]: DEBUG: Requesting termination of client... guacd[4369]: DEBUG: Client terminated successfully. guacd[4319]: INFO: Connection "$b2d849e6-b5e5-4b56-94e6-839c29da92c6" removed. guacd[4319]: DEBUG: Unable to request termination of client process: No such process guacd[4319]: DEBUG: All child processes for connection "$b2d849e6-b5e5-4b56-94e6-839c29da92c6" have been terminated. Thanks, Harry -Original Message- From: Devine, Harry (FAA) Sent: Thursday, April 25, 2024 9:33 AM To: user@guacamole.apache.org Subject: RE: Issue with VNC on new 1.5.4 installation CAUTION: This email originated from outside of the Federal Aviation Administration (FAA). Do not click on links or open attachments unless you recognize the sender and know the content is safe. I upgraded the inst
RE: Issue with VNC on new 1.5.4 installation
I upgraded the installation to 1.5.5, and the issue still occurs: Apr 25 09:31:38 tfdm-access guacd[2297]: Creating new client for protocol "vnc" Apr 25 09:31:38 tfdm-access guacd[2297]: Connection ID is "$9d945aa9-e0b1-4a68-8eb7-7cc94946c966" Apr 25 09:31:38 tfdm-access guacd[3870]: Cursor rendering: local Apr 25 09:31:38 tfdm-access guacd[3870]: User "@d9be5151-dfa2-42fe-b873-4ccd2dacdf97" joined connection "$9d945aa9-e0b1-4a68-8eb7-7cc94946c966" (1 users now present) Apr 25 09:31:38 tfdm-access server[1662]: 09:31:38.289 [http-nio-8080-exec-8] INFO o.a.g.tunnel.TunnelRequestService - User "guacadmin" connected to connection "79". Apr 25 09:31:38 tfdm-access guacd[3870]: VNC server supports protocol version 3.8 (viewer 3.8) Apr 25 09:31:38 tfdm-access guacd[3870]: We have 2 security types to read Apr 25 09:31:38 tfdm-access guacd[3870]: 0) Received security type 19 Apr 25 09:31:38 tfdm-access guacd[3870]: Selecting security type 19 (0/2 in the list) Apr 25 09:31:38 tfdm-access guacd[3870]: 1) Received security type 2 Apr 25 09:31:38 tfdm-access guacd[3870]: Selected Security Scheme 19 Apr 25 09:31:38 tfdm-access guacd[3870]: Failed to initialized GnuTLS: Error in public key generation.. Apr 25 09:31:38 tfdm-access guacd[3870]: Unable to connect to VNC server. Apr 25 09:31:38 tfdm-access server[1662]: 09:31:38.292 [http-nio-8080-exec-8] INFO o.a.g.t.h.RestrictedGuacamoleHTTPTunnelServlet - Using HTTP tunnel (not WebSocket). Performance may be sub-optimal. Apr 25 09:31:38 tfdm-access guacd[3870]: User "@d9be5151-dfa2-42fe-b873-4ccd2dacdf97" disconnected (0 users remain) Apr 25 09:31:38 tfdm-access guacd[3870]: Last user of connection "$9d945aa9-e0b1-4a68-8eb7-7cc94946c966" disconnected Apr 25 09:31:38 tfdm-access guacd[2297]: Connection "$9d945aa9-e0b1-4a68-8eb7-7cc94946c966" removed. Apr 25 09:31:38 tfdm-access server[1662]: 09:31:38.861 [http-nio-8080-exec-9] INFO o.a.g.tunnel.TunnelRequestService - User "guacadmin" disconnected from connection "79". Duration: 568 milliseconds Apr 25 09:31:38 tfdm-access server[1662]: 09:31:38.866 [http-nio-8080-exec-10] INFO o.a.g.tunnel.TunnelRequestService - User "guacadmin" disconnected from connection "79". Duration: 574 milliseconds Apr 25 09:31:42 tfdm-access server[1662]: 09:31:42.954 [http-nio-8080-exec-7] WARN o.a.g.s.GuacamoleHTTPTunnelServlet - HTTP tunnel request rejected: No such tunnel. Thanks, Harry -Original Message- From: Devine, Harry (FAA) Sent: Thursday, April 25, 2024 8:32 AM To: user@guacamole.apache.org Subject: RE: Issue with VNC on new 1.5.4 installation CAUTION: This email originated from outside of the Federal Aviation Administration (FAA). Do not click on links or open attachments unless you recognize the sender and know the content is safe. I have an Ansible Role that we use to install Guacamole. If I changed the version in that role to 1.5.5 and re-run it to re-install Guacamole, do you think that would be good to try and test if that fix worked for us? Thanks, Harry -Original Message- From: Ivanmarcus Sent: Wednesday, April 24, 2024 4:33 PM To: user@guacamole.apache.org Subject: Re: Issue with VNC on new 1.5.4 installation CAUTION: This email originated from outside of the Federal Aviation Administration (FAA). Do not click on links or open attachments unless you recognize the sender and know the content is safe. Harry, I'd start debugging here: Failed to initialized GnuTLS: Error in public key generation Now, without knowing more about your setup I wonder if the issue could be related to this?: https://issues.apache.org/jira/browse/GUACAMOLE-1921 It's been a while since I used VNC with Guacamole, and I'm not au fait with the detail around this bug, but as it's dealt with in Guacamole 1.5.5 you might want to trial that and see if the error persists. - To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org For additional commands, e-mail: user-h...@guacamole.apache.org - To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org For additional commands, e-mail: user-h...@guacamole.apache.org
RE: Issue with VNC on new 1.5.4 installation
I have an Ansible Role that we use to install Guacamole. If I changed the version in that role to 1.5.5 and re-run it to re-install Guacamole, do you think that would be good to try and test if that fix worked for us? Thanks, Harry -Original Message- From: Ivanmarcus Sent: Wednesday, April 24, 2024 4:33 PM To: user@guacamole.apache.org Subject: Re: Issue with VNC on new 1.5.4 installation CAUTION: This email originated from outside of the Federal Aviation Administration (FAA). Do not click on links or open attachments unless you recognize the sender and know the content is safe. Harry, I'd start debugging here: Failed to initialized GnuTLS: Error in public key generation Now, without knowing more about your setup I wonder if the issue could be related to this?: https://issues.apache.org/jira/browse/GUACAMOLE-1921 It's been a while since I used VNC with Guacamole, and I'm not au fait with the detail around this bug, but as it's dealt with in Guacamole 1.5.5 you might want to trial that and see if the error persists. - To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org For additional commands, e-mail: user-h...@guacamole.apache.org - To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org For additional commands, e-mail: user-h...@guacamole.apache.org
Re: Issue with VNC on new 1.5.4 installation
Harry, I'd start debugging here: Failed to initialized GnuTLS: Error in public key generation Now, without knowing more about your setup I wonder if the issue could be related to this?: https://issues.apache.org/jira/browse/GUACAMOLE-1921 It's been a while since I used VNC with Guacamole, and I'm not au fait with the detail around this bug, but as it's dealt with in Guacamole 1.5.5 you might want to trial that and see if the error persists. - To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org For additional commands, e-mail: user-h...@guacamole.apache.org
Issue with VNC on new 1.5.4 installation
We are trying to upgrade all of our servers to at least RHEL 8 since RHEL 7 will no longer be supported after June 30. One of our Guacamole servers on RHEL 7 is running 1.1.0, and the VNC connections work well. On the new server we created on RHEL 8, with Guacamole 1.5.4, VNC immediately fails. The /var/log/messages shows: Apr 24 15:08:26 tfdm-access server[1705]: 15:08:26.232 [http-nio-8080-exec-4] INFO o.a.g.r.auth.AuthenticationService - User "guacadmin" successfully authenticated from [172.26.46.176, 127.0.0.1]. Apr 24 15:08:36 tfdm-access guacd[15105]: Creating new client for protocol "vnc" Apr 24 15:08:36 tfdm-access guacd[15105]: Connection ID is "$6ae02db1-b8b3-4c4d-84ac-4978896156b3" Apr 24 15:08:36 tfdm-access guacd[310149]: Cursor rendering: local Apr 24 15:08:36 tfdm-access guacd[310149]: User "@be3d0de5-cbdc-420e-9e8f-c2554fdd21c6" joined connection "$6ae02db1-b8b3-4c4d-84ac-4978896156b3" (1 users now present) Apr 24 15:08:36 tfdm-access server[1705]: 15:08:36.844 [http-nio-8080-exec-8] INFO o.a.g.tunnel.TunnelRequestService - User "guacadmin" connected to connection "237". Apr 24 15:08:36 tfdm-access server[1705]: 15:08:36.844 [http-nio-8080-exec-8] INFO o.a.g.t.h.RestrictedGuacamoleHTTPTunnelServlet - Using HTTP tunnel (not WebSocket). Performance may be sub-optimal. Apr 24 15:08:36 tfdm-access guacd[310149]: VNC server supports protocol version 3.8 (viewer 3.8) Apr 24 15:08:36 tfdm-access guacd[310149]: We have 2 security types to read Apr 24 15:08:36 tfdm-access guacd[310149]: 0) Received security type 19 Apr 24 15:08:36 tfdm-access guacd[310149]: Selecting security type 19 (0/2 in the list) Apr 24 15:08:36 tfdm-access guacd[310149]: 1) Received security type 2 Apr 24 15:08:36 tfdm-access guacd[310149]: Selected Security Scheme 19 Apr 24 15:08:36 tfdm-access guacd[310149]: Failed to initialized GnuTLS: Error in public key generation.. Apr 24 15:08:36 tfdm-access guacd[310149]: Unable to connect to VNC server. Apr 24 15:08:37 tfdm-access guacd[310149]: User "@be3d0de5-cbdc-420e-9e8f-c2554fdd21c6" disconnected (0 users remain) Apr 24 15:08:37 tfdm-access guacd[310149]: Last user of connection "$6ae02db1-b8b3-4c4d-84ac-4978896156b3" disconnected Apr 24 15:08:37 tfdm-access guacd[15105]: Connection "$6ae02db1-b8b3-4c4d-84ac-4978896156b3" removed. Apr 24 15:08:37 tfdm-access server[1705]: 15:08:37.359 [http-nio-8080-exec-10] INFO o.a.g.tunnel.TunnelRequestService - User "guacadmin" disconnected from connection "237". Duration: 515 milliseconds Apr 24 15:08:37 tfdm-access server[1705]: 15:08:37.362 [http-nio-8080-exec-2] INFO o.a.g.tunnel.TunnelRequestService - User "guacadmin" disconnected from connection "237". Duration: 518 milliseconds Apr 24 15:08:41 tfdm-access server[1705]: 15:08:41.621 [http-nio-8080-exec-4] WARN o.a.g.s.GuacamoleHTTPTunnelServlet - HTTP tunnel request rejected: No such tunnel. Where could I start looking for a way to debug this? Could it have something to do with the VNC libraries on 1.5.4? Thanks, Harry [cid:image001.png@01DA9659.B9080FE0] Harry Devine Secure-OSE System Administrator Red Hat Certified System Administrator (RHCSA) Office: (609) 485-4218 Personal Cell: (609) 276-0555 FAA Cell: (609) 612-7274 Home Office/Telework: (609) 547-3579 Email : harry.dev...@faa.gov William J Hughes Technical Center Building 300 3rd Floor Column L20 Atlantic City, NJ 08405
Re: VNC vs keymap vs KVM
you will get better response and end to end encryption if you install xrdp on Kali. *Thank You* Sean Hulbert *Founder / CEO* *Work Ph:* 925.663.5565 *Security Centric Inc.* A Cybersecurity Virtualization Enablement Company /StormCloud Gov, Protected CUI Environment!/ Industry's most secure virtual desktops! */FedRAMP MIL4 in process (RAR)/* System Award Management *CAGE: 8AUV4* *SAM ID: UMJLJ8A7BMT3* AFCEA San Francisco Chapter President If you have heard of a hacker by name, he/she has failed, fear the hacker you haven’t heard of! CONFIDENTIALITY NOTICE: This communication with its contents may contain confidential and/or legally privileged information. It is solely for the use of the intended recipient(s). Unauthorized interception, review, use or disclosure is prohibited and may violate applicable laws including the Electronic Communications Privacy Act. If you are not the intended recipient, please contact the sender and destroy all copies of the communication. Content within this email communication is not legally binding as a contract and no promises are guaranteed unless in a formal contract outside this email communication. igitur qui desiderat pacem, praeparet bellum!!! Epitoma Rei Militaris On 4/16/2024 4:36 AM, Horváth Csaba wrote: Hi, Thanks! Finally found that if one sets the layout on the Spice settings, then the VNC screen replicates it... This is not 100% perfect, but mostly enough for me :) Thanks for the clarification :) Cs. Michael Jumper ezt írta (időpont: 2024. ápr. 15., H, 3:11): On 4/13/24 9:10 AM, Horváth Csaba wrote: Hi, I'm using KVM on Debian on my virtual host. It provides VNC screens, so the VM's are easily accessable from Guacamole. Discovered that Guacamole is not handling the keymaps correctly for Windows VM; the VM has HU keyboard, my laptop has HU keyboard; any other VNC client (Gnome builtin, Windows, Virt-manager SPICE client, etc) is handling the special keys correctly, Guacamole is mixing the layout up. Can i do anything related to VNC keymap setting? I haven't found anything like for RDP. When using KVM, you need to configure the virtual machine to explicitly note the keyboard layout you will be using if KVM's VNC server is to correctly translate received X11 keysyms (VNC key events) to internal scancodes (the events expected by the VM). There are extensions to the VNC protocol that allow the local scancode to be forwarded independently of the keysym. Where you are using a VNC client that works in this situation (despite the mismatch between KVM's expected layout and the guest OS' layout), it probably implements that protocol extension. - Mike - To unsubscribe, e-mail:user-unsubscr...@guacamole.apache.org For additional commands, e-mail:user-h...@guacamole.apache.org - To unsubscribe, e-mail:user-unsubscr...@guacamole.apache.org For additional commands, e-mail:user-h...@guacamole.apache.org
Re: VNC vs keymap vs KVM
Hi, Thanks! Finally found that if one sets the layout on the Spice settings, then the VNC screen replicates it... This is not 100% perfect, but mostly enough for me :) Thanks for the clarification :) Cs. Michael Jumper ezt írta (időpont: 2024. ápr. 15., H, 3:11): > > On 4/13/24 9:10 AM, Horváth Csaba wrote: > > Hi, > > > > I'm using KVM on Debian on my virtual host. It provides VNC screens, > > so the VM's are easily accessable from Guacamole. > > Discovered that Guacamole is not handling the keymaps correctly for > > Windows VM; the VM has HU keyboard, my laptop has HU keyboard; any > > other VNC client (Gnome builtin, Windows, Virt-manager SPICE client, > > etc) is handling the special keys correctly, Guacamole is mixing the > > layout up. > > > > Can i do anything related to VNC keymap setting? I haven't found > > anything like for RDP. > > > > When using KVM, you need to configure the virtual machine to explicitly > note the keyboard layout you will be using if KVM's VNC server is to > correctly translate received X11 keysyms (VNC key events) to internal > scancodes (the events expected by the VM). > > There are extensions to the VNC protocol that allow the local scancode > to be forwarded independently of the keysym. Where you are using a VNC > client that works in this situation (despite the mismatch between KVM's > expected layout and the guest OS' layout), it probably implements that > protocol extension. > > - Mike > > - > To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org > For additional commands, e-mail: user-h...@guacamole.apache.org > - To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org For additional commands, e-mail: user-h...@guacamole.apache.org
Re: VNC vs keymap vs KVM
On 4/13/24 9:10 AM, Horváth Csaba wrote: Hi, I'm using KVM on Debian on my virtual host. It provides VNC screens, so the VM's are easily accessable from Guacamole. Discovered that Guacamole is not handling the keymaps correctly for Windows VM; the VM has HU keyboard, my laptop has HU keyboard; any other VNC client (Gnome builtin, Windows, Virt-manager SPICE client, etc) is handling the special keys correctly, Guacamole is mixing the layout up. Can i do anything related to VNC keymap setting? I haven't found anything like for RDP. When using KVM, you need to configure the virtual machine to explicitly note the keyboard layout you will be using if KVM's VNC server is to correctly translate received X11 keysyms (VNC key events) to internal scancodes (the events expected by the VM). There are extensions to the VNC protocol that allow the local scancode to be forwarded independently of the keysym. Where you are using a VNC client that works in this situation (despite the mismatch between KVM's expected layout and the guest OS' layout), it probably implements that protocol extension. - Mike - To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org For additional commands, e-mail: user-h...@guacamole.apache.org
VNC vs keymap vs KVM
Hi, I'm using KVM on Debian on my virtual host. It provides VNC screens, so the VM's are easily accessable from Guacamole. Discovered that Guacamole is not handling the keymaps correctly for Windows VM; the VM has HU keyboard, my laptop has HU keyboard; any other VNC client (Gnome builtin, Windows, Virt-manager SPICE client, etc) is handling the special keys correctly, Guacamole is mixing the layout up. Can i do anything related to VNC keymap setting? I haven't found anything like for RDP. Thx, Cs. - To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org For additional commands, e-mail: user-h...@guacamole.apache.org
Re: VNC to macOS Connections
You my try this for information on xrdp on MacOS
https://github.com/neutrinolabs/xrdp/issues/2194
Since mac is based on FreeBSD/NetBSD this may help
https://www.jeremymorgan.com/tutorials/freebsd/how-to-remote-desktop-in-freebsd/
*Thank You*
Sean Hulbert
*Founder / CEO*
*Work Ph:* 925.663.5565
*Security Centric Inc.*
A Cybersecurity Virtualization Enablement Company
/StormCloud Gov, Protected CUI Environment!/
Industry's most secure virtual desktops!
*/FedRAMP MIL4 in process (RAR)/*
System Award Management
*CAGE: 8AUV4*
*SAM ID: UMJLJ8A7BMT3*
AFCEA San Francisco Chapter President
If you have heard of a hacker by name, he/she has failed, fear the
hacker you haven’t heard of!
CONFIDENTIALITY NOTICE: This communication with its contents may contain
confidential and/or legally privileged information. It is solely for the
use of the intended recipient(s). Unauthorized interception, review, use
or disclosure is prohibited and may violate applicable laws including
the Electronic Communications Privacy Act. If you are not the intended
recipient, please contact the sender and destroy all copies of the
communication. Content within this email communication is not legally
binding as a contract and no promises are guaranteed unless in a formal
contract outside this email communication.
igitur qui desiderat pacem, praeparet bellum!!!
Epitoma Rei Militaris
On 4/5/2024 6:06 AM, Chris Herrmann wrote:
Currently, I've been using the macOS VNC implementation but would like
to test RealVNC. Unfortunately, I continue to have connection issues
even after following all the documentation and forum information at
RealVNC's website.
Has anyone had luck using RealVNC?
Thanks.
On Sun, Mar 24, 2024 at 12:17 AM Michael Jumper
wrote:
On 3/22/24 08:14, Chris Herrmann wrote:
> We've set up a small Guacamole server to offer remote Xcode
access for
> students enrolled in a mobile app development course. Users
> authenticate to our CAS server to connect to the Guac server then
> re-authenticate at the macOS login prompt via AD binding.
>
> At present, we have set up a standard account on the macOS
clients to
> keep the VNC connection transparent to the user. If a user
forgets to
> log out of macOS and clicks 'back' or closes the tab; the next
> connection auto-authenticates in macOS with the standard user we
set up
> for VNC.
>
> Did we miss something in the documentation to ensure this isn't
> possible? or should we change something in the server or client
> configuration?
>
You'll need to look into the configuration of your VNC server. In
this
case, the behavior you're seeing is entirely dictated by the VNC
server
and OS. There may be options within your VNC server that ensure new
connections are given new sessions, or that existing sessions time
out
after some period of time. The VNC client has no control over this,
unfortunately.
- Mike
-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org
Re: VNC to macOS Connections
Currently, I've been using the macOS VNC implementation but would like to test RealVNC. Unfortunately, I continue to have connection issues even after following all the documentation and forum information at RealVNC's website. Has anyone had luck using RealVNC? Thanks. On Sun, Mar 24, 2024 at 12:17 AM Michael Jumper wrote: > On 3/22/24 08:14, Chris Herrmann wrote: > > We've set up a small Guacamole server to offer remote Xcode access for > > students enrolled in a mobile app development course. Users > > authenticate to our CAS server to connect to the Guac server then > > re-authenticate at the macOS login prompt via AD binding. > > > > At present, we have set up a standard account on the macOS clients to > > keep the VNC connection transparent to the user. If a user forgets to > > log out of macOS and clicks 'back' or closes the tab; the next > > connection auto-authenticates in macOS with the standard user we set up > > for VNC. > > > > Did we miss something in the documentation to ensure this isn't > > possible? or should we change something in the server or client > > configuration? > > > > You'll need to look into the configuration of your VNC server. In this > case, the behavior you're seeing is entirely dictated by the VNC server > and OS. There may be options within your VNC server that ensure new > connections are given new sessions, or that existing sessions time out > after some period of time. The VNC client has no control over this, > unfortunately. > > - Mike > > - > To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org > For additional commands, e-mail: user-h...@guacamole.apache.org > >
Re: VNC to macOS Connections
On 3/22/24 08:14, Chris Herrmann wrote: We've set up a small Guacamole server to offer remote Xcode access for students enrolled in a mobile app development course. Users authenticate to our CAS server to connect to the Guac server then re-authenticate at the macOS login prompt via AD binding. At present, we have set up a standard account on the macOS clients to keep the VNC connection transparent to the user. If a user forgets to log out of macOS and clicks 'back' or closes the tab; the next connection auto-authenticates in macOS with the standard user we set up for VNC. Did we miss something in the documentation to ensure this isn't possible? or should we change something in the server or client configuration? You'll need to look into the configuration of your VNC server. In this case, the behavior you're seeing is entirely dictated by the VNC server and OS. There may be options within your VNC server that ensure new connections are given new sessions, or that existing sessions time out after some period of time. The VNC client has no control over this, unfortunately. - Mike - To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org For additional commands, e-mail: user-h...@guacamole.apache.org
VNC to macOS Connections
We've set up a small Guacamole server to offer remote Xcode access for students enrolled in a mobile app development course. Users authenticate to our CAS server to connect to the Guac server then re-authenticate at the macOS login prompt via AD binding. At present, we have set up a standard account on the macOS clients to keep the VNC connection transparent to the user. If a user forgets to log out of macOS and clicks 'back' or closes the tab; the next connection auto-authenticates in macOS with the standard user we set up for VNC. Did we miss something in the documentation to ensure this isn't possible? or should we change something in the server or client configuration? Thanks for your help! Chris
Re: Issue with VNC installation
Harry, You may want to not use VNC, it will not pass the audit in NIST800-53 or NIST 800-171 for FIPS 140-2. However you can use xRDP which works well with FIPS 140-2 on Linux/Red Hat systems. Assuming this is on a Federal network, however disregard if this is your home network. *Thank You* Sean Hulbert *Founder / CEO* *Work Ph:* 925.663.5565 *Security Centric Inc.* A Cybersecurity Virtualization Enablement Company /StormCloud Gov, Protected CUI Environment!/ Industry's most secure virtual desktops! */FedRAMP MIL4 in process (RAR)/* System Award Management *CAGE: 8AUV4* *SAM ID: UMJLJ8A7BMT3* AFCEA San Francisco Chapter President If you have heard of a hacker by name, he/she has failed, fear the hacker you haven’t heard of! CONFIDENTIALITY NOTICE: This communication with its contents may contain confidential and/or legally privileged information. It is solely for the use of the intended recipient(s). Unauthorized interception, review, use or disclosure is prohibited and may violate applicable laws including the Electronic Communications Privacy Act. If you are not the intended recipient, please contact the sender and destroy all copies of the communication. Content within this email communication is not legally binding as a contract and no promises are guaranteed unless in a formal contract outside this email communication. igitur qui desiderat pacem, praeparet bellum!!! Epitoma Rei Militaris On 2/27/2024 7:33 AM, Devine, Harry (FAA) wrote: Thank you! That fixed the issue. I’m on RHEL 8 and wasn’t aware of the libgcrypt dependency. Thanks, Harry *From:* Nick Couchman *Sent:* Tuesday, February 27, 2024 9:28 AM *To:* user@guacamole.apache.org *Subject:* Re: Issue with VNC installation *CAUTION:*This email originated from outside of the Federal Aviation Administration (FAA). Do not click on links or open attachments unless you recognize the sender and know the content is safe. On Tue, Feb 27, 2024 at 9:12 AM Devine, Harry (FAA) wrote: I have an Ansible role that installs Guacamole for me. Been working very well. The latest one that one of our users is testing doesn’t seem to have support for VNC. I went back through the output and I find the following: configure: WARNING: libvncserver appears to be built against libgcrypt, but the libgcrypt headers could not be found. VNC will be disabled. configure: WARNING: Unable to find libwebsockets. Support for Kubernetes will be disabled. As well as: guacamole-server version 1.5.4 Library status: freerdp2 yes pango ... yes libavcodec .. yes libavformat.. yes libavutil ... yes libssh2 . yes libssl .. yes libswscale .. yes libtelnet ... yes libVNCServer no libvorbis ... yes libpulse yes libwebsockets ... no libwebp . yes wsock32 . no Protocol support: Kubernetes no RDP ... yes SSH ... yes Telnet yes VNC ... no Services / tools: guacd .. yes guacenc yes guaclog yes FreeRDP plugins: /usr/lib64/freerdp2 Init scripts: /etc/init.d Systemd units: no How can I fix this so VNC is enabled? I’m sure I’ll need to fix this installation manually, then add whatever needs to be done to the role to make future installations work. Make sure you're installing the libgcrypt development package - depending on what Linux distro you're using, it may be gcrypt-devel, libgcrypt-devel grcypt-dev, or libgcrypt-dev. -Nick
RE: Issue with VNC installation
Thank you! That fixed the issue. I’m on RHEL 8 and wasn’t aware of the
libgcrypt dependency.
Thanks,
Harry
From: Nick Couchman
Sent: Tuesday, February 27, 2024 9:28 AM
To: user@guacamole.apache.org
Subject: Re: Issue with VNC installation
CAUTION: This email originated from outside of the Federal Aviation
Administration (FAA). Do not click on links or open attachments unless you
recognize the sender and know the content is safe.
On Tue, Feb 27, 2024 at 9:12 AM Devine, Harry (FAA)
mailto:harry.dev...@faa.gov.invalid>> wrote:
I have an Ansible role that installs Guacamole for me. Been working very well.
The latest one that one of our users is testing doesn’t seem to have support
for VNC. I went back through the output and I find the following:
configure: WARNING:
libvncserver appears to be built against
libgcrypt, but the libgcrypt headers
could not be found. VNC will be disabled.
configure: WARNING:
Unable to find libwebsockets.
Support for Kubernetes will be disabled.
As well as:
guacamole-server version 1.5.4
Library status:
freerdp2 yes
pango ... yes
libavcodec .. yes
libavformat.. yes
libavutil ... yes
libssh2 . yes
libssl .. yes
libswscale .. yes
libtelnet ... yes
libVNCServer no
libvorbis ... yes
libpulse yes
libwebsockets ... no
libwebp . yes
wsock32 . no
Protocol support:
Kubernetes no
RDP ... yes
SSH ... yes
Telnet yes
VNC ... no
Services / tools:
guacd .. yes
guacenc yes
guaclog yes
FreeRDP plugins: /usr/lib64/freerdp2
Init scripts: /etc/init.d
Systemd units: no
How can I fix this so VNC is enabled? I’m sure I’ll need to fix this
installation manually, then add whatever needs to be done to the role to make
future installations work.
Make sure you're installing the libgcrypt development package - depending on
what Linux distro you're using, it may be gcrypt-devel, libgcrypt-devel
grcypt-dev, or libgcrypt-dev.
-Nick
Re: Issue with VNC installation
On Tue, Feb 27, 2024 at 9:12 AM Devine, Harry (FAA) wrote: > I have an Ansible role that installs Guacamole for me. Been working very > well. The latest one that one of our users is testing doesn’t seem to have > support for VNC. I went back through the output and I find the following: > > > > configure: WARNING: > > > >libvncserver appears to be built against > >libgcrypt, but the libgcrypt headers > >could not be found. VNC will be disabled. > > > > configure: WARNING: > > > >Unable to find libwebsockets. > >Support for Kubernetes will be disabled. > > > > > > As well as: > > > > > > guacamole-server version 1.5.4 > > > > > >Library status: > > > > freerdp2 yes > > pango ... yes > > libavcodec .. yes > > libavformat.. yes > > libavutil ... yes > > libssh2 . yes > > libssl .. yes > > libswscale .. yes > > libtelnet ... yes > > libVNCServer no > > libvorbis ... yes > > libpulse yes > > libwebsockets ... no > > libwebp . yes > > wsock32 . no > > > >Protocol support: > > > > Kubernetes no > > RDP ... yes > > SSH ... yes > > Telnet yes > > VNC ... no > > > >Services / tools: > > > > guacd .. yes > > guacenc yes > > guaclog yes > > > >FreeRDP plugins: /usr/lib64/freerdp2 > >Init scripts: /etc/init.d > >Systemd units: no > > > > How can I fix this so VNC is enabled? I’m sure I’ll need to fix this > installation manually, then add whatever needs to be done to the role to > make future installations work. > > > Make sure you're installing the libgcrypt development package - depending on what Linux distro you're using, it may be gcrypt-devel, libgcrypt-devel grcypt-dev, or libgcrypt-dev. -Nick >
Issue with VNC installation
I have an Ansible role that installs Guacamole for me. Been working very well. The latest one that one of our users is testing doesn't seem to have support for VNC. I went back through the output and I find the following: configure: WARNING: libvncserver appears to be built against libgcrypt, but the libgcrypt headers could not be found. VNC will be disabled. configure: WARNING: Unable to find libwebsockets. Support for Kubernetes will be disabled. As well as: guacamole-server version 1.5.4 Library status: freerdp2 yes pango ... yes libavcodec .. yes libavformat.. yes libavutil ... yes libssh2 . yes libssl .. yes libswscale .. yes libtelnet ... yes libVNCServer no libvorbis ... yes libpulse yes libwebsockets ... no libwebp . yes wsock32 . no Protocol support: Kubernetes no RDP ... yes SSH ... yes Telnet yes VNC ... no Services / tools: guacd .. yes guacenc yes guaclog yes FreeRDP plugins: /usr/lib64/freerdp2 Init scripts: /etc/init.d Systemd units: no How can I fix this so VNC is enabled? I'm sure I'll need to fix this installation manually, then add whatever needs to be done to the role to make future installations work. Thanks, Harry Harry Devine Secure-OSE System Administrator Red Hat Certified System Administrator (RHCSA) Work: (609) 485-4218 FAA Cell: (609) 612-7274 Home Office/Telework: (609) 547-3579
Problem setting up a vnc connection to Mac
Hi all, I'm hoping someone else has come across this. We have a docker guacamole server v1.5.4 running just fine. I can setup vnc and rdp connections on it going to windows machines and linux machines. However I am having difficulty setting up a VNC connection to a Mac. I can connect to the Mac with uVnc client. But no matter what settings I use for a guacamole vnc session, it refuses to connect. If I don't specify a username, it then prompts for one. I have tried various usernames from the mac in there, but nothing works. Has anyone else had difficulty setting up a vnc connection to a Mac? If you have successfully done this, can you please let me know what you did to get it to work. Thank you, Ross
[SECURITY] CVE-2023-43826: Apache Guacamole: Integer overflow in handling of VNC image buffers
Severity: important Base CVSS Score: 7.5 (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Affected versions: - Apache Guacamole through 1.5.3 Description: Apache Guacamole 1.5.3 and older do not consistently ensure that values received from a VNC server will not result in integer overflow. If a user connects to a malicious or compromised VNC server, specially crafted data could result in memory corruption, possibly allowing arbitrary code to be executed with the privileges of the running guacd process. Users are recommended to upgrade to version 1.5.4, which fixes this issue. Credit: We would like to thank Joseph Surin and Matt Jones (Elttam) for reporting this issue. References: https://guacamole.apache.org/ https://www.cve.org/CVERecord?id=CVE-2023-43826 Timeline: 2023-09-22: Reported to secur...@guacamole.apache.org 2023-09-22: Report acknowledged by project 2023-09-22: Report confirmed by project 2023-10-26: Fix completed and merged 2023-10-27: Fix tested and confirmed by reporter 2023-12-08: Fix released - To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org For additional commands, e-mail: user-h...@guacamole.apache.org
Re: [EXTERNAL] Re: VNC Display Params
On Tue, Nov 28, 2023 at 8:26 AM Jorge López Díaz wrote: > Ok, thanks for your response! > > > > So, we are using guacamole/guacd:1.5.3 image and the last > guacamole-common.js and as I understand… do we need to wait to a newer > image with this “issue” fixed? > Yes, that's correct - the feature hasn't been implemented, yet. I did work on it the last couple of days and put in a pull request that should enable it, but I have not had a chance to actually test it, yet, and see if it works. No idea when that will get reviewed/merged or what version it will be part of, but it will not be a part of the upcoming 1.5.4 bug fix release. Also, the ability for it to actually work depends upon both the changes that need to be made to the Guacamole code, but also support for it in the VNC server, which may be hit-or-miss. -Nick >
Re: [EXTERNAL] Re: VNC Display Params
On Mon, Nov 27, 2023 at 5:54 AM Jorge López Díaz wrote: > Hi Michael and Nick, > > > > Thanks for your response! > > > > @Nick Couchman : “*but you'll have to be more specific > as to what parameters you're looking to pass.*” > > > > When we configure a ssh connection, for example, we pass params like > width, height and dpi params in the config params for the connection under > the name of *params *as you can see in this screencapture: > > > > But reading docs about configuring connections for VNC related to display > settings for this kind of connection it’s not possible: > > For all other connections, as Michaels said, we are using on resize > method, sending the width and heigh of user’s displays and it’s working as > expected, except in VNC. > > > Correct - the original VNC protocol did not contain a standard way to set the remote display (server) desktop size, so it was fixed at whatever the dimensions were when you started the server. This has changed some over the years; however, it was implemented in different ways by different VNC implementations, so it's still hit-or-miss as to whether or not it works from one client to another server. That said, there is a Jira issue for this, which was updated over the summer and mentions the support added to the libvncclient library for sending the display size to the server: https://issues.apache.org/jira/browse/GUACAMOLE-1196 So, it looks like we just need to check for support for that at compile time and put the support in there for sending that back to the server. -Nick >
Re: VNC Display Params
On 11/21/2023 6:56 AM, Nick Couchman wrote: On Tue, Nov 21, 2023 at 2:29 AM Jorge López Díaz wrote: Hi, __ __ Is it possible to pass display params or something like that for VNC connection, as I read in the docs it’s not possible but using the official guacamole image it’s look like better than our integration, so we would like to know the config params that we need to view the VNC display like the official image. __ Yes, it's definitely possible to pass display parameters for connections, but you'll have to be more specific as to what parameters you're looking to pass. I don't see a huge amount of difference between the two images you sent, other than the fact that the one from the official image seems to have black bars on the sides of the image, which is part of how the ManageClient component of the full Guacamole Client system is built. Yep, this looks like just a lack of CSS styling surrounding the display, not a difference in display parameters. The client is rendering the display identically in both cases. Jorge: things like whether the page background is black, whether the display is centered, are all outside the purview of the low-level client component. Just like any other element on a web page, if you want the appearance and location to be different than just "a box, wherever text would be", you will need to apply CSS of your choosing to implement that. As for the *size* of the display, it is also on you to decide whether and how to scale the display. By default, the local display will be perfectly 1:1 the size of the remote display. If that's not what you're looking for, you'll have to invoke scale() as needed to reduce/increase the relative size of the display as necessary. This is how the standard Guacamole webapp scales the display to fit the window, scales the display to fit that toolbar of running connections, scales the display to fit the "recent connections" area, scales the display to fit the session recording playback area, etc. See: https://guacamole.apache.org/doc/guacamole-common-js/Guacamole.Display.html#event:onresize https://guacamole.apache.org/doc/guacamole-common-js/Guacamole.Display.html#scale - Mike - To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org For additional commands, e-mail: user-h...@guacamole.apache.org
Re: VNC Display Params
On Tue, Nov 21, 2023 at 2:29 AM Jorge López Díaz wrote: > Hi, > > > > Is it possible to pass display params or something like that for VNC > connection, as I read in the docs it’s not possible but using the official > guacamole image it’s look like better than our integration, so we would > like to know the config params that we need to view the VNC display like > the official image. > > > Yes, it's definitely possible to pass display parameters for connections, but you'll have to be more specific as to what parameters you're looking to pass. I don't see a huge amount of difference between the two images you sent, other than the fact that the one from the official image seems to have black bars on the sides of the image, which is part of how the ManageClient component of the full Guacamole Client system is built. -Nick >
Re: Guacamole 1.5.3 - Copy and Paste Issue on Mac via VNC (inside the session)
Absolutely, I'll give those suggestions a try. I should clarify that there appear to be two potentially related issues: 1. The first issue involves copying and pasting between the client and the remote system. When I copy something to the clipboard on the system I'm remoting from, and then use Ctrl-Alt-Shift to bring up the sidebar while in the client system, the clipboard box does display my copied text. However, any attempt to paste it using Command-v on the remote system fails. This also holds true when I try to paste from the menu on the remote system manually. 2. The second issue pertains to copying and pasting solely within the remote system. Copying and pasting works when I use the dropdown menu at the top of the Mac command bar, but the Command-c/Command-v function is not operational. Also, things like command-space, which brings up spotlight in MacOS does not work either. Seems like the meta key is not being recognized in the session somehow. Regarding the on-screen keyboard, how can I execute a multi-key combination? I can select a key with the mouse, but only one at a time. I need to test Meta-C/Meta-V. Maybe the two issues are related? Seems like a key mapping issue of somesort. I'm connecting to the standard MacOS VNC server that comes built into MacOS. On Tue, Oct 17, 2023 at 1:44 PM Nick Couchman wrote: > On Tue, Oct 17, 2023 at 8:49 AM Doug Baggett > wrote: > >> Hello everyone, >> >> I appreciate any assistance you can provide with an issue I'm currently >> facing. I'm using Apache Guacamole 1.5.3 to connect to my Mac at home via >> VNC. Everything is running smoothly except for one problem: the copy and >> paste functionality doesn't seem to work (while inside the session). >> >> Typically, the shortcuts for copy and paste on a Mac are Command-C and >> Command-V respectively. If you're using a Windows keyboard on a Mac, these >> would translate to Windows-C and Windows-V. However, when I try to use >> Command-C within the VNC session, the Command key appears to be >> unresponsive and I simply get a 'c' character. >> > > This seems like maybe it is not a Copy/Paste or clipboard issue, but > actually a key mapping issue, where the command key and/or Windows key are > not mapped through correctly. A couple of things to try to verify this: > 1) If you use the Edit -> Copy and/or Edit-> Paste menu within the > guest/remote system, rather than trying the hotkey, does the clipboard work > and sync up? > 2) If you turn on the on-screen keyboard and use the hotkeys, there, does > it correctly trigger the remote system to paste? > > I'm not suggesting these as solutions, just ways to narrow down the > problem. > > -Nick >
Re: Guacamole 1.5.3 - Copy and Paste Issue on Mac via VNC (inside the session)
On Tue, Oct 17, 2023 at 8:49 AM Doug Baggett wrote: > Hello everyone, > > I appreciate any assistance you can provide with an issue I'm currently > facing. I'm using Apache Guacamole 1.5.3 to connect to my Mac at home via > VNC. Everything is running smoothly except for one problem: the copy and > paste functionality doesn't seem to work (while inside the session). > > Typically, the shortcuts for copy and paste on a Mac are Command-C and > Command-V respectively. If you're using a Windows keyboard on a Mac, these > would translate to Windows-C and Windows-V. However, when I try to use > Command-C within the VNC session, the Command key appears to be > unresponsive and I simply get a 'c' character. > This seems like maybe it is not a Copy/Paste or clipboard issue, but actually a key mapping issue, where the command key and/or Windows key are not mapped through correctly. A couple of things to try to verify this: 1) If you use the Edit -> Copy and/or Edit-> Paste menu within the guest/remote system, rather than trying the hotkey, does the clipboard work and sync up? 2) If you turn on the on-screen keyboard and use the hotkeys, there, does it correctly trigger the remote system to paste? I'm not suggesting these as solutions, just ways to narrow down the problem. -Nick
Guacamole 1.5.3 - Copy and Paste Issue on Mac via VNC (inside the session)
Hello everyone, I appreciate any assistance you can provide with an issue I'm currently facing. I'm using Apache Guacamole 1.5.3 to connect to my Mac at home via VNC. Everything is running smoothly except for one problem: the copy and paste functionality doesn't seem to work (while inside the session). Typically, the shortcuts for copy and paste on a Mac are Command-C and Command-V respectively. If you're using a Windows keyboard on a Mac, these would translate to Windows-C and Windows-V. However, when I try to use Command-C within the VNC session, the Command key appears to be unresponsive and I simply get a 'c' character. I'm using microsoft edge. I'm certain I'm overlooking something, but I can't seem to figure out what it is. If anyone has encountered a similar issue or has any suggestions, I would greatly appreciate your input. Thank you in advance for your help!
Windows key not working in VNC?
When using Guacamole's on-screen keyboard, on a VNC connection to a
Windows host, the Meta key does not seem to have any effect. We have a
pretty homogeneous group of host computers, so for me the attached patch
takes care of it; but I suspect that in order to work in all contexts
(RDP? Mac host?) the changes might better be made elsewhere.
Has anyone else experienced the same issue?
The patch is against 1.5.1, but afaict the relevant files don't appear
to have changed for some time.
Thanks,
--
---
Konrad Schroder Box 352143 -or- 115D Fluke Hall, Mason Road
Software Developer and Sys Admin University of Washington
College of Engineering Seattle, WA, 98195, USA
diff -ur
guacamole-client-1.5.1.dist/guacamole/src/main/frontend/dist/app/osk/styles/osk.css
guacamole-client-1.5.1/guacamole/src/main/frontend/dist/app/osk/styles/osk.css
---
guacamole-client-1.5.1.dist/guacamole/src/main/frontend/dist/app/osk/styles/osk.css
2023-05-23 08:07:21.436184978 -0700
+++
guacamole-client-1.5.1/guacamole/src/main/frontend/dist/app/osk/styles/osk.css
2023-07-06 11:45:52.308280691 -0700
@@ -119,6 +119,9 @@
/* Active super */
.guac-keyboard.guac-keyboard-modifier-super .guac-keyboard-key-super,
+/* Active meta */
+.guac-keyboard.guac-keyboard-modifier-meta .guac-keyboard-key-meta,
+
/* Active latin */
.guac-keyboard.guac-keyboard-modifier-lat .guac-keyboard-key-latin {
background: #882;
diff -ur
guacamole-client-1.5.1.dist/guacamole/src/main/frontend/dist/layouts/en-us-qwerty.json
guacamole-client-1.5.1/guacamole/src/main/frontend/dist/layouts/en-us-qwerty.json
---
guacamole-client-1.5.1.dist/guacamole/src/main/frontend/dist/layouts/en-us-qwerty.json
2023-05-23 08:07:21.436184978 -0700
+++
guacamole-client-1.5.1/guacamole/src/main/frontend/dist/layouts/en-us-qwerty.json
2023-07-06 11:45:52.312280668 -0700
@@ -88,9 +88,9 @@
"keysym" : 65514
}],
"Meta" : [{
-"title": "Meta",
+"title": "Win",
"modifier" : "meta",
-"keysym" : 65511
+"keysym" : 65515
}],
"`" : [
diff -ur
guacamole-client-1.5.1.dist/guacamole/src/main/frontend/src/app/osk/styles/osk.css
guacamole-client-1.5.1/guacamole/src/main/frontend/src/app/osk/styles/osk.css
---
guacamole-client-1.5.1.dist/guacamole/src/main/frontend/src/app/osk/styles/osk.css
2023-03-15 11:03:56.0 -0700
+++
guacamole-client-1.5.1/guacamole/src/main/frontend/src/app/osk/styles/osk.css
2023-07-06 11:45:22.988443261 -0700
@@ -119,6 +119,9 @@
/* Active super */
.guac-keyboard.guac-keyboard-modifier-super .guac-keyboard-key-super,
+/* Active meta */
+.guac-keyboard.guac-keyboard-modifier-meta .guac-keyboard-key-meta,
+
/* Active latin */
.guac-keyboard.guac-keyboard-modifier-lat .guac-keyboard-key-latin {
background: #882;
diff -ur
guacamole-client-1.5.1.dist/guacamole/src/main/frontend/src/layouts/en-us-qwerty.json
guacamole-client-1.5.1/guacamole/src/main/frontend/src/layouts/en-us-qwerty.json
---
guacamole-client-1.5.1.dist/guacamole/src/main/frontend/src/layouts/en-us-qwerty.json
2023-01-13 12:23:54.0 -0800
+++
guacamole-client-1.5.1/guacamole/src/main/frontend/src/layouts/en-us-qwerty.json
2023-07-06 11:26:59.818560007 -0700
@@ -88,9 +88,9 @@
"keysym" : 65514
}],
"Meta" : [{
-"title": "Meta",
+"title": "Win",
"modifier" : "meta",
-"keysym" : 65511
+"keysym" : 65515
}],
"`" : [
-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org
Re: Performance Differences between Apache Guacamole with VNC and Native Mac-to-Mac Screen Sharing
It's ok. I'll try the evaluation license when I get home. thanks On Thu, May 4, 2023 at 12:43 PM Shigeki Sawamura wrote: > I tried NuoRDS now, but I couldn't connect from Windows 11, let alone > Guacamole. > And my license expired...Sorry. > > > On 2023/05/05 金 午前 12:52, Doug Baggett wrote: > > Have you any experience configuring guacamole to connect to a NuoRDS > server? Wouldn't want to plunk down the $49 bucks for a license without > knowing, though there is a 30 day trial, so I guess I could try that first. > > > > On Thu, May 4, 2023 at 11:28 AM Michael Jumper <mailto:mjum...@apache.org>> wrote: > > > > Yes, Mac-to-Mac screen sharing uses a proprietary protocol based on > VNC. > > When a normal VNC client connects to a Mac using standard VNC, a > > different and far less efficient protocol ends up being used. > > > > There are other screen sharing solutions for Mac that both implement > > standard protocols and are faster than Mac's support for standard > VNC, > > such as the NuoRDS RDP server. > > > > I think for Guacamole to achieve the performance of the proprietary > Mac > > screen sharing protocol, we would need to implement our own remote > > desktop server for Mac that serves Guacamole protocol directly. Only > > then would we be able to take advantage of other performance options > > provided by the Guacamole protocol like nested layers and > compositing. > > > > If the Mac-to-Mac screen sharing protocol were opened up to the > public, > > or if someone reverse engineered the protocol and implemented a > library > > supporting it, then guacamole-server could support it directly and > that > > would probably also do the trick. > > > > - Mike > > > > On 5/4/23 08:00, Doug Baggett wrote: > > > Thank you for your reply. > > > > > > I appreciate your suggestion of using TeamViewer, but I am > specifically > > > interested in using Guacamole with VNC to connect to my Mac. I > agree > > > that Guacamole’s advantage is that it does not require any client > > > software installation, but I am wondering why it is slower than > native > > > Mac-to-Mac screen sharing. Do you have any idea why this might be > the > > > case? Have you tried using Guacamole with VNC to connect to a Mac > and > > > compared it to other methods of screen sharing? > > > > > > Best regards, > > > > > > On Thu, May 4, 2023 at 9:47 AM Shigeki Sawamura > > > mailto:shig...@whitestars.ne.jp> > <mailto:shig...@whitestars.ne.jp <mailto:shig...@whitestars.ne.jp>>> > wrote: > > > > > > Hello. > > > > > > You install host and client software, right? > > > TeamViewer is also fast if you can install it. > > > Guacamole's good point is that you can access the client only > with a > > > browser. > > > > > > At least I'm more comfortable using it than software that > doesn't > > > know where it goes. > > > This may be a minority opinion. > > > > > > Best Regards, > > > > > > > > > On 2023/05/04 木 午後 09:26, Doug Baggett wrote: > > > > One issue that has been bothering me is the noticeable > difference > > > in speed when using Apache Guacamole with VNC to connect to > my Mac, > > > compared to native Mac-to-Mac screen sharing. > > > > > > > > I initially assumed that Mac-to-Mac screen sharing > utilized VNC, > > > but after testing other VNC clients, I found that they also > > > exhibited slower performance, similar to Guacamole. > > > > > > > > Some theories suggest that Mac-to-Mac screen sharing > detects > > > another Mac connecting and employs hardware-encoded/decoded > HEVC, > > > resulting in faster performance. Has anyone else experienced > this > > > slower performance when using Guacamole or a standard VNC > client? I > > > have compared Mac-to-Mac screen sharing over ZeroTier on the > > > internet, and it is significantly faster than using > Guacamole/VNC to > > > connect to the same Mac. I am curious to hear if others have > had > > &g
Re: Performance Differences between Apache Guacamole with VNC and Native Mac-to-Mac Screen Sharing
I tried NuoRDS now, but I couldn't connect from Windows 11, let alone Guacamole.
And my license expired...Sorry.
On 2023/05/05 金 午前 12:52, Doug Baggett wrote:
Have you any experience configuring guacamole to connect to a NuoRDS server?
Wouldn't want to plunk down the $49 bucks for a license without knowing, though
there is a 30 day trial, so I guess I could try that first.
On Thu, May 4, 2023 at 11:28 AM Michael Jumper mailto:mjum...@apache.org>> wrote:
Yes, Mac-to-Mac screen sharing uses a proprietary protocol based on VNC.
When a normal VNC client connects to a Mac using standard VNC, a
different and far less efficient protocol ends up being used.
There are other screen sharing solutions for Mac that both implement
standard protocols and are faster than Mac's support for standard VNC,
such as the NuoRDS RDP server.
I think for Guacamole to achieve the performance of the proprietary Mac
screen sharing protocol, we would need to implement our own remote
desktop server for Mac that serves Guacamole protocol directly. Only
then would we be able to take advantage of other performance options
provided by the Guacamole protocol like nested layers and compositing.
If the Mac-to-Mac screen sharing protocol were opened up to the public,
or if someone reverse engineered the protocol and implemented a library
supporting it, then guacamole-server could support it directly and that
would probably also do the trick.
- Mike
On 5/4/23 08:00, Doug Baggett wrote:
> Thank you for your reply.
>
> I appreciate your suggestion of using TeamViewer, but I am specifically
> interested in using Guacamole with VNC to connect to my Mac. I agree
> that Guacamole’s advantage is that it does not require any client
> software installation, but I am wondering why it is slower than native
> Mac-to-Mac screen sharing. Do you have any idea why this might be the
> case? Have you tried using Guacamole with VNC to connect to a Mac and
> compared it to other methods of screen sharing?
>
> Best regards,
>
> On Thu, May 4, 2023 at 9:47 AM Shigeki Sawamura
> mailto:shig...@whitestars.ne.jp>
<mailto:shig...@whitestars.ne.jp <mailto:shig...@whitestars.ne.jp>>> wrote:
>
> Hello.
>
> You install host and client software, right?
> TeamViewer is also fast if you can install it.
> Guacamole's good point is that you can access the client only with a
> browser.
>
> At least I'm more comfortable using it than software that doesn't
> know where it goes.
> This may be a minority opinion.
>
> Best Regards,
>
>
> On 2023/05/04 木 午後 09:26, Doug Baggett wrote:
> > One issue that has been bothering me is the noticeable difference
> in speed when using Apache Guacamole with VNC to connect to my Mac,
> compared to native Mac-to-Mac screen sharing.
> >
> > I initially assumed that Mac-to-Mac screen sharing utilized VNC,
> but after testing other VNC clients, I found that they also
> exhibited slower performance, similar to Guacamole.
> >
> > Some theories suggest that Mac-to-Mac screen sharing detects
> another Mac connecting and employs hardware-encoded/decoded HEVC,
> resulting in faster performance. Has anyone else experienced this
> slower performance when using Guacamole or a standard VNC client? I
> have compared Mac-to-Mac screen sharing over ZeroTier on the
> internet, and it is significantly faster than using Guacamole/VNC to
> connect to the same Mac. I am curious to hear if others have had
> similar experiences or thoughts on this issue.
> >
> > It would really be nice if there was some way for guacamole to
> have similar performance as native Mac-to-Mac screensharing.
> >
> > thanks!
> >
>
> -
> To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
<mailto:user-unsubscr...@guacamole.apache.org>
> <mailto:user-unsubscr...@guacamole.apache.org
<mailto:user-unsubscr...@guacamole.apache.org>>
> For additional commands, e-mail: user-h...@guacamole.apache.org
<mailto:user-h...@guacamole.apache.org>
> <mailto:user-h...@guacamole.apache.org
<mailto:user-h...@guacamole.apache.org>>
>
Re: Performance Differences between Apache Guacamole with VNC and Native Mac-to-Mac Screen Sharing
Hello.
It's NuoRDS, which has just been talked about.
Faster than VNC.
I put it in Intel Mac and M1 Mac, but it's pretty comfortable, but if you have
it at hand, you'll rely on KVM...
Best Regards,
On 2023/05/05 金 午前 12:48, Doug Baggett wrote:
Well, if I need to do high speed, the Mac native client to Mac native client is
fast enough. I’m specifically looking for ways to improve Guacamole’s
performance when connecting to another Mac. It seems like the way to go might
be to install a third party RDP server (as the other poster suggested).
thanks!
On Thu, May 4, 2023 at 11:35 AM Shigeki Sawamura mailto:shig...@whitestars.ne.jp>> wrote:
Hello.
VNC is not in the fast category.
Even the fastest VNC is about Ultra@VNC on Windows.
If you want to do high-speed remote control on Mac, SplashTop may be good.
I consider Guacamole to be in a different category than that kind of
software.
Just my opinion as an individual...Sorry.
Best Regards,
On 2023/05/05 金 午前 12:00, Doug Baggett wrote:
> Thank you for your reply.
>
> I appreciate your suggestion of using TeamViewer, but I am specifically
interested in using Guacamole with VNC to connect to my Mac. I agree that
Guacamole’s advantage is that it does not require any client software
installation, but I am wondering why it is slower than native Mac-to-Mac screen
sharing. Do you have any idea why this might be the case? Have you tried using
Guacamole with VNC to connect to a Mac and compared it to other methods of screen
sharing?
>
> Best regards,
>
> On Thu, May 4, 2023 at 9:47 AM Shigeki Sawamura mailto:shig...@whitestars.ne.jp> <mailto:shig...@whitestars.ne.jp
<mailto:shig...@whitestars.ne.jp>>> wrote:
>
> Hello.
>
> You install host and client software, right?
> TeamViewer is also fast if you can install it.
> Guacamole's good point is that you can access the client only with a
browser.
>
> At least I'm more comfortable using it than software that doesn't
know where it goes.
> This may be a minority opinion.
>
> Best Regards,
>
>
> On 2023/05/04 木 午後 09:26, Doug Baggett wrote:
> > One issue that has been bothering me is the noticeable difference
in speed when using Apache Guacamole with VNC to connect to my Mac, compared to
native Mac-to-Mac screen sharing.
> >
> > I initially assumed that Mac-to-Mac screen sharing utilized VNC,
but after testing other VNC clients, I found that they also exhibited slower
performance, similar to Guacamole.
> >
> > Some theories suggest that Mac-to-Mac screen sharing detects
another Mac connecting and employs hardware-encoded/decoded HEVC, resulting in faster
performance. Has anyone else experienced this slower performance when using Guacamole
or a standard VNC client? I have compared Mac-to-Mac screen sharing over ZeroTier on
the internet, and it is significantly faster than using Guacamole/VNC to connect to
the same Mac. I am curious to hear if others have had similar experiences or thoughts
on this issue.
> >
> > It would really be nice if there was some way for guacamole to
have similar performance as native Mac-to-Mac screensharing.
> >
> > thanks!
> >
>
> -
> To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
<mailto:user-unsubscr...@guacamole.apache.org>
<mailto:user-unsubscr...@guacamole.apache.org
<mailto:user-unsubscr...@guacamole.apache.org>>
> For additional commands, e-mail: user-h...@guacamole.apache.org
<mailto:user-h...@guacamole.apache.org> <mailto:user-h...@guacamole.apache.org
<mailto:user-h...@guacamole.apache.org>>
>
-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
<mailto:user-unsubscr...@guacamole.apache.org>
For additional commands, e-mail: user-h...@guacamole.apache.org
<mailto:user-h...@guacamole.apache.org>
-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org
Re: Performance Differences between Apache Guacamole with VNC and Native Mac-to-Mac Screen Sharing
Yes.
- Mike
On 5/4/23 08:45, Doug Baggett wrote:
Thanks, I was not aware of NuoRDS. Do you mean you could set up NuoRDS
on a Mac, then use Guacamole to do an RDP connection to it instead of VNC?
On Thu, May 4, 2023 at 11:28 AM Michael Jumper <mailto:mjum...@apache.org>> wrote:
Yes, Mac-to-Mac screen sharing uses a proprietary protocol based on
VNC.
When a normal VNC client connects to a Mac using standard VNC, a
different and far less efficient protocol ends up being used.
There are other screen sharing solutions for Mac that both implement
standard protocols and are faster than Mac's support for standard VNC,
such as the NuoRDS RDP server.
I think for Guacamole to achieve the performance of the proprietary Mac
screen sharing protocol, we would need to implement our own remote
desktop server for Mac that serves Guacamole protocol directly. Only
then would we be able to take advantage of other performance options
provided by the Guacamole protocol like nested layers and compositing.
If the Mac-to-Mac screen sharing protocol were opened up to the public,
or if someone reverse engineered the protocol and implemented a library
supporting it, then guacamole-server could support it directly and that
would probably also do the trick.
- Mike
On 5/4/23 08:00, Doug Baggett wrote:
> Thank you for your reply.
>
> I appreciate your suggestion of using TeamViewer, but I am
specifically
> interested in using Guacamole with VNC to connect to my Mac. I agree
> that Guacamole’s advantage is that it does not require any client
> software installation, but I am wondering why it is slower than
native
> Mac-to-Mac screen sharing. Do you have any idea why this might be
the
> case? Have you tried using Guacamole with VNC to connect to a Mac
and
> compared it to other methods of screen sharing?
>
> Best regards,
>
> On Thu, May 4, 2023 at 9:47 AM Shigeki Sawamura
> mailto:shig...@whitestars.ne.jp>
<mailto:shig...@whitestars.ne.jp <mailto:shig...@whitestars.ne.jp>>>
wrote:
>
> Hello.
>
> You install host and client software, right?
> TeamViewer is also fast if you can install it.
> Guacamole's good point is that you can access the client only
with a
> browser.
>
> At least I'm more comfortable using it than software that doesn't
> know where it goes.
> This may be a minority opinion.
>
> Best Regards,
>
>
> On 2023/05/04 木 午後 09:26, Doug Baggett wrote:
> > One issue that has been bothering me is the noticeable
difference
> in speed when using Apache Guacamole with VNC to connect to
my Mac,
> compared to native Mac-to-Mac screen sharing.
> >
> > I initially assumed that Mac-to-Mac screen sharing
utilized VNC,
> but after testing other VNC clients, I found that they also
> exhibited slower performance, similar to Guacamole.
> >
> > Some theories suggest that Mac-to-Mac screen sharing detects
> another Mac connecting and employs hardware-encoded/decoded HEVC,
> resulting in faster performance. Has anyone else experienced this
> slower performance when using Guacamole or a standard VNC
client? I
> have compared Mac-to-Mac screen sharing over ZeroTier on the
> internet, and it is significantly faster than using
Guacamole/VNC to
> connect to the same Mac. I am curious to hear if others have had
> similar experiences or thoughts on this issue.
> >
> > It would really be nice if there was some way for guacamole to
> have similar performance as native Mac-to-Mac screensharing.
> >
> > thanks!
> >
>
>
-
> To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
<mailto:user-unsubscr...@guacamole.apache.org>
> <mailto:user-unsubscr...@guacamole.apache.org
<mailto:user-unsubscr...@guacamole.apache.org>>
> For additional commands, e-mail:
user-h...@guacamole.apache.org <mailto:user-h...@guacamole.apache.org>
> <mailto:user-h...@guacamole.apache.org
<mailto:user-h...@guacamole.apache.org>>
>
-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
<mailto:user-unsubscr...@guacamole.apache.org>
For ad
Re: Performance Differences between Apache Guacamole with VNC and Native Mac-to-Mac Screen Sharing
thanks On Thu, May 4, 2023 at 11:50 AM Shigeki Sawamura wrote: > Hello. > > NuoRDS can be connected to RDP normally. > But I never set it in Guacamore. > If you are a Windows client, you can connect without any special settings. > > Best Regards, > > > On 2023/05/05 金 午前 12:45, Doug Baggett wrote: > > Thanks, I was not aware of NuoRDS. Do you mean you could set up NuoRDS > on a Mac, then use Guacamole to do an RDP connection to it instead of VNC? > > > > On Thu, May 4, 2023 at 11:28 AM Michael Jumper <mailto:mjum...@apache.org>> wrote: > > > > Yes, Mac-to-Mac screen sharing uses a proprietary protocol based on > VNC. > > When a normal VNC client connects to a Mac using standard VNC, a > > different and far less efficient protocol ends up being used. > > > > There are other screen sharing solutions for Mac that both implement > > standard protocols and are faster than Mac's support for standard > VNC, > > such as the NuoRDS RDP server. > > > > I think for Guacamole to achieve the performance of the proprietary > Mac > > screen sharing protocol, we would need to implement our own remote > > desktop server for Mac that serves Guacamole protocol directly. Only > > then would we be able to take advantage of other performance options > > provided by the Guacamole protocol like nested layers and > compositing. > > > > If the Mac-to-Mac screen sharing protocol were opened up to the > public, > > or if someone reverse engineered the protocol and implemented a > library > > supporting it, then guacamole-server could support it directly and > that > > would probably also do the trick. > > > > - Mike > > > > On 5/4/23 08:00, Doug Baggett wrote: > > > Thank you for your reply. > > > > > > I appreciate your suggestion of using TeamViewer, but I am > specifically > > > interested in using Guacamole with VNC to connect to my Mac. I > agree > > > that Guacamole’s advantage is that it does not require any client > > > software installation, but I am wondering why it is slower than > native > > > Mac-to-Mac screen sharing. Do you have any idea why this might be > the > > > case? Have you tried using Guacamole with VNC to connect to a Mac > and > > > compared it to other methods of screen sharing? > > > > > > Best regards, > > > > > > On Thu, May 4, 2023 at 9:47 AM Shigeki Sawamura > > > mailto:shig...@whitestars.ne.jp> > <mailto:shig...@whitestars.ne.jp <mailto:shig...@whitestars.ne.jp>>> > wrote: > > > > > > Hello. > > > > > > You install host and client software, right? > > > TeamViewer is also fast if you can install it. > > > Guacamole's good point is that you can access the client only > with a > > > browser. > > > > > > At least I'm more comfortable using it than software that > doesn't > > > know where it goes. > > > This may be a minority opinion. > > > > > > Best Regards, > > > > > > > > > On 2023/05/04 木 午後 09:26, Doug Baggett wrote: > > > > One issue that has been bothering me is the noticeable > difference > > > in speed when using Apache Guacamole with VNC to connect to > my Mac, > > > compared to native Mac-to-Mac screen sharing. > > > > > > > > I initially assumed that Mac-to-Mac screen sharing > utilized VNC, > > > but after testing other VNC clients, I found that they also > > > exhibited slower performance, similar to Guacamole. > > > > > > > > Some theories suggest that Mac-to-Mac screen sharing > detects > > > another Mac connecting and employs hardware-encoded/decoded > HEVC, > > > resulting in faster performance. Has anyone else experienced > this > > > slower performance when using Guacamole or a standard VNC > client? I > > > have compared Mac-to-Mac screen sharing over ZeroTier on the > > > internet, and it is significantly faster than using > Guacamole/VNC to > > > connect to the same Mac. I am curious to hear if others have > had > > > similar experiences or thoughts on this
Re: Performance Differences between Apache Guacamole with VNC and Native Mac-to-Mac Screen Sharing
Have you any experience configuring guacamole to connect to a NuoRDS server? Wouldn't want to plunk down the $49 bucks for a license without knowing, though there is a 30 day trial, so I guess I could try that first. On Thu, May 4, 2023 at 11:28 AM Michael Jumper wrote: > Yes, Mac-to-Mac screen sharing uses a proprietary protocol based on VNC. > When a normal VNC client connects to a Mac using standard VNC, a > different and far less efficient protocol ends up being used. > > There are other screen sharing solutions for Mac that both implement > standard protocols and are faster than Mac's support for standard VNC, > such as the NuoRDS RDP server. > > I think for Guacamole to achieve the performance of the proprietary Mac > screen sharing protocol, we would need to implement our own remote > desktop server for Mac that serves Guacamole protocol directly. Only > then would we be able to take advantage of other performance options > provided by the Guacamole protocol like nested layers and compositing. > > If the Mac-to-Mac screen sharing protocol were opened up to the public, > or if someone reverse engineered the protocol and implemented a library > supporting it, then guacamole-server could support it directly and that > would probably also do the trick. > > - Mike > > On 5/4/23 08:00, Doug Baggett wrote: > > Thank you for your reply. > > > > I appreciate your suggestion of using TeamViewer, but I am specifically > > interested in using Guacamole with VNC to connect to my Mac. I agree > > that Guacamole’s advantage is that it does not require any client > > software installation, but I am wondering why it is slower than native > > Mac-to-Mac screen sharing. Do you have any idea why this might be the > > case? Have you tried using Guacamole with VNC to connect to a Mac and > > compared it to other methods of screen sharing? > > > > Best regards, > > > > On Thu, May 4, 2023 at 9:47 AM Shigeki Sawamura > > mailto:shig...@whitestars.ne.jp>> wrote: > > > > Hello. > > > > You install host and client software, right? > > TeamViewer is also fast if you can install it. > > Guacamole's good point is that you can access the client only with a > > browser. > > > > At least I'm more comfortable using it than software that doesn't > > know where it goes. > > This may be a minority opinion. > > > > Best Regards, > > > > > > On 2023/05/04 木 午後 09:26, Doug Baggett wrote: > > > One issue that has been bothering me is the noticeable difference > > in speed when using Apache Guacamole with VNC to connect to my Mac, > > compared to native Mac-to-Mac screen sharing. > > > > > > I initially assumed that Mac-to-Mac screen sharing utilized VNC, > > but after testing other VNC clients, I found that they also > > exhibited slower performance, similar to Guacamole. > > > > > > Some theories suggest that Mac-to-Mac screen sharing detects > > another Mac connecting and employs hardware-encoded/decoded HEVC, > > resulting in faster performance. Has anyone else experienced this > > slower performance when using Guacamole or a standard VNC client? I > > have compared Mac-to-Mac screen sharing over ZeroTier on the > > internet, and it is significantly faster than using Guacamole/VNC to > > connect to the same Mac. I am curious to hear if others have had > > similar experiences or thoughts on this issue. > > > > > > It would really be nice if there was some way for guacamole to > > have similar performance as native Mac-to-Mac screensharing. > > > > > > thanks! > > > > > > > - > > To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org > > <mailto:user-unsubscr...@guacamole.apache.org> > > For additional commands, e-mail: user-h...@guacamole.apache.org > > <mailto:user-h...@guacamole.apache.org> > > > > - > To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org > For additional commands, e-mail: user-h...@guacamole.apache.org > >
Re: Performance Differences between Apache Guacamole with VNC and Native Mac-to-Mac Screen Sharing
Hello.
NuoRDS can be connected to RDP normally.
But I never set it in Guacamore.
If you are a Windows client, you can connect without any special settings.
Best Regards,
On 2023/05/05 金 午前 12:45, Doug Baggett wrote:
Thanks, I was not aware of NuoRDS. Do you mean you could set up NuoRDS on a
Mac, then use Guacamole to do an RDP connection to it instead of VNC?
On Thu, May 4, 2023 at 11:28 AM Michael Jumper mailto:mjum...@apache.org>> wrote:
Yes, Mac-to-Mac screen sharing uses a proprietary protocol based on VNC.
When a normal VNC client connects to a Mac using standard VNC, a
different and far less efficient protocol ends up being used.
There are other screen sharing solutions for Mac that both implement
standard protocols and are faster than Mac's support for standard VNC,
such as the NuoRDS RDP server.
I think for Guacamole to achieve the performance of the proprietary Mac
screen sharing protocol, we would need to implement our own remote
desktop server for Mac that serves Guacamole protocol directly. Only
then would we be able to take advantage of other performance options
provided by the Guacamole protocol like nested layers and compositing.
If the Mac-to-Mac screen sharing protocol were opened up to the public,
or if someone reverse engineered the protocol and implemented a library
supporting it, then guacamole-server could support it directly and that
would probably also do the trick.
- Mike
On 5/4/23 08:00, Doug Baggett wrote:
> Thank you for your reply.
>
> I appreciate your suggestion of using TeamViewer, but I am specifically
> interested in using Guacamole with VNC to connect to my Mac. I agree
> that Guacamole’s advantage is that it does not require any client
> software installation, but I am wondering why it is slower than native
> Mac-to-Mac screen sharing. Do you have any idea why this might be the
> case? Have you tried using Guacamole with VNC to connect to a Mac and
> compared it to other methods of screen sharing?
>
> Best regards,
>
> On Thu, May 4, 2023 at 9:47 AM Shigeki Sawamura
> mailto:shig...@whitestars.ne.jp>
<mailto:shig...@whitestars.ne.jp <mailto:shig...@whitestars.ne.jp>>> wrote:
>
> Hello.
>
> You install host and client software, right?
> TeamViewer is also fast if you can install it.
> Guacamole's good point is that you can access the client only with a
> browser.
>
> At least I'm more comfortable using it than software that doesn't
> know where it goes.
> This may be a minority opinion.
>
> Best Regards,
>
>
> On 2023/05/04 木 午後 09:26, Doug Baggett wrote:
> > One issue that has been bothering me is the noticeable difference
> in speed when using Apache Guacamole with VNC to connect to my Mac,
> compared to native Mac-to-Mac screen sharing.
> >
> > I initially assumed that Mac-to-Mac screen sharing utilized VNC,
> but after testing other VNC clients, I found that they also
> exhibited slower performance, similar to Guacamole.
> >
> > Some theories suggest that Mac-to-Mac screen sharing detects
> another Mac connecting and employs hardware-encoded/decoded HEVC,
> resulting in faster performance. Has anyone else experienced this
> slower performance when using Guacamole or a standard VNC client? I
> have compared Mac-to-Mac screen sharing over ZeroTier on the
> internet, and it is significantly faster than using Guacamole/VNC to
> connect to the same Mac. I am curious to hear if others have had
> similar experiences or thoughts on this issue.
> >
> > It would really be nice if there was some way for guacamole to
> have similar performance as native Mac-to-Mac screensharing.
> >
> > thanks!
> >
>
> -
> To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
<mailto:user-unsubscr...@guacamole.apache.org>
> <mailto:user-unsubscr...@guacamole.apache.org
<mailto:user-unsubscr...@guacamole.apache.org>>
> For additional commands, e-mail: user-h...@guacamole.apache.org
<mailto:user-h...@guacamole.apache.org>
> <mailto:user-h...@guacamole.apache.org
<mailto:user-h...@guacamole.apache.org>>
>
-
To unsubscribe, e-mail: user-unsubscr...@guacam
Re: Performance Differences between Apache Guacamole with VNC and Native Mac-to-Mac Screen Sharing
Well, if I need to do high speed, the Mac native client to Mac native client is fast enough. I’m specifically looking for ways to improve Guacamole’s performance when connecting to another Mac. It seems like the way to go might be to install a third party RDP server (as the other poster suggested). thanks! On Thu, May 4, 2023 at 11:35 AM Shigeki Sawamura wrote: > Hello. > > VNC is not in the fast category. > Even the fastest VNC is about Ultra@VNC on Windows. > If you want to do high-speed remote control on Mac, SplashTop may be good. > > I consider Guacamole to be in a different category than that kind of > software. > Just my opinion as an individual...Sorry. > > Best Regards, > > > On 2023/05/05 金 午前 12:00, Doug Baggett wrote: > > Thank you for your reply. > > > > I appreciate your suggestion of using TeamViewer, but I am specifically > interested in using Guacamole with VNC to connect to my Mac. I agree that > Guacamole’s advantage is that it does not require any client software > installation, but I am wondering why it is slower than native Mac-to-Mac > screen sharing. Do you have any idea why this might be the case? Have you > tried using Guacamole with VNC to connect to a Mac and compared it to other > methods of screen sharing? > > > > Best regards, > > > > On Thu, May 4, 2023 at 9:47 AM Shigeki Sawamura < > shig...@whitestars.ne.jp <mailto:shig...@whitestars.ne.jp>> wrote: > > > > Hello. > > > > You install host and client software, right? > > TeamViewer is also fast if you can install it. > > Guacamole's good point is that you can access the client only with a > browser. > > > > At least I'm more comfortable using it than software that doesn't > know where it goes. > > This may be a minority opinion. > > > > Best Regards, > > > > > > On 2023/05/04 木 午後 09:26, Doug Baggett wrote: > > > One issue that has been bothering me is the noticeable difference > in speed when using Apache Guacamole with VNC to connect to my Mac, > compared to native Mac-to-Mac screen sharing. > > > > > > I initially assumed that Mac-to-Mac screen sharing utilized VNC, > but after testing other VNC clients, I found that they also exhibited > slower performance, similar to Guacamole. > > > > > > Some theories suggest that Mac-to-Mac screen sharing detects > another Mac connecting and employs hardware-encoded/decoded HEVC, resulting > in faster performance. Has anyone else experienced this slower performance > when using Guacamole or a standard VNC client? I have compared Mac-to-Mac > screen sharing over ZeroTier on the internet, and it is significantly > faster than using Guacamole/VNC to connect to the same Mac. I am curious to > hear if others have had similar experiences or thoughts on this issue. > > > > > > It would really be nice if there was some way for guacamole to > have similar performance as native Mac-to-Mac screensharing. > > > > > > thanks! > > > > > > > - > > To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org > <mailto:user-unsubscr...@guacamole.apache.org> > > For additional commands, e-mail: user-h...@guacamole.apache.org > <mailto:user-h...@guacamole.apache.org> > > > > - > To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org > For additional commands, e-mail: user-h...@guacamole.apache.org > >
Re: Performance Differences between Apache Guacamole with VNC and Native Mac-to-Mac Screen Sharing
Thanks, I was not aware of NuoRDS. Do you mean you could set up NuoRDS on a Mac, then use Guacamole to do an RDP connection to it instead of VNC? On Thu, May 4, 2023 at 11:28 AM Michael Jumper wrote: > Yes, Mac-to-Mac screen sharing uses a proprietary protocol based on VNC. > When a normal VNC client connects to a Mac using standard VNC, a > different and far less efficient protocol ends up being used. > > There are other screen sharing solutions for Mac that both implement > standard protocols and are faster than Mac's support for standard VNC, > such as the NuoRDS RDP server. > > I think for Guacamole to achieve the performance of the proprietary Mac > screen sharing protocol, we would need to implement our own remote > desktop server for Mac that serves Guacamole protocol directly. Only > then would we be able to take advantage of other performance options > provided by the Guacamole protocol like nested layers and compositing. > > If the Mac-to-Mac screen sharing protocol were opened up to the public, > or if someone reverse engineered the protocol and implemented a library > supporting it, then guacamole-server could support it directly and that > would probably also do the trick. > > - Mike > > On 5/4/23 08:00, Doug Baggett wrote: > > Thank you for your reply. > > > > I appreciate your suggestion of using TeamViewer, but I am specifically > > interested in using Guacamole with VNC to connect to my Mac. I agree > > that Guacamole’s advantage is that it does not require any client > > software installation, but I am wondering why it is slower than native > > Mac-to-Mac screen sharing. Do you have any idea why this might be the > > case? Have you tried using Guacamole with VNC to connect to a Mac and > > compared it to other methods of screen sharing? > > > > Best regards, > > > > On Thu, May 4, 2023 at 9:47 AM Shigeki Sawamura > > mailto:shig...@whitestars.ne.jp>> wrote: > > > > Hello. > > > > You install host and client software, right? > > TeamViewer is also fast if you can install it. > > Guacamole's good point is that you can access the client only with a > > browser. > > > > At least I'm more comfortable using it than software that doesn't > > know where it goes. > > This may be a minority opinion. > > > > Best Regards, > > > > > > On 2023/05/04 木 午後 09:26, Doug Baggett wrote: > > > One issue that has been bothering me is the noticeable difference > > in speed when using Apache Guacamole with VNC to connect to my Mac, > > compared to native Mac-to-Mac screen sharing. > > > > > > I initially assumed that Mac-to-Mac screen sharing utilized VNC, > > but after testing other VNC clients, I found that they also > > exhibited slower performance, similar to Guacamole. > > > > > > Some theories suggest that Mac-to-Mac screen sharing detects > > another Mac connecting and employs hardware-encoded/decoded HEVC, > > resulting in faster performance. Has anyone else experienced this > > slower performance when using Guacamole or a standard VNC client? I > > have compared Mac-to-Mac screen sharing over ZeroTier on the > > internet, and it is significantly faster than using Guacamole/VNC to > > connect to the same Mac. I am curious to hear if others have had > > similar experiences or thoughts on this issue. > > > > > > It would really be nice if there was some way for guacamole to > > have similar performance as native Mac-to-Mac screensharing. > > > > > > thanks! > > > > > > > - > > To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org > > <mailto:user-unsubscr...@guacamole.apache.org> > > For additional commands, e-mail: user-h...@guacamole.apache.org > > <mailto:user-h...@guacamole.apache.org> > > > > - > To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org > For additional commands, e-mail: user-h...@guacamole.apache.org > >
Re: Performance Differences between Apache Guacamole with VNC and Native Mac-to-Mac Screen Sharing
Hello. VNC is not in the fast category. Even the fastest VNC is about Ultra@VNC on Windows. If you want to do high-speed remote control on Mac, SplashTop may be good. I consider Guacamole to be in a different category than that kind of software. Just my opinion as an individual...Sorry. Best Regards, On 2023/05/05 金 午前 12:00, Doug Baggett wrote: Thank you for your reply. I appreciate your suggestion of using TeamViewer, but I am specifically interested in using Guacamole with VNC to connect to my Mac. I agree that Guacamole’s advantage is that it does not require any client software installation, but I am wondering why it is slower than native Mac-to-Mac screen sharing. Do you have any idea why this might be the case? Have you tried using Guacamole with VNC to connect to a Mac and compared it to other methods of screen sharing? Best regards, On Thu, May 4, 2023 at 9:47 AM Shigeki Sawamura mailto:shig...@whitestars.ne.jp>> wrote: Hello. You install host and client software, right? TeamViewer is also fast if you can install it. Guacamole's good point is that you can access the client only with a browser. At least I'm more comfortable using it than software that doesn't know where it goes. This may be a minority opinion. Best Regards, On 2023/05/04 木 午後 09:26, Doug Baggett wrote: > One issue that has been bothering me is the noticeable difference in speed when using Apache Guacamole with VNC to connect to my Mac, compared to native Mac-to-Mac screen sharing. > > I initially assumed that Mac-to-Mac screen sharing utilized VNC, but after testing other VNC clients, I found that they also exhibited slower performance, similar to Guacamole. > > Some theories suggest that Mac-to-Mac screen sharing detects another Mac connecting and employs hardware-encoded/decoded HEVC, resulting in faster performance. Has anyone else experienced this slower performance when using Guacamole or a standard VNC client? I have compared Mac-to-Mac screen sharing over ZeroTier on the internet, and it is significantly faster than using Guacamole/VNC to connect to the same Mac. I am curious to hear if others have had similar experiences or thoughts on this issue. > > It would really be nice if there was some way for guacamole to have similar performance as native Mac-to-Mac screensharing. > > thanks! > - To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org <mailto:user-unsubscr...@guacamole.apache.org> For additional commands, e-mail: user-h...@guacamole.apache.org <mailto:user-h...@guacamole.apache.org> - To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org For additional commands, e-mail: user-h...@guacamole.apache.org
Re: Performance Differences between Apache Guacamole with VNC and Native Mac-to-Mac Screen Sharing
Yes, Mac-to-Mac screen sharing uses a proprietary protocol based on VNC. When a normal VNC client connects to a Mac using standard VNC, a different and far less efficient protocol ends up being used. There are other screen sharing solutions for Mac that both implement standard protocols and are faster than Mac's support for standard VNC, such as the NuoRDS RDP server. I think for Guacamole to achieve the performance of the proprietary Mac screen sharing protocol, we would need to implement our own remote desktop server for Mac that serves Guacamole protocol directly. Only then would we be able to take advantage of other performance options provided by the Guacamole protocol like nested layers and compositing. If the Mac-to-Mac screen sharing protocol were opened up to the public, or if someone reverse engineered the protocol and implemented a library supporting it, then guacamole-server could support it directly and that would probably also do the trick. - Mike On 5/4/23 08:00, Doug Baggett wrote: Thank you for your reply. I appreciate your suggestion of using TeamViewer, but I am specifically interested in using Guacamole with VNC to connect to my Mac. I agree that Guacamole’s advantage is that it does not require any client software installation, but I am wondering why it is slower than native Mac-to-Mac screen sharing. Do you have any idea why this might be the case? Have you tried using Guacamole with VNC to connect to a Mac and compared it to other methods of screen sharing? Best regards, On Thu, May 4, 2023 at 9:47 AM Shigeki Sawamura mailto:shig...@whitestars.ne.jp>> wrote: Hello. You install host and client software, right? TeamViewer is also fast if you can install it. Guacamole's good point is that you can access the client only with a browser. At least I'm more comfortable using it than software that doesn't know where it goes. This may be a minority opinion. Best Regards, On 2023/05/04 木 午後 09:26, Doug Baggett wrote: > One issue that has been bothering me is the noticeable difference in speed when using Apache Guacamole with VNC to connect to my Mac, compared to native Mac-to-Mac screen sharing. > > I initially assumed that Mac-to-Mac screen sharing utilized VNC, but after testing other VNC clients, I found that they also exhibited slower performance, similar to Guacamole. > > Some theories suggest that Mac-to-Mac screen sharing detects another Mac connecting and employs hardware-encoded/decoded HEVC, resulting in faster performance. Has anyone else experienced this slower performance when using Guacamole or a standard VNC client? I have compared Mac-to-Mac screen sharing over ZeroTier on the internet, and it is significantly faster than using Guacamole/VNC to connect to the same Mac. I am curious to hear if others have had similar experiences or thoughts on this issue. > > It would really be nice if there was some way for guacamole to have similar performance as native Mac-to-Mac screensharing. > > thanks! > - To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org <mailto:user-unsubscr...@guacamole.apache.org> For additional commands, e-mail: user-h...@guacamole.apache.org <mailto:user-h...@guacamole.apache.org> - To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org For additional commands, e-mail: user-h...@guacamole.apache.org
Re: Performance Differences between Apache Guacamole with VNC and Native Mac-to-Mac Screen Sharing
Thank you for your reply. I appreciate your suggestion of using TeamViewer, but I am specifically interested in using Guacamole with VNC to connect to my Mac. I agree that Guacamole’s advantage is that it does not require any client software installation, but I am wondering why it is slower than native Mac-to-Mac screen sharing. Do you have any idea why this might be the case? Have you tried using Guacamole with VNC to connect to a Mac and compared it to other methods of screen sharing? Best regards, On Thu, May 4, 2023 at 9:47 AM Shigeki Sawamura wrote: > Hello. > > You install host and client software, right? > TeamViewer is also fast if you can install it. > Guacamole's good point is that you can access the client only with a > browser. > > At least I'm more comfortable using it than software that doesn't know > where it goes. > This may be a minority opinion. > > Best Regards, > > > On 2023/05/04 木 午後 09:26, Doug Baggett wrote: > > One issue that has been bothering me is the noticeable difference in > speed when using Apache Guacamole with VNC to connect to my Mac, compared > to native Mac-to-Mac screen sharing. > > > > I initially assumed that Mac-to-Mac screen sharing utilized VNC, but > after testing other VNC clients, I found that they also exhibited slower > performance, similar to Guacamole. > > > > Some theories suggest that Mac-to-Mac screen sharing detects another Mac > connecting and employs hardware-encoded/decoded HEVC, resulting in faster > performance. Has anyone else experienced this slower performance when using > Guacamole or a standard VNC client? I have compared Mac-to-Mac screen > sharing over ZeroTier on the internet, and it is significantly faster than > using Guacamole/VNC to connect to the same Mac. I am curious to hear if > others have had similar experiences or thoughts on this issue. > > > > It would really be nice if there was some way for guacamole to have > similar performance as native Mac-to-Mac screensharing. > > > > thanks! > > > > - > To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org > For additional commands, e-mail: user-h...@guacamole.apache.org > >
Re: Performance Differences between Apache Guacamole with VNC and Native Mac-to-Mac Screen Sharing
Hello. You install host and client software, right? TeamViewer is also fast if you can install it. Guacamole's good point is that you can access the client only with a browser. At least I'm more comfortable using it than software that doesn't know where it goes. This may be a minority opinion. Best Regards, On 2023/05/04 木 午後 09:26, Doug Baggett wrote: One issue that has been bothering me is the noticeable difference in speed when using Apache Guacamole with VNC to connect to my Mac, compared to native Mac-to-Mac screen sharing. I initially assumed that Mac-to-Mac screen sharing utilized VNC, but after testing other VNC clients, I found that they also exhibited slower performance, similar to Guacamole. Some theories suggest that Mac-to-Mac screen sharing detects another Mac connecting and employs hardware-encoded/decoded HEVC, resulting in faster performance. Has anyone else experienced this slower performance when using Guacamole or a standard VNC client? I have compared Mac-to-Mac screen sharing over ZeroTier on the internet, and it is significantly faster than using Guacamole/VNC to connect to the same Mac. I am curious to hear if others have had similar experiences or thoughts on this issue. It would really be nice if there was some way for guacamole to have similar performance as native Mac-to-Mac screensharing. thanks! - To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org For additional commands, e-mail: user-h...@guacamole.apache.org
Performance Differences between Apache Guacamole with VNC and Native Mac-to-Mac Screen Sharing
One issue that has been bothering me is the noticeable difference in speed when using Apache Guacamole with VNC to connect to my Mac, compared to native Mac-to-Mac screen sharing. I initially assumed that Mac-to-Mac screen sharing utilized VNC, but after testing other VNC clients, I found that they also exhibited slower performance, similar to Guacamole. Some theories suggest that Mac-to-Mac screen sharing detects another Mac connecting and employs hardware-encoded/decoded HEVC, resulting in faster performance. Has anyone else experienced this slower performance when using Guacamole or a standard VNC client? I have compared Mac-to-Mac screen sharing over ZeroTier on the internet, and it is significantly faster than using Guacamole/VNC to connect to the same Mac. I am curious to hear if others have had similar experiences or thoughts on this issue. It would really be nice if there was some way for guacamole to have similar performance as native Mac-to-Mac screensharing. thanks!
Re: ESXi VNC over websocket connection
Hi Lukas, Thanks for your response. I'm working on an application that is (now) able to use the vSphere API to get a WebMKS ticket token and URL for the WS-VNC connection for any VMs that have been provisioned. My experience with UNIX sockets is very limited so any more guidance you can give me on how you managed to tunnel VNC inside the raw WS tunnel would be greatly appreciated. Thanks and regards, Stephen On Fri, Apr 28, 2023 at 12:09 AM Lukáš Raška wrote: > Hi, > I've done implementation of WebMKS (that's now VMware calls it) using that > kind of approach - create raw WS connection and just tunnel the VNC > connection inside that tunnel via UNIX sockets. That works fine and I can > actually connect to the remote console, however there are few caveats when > it comes to providing as additional Guacamole-supported protocol. > > Based on the VMware WebMKS architecture, > https://vdc-download.vmware.com/vmwb-repository/dcr-public/8c1815ce-2f69-4b0b-a50c-ed8b305c22c0/e01e3448-99e8-4b7c-b26b-f0f02c45fb91/GUID-635B3A9F-C62E-4A97-9FAB-FBCAA3914FDA.html > for example, you first need to obtain a ticket from vSphere / vCloud > Director, which is short lived. With that token you actually get an URL you > can use with the WS-VNC connection. So using that within some integrated > product (that just provides the valid data to Guacamole) is fine and works, > but implementing UI where you could easily connect to any VM console means, > you need to have access to vSphere API to acquire the WebMKS ticket and > then guacd needs to have connection to every possible ESXi server. > > > Thanks, > Lukas > > > pá 28. 4. 2023 v 2:19 odesílatel Stephen Young < > stephenryoungs...@gmail.com> napsal: > >> Thanks for the replies. I’ll have a look at using libwebsockets. >> >> Yes, ‘stalled’ was a poor choice of words :) >> >> - Stephen >> >> > On Apr 27, 2023, at 5:12 PM, Nick Couchman wrote: >> > >> > On Thu, Apr 27, 2023 at 6:02 PM Michael Jumper >> wrote: >> >> >> >>> On Thu, Apr 27, 2023, 2:55 PM Stephen Young < >> stephenryoungs...@gmail.com> wrote: >> >>> >> >>> Hi all, >> >>> >> >>> In ESXi 7.0, VMWare has removed TCP access to the bundled VNC server >> built into their ESXi hypervisor. Instead the VNC protocol is tunneled over >> a websocket. Are there any plans to support VNC over websockets to >> facilitate connections in cases like this? I noticed that there was >> interest in https://issues.apache.org/jira/browse/GUACAMOLE-1641 but >> that seems stalled. >> >>> Does anyone have any advice or experience connecting guacd to the >> ESXi bundled VNC server over websockets? I wondered if using a TCP to >> websocket proxy/bridge like unwebsockify would be possible. >> >> >> >> >> >> libwebsockets is already used within guacamole-server for accessing >> Kubernetes. The same could probably be done as an alternative backend >> connection mode for VNC, though I'm not sure whether libvncclient has the >> necessary support for plugging in arbitrary transports. >> >> >> > >> > I've done some work recently on support for tunneling the various >> > protocols over SSH, and, assuming libwebsockets can open a standard >> > UNIX socket, this should work. >> > >> > Also, it's hard to categorize this issue as "stalled" - it was >> > entered, but hasn't really had any serious activity at all, and also >> > isn't that old :-). >> > >> > -Nick >> > >> > - >> > To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org >> > For additional commands, e-mail: user-h...@guacamole.apache.org >> > >> >> - >> To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org >> For additional commands, e-mail: user-h...@guacamole.apache.org >> >> > > -- > Best Regards > > Lukáš Raška >
Re: ESXi VNC over websocket connection
This is super interesting! I would love to use this instead of RDP. With best regards, Rasmus Haslund Principal Technologist & VMCT Program Manager | Veeam Software | Phone: +40 372 821 972 | Twitter: @haslund From: Lukáš Raška Reply to: "user@guacamole.apache.org" Date: Friday, 28 April 2023 at 08.10 To: "user@guacamole.apache.org" Subject: Re: ESXi VNC over websocket connection This is the first time you've received an email from this sender lukas @ raska.me, please exercise caution when clicking on links or opening attachments. Hi, I've done implementation of WebMKS (that's now VMware calls it) using that kind of approach - create raw WS connection and just tunnel the VNC connection inside that tunnel via UNIX sockets. That works fine and I can actually connect to the remote console, however there are few caveats when it comes to providing as additional Guacamole-supported protocol. Based on the VMware WebMKS architecture, https://vdc-download.vmware.com/vmwb-repository/dcr-public/8c1815ce-2f69-4b0b-a50c-ed8b305c22c0/e01e3448-99e8-4b7c-b26b-f0f02c45fb91/GUID-635B3A9F-C62E-4A97-9FAB-FBCAA3914FDA.html for example, you first need to obtain a ticket from vSphere / vCloud Director, which is short lived. With that token you actually get an URL you can use with the WS-VNC connection. So using that within some integrated product (that just provides the valid data to Guacamole) is fine and works, but implementing UI where you could easily connect to any VM console means, you need to have access to vSphere API to acquire the WebMKS ticket and then guacd needs to have connection to every possible ESXi server. Thanks, Lukas pá 28. 4. 2023 v 2:19 odesílatel Stephen Young mailto:stephenryoungs...@gmail.com>> napsal: Thanks for the replies. I’ll have a look at using libwebsockets. Yes, ‘stalled’ was a poor choice of words :) - Stephen > On Apr 27, 2023, at 5:12 PM, Nick Couchman > mailto:vn...@apache.org>> wrote: > > On Thu, Apr 27, 2023 at 6:02 PM Michael Jumper > mailto:mjum...@apache.org>> wrote: >> >>> On Thu, Apr 27, 2023, 2:55 PM Stephen Young >>> mailto:stephenryoungs...@gmail.com>> wrote: >>> >>> Hi all, >>> >>> In ESXi 7.0, VMWare has removed TCP access to the bundled VNC server built >>> into their ESXi hypervisor. Instead the VNC protocol is tunneled over a >>> websocket. Are there any plans to support VNC over websockets to facilitate >>> connections in cases like this? I noticed that there was interest in >>> https://issues.apache.org/jira/browse/GUACAMOLE-1641 but that seems stalled. >>> Does anyone have any advice or experience connecting guacd to the ESXi >>> bundled VNC server over websockets? I wondered if using a TCP to websocket >>> proxy/bridge like unwebsockify would be possible. >> >> >> libwebsockets is already used within guacamole-server for accessing >> Kubernetes. The same could probably be done as an alternative backend >> connection mode for VNC, though I'm not sure whether libvncclient has the >> necessary support for plugging in arbitrary transports. >> > > I've done some work recently on support for tunneling the various > protocols over SSH, and, assuming libwebsockets can open a standard > UNIX socket, this should work. > > Also, it's hard to categorize this issue as "stalled" - it was > entered, but hasn't really had any serious activity at all, and also > isn't that old :-). > > -Nick > > - > To unsubscribe, e-mail: > user-unsubscr...@guacamole.apache.org<mailto:user-unsubscr...@guacamole.apache.org> > For additional commands, e-mail: > user-h...@guacamole.apache.org<mailto:user-h...@guacamole.apache.org> > - To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org<mailto:user-unsubscr...@guacamole.apache.org> For additional commands, e-mail: user-h...@guacamole.apache.org<mailto:user-h...@guacamole.apache.org> -- Best Regards Lukáš Raška
Re: ESXi VNC over websocket connection
Hi, I've done implementation of WebMKS (that's now VMware calls it) using that kind of approach - create raw WS connection and just tunnel the VNC connection inside that tunnel via UNIX sockets. That works fine and I can actually connect to the remote console, however there are few caveats when it comes to providing as additional Guacamole-supported protocol. Based on the VMware WebMKS architecture, https://vdc-download.vmware.com/vmwb-repository/dcr-public/8c1815ce-2f69-4b0b-a50c-ed8b305c22c0/e01e3448-99e8-4b7c-b26b-f0f02c45fb91/GUID-635B3A9F-C62E-4A97-9FAB-FBCAA3914FDA.html for example, you first need to obtain a ticket from vSphere / vCloud Director, which is short lived. With that token you actually get an URL you can use with the WS-VNC connection. So using that within some integrated product (that just provides the valid data to Guacamole) is fine and works, but implementing UI where you could easily connect to any VM console means, you need to have access to vSphere API to acquire the WebMKS ticket and then guacd needs to have connection to every possible ESXi server. Thanks, Lukas pá 28. 4. 2023 v 2:19 odesílatel Stephen Young napsal: > Thanks for the replies. I’ll have a look at using libwebsockets. > > Yes, ‘stalled’ was a poor choice of words :) > > - Stephen > > > On Apr 27, 2023, at 5:12 PM, Nick Couchman wrote: > > > > On Thu, Apr 27, 2023 at 6:02 PM Michael Jumper > wrote: > >> > >>> On Thu, Apr 27, 2023, 2:55 PM Stephen Young < > stephenryoungs...@gmail.com> wrote: > >>> > >>> Hi all, > >>> > >>> In ESXi 7.0, VMWare has removed TCP access to the bundled VNC server > built into their ESXi hypervisor. Instead the VNC protocol is tunneled over > a websocket. Are there any plans to support VNC over websockets to > facilitate connections in cases like this? I noticed that there was > interest in https://issues.apache.org/jira/browse/GUACAMOLE-1641 but that > seems stalled. > >>> Does anyone have any advice or experience connecting guacd to the ESXi > bundled VNC server over websockets? I wondered if using a TCP to websocket > proxy/bridge like unwebsockify would be possible. > >> > >> > >> libwebsockets is already used within guacamole-server for accessing > Kubernetes. The same could probably be done as an alternative backend > connection mode for VNC, though I'm not sure whether libvncclient has the > necessary support for plugging in arbitrary transports. > >> > > > > I've done some work recently on support for tunneling the various > > protocols over SSH, and, assuming libwebsockets can open a standard > > UNIX socket, this should work. > > > > Also, it's hard to categorize this issue as "stalled" - it was > > entered, but hasn't really had any serious activity at all, and also > > isn't that old :-). > > > > -Nick > > > > - > > To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org > > For additional commands, e-mail: user-h...@guacamole.apache.org > > > > - > To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org > For additional commands, e-mail: user-h...@guacamole.apache.org > > -- Best Regards Lukáš Raška
Re: ESXi VNC over websocket connection
Thanks for the replies. I’ll have a look at using libwebsockets. Yes, ‘stalled’ was a poor choice of words :) - Stephen > On Apr 27, 2023, at 5:12 PM, Nick Couchman wrote: > > On Thu, Apr 27, 2023 at 6:02 PM Michael Jumper wrote: >> >>> On Thu, Apr 27, 2023, 2:55 PM Stephen Young >>> wrote: >>> >>> Hi all, >>> >>> In ESXi 7.0, VMWare has removed TCP access to the bundled VNC server built >>> into their ESXi hypervisor. Instead the VNC protocol is tunneled over a >>> websocket. Are there any plans to support VNC over websockets to facilitate >>> connections in cases like this? I noticed that there was interest in >>> https://issues.apache.org/jira/browse/GUACAMOLE-1641 but that seems stalled. >>> Does anyone have any advice or experience connecting guacd to the ESXi >>> bundled VNC server over websockets? I wondered if using a TCP to websocket >>> proxy/bridge like unwebsockify would be possible. >> >> >> libwebsockets is already used within guacamole-server for accessing >> Kubernetes. The same could probably be done as an alternative backend >> connection mode for VNC, though I'm not sure whether libvncclient has the >> necessary support for plugging in arbitrary transports. >> > > I've done some work recently on support for tunneling the various > protocols over SSH, and, assuming libwebsockets can open a standard > UNIX socket, this should work. > > Also, it's hard to categorize this issue as "stalled" - it was > entered, but hasn't really had any serious activity at all, and also > isn't that old :-). > > -Nick > > - > To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org > For additional commands, e-mail: user-h...@guacamole.apache.org > - To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org For additional commands, e-mail: user-h...@guacamole.apache.org
Re: ESXi VNC over websocket connection
On Thu, Apr 27, 2023 at 6:02 PM Michael Jumper wrote: > > On Thu, Apr 27, 2023, 2:55 PM Stephen Young > wrote: >> >> Hi all, >> >> In ESXi 7.0, VMWare has removed TCP access to the bundled VNC server built >> into their ESXi hypervisor. Instead the VNC protocol is tunneled over a >> websocket. Are there any plans to support VNC over websockets to facilitate >> connections in cases like this? I noticed that there was interest in >> https://issues.apache.org/jira/browse/GUACAMOLE-1641 but that seems stalled. >> Does anyone have any advice or experience connecting guacd to the ESXi >> bundled VNC server over websockets? I wondered if using a TCP to websocket >> proxy/bridge like unwebsockify would be possible. > > > libwebsockets is already used within guacamole-server for accessing > Kubernetes. The same could probably be done as an alternative backend > connection mode for VNC, though I'm not sure whether libvncclient has the > necessary support for plugging in arbitrary transports. > I've done some work recently on support for tunneling the various protocols over SSH, and, assuming libwebsockets can open a standard UNIX socket, this should work. Also, it's hard to categorize this issue as "stalled" - it was entered, but hasn't really had any serious activity at all, and also isn't that old :-). -Nick - To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org For additional commands, e-mail: user-h...@guacamole.apache.org
Re: ESXi VNC over websocket connection
On Thu, Apr 27, 2023, 2:55 PM Stephen Young wrote: > Hi all, > > In ESXi 7.0, VMWare has removed TCP access to the bundled VNC server built > into their ESXi hypervisor. Instead the VNC protocol is tunneled over a > websocket. Are there any plans to support VNC over websockets to facilitate > connections in cases like this? I noticed that there was interest in > https://issues.apache.org/jira/browse/GUACAMOLE-1641 but that seems > stalled. > Does anyone have any advice or experience connecting guacd to the ESXi > bundled VNC server over websockets? I wondered if using a TCP to websocket > proxy/bridge like unwebsockify would be possible. > libwebsockets is already used within guacamole-server for accessing Kubernetes. The same could probably be done as an alternative backend connection mode for VNC, though I'm not sure whether libvncclient has the necessary support for plugging in arbitrary transports. - Mike
ESXi VNC over websocket connection
Hi all, In ESXi 7.0, VMWare has removed TCP access to the bundled VNC server built into their ESXi hypervisor. Instead the VNC protocol is tunneled over a websocket. Are there any plans to support VNC over websockets to facilitate connections in cases like this? I noticed that there was interest in https://issues.apache.org/jira/browse/GUACAMOLE-1641 but that seems stalled. Does anyone have any advice or experience connecting guacd to the ESXi bundled VNC server over websockets? I wondered if using a TCP to websocket proxy/bridge like unwebsockify would be possible. Regards and thanks
guac 1.5.0 failed to access vnc
hi, I have run guac in docker, version 1.5.0 and in db model.
Re: VNC stop working behind the firewall
On Thu, Apr 13, 2023 at 2:07 PM Rezk Mekhael wrote: > > Hi, > > I moved the guacamole server behind the firewall and i did open FW ports 5900 > (vnc) & 3389 (rdp). RDT worked but VNC stopped working. Any ideas ? You'll have to consult firewall logs and see why the firewall is blocking it. If it was working fine outside the firewall, but fails behind the firewall, then it's likely an issue that has to be tracked down on the firewall. -Nick - To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org For additional commands, e-mail: user-h...@guacamole.apache.org
VNC stop working behind the firewall
Hi, I moved the guacamole server behind the firewall and i did *open FW *ports 5900 (vnc) & 3389 (rdp). RDT worked but VNC stopped working. Any ideas ? -- Rezk Mekhael rezk.mekh...@gmail.com
Re: URL for a direct connection to a VNC or SSH session after upgrading from 0.9.12 to 1.4.0
On Fri, Jan 27, 2023 at 8:32 PM Timur Bazhirov wrote: > Greetings, > > We have a question regarding establishing a direct connection (instead of > a login screen) for a user to SSH or VNC sessions. > > We've been using Guacamole for some time and recently started work > on updating it to the latest version. In version 0.9.12, we used to form a > URL and then use the HMAC and secret-key-based authentication to directly > proxy a user to a session. Here a URL would look something like this: > > > /guacamole/#/client?timestamp=1674863599405=31BNen1LuL1ukF7NjW8ocbor4ME=john=ssh. > > > When reading the version 1.4.0 documentation, we understand that HMAC is > no longer an option, although there is JSON-based authentication and also > quick-connect as extensions. However, we could not understand how to adjust > the above URL to land a user in an SSH and VNC session directly without > them having to use the Guacamole login screen with username/password. > > Can anyone help us with this? If there's a JavaScript implementation, in > particular, it would be great to know. > Many things have changed between version 0.9.12 and 1.4.0. Things that would, in particular, impact you in this regard: * The way URLs for connections are generated was updated right around 0.9.12. The connection identifier, data source, and type are encoded in a base64 parameter in the URL. So, a connection URL will look something like this: https://guacamole.example.local/#/client/NQBjAHBvc3RncmVzcWw The characters after /client/ are the encoding of the components that make up the connection. This is quite a bit different from what you have above - the connection parameters (hostname, protocol, username, etc.) are not part of the URI. * It's possible that you were or are using the noauth extension, which allowed the Guacamole interface to be used without any authentication. We first deprecated and then removed that extension entirely, so it is no longer available - you must use some form of authentication. You can either use one of the existing modules or write your own, but you should not allow access to the interface without requiring authentication. There are many ways to do this - for example, if you have a CAS, SAML or OpenID SSO provider, you can integrate Guacamole with those and users will be seamlessly logged in. You can also use something like CredSSP or SPNEGO authentication pass-through with Tomcat, combined with the Header authentication module. -Nick
Re: VNC Connections issues after changing from Guacamole 1.4.0 to 1.5.0
Hi Nick Thank you for letting me know :) Happy to see, that a ticket exists for it. Have a great day Rolf > On 27 Feb 2023, at 16:57, Nick Couchman wrote: > > You are encountering this bug: > > https://issues.apache.org/jira/browse/GUACAMOLE-1741 > > -Nick > > On Mon, Feb 27, 2023 at 7:45 AM Rolf Zurbrügg > wrote: >> >> Hi I am currently seeng the following issue when trying to establish a VNC >> connection when using guacamole V 1.5.0 >> >> guacd | guacd[51]: DEBUG: Parameter >> "recording-include-keys" omitted. Using default value of 0. >> guacd | guacd[51]: DEBUG: Parameter >> "create-recording-path" omitted. Using default value of 0. >> guacd | guacd[51]: DEBUG: Parameter "disable-copy" >> omitted. Using default value of 0. >> guacd | guacd[51]: DEBUG: Parameter "disable-paste" >> omitted. Using default value of 0. >> guacd | guacd[51]: DEBUG: Parameter >> "wol-send-packet" omitted. Using default value of 0. >> guacd | guacd[51]: INFO: User >> "@3414be15-dceb-47f5-86aa-8a44d0b72bfd" joined connection >> "$c655d88b-07e0-4583-ba5f-3020250b33be" (1 users now present) >> guacd | guacd[51]: DEBUG: Client is using protocol >> version "VERSION_1_5_0" >> guacamole | Exception in thread "Thread-9" >> java.lang.IllegalStateException: Message will not be sent because the >> WebSocket session has been closed >> guacamole | at >> org.apache.tomcat.websocket.WsRemoteEndpointImplBase.writeMessagePart(WsRemoteEndpointImplBase.java:442) >> web| 159.100.245.54 - - [27/Feb/2023:10:46:50 >> +] "POST /api/tokens HTTP/2.0" 200 173 "https://159.100.247.7/; >> "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, >> like Gecko) Chrome/110.0.0.0 Safari/537.36" "-" >> web| 159.100.245.54 - - [27/Feb/2023:10:46:50 >> +] "GET >> /websocket-tunnel?tokenM256D88CF85F1DA03B64046DBDE2F0BFC55BC7FB22C0A61F784D84634EE99D3_DATA_SOURCE=mysql_ID�_TYPE=c_WIDTH%60_HEIGHT04_DPI�_TIMEZONE=Europe%2FZurich_AUDIO=audio%2FL8_AUDIO=audio%2FL16_IMAGE=image%2Fjpeg_IMAGE=image%2Fpng_IMAGE=image%2Fwebp >> HTTP/1.1" 101 89 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) >> AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36" "-" >> guacd | guacd[51]: ERROR: Unable to connect to VNC >> server. >> guacd | guacd[51]: INFO: User >> "@3414be15-dceb-47f5-86aa-8a44d0b72bfd" disconnected (0 users remain) >> guacd | guacd[51]: INFO: Last user of connection >> "$c655d88b-07e0-4583-ba5f-3020250b33be" disconnected >> guacd | guacd[51]: DEBUG: Requesting termination of >> client... >> guacd | guacd[51]: DEBUG: Client terminated >> successfully. >> guacd | guacd[1]: INFO: Connection >> "$c655d88b-07e0-4583-ba5f-3020250b33be" removed. >> guacamole | at >> org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendMessageBlock(WsRemoteEndpointImplBase.java:314) >> guacamole | at >> org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendMessageBlock(WsRemoteEndpointImplBase.java:254) >> guacamole | at >> org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendString(WsRemoteEndpointImplBase.java:195) >> guacamole | at >> org.apache.tomcat.websocket.WsRemoteEndpointBasic.sendText(WsRemoteEndpointBasic.java:37) >> guacamole | at >> org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint.sendInstruction(GuacamoleWebSocketTunnelEndpoint.java:152) >> guacamole | at >> org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint.access$200(GuacamoleWebSocketTunnelEndpoint.java:53) >> guacamole | at >> org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint$2.run(GuacamoleWebSocketTunnelEndpoint.java:253) >> guacamole | 10:46:50.691 [http-nio-8080-exec-8] INFO >> o.a.g.tunnel.TunnelRequestService - User "rzurbruegg" disconnected from >> connection "82". Duration: 149 mill
Re: VNC Connections issues after changing from Guacamole 1.4.0 to 1.5.0
You are encountering this bug: https://issues.apache.org/jira/browse/GUACAMOLE-1741 -Nick On Mon, Feb 27, 2023 at 7:45 AM Rolf Zurbrügg wrote: > > Hi I am currently seeng the following issue when trying to establish a VNC > connection when using guacamole V 1.5.0 > > guacd | guacd[51]: DEBUG: Parameter > "recording-include-keys" omitted. Using default value of 0. > guacd | guacd[51]: DEBUG: Parameter > "create-recording-path" omitted. Using default value of 0. > guacd | guacd[51]: DEBUG: Parameter "disable-copy" > omitted. Using default value of 0. > guacd | guacd[51]: DEBUG: Parameter "disable-paste" > omitted. Using default value of 0. > guacd | guacd[51]: DEBUG: Parameter > "wol-send-packet" omitted. Using default value of 0. > guacd | guacd[51]: INFO: User > "@3414be15-dceb-47f5-86aa-8a44d0b72bfd" joined connection > "$c655d88b-07e0-4583-ba5f-3020250b33be" (1 users now present) > guacd | guacd[51]: DEBUG: Client is using protocol > version "VERSION_1_5_0" > guacamole | Exception in thread "Thread-9" > java.lang.IllegalStateException: Message will not be sent because the > WebSocket session has been closed > guacamole | at > org.apache.tomcat.websocket.WsRemoteEndpointImplBase.writeMessagePart(WsRemoteEndpointImplBase.java:442) > web| 159.100.245.54 - - [27/Feb/2023:10:46:50 > +] "POST /api/tokens HTTP/2.0" 200 173 "https://159.100.247.7/; > "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, > like Gecko) Chrome/110.0.0.0 Safari/537.36" "-" > web| 159.100.245.54 - - [27/Feb/2023:10:46:50 > +] "GET > /websocket-tunnel?token=4D256D88CF85F1DA03B64046DBDE2F0BFC55BC7FB22C0A61F784D84634EE99D3_DATA_SOURCE=mysql_ID=82_TYPE=c_WIDTH=2560_HEIGHT=1304_DPI=96_TIMEZONE=Europe%2FZurich_AUDIO=audio%2FL8_AUDIO=audio%2FL16_IMAGE=image%2Fjpeg_IMAGE=image%2Fpng_IMAGE=image%2Fwebp > HTTP/1.1" 101 89 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) > AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36" "-" > guacd | guacd[51]: ERROR: Unable to connect to VNC > server. > guacd | guacd[51]: INFO: User > "@3414be15-dceb-47f5-86aa-8a44d0b72bfd" disconnected (0 users remain) > guacd | guacd[51]: INFO: Last user of connection > "$c655d88b-07e0-4583-ba5f-3020250b33be" disconnected > guacd | guacd[51]: DEBUG: Requesting termination of > client... > guacd | guacd[51]: DEBUG: Client terminated > successfully. > guacd | guacd[1]: INFO: Connection > "$c655d88b-07e0-4583-ba5f-3020250b33be" removed. > guacamole | at > org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendMessageBlock(WsRemoteEndpointImplBase.java:314) > guacamole | at > org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendMessageBlock(WsRemoteEndpointImplBase.java:254) > guacamole | at > org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendString(WsRemoteEndpointImplBase.java:195) > guacamole | at > org.apache.tomcat.websocket.WsRemoteEndpointBasic.sendText(WsRemoteEndpointBasic.java:37) > guacamole | at > org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint.sendInstruction(GuacamoleWebSocketTunnelEndpoint.java:152) > guacamole | at > org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint.access$200(GuacamoleWebSocketTunnelEndpoint.java:53) > guacamole | at > org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint$2.run(GuacamoleWebSocketTunnelEndpoint.java:253) > guacamole | 10:46:50.691 [http-nio-8080-exec-8] INFO > o.a.g.tunnel.TunnelRequestService - User "rzurbruegg" disconnected from > connection "82". Duration: 149 milliseconds > > > > When trying the exact same connection with version 1.4.0 I geht the following: > > guacd | guacd[18]: DEBUG: Parameter > "recording-exclude-mouse" omitted. Using default value of 0. > guacd | guacd[18]: DEBUG: Parameter > "recording-include-keys" omitted. Using default value of 0. > guacd
VNC Connections issues after changing from Guacamole 1.4.0 to 1.5.0
Hi I am currently seeng the following issue when trying to establish a VNC connection when using guacamole V 1.5.0 guacd | guacd[51]: DEBUG: Parameter "recording-include-keys" omitted. Using default value of 0. guacd | guacd[51]: DEBUG: Parameter "create-recording-path" omitted. Using default value of 0. guacd | guacd[51]: DEBUG: Parameter "disable-copy" omitted. Using default value of 0. guacd | guacd[51]: DEBUG: Parameter "disable-paste" omitted. Using default value of 0. guacd | guacd[51]: DEBUG: Parameter "wol-send-packet" omitted. Using default value of 0. guacd | guacd[51]: INFO: User "@3414be15-dceb-47f5-86aa-8a44d0b72bfd" joined connection "$c655d88b-07e0-4583-ba5f-3020250b33be" (1 users now present) guacd | guacd[51]: DEBUG: Client is using protocol version "VERSION_1_5_0" guacamole | Exception in thread "Thread-9" java.lang.IllegalStateException: Message will not be sent because the WebSocket session has been closed guacamole |at org.apache.tomcat.websocket.WsRemoteEndpointImplBase.writeMessagePart(WsRemoteEndpointImplBase.java:442) web| 159.100.245.54 - - [27/Feb/2023:10:46:50 +] "POST /api/tokens HTTP/2.0" 200 173 "https://159.100.247.7/; "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36" "-" web| 159.100.245.54 - - [27/Feb/2023:10:46:50 +] "GET /websocket-tunnel?token=4D256D88CF85F1DA03B64046DBDE2F0BFC55BC7FB22C0A61F784D84634EE99D3_DATA_SOURCE=mysql_ID=82_TYPE=c_WIDTH=2560_HEIGHT=1304_DPI=96_TIMEZONE=Europe%2FZurich_AUDIO=audio%2FL8_AUDIO=audio%2FL16_IMAGE=image%2Fjpeg_IMAGE=image%2Fpng_IMAGE=image%2Fwebp HTTP/1.1" 101 89 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36" "-" guacd | guacd[51]: ERROR: Unable to connect to VNC server. guacd | guacd[51]: INFO: User "@3414be15-dceb-47f5-86aa-8a44d0b72bfd" disconnected (0 users remain) guacd | guacd[51]: INFO: Last user of connection "$c655d88b-07e0-4583-ba5f-3020250b33be" disconnected guacd | guacd[51]: DEBUG: Requesting termination of client... guacd | guacd[51]: DEBUG: Client terminated successfully. guacd | guacd[1]: INFO:Connection "$c655d88b-07e0-4583-ba5f-3020250b33be" removed. guacamole |at org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendMessageBlock(WsRemoteEndpointImplBase.java:314) guacamole |at org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendMessageBlock(WsRemoteEndpointImplBase.java:254) guacamole |at org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendString(WsRemoteEndpointImplBase.java:195) guacamole |at org.apache.tomcat.websocket.WsRemoteEndpointBasic.sendText(WsRemoteEndpointBasic.java:37) guacamole |at org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint.sendInstruction(GuacamoleWebSocketTunnelEndpoint.java:152) guacamole |at org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint.access$200(GuacamoleWebSocketTunnelEndpoint.java:53) guacamole |at org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint$2.run(GuacamoleWebSocketTunnelEndpoint.java:253) guacamole | 10:46:50.691 [http-nio-8080-exec-8] INFO o.a.g.tunnel.TunnelRequestService - User "rzurbruegg" disconnected from connection "82". Duration: 149 milliseconds When trying the exact same connection with version 1.4.0 I geht the following: guacd | guacd[18]: DEBUG: Parameter "recording-exclude-mouse" omitted. Using default value of 0. guacd | guacd[18]: DEBUG: Parameter "recording-include-keys" omitted. Using default value of 0. guacd | guacd[18]: DEBUG: Parameter "create-recording-path" omitted. Using default value of 0. guacd | guacd[18]: DEBUG: Parameter "disable-copy" omitted. Using default value of 0. guacd | guacd[18]: DEBUG: Parameter "disable-paste" omitted. Using default value of 0. guacd
URL for a direct connection to a VNC or SSH session after upgrading from 0.9.12 to 1.4.0
Greetings, We have a question regarding establishing a direct connection (instead of a login screen) for a user to SSH or VNC sessions. We've been using Guacamole for some time and recently started work on updating it to the latest version. In version 0.9.12, we used to form a URL and then use the HMAC and secret-key-based authentication to directly proxy a user to a session. Here a URL would look something like this: /guacamole/#/client?timestamp=1674863599405=31BNen1LuL1ukF7NjW8ocbor4ME=john=ssh. When reading the version 1.4.0 documentation, we understand that HMAC is no longer an option, although there is JSON-based authentication and also quick-connect as extensions. However, we could not understand how to adjust the above URL to land a user in an SSH and VNC session directly without them having to use the Guacamole login screen with username/password. Can anyone help us with this? If there's a JavaScript implementation, in particular, it would be great to know. Thank you very much. Best, Timur Bazhirov, Ph.D. Founder/CEO | mat3ra.com 1212 Broadway Plaza, Ste #2100 Walnut Creek, CA 94596 +1.510.473.7770 LinkedIn <https://www.linkedin.com/in/timurbazhirov/> | Web <http://bazhirov.com> • Accessible, fast, and accurate materials modeling: manuscript <https://arxiv.org/abs/1807.05623> • Alloys, chemicals, electronic and composite materials: case studies <https://exabyte.io/#case-study> • How we design the materials for tomorrow: presentation <https://youtu.be/n7JGfebTmIQ> -- This message is for the intended recipient only and may contain proprietary, private or confidential information. The use, copying or distribution of the contents of this email, or any attachments hereto, by anyone other than the intended recipient, or an employee or agent authorized by the intended recipient, is prohibited.
Re: File transfer over vnc
The key word of that document are the "or SFTP" VNC does not support file transfer natively, so you'd need to set up the target system to support SFTP, and go that route... I have not done that for Windows, so I cannot help there.. however if you used RDP file transfer should work. -Lee On Sun, Oct 9, 2022, 12:53 PM Giuseppe Giardina wrote: > Hi everyone, > > I'm new in apache guacamole. I installed a server and webclient on > oracle linux 8 and I succesfully connect to a windows machine with vnc > server. I don't uderstand how can I upload file. > > On documentation > ( > https://guacamole.apache.org/doc/gug/using-guacamole.html#transferring-files) > > it's wrote it is possobile use native transfer but how? > > -- > Proteggimi dal sapere quel che non ho bisogno di sapere. Proteggimi anche > dal sapere che bisognerebbe sapere quello che non so. Proteggimi dal sapere > quello che ho deciso di non sapere. Le cose che ho deciso di non sapere... > Signore > Proteggimi dalle conseguenze della succitata preghiera. [Douglas Adams] > > > - > To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org > For additional commands, e-mail: user-h...@guacamole.apache.org > >
File transfer over vnc
Hi everyone, I'm new in apache guacamole. I installed a server and webclient on oracle linux 8 and I succesfully connect to a windows machine with vnc server. I don't uderstand how can I upload file. On documentation (https://guacamole.apache.org/doc/gug/using-guacamole.html#transferring-files) it's wrote it is possobile use native transfer but how? -- Proteggimi dal sapere quel che non ho bisogno di sapere. Proteggimi anche dal sapere che bisognerebbe sapere quello che non so. Proteggimi dal sapere quello che ho deciso di non sapere. Le cose che ho deciso di non sapere... Signore Proteggimi dalle conseguenze della succitata preghiera. [Douglas Adams] - To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org For additional commands, e-mail: user-h...@guacamole.apache.org
Re: Non US keyboards with VNC access to KVM VMs
Thanks, Michael.
I'll take some time for a deeper look into KVM.
Regards, Marcus Rocha
Michael Jumper escreveu:
For that, if KVM will not already split composed key events into their
corresponding dead keys, guac's VNC support would need to switch over
to using the same sort of automatic layout translation as we do for RDP.
Within a browser, dead keys do not produce key events like you'd
expect; they produce composition events as the character is slowly
built. Guacamole automatically handles this - once we have the full
character, including the portion that requires the dead key, then we
dispatch a key event for the fully-assembled character. For RDP,
Guacamole will also automatically break apart the received character
into dead keys as necessary (or not if the remote layout doesn't need
dead keys for that character). For VNC, the RFB standard implies that
the VNC server should simulate the key events necessary to type the
character intended, but only explicitly specifies this for the
numeric/shifted state of a character. I suspect KVM does not do this
for dead keys, and guac would need to do this on KVM's behalf.
- Mike
On Mon, Jul 18, 2022 at 11:39 AM Marcus Rocha <mailto:mvro...@gmail.com>> wrote:
Hi, Mike!
Actually, I can live with a single keyboard layout for now. Thus I
managed to get most of the keys of my keyboard to function
correctly by
using the same map for QEMU/KVM and for the guest os (Oracle Linux8).
Exceptions are the "dead keys" such as ` ´ ^ ~
Any tips on solving this problem?
Regards,
Marcus Rocha
Michael Jumper escreveu:
> On Fri, Jul 1, 2022 at 5:50 AM Nick Couchman mailto:vn...@apache.org>
> <mailto:vn...@apache.org <mailto:vn...@apache.org>>> wrote:
>
> On Thu, Jun 30, 2022 at 11:20 AM Marcus Rocha
mailto:mvro...@gmail.com>
> <mailto:mvro...@gmail.com <mailto:mvro...@gmail.com>>> wrote:
>
> Hi there!
>
> Any news here, or it is still not possible to configure, for
> example, pt-br or br-abnt2 keyboards when accessing KVM VMs
> using VNC connections?
>
>
> If I recall correctly, VNC just uses standard keysyms,
rather than
> scancodes, to send keystrokes, which means that you
shouldn't have
> to do anything to change the keyboard layout through Guacamole.
>
>
> Yes, this is true ... except for KVM, which emulates a hardware
> keyboard. Unlike other VNC servers, the KVM VNC server has to be
> configured to use a particular keyboard layout for proper
translation
> from keysym to scancode, and it will only be able to represent key
> events for keys on that hardware keyboard regardless of what the
VNC
> client sends.
>
> It's not really a Guacamole issue, though there are things that
could
> be done to Guacamole to make KVM happier (such as adding the same
> keysym translation layer that we use in RDP). Regardless, it is
> absolutely not possible for a VNC client to universally "just work"
> with the KVM VNC server, as the KVM VNC server simply cannot
represent
> key events for keys that are not on the emulated hardware keyboard.
>
> A better way to have proper keyboard support on a
KVM-virtualized VM
> would be to have that VM host a VNC server (or RDP or SSH) and
connect
> to that instead.
>
> - Mike
>
Re: Non US keyboards with VNC access to KVM VMs
For that, if KVM will not already split composed key events into their corresponding dead keys, guac's VNC support would need to switch over to using the same sort of automatic layout translation as we do for RDP. Within a browser, dead keys do not produce key events like you'd expect; they produce composition events as the character is slowly built. Guacamole automatically handles this - once we have the full character, including the portion that requires the dead key, then we dispatch a key event for the fully-assembled character. For RDP, Guacamole will also automatically break apart the received character into dead keys as necessary (or not if the remote layout doesn't need dead keys for that character). For VNC, the RFB standard implies that the VNC server should simulate the key events necessary to type the character intended, but only explicitly specifies this for the numeric/shifted state of a character. I suspect KVM does not do this for dead keys, and guac would need to do this on KVM's behalf. - Mike On Mon, Jul 18, 2022 at 11:39 AM Marcus Rocha wrote: > Hi, Mike! > > Actually, I can live with a single keyboard layout for now. Thus I > managed to get most of the keys of my keyboard to function correctly by > using the same map for QEMU/KVM and for the guest os (Oracle Linux8). > Exceptions are the "dead keys" such as ` ´ ^ ~ > Any tips on solving this problem? > > Regards, > Marcus Rocha > > Michael Jumper escreveu: > > On Fri, Jul 1, 2022 at 5:50 AM Nick Couchman > <mailto:vn...@apache.org>> wrote: > > > > On Thu, Jun 30, 2022 at 11:20 AM Marcus Rocha > <mailto:mvro...@gmail.com>> wrote: > > > > Hi there! > > > > Any news here, or it is still not possible to configure, for > > example, pt-br or br-abnt2 keyboards when accessing KVM VMs > > using VNC connections? > > > > > > If I recall correctly, VNC just uses standard keysyms, rather than > > scancodes, to send keystrokes, which means that you shouldn't have > > to do anything to change the keyboard layout through Guacamole. > > > > > > Yes, this is true ... except for KVM, which emulates a hardware > > keyboard. Unlike other VNC servers, the KVM VNC server has to be > > configured to use a particular keyboard layout for proper translation > > from keysym to scancode, and it will only be able to represent key > > events for keys on that hardware keyboard regardless of what the VNC > > client sends. > > > > It's not really a Guacamole issue, though there are things that could > > be done to Guacamole to make KVM happier (such as adding the same > > keysym translation layer that we use in RDP). Regardless, it is > > absolutely not possible for a VNC client to universally "just work" > > with the KVM VNC server, as the KVM VNC server simply cannot represent > > key events for keys that are not on the emulated hardware keyboard. > > > > A better way to have proper keyboard support on a KVM-virtualized VM > > would be to have that VM host a VNC server (or RDP or SSH) and connect > > to that instead. > > > > - Mike > > > >
Re: Non US keyboards with VNC access to KVM VMs
Hi, Mike!
Actually, I can live with a single keyboard layout for now. Thus I
managed to get most of the keys of my keyboard to function correctly by
using the same map for QEMU/KVM and for the guest os (Oracle Linux8).
Exceptions are the "dead keys" such as ` ´ ^ ~
Any tips on solving this problem?
Regards,
Marcus Rocha
Michael Jumper escreveu:
On Fri, Jul 1, 2022 at 5:50 AM Nick Couchman <mailto:vn...@apache.org>> wrote:
On Thu, Jun 30, 2022 at 11:20 AM Marcus Rocha mailto:mvro...@gmail.com>> wrote:
Hi there!
Any news here, or it is still not possible to configure, for
example, pt-br or br-abnt2 keyboards when accessing KVM VMs
using VNC connections?
If I recall correctly, VNC just uses standard keysyms, rather than
scancodes, to send keystrokes, which means that you shouldn't have
to do anything to change the keyboard layout through Guacamole.
Yes, this is true ... except for KVM, which emulates a hardware
keyboard. Unlike other VNC servers, the KVM VNC server has to be
configured to use a particular keyboard layout for proper translation
from keysym to scancode, and it will only be able to represent key
events for keys on that hardware keyboard regardless of what the VNC
client sends.
It's not really a Guacamole issue, though there are things that could
be done to Guacamole to make KVM happier (such as adding the same
keysym translation layer that we use in RDP). Regardless, it is
absolutely not possible for a VNC client to universally "just work"
with the KVM VNC server, as the KVM VNC server simply cannot represent
key events for keys that are not on the emulated hardware keyboard.
A better way to have proper keyboard support on a KVM-virtualized VM
would be to have that VM host a VNC server (or RDP or SSH) and connect
to that instead.
- Mike
-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org
Re: Microphone with VNC
Thanks, Nick! Sincerely appreciate your great efforts and contributions! Thanks, Yang > On Jul 13, 2022, at 04:35, Nick Couchman wrote: > > On Tue, Jul 12, 2022 at 3:02 PM Yang Yang wrote: > Thank you very much for the clarification and confirmation, Nick! The > information is really helpful that I actually had spent some time trying to > get PulseAudio work but failed, and now can move on. > > About Spice, it is really great to know that you are working on it, and do > you have a rough expectation on its availability? > > > I have no estimate on when it will be available - this is quite new territory > for me (adding an entire protocol to Guacamole), so I'm having to learn a lot > and refine things quite a bit as I go. I'm making good progress - I currently > have basic connections working, along with clipboard and sound playback, but > have several other things to tackle - inbound audio, file transfer, and > connection security are the big ones - plus lots of code cleanup to do. > > -Nick
Re: Microphone with VNC
On Tue, Jul 12, 2022 at 3:02 PM Yang Yang wrote: > Thank you very much for the clarification and confirmation, Nick! The > information is really helpful that I actually had spent some time trying to > get PulseAudio work but failed, and now can move on. > > About Spice, it is really great to know that you are working on it, and do > you have a rough expectation on its availability? > > I have no estimate on when it will be available - this is quite new territory for me (adding an entire protocol to Guacamole), so I'm having to learn a lot and refine things quite a bit as I go. I'm making good progress - I currently have basic connections working, along with clipboard and sound playback, but have several other things to tackle - inbound audio, file transfer, and connection security are the big ones - plus lots of code cleanup to do. -Nick
Re: Microphone with VNC
Thank you very much for the clarification and confirmation, Nick! The information is really helpful that I actually had spent some time trying to get PulseAudio work but failed, and now can move on. About Spice, it is really great to know that you are working on it, and do you have a rough expectation on its availability? Thank, Yang > On Jul 12, 2022, at 19:41, Nick Couchman wrote: > > On Mon, Jul 11, 2022 at 11:26 PM Yang Yang wrote: > Hello, > > I am trying to use microphone with VNC through Guacamole, is it possible with > v1.4.0? I have PulseAudio server running with VNC server and can get audio > output through Guacamole, but cannot use microphone. Also, I noticed that > there is a setting (enable-audio-input) for RDP, but not for VNC. > > > As I'm working on getting Spice support implemented, I've spent a decent > amount of time looking at the audio input code, and I'm reasonably certain > that it only works for RDP at the moment - the Pulse support for VNC does not > support audio input. > > -Nick
Re: Microphone with VNC
On Mon, Jul 11, 2022 at 11:26 PM Yang Yang wrote: > Hello, > > I am trying to use microphone with VNC through Guacamole, is it possible > with v1.4.0? I have PulseAudio server running with VNC server and can get > audio output through Guacamole, but cannot use microphone. Also, I noticed > that there is a setting (enable-audio-input) for RDP, but not for VNC. > > As I'm working on getting Spice support implemented, I've spent a decent amount of time looking at the audio input code, and I'm reasonably certain that it only works for RDP at the moment - the Pulse support for VNC does not support audio input. -Nick
Microphone with VNC
Hello, I am trying to use microphone with VNC through Guacamole, is it possible with v1.4.0? I have PulseAudio server running with VNC server and can get audio output through Guacamole, but cannot use microphone. Also, I noticed that there is a setting (enable-audio-input) for RDP, but not for VNC. Thanks, Yang - To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org For additional commands, e-mail: user-h...@guacamole.apache.org
Re: Non US keyboards with VNC access to KVM VMs
On Fri, Jul 1, 2022 at 5:50 AM Nick Couchman wrote: > On Thu, Jun 30, 2022 at 11:20 AM Marcus Rocha wrote: > >> Hi there! >> >> Any news here, or it is still not possible to configure, for example, >> pt-br or br-abnt2 keyboards when accessing KVM VMs using VNC connections? >> > > If I recall correctly, VNC just uses standard keysyms, rather than > scancodes, to send keystrokes, which means that you shouldn't have to do > anything to change the keyboard layout through Guacamole. > Yes, this is true ... except for KVM, which emulates a hardware keyboard. Unlike other VNC servers, the KVM VNC server has to be configured to use a particular keyboard layout for proper translation from keysym to scancode, and it will only be able to represent key events for keys on that hardware keyboard regardless of what the VNC client sends. It's not really a Guacamole issue, though there are things that could be done to Guacamole to make KVM happier (such as adding the same keysym translation layer that we use in RDP). Regardless, it is absolutely not possible for a VNC client to universally "just work" with the KVM VNC server, as the KVM VNC server simply cannot represent key events for keys that are not on the emulated hardware keyboard. A better way to have proper keyboard support on a KVM-virtualized VM would be to have that VM host a VNC server (or RDP or SSH) and connect to that instead. - Mike
Re: Non US keyboards with VNC access to KVM VMs
On Thu, Jun 30, 2022 at 11:20 AM Marcus Rocha wrote: > Hi there! > > Any news here, or it is still not possible to configure, for example, > pt-br or br-abnt2 keyboards when accessing KVM VMs using VNC connections? > If I recall correctly, VNC just uses standard keysyms, rather than scancodes, to send keystrokes, which means that you shouldn't have to do anything to change the keyboard layout through Guacamole. -NIck
Non US keyboards with VNC access to KVM VMs
Hi there! Any news here, or it is still not possible to configure, for example, pt-br or br-abnt2 keyboards when accessing KVM VMs using VNC connections? Best regards, Marcus Rocha
RE: VNC/RDP connection fail (Invalid Credentials?)
We are creating our own custom application as it is site used internally that has other uses but needs to have the VNC/RDP capabilities within the web application. The application makes the connection no problem when we do not send full credentials with the tunnel connection but when we include a password parameter it refuses the connection even when the username and password are correct. Jarek Millburg, M.S. Application Analyst Eurofins | EAG Laboratories 2672 Metro Blvd. Maryland Heights, MO 63043 USA Email: jarekmillb...@eurofinseag.com<mailto:jarekmillb...@eurofinseag.com> Website: eurofinsEAG.com From: Nick Couchman Sent: Monday, June 27, 2022 11:13 AM To: user@guacamole.apache.org Subject: Re: VNC/RDP connection fail (Invalid Credentials?) CAUTION: This email originated from outside of EAG. Do not click links or open attachments unless you recognize the sender and know the content is safe. On Mon, Jun 27, 2022 at 11:16 AM Jarek Millburg mailto:jarekmillb...@eurofinseag.com>> wrote: Hello there, I am working on a new custom web application and am implementing guacamole for a VNC and RDP connections to many target machines. My system takes input from a user to let the system know what IP address to connect to and what credentials they have. I do not use a user-mapping.xml file as we have hundreds of target machines throughout our network so we prompt the user for all information needed to make the connection. When we test without the use of a password it makes the connection and then prompts the user within the VNC/RDP connection to sign into the target machine. If we include the password with the credentials entered by a user then it fails to establish the connection and disconnects. Checking the logs the only info I find is that it was refused based on Authentication Failure (Invalid Credentials?). We know the account information is correct for the machine we are accessing so wondering if anyone has any thoughts or input on what we could possibly be doing wrong. P.S. Most code is based off the Skeleton code provided here : Writing your own Guacamole application — Apache Guacamole Manual v1.4.0<https://guacamole.apache.org/doc/gug/writing-you-own-guacamole-app.html> A couple of questions for you: 1) Is there a specific reason you're writing your own web application aside from wanting the users to be able to enter the connection information? If the only reason you're writing a custom app is because you don't want to pre-create all of the connections, in user-mapping.xml, JDBC, or LDAP, then maybe instead of writing an entire separate web application it would be better to just use a difference authentication extension - either use the Quick Connect module, which allows for entering URIs (e.g. vnc://192.168.1.100:5900<http://192.168.1.100:5900>), or write your own module that would allow users to enter that information. 2) Even if you decide to write a custom application, you can test to make sure that the stock Guacamole Client is able to connect and authenticate correctly, which would help you establish where the issue actually is (custom app vs. Guacamole core components). -Nick
Re: VNC/RDP connection fail (Invalid Credentials?)
On Mon, Jun 27, 2022 at 11:16 AM Jarek Millburg < jarekmillb...@eurofinseag.com> wrote: > Hello there, > > > > I am working on a new custom web application and am implementing guacamole > for a VNC and RDP connections to many target machines. My system takes > input from a user to let the system know what IP address to connect to and > what credentials they have. > > > > I do not use a user-mapping.xml file as we have hundreds of target > machines throughout our network so we prompt the user for all information > needed to make the connection. When we test without the use of a password > it makes the connection and then prompts the user within the VNC/RDP > connection to sign into the target machine. If we include the password with > the credentials entered by a user then it fails to establish the connection > and disconnects. Checking the logs the only info I find is that it was > refused based on Authentication Failure (Invalid Credentials?). > > > > We know the account information is correct for the machine we are > accessing so wondering if anyone has any thoughts or input on what we could > possibly be doing wrong. > > > > P.S. Most code is based off the Skeleton code provided here : Writing > your own Guacamole application — Apache Guacamole Manual v1.4.0 > <https://guacamole.apache.org/doc/gug/writing-you-own-guacamole-app.html> > > > A couple of questions for you: 1) Is there a specific reason you're writing your own web application aside from wanting the users to be able to enter the connection information? If the only reason you're writing a custom app is because you don't want to pre-create all of the connections, in user-mapping.xml, JDBC, or LDAP, then maybe instead of writing an entire separate web application it would be better to just use a difference authentication extension - either use the Quick Connect module, which allows for entering URIs (e.g. vnc:// 192.168.1.100:5900), or write your own module that would allow users to enter that information. 2) Even if you decide to write a custom application, you can test to make sure that the stock Guacamole Client is able to connect and authenticate correctly, which would help you establish where the issue actually is (custom app vs. Guacamole core components). -Nick >
VNC/RDP connection fail (Invalid Credentials?)
Hello there, I am working on a new custom web application and am implementing guacamole for a VNC and RDP connections to many target machines. My system takes input from a user to let the system know what IP address to connect to and what credentials they have. I do not use a user-mapping.xml file as we have hundreds of target machines throughout our network so we prompt the user for all information needed to make the connection. When we test without the use of a password it makes the connection and then prompts the user within the VNC/RDP connection to sign into the target machine. If we include the password with the credentials entered by a user then it fails to establish the connection and disconnects. Checking the logs the only info I find is that it was refused based on Authentication Failure (Invalid Credentials?). We know the account information is correct for the machine we are accessing so wondering if anyone has any thoughts or input on what we could possibly be doing wrong. P.S. Most code is based off the Skeleton code provided here : Writing your own Guacamole application - Apache Guacamole Manual v1.4.0<https://guacamole.apache.org/doc/gug/writing-you-own-guacamole-app.html> Jarek Millburg, M.S. Application Analyst Eurofins | EAG Laboratories 2672 Metro Blvd. Maryland Heights, MO 63043 USA Email: jarekmillb...@eurofinseag.com<mailto:jarekmillb...@eurofinseag.com> Website: eurofinsEAG.com
Re: VNC uses weird Keyboard-Layout
On Mon, May 2, 2022 at 6:47 AM Matti Kaupenjohann < matti.kaupenjoh...@fh-dortmund.de> wrote: > Hi, > > before upgrading to 1.4.0 and after fixing the ip connection problem in > 1.4.0 for our setup, I ran into an issue with a vnc connection. I > initial hoped the upgrade may fix it but it doesn't. > > I have a VM installed headless via KVM and virttools on a ubuntu system. > I setted the VM up with graphics using vnc and listen to 0.0.0.0. This > setup made it possible to use tigervnc from any system which is inside > our network. The usage of togervnc workes perfectly fine and also the > german keyboard layout is beeing recognized with no issue. But if I > setup a connection to this system in guacamole the keyboard layout > begins with weird stuff. First I thought oh some vnc translation errors > and the system uses now british/us qwerty. Instead some very weird > layout is used. With [ALT GR] I am possible to achieve a lot of unicode > chars, which normaly are not printed out over the letter keys. I also > tested with the on screen keyboard which is still qwertz with the same > result. This is because KVM cannot implement keyboard in the same way that a normal VNC server would: VNC accepts key events in the form of keysyms, which are layout independent. If you type "z", the VNC server handles it as "z" and preserves the key's identity, even if the keyboard layouts of local and remote systems do not match. Guacamole follows this same approach. KVM, on the other hand, is required by its own nature to transform these into hardware scancodes to emulate the keyboard connected to the VM. These scancodes represent key location, not identity, so there will be unexpected behavior if the OS inside the VM is actually configured to use a different layout from what KVM expects. For example, if the VM is configured within KVM to use a US Qwerty layout, but the OS within the VM is configured to use Qwertz: 1. User types "z" while using Guacamole. 2. Guacamole sends "z" to the Guacamole server. 3. The Guacamole server sends "z" to the VNC server (KVM). 4. KVM translates that "z" to a scancode that's essentially equivalent to "the second key in the fourth row". 5. The OS within the VM receives the scancode, but handles it as "y" because that's the key at that location according to the OS' configured layout. - Mike
VNC uses weird Keyboard-Layout
Hi, before upgrading to 1.4.0 and after fixing the ip connection problem in 1.4.0 for our setup, I ran into an issue with a vnc connection. I initial hoped the upgrade may fix it but it doesn't. I have a VM installed headless via KVM and virttools on a ubuntu system. I setted the VM up with graphics using vnc and listen to 0.0.0.0. This setup made it possible to use tigervnc from any system which is inside our network. The usage of togervnc workes perfectly fine and also the german keyboard layout is beeing recognized with no issue. But if I setup a connection to this system in guacamole the keyboard layout begins with weird stuff. First I thought oh some vnc translation errors and the system uses now british/us qwerty. Instead some very weird layout is used. With [ALT GR] I am possible to achieve a lot of unicode chars, which normaly are not printed out over the letter keys. I also tested with the on screen keyboard which is still qwertz with the same result. The Workaround I would use for the moment: 1. Install xrdp 2. nat the xrdp port to kvm host 3. create connection But I am intrigued that it should work since tigervnc did. Greeting matti - To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org For additional commands, e-mail: user-h...@guacamole.apache.org
Re: I can't connect VNC and DRP
On Thu, Apr 14, 2022 at 10:41 AM 박제형 wrote: > ssh connects successfully, but VNC and DRP don't connect. > > The following is the log when trying to connect to VNC. > > > > *system log* > > Apr 14 22:40:04 raspberrypi guacd[26140]: Connection > "$e01e238e-a799-45e5-b809-1b627e39b99d" removed. > > Apr 14 22:46:10 raspberrypi guacd[26140]: Creating new client for protocol > "vnc" > > Apr 14 22:46:10 raspberrypi guacd[26140]: Connection ID is > "$3e3adf64-6fb9-45e7-a3f9-f136c7cbbf17" > > Apr 14 22:46:10 raspberrypi guacd[27295]: Cursor rendering: local > > Apr 14 22:46:10 raspberrypi guacd[27295]: User > "@2d1cb845-621b-42ca-b77d-3800d20132ce" joined connection > "$3e3adf64-6fb9-45e7-a3f9-f136c7cbbf17" (1 users now present) > > Apr 14 22:46:10 raspberrypi guacd[27295]: ConnectClientToTcpAddr6: connect > > Apr 14 22:46:10 raspberrypi guacd[27295]: ConnectToTcpAddr: connect > > Apr 14 22:46:10 raspberrypi guacd[27295]: Unable to connect to VNC server > > Apr 14 22:46:10 raspberrypi guacd[27295]: Unable to connect to VNC server. > There's not really a lot to say besides what the log says - it cannot locate or connect to the VNC server. Also, I'm not entirely sure, but it looks like it's trying to connect to a server called "connect". If you're using a custom-built Guacamole application, rather than the provided Guacamole Client, you may be sending instructions incorrectly such that the "connect" instruction is being delivered as one of the arguments for the connection. If you're using the stock Guacamole Client, then you just need to make sure your connection parameters are configured correctly and that the system running guacd can both resolve server names and actually connect to them. -Nick >
I can't connect VNC and DRP
ssh connects successfully, but VNC and DRP don't connect. The following is the log when trying to connect to VNC. system log Apr 14 22:40:04 raspberrypi guacd[26140]: Connection "$e01e238e-a799-45e5-b809-1b627e39b99d" removed. Apr 14 22:46:10 raspberrypi guacd[26140]: Creating new client for protocol "vnc" Apr 14 22:46:10 raspberrypi guacd[26140]: Connection ID is "$3e3adf64-6fb9-45e7-a3f9-f136c7cbbf17" Apr 14 22:46:10 raspberrypi guacd[27295]: Cursor rendering: local Apr 14 22:46:10 raspberrypi guacd[27295]: User "@2d1cb845-621b-42ca-b77d-3800d20132ce" joined connection "$3e3adf64-6fb9-45e7-a3f9-f136c7cbbf17" (1 users now present) Apr 14 22:46:10 raspberrypi guacd[27295]: ConnectClientToTcpAddr6: connect Apr 14 22:46:10 raspberrypi guacd[27295]: ConnectToTcpAddr: connect Apr 14 22:46:10 raspberrypi guacd[27295]: Unable to connect to VNC server Apr 14 22:46:10 raspberrypi guacd[27295]: Unable to connect to VNC server. Apr 14 22:46:10 raspberrypi guacd[27295]: User "@2d1cb845-621b-42ca-b77d-3800d20132ce" disconnected (0 users remain) Apr 14 22:46:10 raspberrypi guacd[27295]: Last user of connection "$3e3adf64-6fb9-45e7-a3f9-f136c7cbbf17" disconnected Apr 14 22:46:10 raspberrypi guacd[26140]: Connection "$3e3adf64-6fb9-45e7-a3f9-f136c7cbbf17" removed. Tomcat log [2022-04-14 22:46:10] [info] 22:46:10.419 [ajp-nio-8009-exec-3] INFO o.a.g.tunnel.TunnelRequestService - User "jhpark" connected to connection "5". [2022-04-14 22:46:10] [info] 22:46:10.419 [ajp-nio-8009-exec-3] INFO o.a.g.t.h.RestrictedGuacamoleHTTPTunnelServlet - Using HTTP tunnel (not WebSocket). Performance may be sub-optimal. [2022-04-14 22:46:25] [info] 22:46:25.498 [ajp-nio-8009-exec-9] INFO o.a.g.tunnel.TunnelRequestService - User "jhpark" disconnected from connection "5". Duration: 15079 milliseconds [2022-04-14 22:46:25] [info] 22:46:25.524 [ajp-nio-8009-exec-9] ERROR o.a.g.s.GuacamoleHTTPTunnelServlet - HTTP tunnel request failed: Connection to guacd timed out.
VNC connection: Cannot connect. Connection already in use by this user.
I'm trying to set up Guacamole on a home Ubuntu 20.04 desktop. I can get an
SSH connection to work but I'm having a hard time with the VNC. Can anyone
point me in the right direction? I have jotted down the summary and my
setup as well as some troubleshooting done thus far.
SUMMARY OF ERROR MESSAGES
- guacamole web app error message:
- "The Guacamole server is denying access to this connection because
you have exhausted the limit for simultaneous connection use by an
individual user. Please close one or more connections and try again."
- In the Chrome or Firefox developer console, network/XHR, I'm pasting
a few request/response headers:
- Request URL: http://localhost:8080/guacamole/tunnel?connect
- Response Status Code: 429
- Response Headers:
- Guacamole-Error_message: Cannot connect. Connection already in
use by this user.
- Guacamole-Status-Code: 797
- In the guacd docker container:
- guacd[7]: DEBUG: Guacamole connection closed during handshake
guacd[7]: DEBUG: Error reading "select": End of stream reached while
reading instruction
- In the guacamole docker container:
- 18:13:26.091 [http-nio-8080-exec-9] ERROR
o.a.g.w.GuacamoleWebSocketTunnelEndpoint - Creation of WebSocket
tunnel to
guacd failed: Cannot connect. Connection already in use by this user.
18:13:26.116 [http-nio-8080-exec-6] WARN
o.a.g.s.GuacamoleHTTPTunnelServlet - HTTP tunnel request
rejected: Cannot
connect. Connection already in use by this user.
MY INSTALLATION AND TROUBLESHOOTING DONE SO FAR
- Environment
- Ubuntu 20.04 desktop
- working tiger VNC server setup at display number 1, which I have
been using for SSH-tunneled VNC connection for 2 years
- I followed the official doc to set up three containers. The guacamole
links to the guacd and mysql. The web app came up fine and I can login to
configure settings.
- I easily got an SSH connection to work. For VNC connections, I tried
both guacamole at the latest and at tag 1.4.0 and it made no difference
- ~$ sudo docker ps
CONTAINER ID IMAGE COMMAND
CREATEDSTATUSPORTS
NAMES
b0c49ab0fb8f guacamole/guacamole:1.4.0 "/opt/guacamole/bin/??" 20
hours ago Up 42 minutes 0.0.0.0:8080->8080/tcp,
:::8080->8080/tcp some-guacamole
969afbd569c2 guacamole/guacd "/bin/sh -c '/usr/lo??" 21
hours ago Up 43 minutes (healthy) 4822/tcp
some-guacd
3e490e948aa6 mysql/mysql-server:latest "/entrypoint.sh mysq??" 38
hours ago Up 42 minutes (healthy) 3306/tcp, 33060-33061/tcp
mysql-docker
- On my Ubuntu host, I have proper firewall settings
- ports ssh 22, apache 80/443 are wide open, and my VNC server is
sitting on 0 0.0.0.0:5901 and is open to 172.17.0.0/24
- My docker0 is recognized by the host as 172.17.0.1
- $ ifconfig docker0
docker0: flags=4163 mtu 1500
inet 172.17.0.1 netmask 255.255.0.0 broadcast 172.17.255.255
- From within the guacd container, I can telnet to my docker host's SSH
server (172.17.0.1:22), Apache server(172.17.0.1:80/443), and VNC server
(172.17.0.1:5901)
- In addition to the SSH connection working out of the box with
guacamole install, from within the guacamole container, I could telnet to
the guacd at port 4822 and paste the following vnc handshake
(6.select,3.vnc;) and got a proper response.
- ~$ sudo docker inspect some-guacd|grep IPAddress
"SecondaryIPAddresses": null,
"IPAddress": "172.17.0.2",
"IPAddress": "172.17.0.2",
~$ sudo docker exec -u0 -it some-guacamole bash
root@b0c49ab0fb8f:/opt/guacamole# telnet 172.17.0.2 4822
Trying 172.17.0.2...
Connected to 172.17.0.2.
Escape character is '^]'.
6.select,3.vnc;
4.args,13.VERSION_1_3_0,8.hostname,4.port,9.read-only,9.encodings,8.username,8.password,13.swap-red-blue,11.color-depth,6.cursor,9.autoretry,18.clipboard-encoding,9.dest-host,9.dest-port,12.enable-audio,16.audio-servername,15.reverse-connect,14.listen-timeout,11.enable-sftp,13.sftp-hostname,13.sftp-host-key,9.sftp-port,13.sftp-username,13.sftp-password,16.sftp-private-key,15.sftp-passphrase,14.sftp-directory,19.sftp-root-directory,26.sftp-server-alive-interval,21.sftp-disable-download,19.sftp-disable-upload,14.recording-path,14.recording-name,24.recording-exclude-output,23.recording-exclude-mouse,22.recording-include-keys,21.create-recording-path,12.disable-copy,13.disable-paste,15.wol-send-packet,12.wol-mac-addr,18.wol-broadcast-addr,12.wol-udp-port,13.wol-wait-time,14.force-lossless;
Re: source code changes to disable guac's auto-reconnect after vnc idle timeout?
An update- the temp change I tried, commenting out line 95 in guacClientNotificatin.js worked (after rebuilding guac client)! Guac no longer tries to auto-reconnect after the vnc idle timeout. Here <https://drive.google.com/file/d/1DnOmEIW0cL3focmpKM4FDdjRwyHXeZe4/view?usp=sharing> is a screenshot of the new dialogue box that appears. Nick- I still look forward to the changes you're thinking about- will be useful. But not as urgent now in case you're busy with other things (as I'm sure you are). Thanks everyone for the help! Tushar On Mon, Mar 14, 2022 at 5:41 PM Tushar Sheth wrote: > Wow. Thank you! > > Let me know if there is anything I can do to help. Unfortunately though, > my skills are limited to being able to take code and manipulate it. > > Tushar > > On Mon, Mar 14, 2022 at 5:27 PM Nick Couchman wrote: > >> On Mon, Mar 14, 2022 at 4:50 PM Tushar Sheth >> wrote: >> >>> Thanks Jonathan- yes I have been looking at your various listserve posts >>> and github issues related to this. Very helpful. >>> >>> I'm unfortunately not skilled enough to make the full fix in vnc.c that >>> would mirror the changes to rdp.c that were made in response to your bug >>> submission. At least not quickly. >>> >>> Perhaps there is a temporary modification I can make to vnc.c- although >>> that seems a lot riskier than doing hacky things on the guac-client side :) >>> >>> >> Hello, everyone, >> As the reconnect is triggered on the client-side, I think it would be >> possible to create a Connection Attribute (as opposed to a parameter) to >> disable auto-reconnect and be able to set that per-connection, on any >> supported protocol. If I have some time in the coming days I'll take a stab >> at it. >> >> -Nick >> >>>
Re: source code changes to disable guac's auto-reconnect after vnc idle timeout?
Wow. Thank you! Let me know if there is anything I can do to help. Unfortunately though, my skills are limited to being able to take code and manipulate it. Tushar On Mon, Mar 14, 2022 at 5:27 PM Nick Couchman wrote: > On Mon, Mar 14, 2022 at 4:50 PM Tushar Sheth > wrote: > >> Thanks Jonathan- yes I have been looking at your various listserve posts >> and github issues related to this. Very helpful. >> >> I'm unfortunately not skilled enough to make the full fix in vnc.c that >> would mirror the changes to rdp.c that were made in response to your bug >> submission. At least not quickly. >> >> Perhaps there is a temporary modification I can make to vnc.c- although >> that seems a lot riskier than doing hacky things on the guac-client side :) >> >> > Hello, everyone, > As the reconnect is triggered on the client-side, I think it would be > possible to create a Connection Attribute (as opposed to a parameter) to > disable auto-reconnect and be able to set that per-connection, on any > supported protocol. If I have some time in the coming days I'll take a stab > at it. > > -Nick > >>
Re: source code changes to disable guac's auto-reconnect after vnc idle timeout?
On Mon, Mar 14, 2022 at 4:50 PM Tushar Sheth wrote: > Thanks Jonathan- yes I have been looking at your various listserve posts > and github issues related to this. Very helpful. > > I'm unfortunately not skilled enough to make the full fix in vnc.c that > would mirror the changes to rdp.c that were made in response to your bug > submission. At least not quickly. > > Perhaps there is a temporary modification I can make to vnc.c- although > that seems a lot riskier than doing hacky things on the guac-client side :) > > Hello, everyone, As the reconnect is triggered on the client-side, I think it would be possible to create a Connection Attribute (as opposed to a parameter) to disable auto-reconnect and be able to set that per-connection, on any supported protocol. If I have some time in the coming days I'll take a stab at it. -Nick >
Re: source code changes to disable guac's auto-reconnect after vnc idle timeout?
Thanks Jonathan- yes I have been looking at your various listserve posts and github issues related to this. Very helpful. I'm unfortunately not skilled enough to make the full fix in vnc.c that would mirror the changes to rdp.c that were made in response to your bug submission. At least not quickly. Perhaps there is a temporary modification I can make to vnc.c- although that seems a lot riskier than doing hacky things on the guac-client side :) Tushar On Mon, Mar 14, 2022 at 3:57 PM Hankins, Jonathan < jhank...@homewood.k12.al.us> wrote: > Tushar, > > I had a bug filed for a similar issue with RDP session termination code: > https://issues.apache.org/jira/browse/GUACAMOLE-484. Not sure if that > gives you any insight. > > As far as your question 5, if you change part of guacd you'd need to > recompile and restart guacd. If the change is in the Guacamole client, > you'd need to rebuild and replace guacamole.war and restart your > servelet (tomcat or whatever). The changes in the pull request where they > addressed by bug were all in guacd from what I can tell. > > > > On Mon, Mar 14, 2022 at 1:38 PM Tushar Sheth > wrote: > >> Hey all- I've done some digging since my last post about this. Would be >> grateful for your direction. Happy also to pay for anyone's time if that's >> an option. >> >> Apologies for this long post. We desperately need some help to get things >> going for an early customer we just scored. >> >> Problem: >> -->We have an idle timeout (15 mins) working via tigervnc server. The >> problem is, guacamole then automatically reconnects, which we want to >> disable. >> >> Setup: >> -->Guac: ubuntu 20.04 (on GCP) + guac 1.4.0 & guac-client built from >> source + tomcat9 + nginx reverse proxy & ssl + mysql auth >> -->VM: vnc connection using tigervnc server to Kali Linux (on GCP) >> >> Some solution ideas/questions (with contextual info): >> >> 1. Here >> <https://drive.google.com/file/d/1u7xJfJyG0gv5C_pv8vUpIpDNExjYjW87/view?usp=sharing> >> is a screenshot of the auto reconnect dialogue box that pops up after the >> VNC server does the idle timeout >> >> 2. The dialogue box language matches up with ERROR_CLIENT_203 >> <https://github.com/apache/guacamole-client/blob/ed7746e0612d569644277a2aa654c5eda4447c8e/guacamole/src/main/frontend/src/translations/en.json#L80> >> in the guacamole-client source code >> >> 3. Client error code 203 is designated as one of the error codes that >> triggers an auto reconnect in guacClientNotification.js >> <https://github.com/apache/guacamole-client/blob/7e30b8682a28c50935874e6779281da4c548715e/guacamole/src/main/frontend/src/app/client/directives/guacClientNotification.js#L95> >> >> 4. Could I disable the reconnect simply by commenting out line 95 in >> guacClientNotification.js? (I get that this is not a recommended way to do >> it) >> >> 5. If I do that, can I activate the change simply by restarting guacd or >> do I need to make the change in source and then reinstall guacamole-client? >> >> 6. If modifying guacClientNotification.js is not the way, then what do I >> need to modify to accomplish my goal? >> >> 7. I've seen past listserv messages explaining that GUACAMOLE-208 >> <https://issues.apache.org/jira/browse/GUACAMOLE-208> might have >> intended to address this, so perhaps that didn't fully work and guacamole >> is still not categorizing idle timeout under the proper error code (or >> maybe it's fixed for rdp but not vnc). However, that seems like a big lift >> to sort out quickly- I would really welcome a quick hacky solution even if >> it isn't ideal. Even a way to disable auto-reconnect across the board would >> be fine for now. >> >> 7. Is your ideal rec to do this via an extension? If yes, any pointers to >> get us started? I've read the documentation, but I don't understand how we >> could use an extension to override the auto-reconnect trigger. >> >> Thank you!! >> >> Tushar >> > > > -- > Jonathan Hankins > > Homewood City Schools > > W: 205-877-4548 > > This e-mail is intended only for the recipient and may contain > confidential or proprietary information. If you are not the intended > recipient, the review, distribution, duplication or retention of this > message and its attachments are prohibited. Please notify the sender of > this error immediately by reply e-mail, and permanently delete this message > and its attachments in any form in which they may have been preserved.
Re: source code changes to disable guac's auto-reconnect after vnc idle timeout?
Tushar, I had a bug filed for a similar issue with RDP session termination code: https://issues.apache.org/jira/browse/GUACAMOLE-484. Not sure if that gives you any insight. As far as your question 5, if you change part of guacd you'd need to recompile and restart guacd. If the change is in the Guacamole client, you'd need to rebuild and replace guacamole.war and restart your servelet (tomcat or whatever). The changes in the pull request where they addressed by bug were all in guacd from what I can tell. On Mon, Mar 14, 2022 at 1:38 PM Tushar Sheth wrote: > Hey all- I've done some digging since my last post about this. Would be > grateful for your direction. Happy also to pay for anyone's time if that's > an option. > > Apologies for this long post. We desperately need some help to get things > going for an early customer we just scored. > > Problem: > -->We have an idle timeout (15 mins) working via tigervnc server. The > problem is, guacamole then automatically reconnects, which we want to > disable. > > Setup: > -->Guac: ubuntu 20.04 (on GCP) + guac 1.4.0 & guac-client built from > source + tomcat9 + nginx reverse proxy & ssl + mysql auth > -->VM: vnc connection using tigervnc server to Kali Linux (on GCP) > > Some solution ideas/questions (with contextual info): > > 1. Here > <https://drive.google.com/file/d/1u7xJfJyG0gv5C_pv8vUpIpDNExjYjW87/view?usp=sharing> > is a screenshot of the auto reconnect dialogue box that pops up after the > VNC server does the idle timeout > > 2. The dialogue box language matches up with ERROR_CLIENT_203 > <https://github.com/apache/guacamole-client/blob/ed7746e0612d569644277a2aa654c5eda4447c8e/guacamole/src/main/frontend/src/translations/en.json#L80> > in the guacamole-client source code > > 3. Client error code 203 is designated as one of the error codes that > triggers an auto reconnect in guacClientNotification.js > <https://github.com/apache/guacamole-client/blob/7e30b8682a28c50935874e6779281da4c548715e/guacamole/src/main/frontend/src/app/client/directives/guacClientNotification.js#L95> > > 4. Could I disable the reconnect simply by commenting out line 95 in > guacClientNotification.js? (I get that this is not a recommended way to do > it) > > 5. If I do that, can I activate the change simply by restarting guacd or > do I need to make the change in source and then reinstall guacamole-client? > > 6. If modifying guacClientNotification.js is not the way, then what do I > need to modify to accomplish my goal? > > 7. I've seen past listserv messages explaining that GUACAMOLE-208 > <https://issues.apache.org/jira/browse/GUACAMOLE-208> might have intended > to address this, so perhaps that didn't fully work and guacamole is still > not categorizing idle timeout under the proper error code (or maybe it's > fixed for rdp but not vnc). However, that seems like a big lift to sort out > quickly- I would really welcome a quick hacky solution even if it isn't > ideal. Even a way to disable auto-reconnect across the board would be fine > for now. > > 7. Is your ideal rec to do this via an extension? If yes, any pointers to > get us started? I've read the documentation, but I don't understand how we > could use an extension to override the auto-reconnect trigger. > > Thank you!! > > Tushar > -- Jonathan Hankins Homewood City Schools W: 205-877-4548 -- This e-mail is intended only for the recipient and may contain confidential or proprietary information. If you are not the intended recipient, the review, distribution, duplication or retention of this message and its attachments are prohibited. Please notify the sender of this error immediately by reply e-mail, and permanently delete this message and its attachments in any form in which they may have been preserved.
RE: [External] source code changes to disable guac's auto-reconnect after vnc idle timeout?
This is probably not the answer you’re looking for, but perhaps it’s an option to trigger a host-OS-logoff instead of a VNC timeout? In that case, guac doesn’t try reconnect. Our setup currently works this way through RDP and a windows group policy auto-logoff, ymmv. Daniel McCarty Director of Engineering W. H. Leary Co. P. +1 708.444.4900 E. dani...@whleary.com | W. whleary.com<http://www.whleary.com> From: Tushar Sheth Sent: Monday, March 14, 2022 1:38 PM To: user@guacamole.apache.org Subject: [External] source code changes to disable guac's auto-reconnect after vnc idle timeout? Hey all- I've done some digging since my last post about this. Would be grateful for your direction. Happy also to pay for anyone's time if that's an option. Apologies for this long post. We desperately need some help to get things going for an early customer we just scored. Problem: -->We have an idle timeout (15 mins) working via tigervnc server. The problem is, guacamole then automatically reconnects, which we want to disable. Setup: -->Guac: ubuntu 20.04 (on GCP) + guac 1.4.0 & guac-client built from source + tomcat9 + nginx reverse proxy & ssl + mysql auth -->VM: vnc connection using tigervnc server to Kali Linux (on GCP) Some solution ideas/questions (with contextual info): 1. Here<https://urldefense.proofpoint.com/v2/url?u=https-3A__drive.google.com_file_d_1u7xJfJyG0gv5C-5Fpv8vUpIpDNExjYjW87_view-3Fusp-3Dsharing=DwMFaQ=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM=KfJK_i8bAAiKEOAyAm9y9vt5kSwc8dkKCDiCjPA9mhw=qQM1Az1JyHlxPiDHO_EM80TNZpgWjKbBHTP6ujMCObI=sIYrKrVJhxOJBsWyaM47okMD3oxUKuvj76-3VDUMfjc=> is a screenshot of the auto reconnect dialogue box that pops up after the VNC server does the idle timeout 2. The dialogue box language matches up with ERROR_CLIENT_203<https://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_apache_guacamole-2Dclient_blob_ed7746e0612d569644277a2aa654c5eda4447c8e_guacamole_src_main_frontend_src_translations_en.json-23L80=DwMFaQ=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM=KfJK_i8bAAiKEOAyAm9y9vt5kSwc8dkKCDiCjPA9mhw=qQM1Az1JyHlxPiDHO_EM80TNZpgWjKbBHTP6ujMCObI=bqScqGOaYPRBABiCErWGdCY6zzMUfSxxDqV5aONCXFk=> in the guacamole-client source code 3. Client error code 203 is designated as one of the error codes that triggers an auto reconnect in guacClientNotification.js<https://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_apache_guacamole-2Dclient_blob_7e30b8682a28c50935874e6779281da4c548715e_guacamole_src_main_frontend_src_app_client_directives_guacClientNotification.js-23L95=DwMFaQ=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM=KfJK_i8bAAiKEOAyAm9y9vt5kSwc8dkKCDiCjPA9mhw=qQM1Az1JyHlxPiDHO_EM80TNZpgWjKbBHTP6ujMCObI=par5TiQVuNa_ly9L7NApQvRnsmg2A6218_HgEWz2yu4=> 4. Could I disable the reconnect simply by commenting out line 95 in guacClientNotification.js? (I get that this is not a recommended way to do it) 5. If I do that, can I activate the change simply by restarting guacd or do I need to make the change in source and then reinstall guacamole-client? 6. If modifying guacClientNotification.js is not the way, then what do I need to modify to accomplish my goal? 7. I've seen past listserv messages explaining that GUACAMOLE-208<https://urldefense.proofpoint.com/v2/url?u=https-3A__issues.apache.org_jira_browse_GUACAMOLE-2D208=DwMFaQ=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM=KfJK_i8bAAiKEOAyAm9y9vt5kSwc8dkKCDiCjPA9mhw=qQM1Az1JyHlxPiDHO_EM80TNZpgWjKbBHTP6ujMCObI=ZLy8o2tYo_Y0s6_C_MSufaNmrdqmrX_BaX_jeR-TaQk=> might have intended to address this, so perhaps that didn't fully work and guacamole is still not categorizing idle timeout under the proper error code (or maybe it's fixed for rdp but not vnc). However, that seems like a big lift to sort out quickly- I would really welcome a quick hacky solution even if it isn't ideal. Even a way to disable auto-reconnect across the board would be fine for now. 7. Is your ideal rec to do this via an extension? If yes, any pointers to get us started? I've read the documentation, but I don't understand how we could use an extension to override the auto-reconnect trigger. Thank you!! Tushar
source code changes to disable guac's auto-reconnect after vnc idle timeout?
Hey all- I've done some digging since my last post about this. Would be grateful for your direction. Happy also to pay for anyone's time if that's an option. Apologies for this long post. We desperately need some help to get things going for an early customer we just scored. Problem: -->We have an idle timeout (15 mins) working via tigervnc server. The problem is, guacamole then automatically reconnects, which we want to disable. Setup: -->Guac: ubuntu 20.04 (on GCP) + guac 1.4.0 & guac-client built from source + tomcat9 + nginx reverse proxy & ssl + mysql auth -->VM: vnc connection using tigervnc server to Kali Linux (on GCP) Some solution ideas/questions (with contextual info): 1. Here <https://drive.google.com/file/d/1u7xJfJyG0gv5C_pv8vUpIpDNExjYjW87/view?usp=sharing> is a screenshot of the auto reconnect dialogue box that pops up after the VNC server does the idle timeout 2. The dialogue box language matches up with ERROR_CLIENT_203 <https://github.com/apache/guacamole-client/blob/ed7746e0612d569644277a2aa654c5eda4447c8e/guacamole/src/main/frontend/src/translations/en.json#L80> in the guacamole-client source code 3. Client error code 203 is designated as one of the error codes that triggers an auto reconnect in guacClientNotification.js <https://github.com/apache/guacamole-client/blob/7e30b8682a28c50935874e6779281da4c548715e/guacamole/src/main/frontend/src/app/client/directives/guacClientNotification.js#L95> 4. Could I disable the reconnect simply by commenting out line 95 in guacClientNotification.js? (I get that this is not a recommended way to do it) 5. If I do that, can I activate the change simply by restarting guacd or do I need to make the change in source and then reinstall guacamole-client? 6. If modifying guacClientNotification.js is not the way, then what do I need to modify to accomplish my goal? 7. I've seen past listserv messages explaining that GUACAMOLE-208 <https://issues.apache.org/jira/browse/GUACAMOLE-208> might have intended to address this, so perhaps that didn't fully work and guacamole is still not categorizing idle timeout under the proper error code (or maybe it's fixed for rdp but not vnc). However, that seems like a big lift to sort out quickly- I would really welcome a quick hacky solution even if it isn't ideal. Even a way to disable auto-reconnect across the board would be fine for now. 7. Is your ideal rec to do this via an extension? If yes, any pointers to get us started? I've read the documentation, but I don't understand how we could use an extension to override the auto-reconnect trigger. Thank you!! Tushar
Re: turn off VNC auto-reconnect?
Tushar, Shame it won't work. It's been a while since I utilised that parameter but I had an idea it might have achieved the desired outcome, albeit not quite as you wanted technically, thanks for enlightening me. Although I quite understand what you want to do unfortunately I can't offer any further insight, however I trust someone else will be able to assist. On 2/03/22 5:16 pm, Tushar Sheth wrote: Thanks for thinking about this- but unfortunately, that won't work. As explained by Nick here: https://lists.apache.org/thread/m7lof9s15n1dr2tlpkoznfstjyph59m0 <https://lists.apache.org/thread/m7lof9s15n1dr2tlpkoznfstjyph59m0> api-session-timeout refers to idle time on the guac webapp UI. If there is an active connection, guac considers that as not idle, even if there is nothing happening on the actual remote desktop. Regardless, we have idle timeout for the remote connection working via TigerVNC server's -IdleTimeout parameter. I just need help figuring out how to turn off guacamole's auto reconnect when the VNC server closes the connection when the idle timeout is triggered. I found an old thread with some ideas, but not a clear solution, here: https://lists.apache.org/thread/b7n7x5vr3j5cd370nrrlrb10qhlw00h3 <https://lists.apache.org/thread/b7n7x5vr3j5cd370nrrlrb10qhlw00h3> Tushar On Wed, Mar 2, 2022 at 2:50 AM Ivanmarcus wrote: Tushar, I've not tried this specifically, however I wonder if you were to set api-session-timeout to 15 in guacamole.properties whether that would address your issue? On 2/03/22 7:39 am, Tushar Sheth wrote: > Hi- we set our VNC server (TigerVNC) to disconnect a session after a > certain amount of idle time (15 minutes). When that happens, guacamole > kicks in and does a countdown of a certain number of seconds and then > automatically reconnects the connection. > > I want to turn the guacamole vnc auto-reconnect off. > > We are using database authentication. So, I inserted the following into > the "guacamole_connection_parameter" table: > > connection_id = '97' > parameter_name = 'autoretry' > parameter_value = '0' > > It did not work- guacamole still auto reconnects after the connection > timeout. > > What am I missing? > > Tushar > > > > - To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org <mailto:user-unsubscr...@guacamole.apache.org> For additional commands, e-mail: user-h...@guacamole.apache.org <mailto:user-h...@guacamole.apache.org> - To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org For additional commands, e-mail: user-h...@guacamole.apache.org
Re: turn off VNC auto-reconnect?
Thanks for thinking about this- but unfortunately, that won't work. As explained by Nick here: https://lists.apache.org/thread/m7lof9s15n1dr2tlpkoznfstjyph59m0 api-session-timeout refers to idle time on the guac webapp UI. If there is an active connection, guac considers that as not idle, even if there is nothing happening on the actual remote desktop. Regardless, we have idle timeout for the remote connection working via TigerVNC server's -IdleTimeout parameter. I just need help figuring out how to turn off guacamole's auto reconnect when the VNC server closes the connection when the idle timeout is triggered. I found an old thread with some ideas, but not a clear solution, here: https://lists.apache.org/thread/b7n7x5vr3j5cd370nrrlrb10qhlw00h3 Tushar On Wed, Mar 2, 2022 at 2:50 AM Ivanmarcus wrote: > Tushar, > > I've not tried this specifically, however I wonder if you were to set > api-session-timeout to 15 in guacamole.properties whether that would > address your issue? > > On 2/03/22 7:39 am, Tushar Sheth wrote: > > Hi- we set our VNC server (TigerVNC) to disconnect a session after a > > certain amount of idle time (15 minutes). When that happens, guacamole > > kicks in and does a countdown of a certain number of seconds and then > > automatically reconnects the connection. > > > > I want to turn the guacamole vnc auto-reconnect off. > > > > We are using database authentication. So, I inserted the following into > > the "guacamole_connection_parameter" table: > > > > connection_id = '97' > > parameter_name = 'autoretry' > > parameter_value = '0' > > > > It did not work- guacamole still auto reconnects after the connection > > timeout. > > > > What am I missing? > > > > Tushar > > > > > > > > > > - > To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org > For additional commands, e-mail: user-h...@guacamole.apache.org > >
Re: turn off VNC auto-reconnect?
Tushar, I've not tried this specifically, however I wonder if you were to set api-session-timeout to 15 in guacamole.properties whether that would address your issue? On 2/03/22 7:39 am, Tushar Sheth wrote: Hi- we set our VNC server (TigerVNC) to disconnect a session after a certain amount of idle time (15 minutes). When that happens, guacamole kicks in and does a countdown of a certain number of seconds and then automatically reconnects the connection. I want to turn the guacamole vnc auto-reconnect off. We are using database authentication. So, I inserted the following into the "guacamole_connection_parameter" table: connection_id = '97' parameter_name = 'autoretry' parameter_value = '0' It did not work- guacamole still auto reconnects after the connection timeout. What am I missing? Tushar - To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org For additional commands, e-mail: user-h...@guacamole.apache.org
Re: Unknown authentication scheme from VNC server
Austin, The problem _may_ be to do with the RealVNC auth you have set. I'm unable to help with specific macOS questions, however - as Nick has commented recently - RealVNC does have mechanisms that 'standard' VNC does not. This series of posts may be of some use in explaining that: https://lists.apache.org/thread/yqcfok3ph6obw2k3cqc0zn1gb0ol9nmw So, if possible, it could be worth trying a different auth setting on your RealVNC server. That may be all that's needed to resolve the issue? On 2/03/22 7:45 am, Leath, Austin wrote: Hey everyone, We are having some issues getting VNC Server on macOS to communicate with our guacd servers. I took a look at the logs and I found this error message every time we try to connect to the machine running VNC server: Here is the version of VNC Server that we are running on our macOS machine: We are working with RealVNC to give us an enterprise license for VNC Server so that we can have decent copy/paste ability, but before we pull the trigger we wanted to get it working first. What should we do to resolve this issue? Is there an issue with the VNC Server version not being compatible with the guacd server? *Austin Leath***CVAD IT Service Desk Text Description automatically generated *ART 371 |*�1201 West Mulberry Street, Denton, TX 76201 *cvad.itservi...@unt.edu <mailto:cvad.itservi...@unt.edu>**|* *940.565.4522**|**itservices.cvad.unt.edu <https://itservices.cvad.unt.edu/>* - To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org For additional commands, e-mail: user-h...@guacamole.apache.org
turn off VNC auto-reconnect?
Hi- we set our VNC server (TigerVNC) to disconnect a session after a certain amount of idle time (15 minutes). When that happens, guacamole kicks in and does a countdown of a certain number of seconds and then automatically reconnects the connection. I want to turn the guacamole vnc auto-reconnect off. We are using database authentication. So, I inserted the following into the "guacamole_connection_parameter" table: connection_id = '97' parameter_name = 'autoretry' parameter_value = '0' It did not work- guacamole still auto reconnects after the connection timeout. What am I missing? Tushar
Re: Re: ERROR: Unable to connect to VNC server.
On Thu, Feb 24, 2022 at 10:17 PM Simon wrote: > thanks a lot. > I'll make change RealVNC server setttings and try again. > > then, What about other VNC server, can guac support well. and which one is > best support. > In manual, there mention kinds of VNC server. > RealVNC or TigerVNC TightVNC x11vnc vino > I think the answer is that it depends on the options you use. Guacamole leverages libvncclient for VNC support, so it supports anything that libvnc supports. libvnc, in turn, supports things documented in the standards plus the more commonly-used features, but definitely lacks support for some of the non-standard things that various servers have chosen to implement. Pretty much any of the above can be configured with more compatible, standard options, but several of them support customizations and additional features. RealVNC is probably the least compatible of those ones - they have done quite a bit of customization to their server and client and support many things on top of the VNC standard. This is fine - I'm not saying anything bad about - one of the strengths of VNC is that it is extensible, but it introduces interoperability challenges. -Nick
PulseAudio + qemu-kvm VNC gives no sound
Hi there, Could you folks please help me understand how PulseAudio + VNC should work? I followed the Audio support (via PulseAudio) guide [0], and I'm able to make Guacd connect to the PulseAudio server running on my laptop. But I hear no sound coming from the remote machine. What I've done so far: === I'm running everything on my laptop. The "remote machine" is a RHEL 8.4 VM, running on top of qemu-kvm. I access it through the qemu-kvm built-in VNC server. The Guacamole and Guacd services are running as separate Podman containers. >From my browser, I can access my remote machine's graphical interface through the Guacamole containers. Now I want to hear the sound coming from the remote machine. I added the following line to my local machine's `/etc/pulse/default.pa`: load-module module-native-protocol-tcp auth-anonymous=1 ... and added the following parameters to the request to Guacamole: 'guac.enable-audio': "true", 'guac.audio-servername': "192.168.122.10", `192.168.122.10` is my laptop's virbr0 interface IP address. When I connect to the remote machine, Guacd logs show the following lines: guacd[105]: INFO: Connecting to PulseAudio... guacd[105]: INFO: Authorizing PulseAudio connection... guacd[105]: INFO: Sending client name... guacd[105]: INFO: PulseAudio now ready guacd[105]: INFO: Will use default sink: "alsa_output.usb-Dell_DELL_Slim_Soundbar_SB521A_SB521A-00.analog-stereo" guacd[105]: INFO: Starting streaming from "DELL Slim Soundbar SB521A Analog Stereo" guacd[105]: INFO: PulseAudio stream being created... guacd[105]: INFO: PulseAudio stream now ready `DELL Slim Soundbar ...` is the speaker attached to my laptop. What I was expecting: === I thought I could hear the sounds coming from the remote machine, by simply running `speaker-test` there. What I'm getting: === I hear no sound at all. My speaker is working fine, as I can hear sounds from my local machine. What am I doing wrong? [0] https://guacamole.apache.org/doc/gug/configuring-guacamole.html#audio-support-via-pulseaudio -- Lucio Seki He / Him / His Senior Systems Administrator, RH Training - Learning Platforms Red Hat <https://www.redhat.com/> lu...@redhat.com <https://www.redhat.com/>
Re: Linux VNC server that provides copy/paste and file transfer?
Hi ! im using Ubuntu 20.04 with x11vnc and copy/paste from/to guacamole (im using 1.2.0) works here sftp is quite kind of strange Ciao Gerd Am 13.01.22 um 17:19 schrieb Dustin Lang: Hi all, I am finding that, with Ubuntu 18.04 packages, tigervncserver (1.9.0) *does* do copy/paste tigervnc-standalone-server (1.7.0) does NOT do copy/paste to guacamole tightvncserver (1.3.10) does NOT do copy/paste and I am finding that the file transfer menu is entirely absent in all three. I have read that tigervncserver does not support file transfer (within the VNC protocol). Is this in keeping with others' findings? Is there a version of one of these products that supports copy/paste and file transfer? Thanks! --dustin - To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org For additional commands, e-mail: user-h...@guacamole.apache.org
Re: Linux VNC server that provides copy/paste and file transfer?
On Thu, Jan 13, 2022 at 11:20 AM Dustin Lang wrote: > Hi all, > > I am finding that, with Ubuntu 18.04 packages, > > tigervncserver (1.9.0) *does* do copy/paste > tigervnc-standalone-server (1.7.0) does NOT do copy/paste to guacamole > tightvncserver (1.3.10) does NOT do copy/paste > > It seems like perhaps older versions of TigerVNC don't support the clipboard in a way that Guacamole recognizes? Not sure - I don't use VNC a lot. > and I am finding that the file transfer menu is entirely absent in all > three. I have read that tigervncserver does not support file transfer > (within the VNC protocol). > > That's correct - VNC itself does not have a standard implementation for file transfers. Guacamole provides SFTP as an alternative for this, and you can set that up and enable it in the connection parameters for your VNC connections, but there is no standardized, in-band support for file transfer in VNC. -Nick
Linux VNC server that provides copy/paste and file transfer?
Hi all, I am finding that, with Ubuntu 18.04 packages, tigervncserver (1.9.0) *does* do copy/paste tigervnc-standalone-server (1.7.0) does NOT do copy/paste to guacamole tightvncserver (1.3.10) does NOT do copy/paste and I am finding that the file transfer menu is entirely absent in all three. I have read that tigervncserver does not support file transfer (within the VNC protocol). Is this in keeping with others' findings? Is there a version of one of these products that supports copy/paste and file transfer? Thanks! --dustin
RE: [External] Re: VNC: multi monitor support (like UltraVNC)
Thank you for the response Nick! I am talking about the UltraVNC capability outlined in the following link. It does seem as a special capability in UltraVNC as I have not seen this in TightVNC. This also looks like a Windows specific feature. In any case what can I do with Guacamole with a multi-display remote machine? What is the default: the default display or all displays. Are there any additional parameters I can set for a connection outside of those provided in the sample application? Thanks! https://uvnc.com/docs/documentation-1-3-0/134-virtual-displays.html From: Nick Couchman Sent: Friday, November 26, 2021 5:15 AM To: user@guacamole.apache.org Subject: [External] Re: VNC: multi monitor support (like UltraVNC) On Thu, Nov 25, 2021 at 11:47 AM Neil Canham mailto:neil.can...@vcommsolutions.com>> wrote: That would be of great interest to me too - I know there was a feature request a long time back but I suspect it may not be a high priority and I vaguely remember some technical issues? Not sure On Thu, 25 Nov 2021 at 16:24, Abramson, Eli mailto:eli.abram...@honeywell.com.invalid>> wrote: In the UltraVNC client it is possible to use the “Select Full Desktop / Switch monitor(driver)” button to switch between the displays of the remote Windows machine. Is this possible in Guacamole? In general, I can’t seem to find documentation on multi-monitor support. Does it exist? It's probably important, here, to make sure what is meant by "multi-monitor support." From Eli's view, it seems like the request is that the VNC protocol be able to trigger a swap between different monitors, so that a single client monitor (Guacamole session) can "see" what's on different remote monitors without having to display it at the same time. That's a slightly different request from most of the ones that have come up on the list before, which is usually about improving how Guacamole spans multiple monitors on the client side. As you mention, Neil, that has been discussed, and does have its challenges. I'm not sure if libvncserver/client supports triggering that monitor swap - I'm not sure if this is part of the original VNC spec, or a more proprietary extension of one of the VNC systems. Seems like if it is implemented in UltraVNC there's a decent chance it's more standard. -Nick
Re: VNC: multi monitor support (like UltraVNC)
On Thu, Nov 25, 2021 at 11:47 AM Neil Canham wrote: > That would be of great interest to me too - I know there was a > feature request a long time back but I suspect it may not be a high > priority and I vaguely remember some technical issues? Not sure > > On Thu, 25 Nov 2021 at 16:24, Abramson, Eli > wrote: > >> In the UltraVNC client it is possible to use the “Select Full Desktop / >> Switch monitor(driver)” button to switch between the displays of the remote >> Windows machine. Is this possible in Guacamole? In general, I can’t seem to >> find documentation on multi-monitor support. Does it exist? >> > It's probably important, here, to make sure what is meant by "multi-monitor support." From Eli's view, it seems like the request is that the VNC protocol be able to trigger a swap between different monitors, so that a single client monitor (Guacamole session) can "see" what's on different remote monitors without having to display it at the same time. That's a slightly different request from most of the ones that have come up on the list before, which is usually about improving how Guacamole spans multiple monitors on the client side. As you mention, Neil, that has been discussed, and does have its challenges. I'm not sure if libvncserver/client supports triggering that monitor swap - I'm not sure if this is part of the original VNC spec, or a more proprietary extension of one of the VNC systems. Seems like if it is implemented in UltraVNC there's a decent chance it's more standard. -Nick
Re: VNC: multi monitor support (like UltraVNC)
That would be of great interest to me too - I know there was a feature request a long time back but I suspect it may not be a high priority and I vaguely remember some technical issues? Not sure On Thu, 25 Nov 2021 at 16:24, Abramson, Eli wrote: > In the UltraVNC client it is possible to use the “Select Full Desktop / > Switch monitor(driver)” button to switch between the displays of the remote > Windows machine. Is this possible in Guacamole? In general, I can’t seem to > find documentation on multi-monitor support. Does it exist? >
VNC: multi monitor support (like UltraVNC)
In the UltraVNC client it is possible to use the "Select Full Desktop / Switch monitor(driver)" button to switch between the displays of the remote Windows machine. Is this possible in Guacamole? In general, I can't seem to find documentation on multi-monitor support. Does it exist?
Re: VNC to prompt username
On Thu, Oct 28, 2021 at 10:03 PM Nick Khoo wrote: > Hi Nick, > > > > VNC built-in into this product. > > ADDERLink ipeps | Adder Technology > <https://www.adder.com/en/kvm-solutions/adderlink-ipeps> > > MAN-AL-IPEPS.pdf (amazonaws.com) > <https://adder-assets.s3.eu-west-1.amazonaws.com/s3fs-public/2020-05/MAN-AL-IPEPS.pdf?g_SRqUZIhuFyMRHWxJHsA2uhuQjeAlWn=> > > > >From looking at that documentation it appears that this product relies on RealVNC for the server-side, and, more specifically, the RA2 authentication protocol. I do not believe that LibVNC (and, thus, Guacamole) supports this authentication mode, and the web searching I've done indicates that there isn't much outside of RealVNC that does support it. Even TigerVNC, which seems to have some code to recognize when it's being requested, doesn't seem to have anything that actually processes that authentication mechanism. I suspect that when you enter the default password the VNC server allows the connection to negotiate down to a "lesser" authentication protocol and the connection continues. -Nick >
