Re: GUAC_ID is required

[chomik MChamster]

Howdy,

Just to let you know I was able to narrow down the problem - there is
something in the Azure app proxy connector group setting which was causing
my issue. Once I switched to using the connector group which the other two
instances were set to the problem disappeared. Still not a clue what the
exact problem is there, but that's beyond my pay grade and to be looked at
by someone who actually knows Azure and what to do.
Just thought I share this to avoid you guys wasting more time.

Great app, great support. Thanks again and keep up the good work!

T

On Thu, 3 Mar 2022 at 23:22, chomik MChamster 
wrote:

> Apologies for late response but due to other projects taking priority I
> had little time to troubleshoot this further.
> Here is a high level overview of my setup
>
> ubuntu 20.04 box running guacamole v1.4, mysql, nginx proxy for ssl and
> using saml authentication. There is also an Azure App proxy for access from
> outside. I know how this is going to sound but I deployed all three
> instances using the same steps. 2 are working fine and 1 is having issues.
> The troublesome instance is working fine without SAML using mysql
> authentication and by working fine I mean I can rdp or ssh into other
> servers with it.
> Once I turn on saml I can still authenticate and login into the Guacamole
> but I cannot rdp nor ssh into any of the servers. Not sure if I've chosen
> the correct snippet to include but here is the error that I am not seeing
> on the other two instances:
> From /var/log/syslog:
>
> Mar  3 23:01:02 guacamole02 tomcat9[16530]: 23:01:02.120
> [http-nio-8080-exec-3] DEBUG o.a.g.a.j.c.ConnectionMapper.select - ==>
> Parameters: 2(String), 2(String), 2(String)
> Mar  3 23:01:02 guacamole02 tomcat9[16530]: 23:01:02.123
> [http-nio-8080-exec-3] DEBUG o.a.g.a.j.c.ConnectionMapper.select - <==
>  Total: 1
> Mar  3 23:01:02 guacamole02 tomcat9[16530]: 23:01:02.123
> [http-nio-8080-exec-3] DEBUG o.a.g.a.j.c.ConnectionMapper.select - <==
>  Total: 0
> Mar  3 23:01:02 guacamole02 tomcat9[16530]: 23:01:02.124
> [http-nio-8080-exec-3] DEBUG o.a.g.a.j.c.ConnectionMapper.select - <==
>  Total: 0
> Mar  3 23:01:02 guacamole02 tomcat9[16530]: 23:01:02.124
> [http-nio-8080-exec-3] DEBUG o.a.i.t.jdbc.JdbcTransaction - Resetting
> autocommit to true on JDBC Connection
> [com.mysql.cj.jdbc.ConnectionImpl@60edc299]
> Mar  3 23:01:02 guacamole02 tomcat9[16530]: 23:01:02.124
> [http-nio-8080-exec-3] DEBUG o.a.i.t.jdbc.JdbcTransaction - Closing JDBC
> Connection [com.mysql.cj.jdbc.ConnectionImpl@60edc299]
> Mar  3 23:01:02 guacamole02 tomcat9[16530]: 23:01:02.124
> [http-nio-8080-exec-3] DEBUG o.a.i.d.pooled.PooledDataSource - Testing
> connection 1626194585 ...
> Mar  3 23:01:02 guacamole02 tomcat9[16530]: 23:01:02.124
> [http-nio-8080-exec-3] DEBUG o.a.i.d.pooled.PooledDataSource - Connection
> 1626194585 is GOOD!
> Mar  3 23:01:02 guacamole02 tomcat9[16530]: 23:01:02.124
> [http-nio-8080-exec-3] DEBUG o.a.i.d.pooled.PooledDataSource - Returned
> connection 1626194585 to pool.
> Mar  3 23:01:02 guacamole02 tomcat9[16530]: 23:01:02.719
> [http-nio-8080-exec-2] ERROR o.a.g.w.GuacamoleWebSocketTunnelEndpoint -
> Creation of WebSocket tunnel to guacd failed: Parameter "GUAC_ID" is
> required.
> Mar  3 23:01:02 guacamole02 tomcat9[16530]: 23:01:02.719
> [http-nio-8080-exec-2] DEBUG o.a.g.w.GuacamoleWebSocketTunnelEndpoint -
> Error connecting WebSocket tunnel.
> Mar  3 23:01:02 guacamole02 tomcat9[16530]:
> org.apache.guacamole.GuacamoleClientException: Parameter "GUAC_ID" is
> required.
> Mar  3 23:01:02 guacamole02 tomcat9[16530]: #011at
> org.apache.guacamole.tunnel.TunnelRequest.getRequiredParameter(TunnelRequest.java:144)
> Mar  3 23:01:02 guacamole02 tomcat9[16530]: #011at
> org.apache.guacamole.tunnel.TunnelRequest.getIdentifier(TunnelRequest.java:247)
> Mar  3 23:01:02 guacamole02 tomcat9[16530]: #011at
> org.apache.guacamole.tunnel.TunnelRequestService.createTunnel(TunnelRequestService.java:335)
> Mar  3 23:01:02 guacamole02 tomcat9[16530]: #011at
> org.apache.guacamole.tunnel.websocket.RestrictedGuacamoleWebSocketTunnelEndpoint.createTunnel(RestrictedGuacamoleWebSocketTunnelEndpoint.java:113)
> Mar  3 23:01:02 guacamole02 tomcat9[16530]: #011at
> org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint.onOpen(GuacamoleWebSocketTunnelEndpoint.java:200)
> Mar  3 23:01:02 guacamole02 tomcat9[16530]: #011at
> org.apache.tomcat.websocket.server.WsHttpUpgradeHandler.init(WsHttpUpgradeHandler.java:133)
> Mar  3 23:01:02 guacamole02 tomcat9[16530]: #011at
> org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:917)
> Mar  3 23:01:02 guacamole02 tomcat9[16530]: #011at
> org.apache.tomcat.util.net.NioEndpoint

Re: GUAC_ID is required

[chomik MChamster]

Apologies for late response but due to other projects taking priority I had
little time to troubleshoot this further.
Here is a high level overview of my setup

ubuntu 20.04 box running guacamole v1.4, mysql, nginx proxy for ssl and
using saml authentication. There is also an Azure App proxy for access from
outside. I know how this is going to sound but I deployed all three
instances using the same steps. 2 are working fine and 1 is having issues.
The troublesome instance is working fine without SAML using mysql
authentication and by working fine I mean I can rdp or ssh into other
servers with it.
Once I turn on saml I can still authenticate and login into the Guacamole
but I cannot rdp nor ssh into any of the servers. Not sure if I've chosen
the correct snippet to include but here is the error that I am not seeing
on the other two instances:
>From /var/log/syslog:

Mar  3 23:01:02 guacamole02 tomcat9[16530]: 23:01:02.120
[http-nio-8080-exec-3] DEBUG o.a.g.a.j.c.ConnectionMapper.select - ==>
Parameters: 2(String), 2(String), 2(String)
Mar  3 23:01:02 guacamole02 tomcat9[16530]: 23:01:02.123
[http-nio-8080-exec-3] DEBUG o.a.g.a.j.c.ConnectionMapper.select - <==
 Total: 1
Mar  3 23:01:02 guacamole02 tomcat9[16530]: 23:01:02.123
[http-nio-8080-exec-3] DEBUG o.a.g.a.j.c.ConnectionMapper.select - <==
 Total: 0
Mar  3 23:01:02 guacamole02 tomcat9[16530]: 23:01:02.124
[http-nio-8080-exec-3] DEBUG o.a.g.a.j.c.ConnectionMapper.select - <==
 Total: 0
Mar  3 23:01:02 guacamole02 tomcat9[16530]: 23:01:02.124
[http-nio-8080-exec-3] DEBUG o.a.i.t.jdbc.JdbcTransaction - Resetting
autocommit to true on JDBC Connection
[com.mysql.cj.jdbc.ConnectionImpl@60edc299]
Mar  3 23:01:02 guacamole02 tomcat9[16530]: 23:01:02.124
[http-nio-8080-exec-3] DEBUG o.a.i.t.jdbc.JdbcTransaction - Closing JDBC
Connection [com.mysql.cj.jdbc.ConnectionImpl@60edc299]
Mar  3 23:01:02 guacamole02 tomcat9[16530]: 23:01:02.124
[http-nio-8080-exec-3] DEBUG o.a.i.d.pooled.PooledDataSource - Testing
connection 1626194585 ...
Mar  3 23:01:02 guacamole02 tomcat9[16530]: 23:01:02.124
[http-nio-8080-exec-3] DEBUG o.a.i.d.pooled.PooledDataSource - Connection
1626194585 is GOOD!
Mar  3 23:01:02 guacamole02 tomcat9[16530]: 23:01:02.124
[http-nio-8080-exec-3] DEBUG o.a.i.d.pooled.PooledDataSource - Returned
connection 1626194585 to pool.
Mar  3 23:01:02 guacamole02 tomcat9[16530]: 23:01:02.719
[http-nio-8080-exec-2] ERROR o.a.g.w.GuacamoleWebSocketTunnelEndpoint -
Creation of WebSocket tunnel to guacd failed: Parameter "GUAC_ID" is
required.
Mar  3 23:01:02 guacamole02 tomcat9[16530]: 23:01:02.719
[http-nio-8080-exec-2] DEBUG o.a.g.w.GuacamoleWebSocketTunnelEndpoint -
Error connecting WebSocket tunnel.
Mar  3 23:01:02 guacamole02 tomcat9[16530]:
org.apache.guacamole.GuacamoleClientException: Parameter "GUAC_ID" is
required.
Mar  3 23:01:02 guacamole02 tomcat9[16530]: #011at
org.apache.guacamole.tunnel.TunnelRequest.getRequiredParameter(TunnelRequest.java:144)
Mar  3 23:01:02 guacamole02 tomcat9[16530]: #011at
org.apache.guacamole.tunnel.TunnelRequest.getIdentifier(TunnelRequest.java:247)
Mar  3 23:01:02 guacamole02 tomcat9[16530]: #011at
org.apache.guacamole.tunnel.TunnelRequestService.createTunnel(TunnelRequestService.java:335)
Mar  3 23:01:02 guacamole02 tomcat9[16530]: #011at
org.apache.guacamole.tunnel.websocket.RestrictedGuacamoleWebSocketTunnelEndpoint.createTunnel(RestrictedGuacamoleWebSocketTunnelEndpoint.java:113)
Mar  3 23:01:02 guacamole02 tomcat9[16530]: #011at
org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint.onOpen(GuacamoleWebSocketTunnelEndpoint.java:200)
Mar  3 23:01:02 guacamole02 tomcat9[16530]: #011at
org.apache.tomcat.websocket.server.WsHttpUpgradeHandler.init(WsHttpUpgradeHandler.java:133)
Mar  3 23:01:02 guacamole02 tomcat9[16530]: #011at
org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:917)
Mar  3 23:01:02 guacamole02 tomcat9[16530]: #011at
org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1639)
Mar  3 23:01:02 guacamole02 tomcat9[16530]: #011at
org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49)
Mar  3 23:01:02 guacamole02 tomcat9[16530]: #011at
java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128)
Mar  3 23:01:02 guacamole02 tomcat9[16530]: #011at
java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628)
Mar  3 23:01:02 guacamole02 tomcat9[16530]: #011at
org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
Mar  3 23:01:02 guacamole02 tomcat9[16530]: #011at
java.base/java.lang.Thread.run(Thread.java:829)
Mar  3 23:01:03 guacamole02 tomcat9[16530]: 23:01:03.725
[http-nio-8080-exec-10] DEBUG o.m.g.t.TransactionalMethodInterceptor -
[Intercepted method: public java.util.Set
org.apache.guacamole.auth.jdbc.base.EntityService.retrieveEffectiveGroups(org.apache.guacamole.auth.jdbc.base.ModeledPermissions,

Re: GUAC_ID is required

[Mike Jumper]

On Wed, Feb 9, 2022 at 8:12 AM chomik MChamster 
wrote:

> Hi Experts,
>
> I have three instances of guacamole, deployed using the steps from the
> official guacamole manual with mysql and saml authentication.
> From one of those instances I am getting the "GUAC_ID is required" error:
>
> tomcat9[505209]: 15:53:04.502 [http-nio-8080-exec-3] DEBUG
> o.a.g.w.GuacamoleWebSocketTunnelEndpoint - Error connecting WebSocket
> tunnel.
> tomcat9[505209]: org.apache.guacamole.GuacamoleClientException: Parameter
> "GUAC_ID" is required.
>
> I did read through this thread -
> https://www.mail-archive.com/user@guacamole.apache.org/msg07521.html but
> I'm not a developer, nor am I building a custom app or anything like that
> (as far as I can tell). The strangest thing to me is that I deployed all
> three instances following the same process. I have checked the
> guacamole.properties as well as SAML authentication settings on Azure side
> but am unable to find the apparent issue.
> Wondering if you could point me to what could be the reason for this error
> and/or maybe help me understand where is this GUAC_ID taken or generated
> from.
>

That parameter, as well as several others, dictate the details of the
request to connect. They are always automatically submitted by the web
application.

Are your three instances behind a balancer? Any chance they may be
different versions, and requests from one are being misrouted by the
balancer to another?

Are you sure that this error is coming from legitimate connection attempts,
and not bogus WebSocket connection attempts from someone probing your
server?

- Mike

GUAC_ID is required

[chomik MChamster]

Hi Experts,

I have three instances of guacamole, deployed using the steps from the
official guacamole manual with mysql and saml authentication.
>From one of those instances I am getting the "GUAC_ID is required" error:

tomcat9[505209]: 15:53:04.502 [http-nio-8080-exec-3] DEBUG
o.a.g.w.GuacamoleWebSocketTunnelEndpoint - Error connecting WebSocket
tunnel.
tomcat9[505209]: org.apache.guacamole.GuacamoleClientException: Parameter
"GUAC_ID" is required.

I did read through this thread -
https://www.mail-archive.com/user@guacamole.apache.org/msg07521.html but
I'm not a developer, nor am I building a custom app or anything like that
(as far as I can tell). The strangest thing to me is that I deployed all
three instances following the same process. I have checked the
guacamole.properties as well as SAML authentication settings on Azure side
but am unable to find the apparent issue.
Wondering if you could point me to what could be the reason for this error
and/or maybe help me understand where is this GUAC_ID taken or generated
from.

Thanks,
T

Re: Parameter "GUAC_ID" is required

[lexcorp]

This is another implementation of guacamole for Node

guacamole-lite is a NodeJS replacement for guacamole-client (server-side
Java servlet). Guacamole is a RDP/VNC client for HTML5 browsers.

https://github.com/vadimpronin/guacamole-lite


 



--
Sent from: 
http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

Re: Parameter "GUAC_ID" is required

[lexcorp]

This is another Guacamole Client implementation usign Angular

https://github.com/ILLGrenoble/ngx-remote-desktop

https://github.com/ILLGrenoble/ngx-remote-desktop/tree/master/demo


 

But this is in Angular Framework, I´m want to make an Guacamole Client using
PHP. 




--
Sent from: 
http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

Re: Parameter "GUAC_ID" is required

[lexcorp]

Hi Nick, I am currently using the guacamole-common-js components, what I want
to do is something simple like this:

https://github.com/wwt/guac-vue


 

But this example is made with the VUE framework, I want to do the same
example but with PHP.


 



--
Sent from: 
http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

Re: Parameter "GUAC_ID" is required

[Nick Couchman]

On Tue, Dec 29, 2020 at 10:06 PM lexcorp  wrote:

> Hi Nick, what are those common components you mention?
>

https://github.com/apache/guacamole-client/tree/master/guacamole-common-js
https://github.com/apache/guacamole-client/tree/master/guacamole-common


>
> Most of the examples on the internet use node or javascript, there are no
> examples for php.
>
>
>
That's most likely because Guacamole Client (and the common
components above) are written in JavaScript and Java.

Maybe you could explain a little more thoroughly what you're trying to do,
and why you're wanting to use PHP to do it? I think there may have been a
couple of attempts at some PHP implementations of parts of Guacamole
throughout the past few years, but I've never seen anything all that
thorough or serious. If you're going to keep going with implementing
something in PHP you're pretty much going to be working from the ground up,
and there aren't a lot of good examples. If you can provide us more details
of what you're doing and why we might be able to help, but using the
existing languages (Java, JavaScript) is likely going to prove easier for
you, and allow us to help you out more.

-Nick

Re: Parameter "GUAC_ID" is required

[lexcorp]

Hi Nick, what are those common components you mention?

Most of the examples on the internet use node or javascript, there are no
examples for php.



--
Sent from: 
http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

Re: Parameter "GUAC_ID" is required

[Nick Couchman]

On Tue, Dec 29, 2020 at 8:36 PM lexcorp  wrote:

> I'm solve problem related to GUAC_ID
>
> but now get this error:
>
>
>
The "Permission Denied" error indicates that you either don't have
permission to create the tunnel, or don't have permission to join the
existing one. It seems like you're using the full Guacamole Client
implementation for the tunnels, which means that you need to handle the
proper permissions issues - logging in, allowing users to access
connections, etc.

If you're writing a custom application then it may be better to only use
the guacamole-common components - or at least start there - so that you can
get the custom application working without having to jump through all of
these hoops.

-Nick

Re: Parameter "GUAC_ID" is required

[lexcorp]

I'm solve problem related to GUAC_ID

but now get this error:





--
Sent from: 
http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

Re: Parameter "GUAC_ID" is required

[Nick Couchman]

Well, I was able to see the code on Nabble - still doesn't seem to be
coming through the e-mail list correctly. However, the error is descriptive
of the situation you're running into. It says:

org.apache.guacamole.GuacamoleClientException: Parameter "GUAC_ID" is
required.

In the code you provided, I don't see that you're providing the GUAC_ID
parameter when you try to connect? I see the token parameter, and, while
this is required for authentication purposes (if using the Guacamole Client
tunnel implementation), this isn't the same as providing the GUAC_ID
parameter, which should be the identifier of an established tunnel.

-Nick

Re: Parameter "GUAC_ID" is required

[lexcorp]

--
Sent from: 
http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

Re: Parameter "GUAC_ID" is required

[Nick Couchman]

On Tue, Dec 29, 2020 at 4:45 PM lexcorp  wrote:

> Hello, I am trying to connect apache guacamole from php, for this, I am
> using
> the guacamole-common-js libraries.
>
> Here is my code:
>
>
Your code didn't come through. Maybe you could post a link to the code?

-Nick

Parameter "GUAC_ID" is required

[lexcorp]

Hello, I am trying to connect apache guacamole from php, for this, I am using
the guacamole-common-js libraries.

Here is my code:



when I run the application in the browser it doesn't show me anything, I
don't get errors in the console, and the screen is blank.

server side the guacamole log shows:

Dec 29 15:10:02 srvens01pro server: 15:10:02.572 [http-apr-8443-exec-8]
ERROR o.a.g.w.GuacamoleWebSocketTunnelEndpoint - Creation of WebSocket
tunnel to guacd failed: Parameter "GUAC_ID" is required.


Dec 29 15:10:02 srvens01pro server: 15:10:02.572 [http-apr-8443-exec-8]
DEBUG o.a.g.w.GuacamoleWebSocketTunnelEndpoint - Error connecting WebSocket
tunnel.
Dec 29 15:10:02 srvens01pro server:
org.apache.guacamole.GuacamoleClientException: Parameter "GUAC_ID" is
required.
Dec 29 15:10:02 srvens01pro server: at
org.apache.guacamole.tunnel.TunnelRequest.getRequiredParameter(TunnelRequest.java:144)
Dec 29 15:10:02 srvens01pro server: at
org.apache.guacamole.tunnel.TunnelRequest.getIdentifier(TunnelRequest.java:247)
Dec 29 15:10:02 srvens01pro server: at
org.apache.guacamole.tunnel.TunnelRequestService.createTunnel(TunnelRequestService.java:335)
Dec 29 15:10:02 srvens01pro server: at
org.apache.guacamole.tunnel.websocket.RestrictedGuacamoleWebSocketTunnelEndpoint.createTunnel(RestrictedGuacamoleWebSocketTunnelEndpoint.java:113)
Dec 29 15:10:02 srvens01pro server: at
org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint.onOpen(GuacamoleWebSocketTunnelEndpoint.java:200)
Dec 29 15:10:02 srvens01pro server: at
org.apache.tomcat.websocket.server.WsHttpUpgradeHandler.init(WsHttpUpgradeHandler.java:137)
Dec 29 15:10:02 srvens01pro server: at
org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:663)
Dec 29 15:10:02 srvens01pro server: at
org.apache.tomcat.util.net.AprEndpoint$SocketWithOptionsProcessor.run(AprEndpoint.java:2486)
Dec 29 15:10:02 srvens01pro server: at
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
Dec 29 15:10:02 srvens01pro server: at
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
Dec 29 15:10:02 srvens01pro server: at
org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
Dec 29 15:10:02 srvens01pro server: at java.lang.Thread.run(Thread.java:748)



--
Sent from: 
http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org