Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-12-12 Thread drhy
The First Post has been updated to use CentOS 8.0, a significant change over CentOS 7.6. However the guides for 7.6 have been retained as CentOS 8.0 is not as mature. Guacamole 1.0.0 will need to be reinstalled if you use an earlier version of CentOS and wish to use CentOS 8.0. If you do, and you

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-12-12 Thread drhy
This earlier information uses Guacamole 1.0.0 and describes the steps for running on CentOS 7.6.1810 Guacamole's new Group feature only works if users in a Group are also Guacamole administrators. So not yet useful - the problem is expected to be resolved in the next release. The setup

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-10-14 Thread drhy
When setting up, useful tips from Mike Jumper for resource requirements: http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/Guacd-and-tomcat-menory-usage-tt6554.html#a6556 -- Sent from: http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-09-19 Thread drhy
First Post has been updated for openssl security fixes. openssl is now at version 1.1.1d . To update an existing CentOS/guacamole from openssl 1.1.1c : systemctl stop guacd systemctl stop tomcat systemctl stop mysqld cd ~ wget https://www.openssl.org/source/openssl-1.1.1d.tar.gz tar xvf

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-08-26 Thread drhy
Corrections and simplifications posted. -David -- Sent from: http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/ - To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org For additional commands,

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-08-23 Thread drhy
This posting is three things: 1. A copy of the original Guacamole 1.0.0/Java 8 configuration guide posted a few months ago, including its text configuration files; 2. A configuration text file to update the original Guacamole 1.0.0/Java 8 configuration to provide much faster http/2 and

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-06-22 Thread drhy
Removed some redundant, and therefore possibly confusing, advice. -David -- Sent from: http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/ - To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-06-13 Thread drhy
Improved the documentation of the Sample RDP Connection in the First Post. -David -- Sent from: http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/ - To unsubscribe, e-mail:

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-05-26 Thread drhy
A Sample RDP Connection configured using the Guacamole Web GUI was added to the First Post. -David -- Sent from: http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/ - To unsubscribe, e-mail:

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-05-20 Thread drhy
Updated the First Post's instructions for some minor errors and for current versions of Java and Tomcat. -David -- Sent from: http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/ - To unsubscribe, e-mail:

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-04-26 Thread drhy
The First Post's radius guidance has been updated. The guacamole client/radius compile and testing now works properly by using a later version of maven, downloaded directly from the maven site, not from yum. Thanks vnick for the tip. -David -- Sent from:

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-04-21 Thread drhy
The Radius Authentication Provider documentation now includes a recommendation to implement L2TP/IPsec between CentOS and Windows Server to secure the PAP clear-text communication between the the Radius Provider and the Network Policy Server. -David -- Sent from:

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-04-11 Thread drhy
Typos cleaned up. -David -- Sent from: http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-03-05 Thread PlayerOne
Thank you for a great tutorial David. -- Sent from: http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-03-04 Thread drhy
I've updated the first post to make it an easier and more structured read, and also to appropriately credit Apache. -David -- Sent from: http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-02-27 Thread drhy
Added to the first post # Ensure server doesn't sleep: systemctl mask sleep.target suspend.target hibernate.target hybrid-sleep.target # Install PDF printer driver for Guacamole's print redirection: yum -y install ghostscript # If A4 (not Letter) is your default paper size: echo 'a4' >

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-02-25 Thread Nick Couchman
On Mon, Feb 25, 2019 at 1:04 AM drhy wrote: > Hi PlayerOne and vnick, > > I think I also read that MySQL creates a salted password when a new user is > created - but I wasn't sure. > Yes, if you leave the password field alone (don't enter anything, at all), Guacamole Client will generate a

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-02-24 Thread drhy
Hi PlayerOne and vnick, I think I also read that MySQL creates a salted password when a new user is created - but I wasn't sure. But when guacadmin was administrating that new user, for example by adding a Group or adding Connections, The web GUI would report "Passwords not identical" for the

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-02-24 Thread Nick Couchman
On Sun, Feb 24, 2019 at 9:07 PM drhy wrote: > Hi PlayerOne, > > I'm using guacadmin to enter a zero-length password for a standard > (non-admin) user, me. > I enter a single space, then backspace, in each of the two password fields, > then Save. > > In this scenario I can be authenticated via

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-02-24 Thread PlayerOne
drhy wrote > I enter a single space, then backspace, in each of the two password > fields, > then Save. I did exactly what you described, with the same user I tried earlier, but this time it logged me in with a blank password. Great for testing, but definitely not desired! I thought I read

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-02-24 Thread drhy
Hi PlayerOne, I'm using guacadmin to enter a zero-length password for a standard (non-admin) user, me. I enter a single space, then backspace, in each of the two password fields, then Save. In this scenario I can be authenticated via Radius and AD using my AD password. If I ensure the password

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-02-24 Thread PlayerOne
Hi David, Could I just confirm what you mean by that please? I just tried this with a new user i added via the gui with a blank password. Tried logging in as that user with blank password and I get invalid login when I try to do so. -- Sent from:

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-02-24 Thread drhy
First Post updated - Need to ensure that the Powershell addition of a new user to the MySQL database includes a very long, complex, randomly generated password. Otherwise logon could bypass Radius and by entering just the username and zero length password, logon through MySQL. -David -- Sent

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-02-23 Thread PlayerOne
That almost defeats the object of group permissions, if they have to be an admin to view the connections assigned to them via groups, well they can access everything being an admin anyway. I'm going to try setting up all connections and groups as a normal user. Then login as an admin and assign

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-02-23 Thread drhy
Re the setcap instructions, I created a new, clean VM, to test the tomcat instructions. They work, with one possible addition - following the setcap..., echo..., execute: ldconfig This refreshes locations of all libraries. Not sure if this is needed given that a reboot comes soon afterwards, but

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-02-22 Thread drhy
Re Groups, sadly I have now confirmed your testing. Connections assigned to Groups of Users will only be available to each of those Users if they are a Guacamole Administrator. I will update my first Post. Thanks. -David -- Sent from:

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-02-22 Thread drhy
Re setcap, I tried authbind but couldn't get it to work with java. Seems to be mixed views re authbind. But I could get setcap to work no problem, hence I stuck with it. I referred to these: https://gist.github.com/firstdoit/6389682

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-02-22 Thread PlayerOne
I'll give that a try, I may have been using your old guide but thought I was using the new one. In trying to find a workaround I read the setcap isn't the best way to open 443 to Tomcat/Java. Is there a reason why you did it that way? -- Sent from:

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-02-22 Thread PlayerOne
Yes AD/MySQL group names are identical, and users are members of each group. -- Sent from: http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-02-22 Thread PlayerOne
Ah that makes sense, the user I'm testing with 'was' an admin but I removed the permissions to test, group permissions. I'll try setting up a test user from scratch and see if it works as expected. Have I done something wrong here or is my understanding of how the group permissions work

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-02-22 Thread drhy
Re (2). I'f discovered that if I remove Guacamole admin rights from a Guacamole user, then even though that use is part of a AD/MySQL Group they don't see any of the Group's connections. This may be a related issue. By the way, I created the connections and added them to the Guacamole Group before

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-02-22 Thread drhy
Re (1) The 443 issue may go all the way back to the setcap problem you had. My instructions were wrong - I’ve since corrected them. I don’t think you can run setcap on a program/file that is currently running. Hence I now stop tomcat before running setcap on java. Try that part of the instructions

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-02-22 Thread drhy
The MySQL Group Name must be identical to an AD Group Name, and the user must be a member of that AD Group as well as the MySQL Group. Is that the case ? -- Sent from: http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-02-22 Thread PlayerOne
I manage to have point 2 working now, except that I can only apply connections permissions to users to do so. If i assign the connections to user groups and then add a user as a member of the group, the user see's no connections when logged in. -- Sent from:

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-02-22 Thread PlayerOne
Just to add to point 2. If the test user i created logs in and creates a new connection, with a different name but the same connection details, it works fine for them. It appears as though any admin created connections aren't usable by a user. They are visible to the user, but if they click them

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-02-22 Thread PlayerOne
Hi David, sorry about this, just a couple of more questions. 1) Regarding SSL, I've enabled everything as per your guide SSL wise. The pfx file is in Tomcat (US.pfx which is a wildcard cert we use). Currently Guacamole is working fine on http port 8080, but when i try https I can't connect.

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-02-21 Thread drhy
Hi PlayerOne congratulations ! And thanks for all your queries and suggestions that I have benefited from along the way. -David -- Sent from: http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-02-21 Thread PlayerOne
David, It seems my noobiness missed a crucial line in your instructions. "mv /root/guacamole-auth-radius-1.0.0.jar /etc/guacamole/extensions/guacamole-auth-01-radius-1.0.0.jar" I'm happy to report it's now working perfectly!!! -- Sent from:

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-02-21 Thread PlayerOne
Just found this, I don't seem to have the radius.jar in my extensions directory!?!? root@GUACA01~ ls /etc/guacamole/extensions guacamole-auth-02-jdbc-mysql-1.0.0.jar root@GUACA01~ -- Sent from: http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-02-21 Thread PlayerOne
Thanks David I'm working through those. I've just realised this may possibly be down to MS licensing. We're using the per-auth MFA licensing and apparently the Azure MFA NPS Extension isn't supported in that licensing model. After double checking everything you suggested I think I may have to look

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-02-21 Thread drhy
Use the almost-a-gui nmtui to check your network config (if you haven't already) -David -- Sent from: http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-02-21 Thread drhy
In guacamole.properties use a hard-coded IP address, for example: radius-hostname: 172.16.2.1 -David -- Sent from: http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-02-21 Thread drhy
Check that nothing went during the install of guacamole.war into tomcat # Remove Guacamole from tomcat: cp /opt/tomcat/latest/webapps/guacamole.war /tmp/guacamole.war rm /opt/tomcat/latest/webapps/guacamole.war #restart tomcat slowly systemctl stop tomcat systemctl start tomcat # Install a clean

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-02-21 Thread drhy
Hi PlayerOne, My guacamole.properties is therefore similarly ordered to yours. In /etc/guacamole/extensions do the following two Authentication providers appear in alphanumeric order: guacamole-auth-01-radius-1.0.0.jar guacamole-auth-02-jdbc-mysql-1.0.0.jar Have you checked

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-02-21 Thread drhy
Hi PlayerOne, My MySQL lines are also above the Radius lines in guacamole.properties . In the folder /etc/guacamole/extensions are the two authentication providers name in alphanumeric sequence ? guacamole-auth-01-radius-1.0.0.jar guacamole-auth-02-jdbc-mysql-1.0.0.jar In the file

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-02-21 Thread PlayerOne
Hi David, Windows Firewall is off, but I checked the advanced firewall rules and there are UDP rules for 1812/1813. Netstat shows its listening. This is just a test/poc environment at the moment so both the Guacamole server and Azure MFA/NPS server are right next to each other, no DMZ involved.

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-02-21 Thread PlayerOne
Hi David, would you be able to post some screenshots of your NPS server policies, and any Azure MFA NPS Extension config please? I'm not sure if this will help you with IIS as it requires Azure MFA server (which is what I'm trying to get working above with Guacamole) and not the Azure MFA NPS

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-02-21 Thread drhy
Hi PlayerOne, The easier question first - I am just using ordinary AD security groups and all is working as I've described. I am using the Azure MFA NPS Extension on our Windows NPS server, being the "central policy server" in NPS speak. RD Gateway is a different server and its authentication is

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-02-21 Thread PlayerOne
David, can I just clarify the Azure MFA side of things please. I think I may have gotten a little excited at the Azure MFA integration bit. I currently use Azure MFA Server alongside an RDP gateway. The MFA server pretty much provides the Radius proxy to Azure AD which in turn uses the NPS

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-02-21 Thread PlayerOne
Ok thank you, and those AD groups need to be the guacConfigGroup type for the updated AD schema or just standard security groups? -- Sent from: http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-02-21 Thread Kamal Ezzaki
> > > Yep, glad you got it. One minor note - when you create a user in the > Guacamole web interface and do not specify a password, Guacamole generates > a random password and assigns it. This is for security reasons so that the > account is protected. > > Okeey good So what i should do now is

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-02-21 Thread Nick Couchman
On Thu, Feb 21, 2019 at 8:10 AM Kamal Ezzaki wrote: > h I get it now , the concept is to create a new user in guacamole > interface *without* *password* . this stop him from connection by usingg > jdbc , and after this you create a user with the same identity in radius . > and by this

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-02-21 Thread Kamal Ezzaki
h I get it now , the concept is to create a new user in guacamole interface *without* *password* . this stop him from connection by usingg jdbc , and after this you create a user with the same identity in radius . and by this way you make sure that guacamole go to radius for

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-02-21 Thread Kamal Ezzaki
( To assign permissions to RADIUS users in the JDBC module, you need to create users in the JDBC module with the same username as the RADIUSusers. You can then assign permissions to the user within JDBC, and the user logging in with RADIUS will get those permissions.

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-02-21 Thread Nick Couchman
On Thu, Feb 21, 2019 at 3:23 AM Kamal Ezzaki wrote: > Hello, i change the name of radius module so that it's loaded first and > Guacamole check in radius server first than go back to jdbc but the > problème is how to not go back to jdbc and check only radius if the user > existe than go to jdbc

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-02-21 Thread Kamal Ezzaki
Okey Thank You and I Hope Someone can help me please, it's been 10 days tryinig to make it out Le jeu. 21 févr. 2019 à 09:44, drhy a écrit : > All conditions and corrections posted above have now been included in the > first posting. > > -David > > > > -- > Sent from: >

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-02-21 Thread drhy
All conditions and corrections posted above have now been included in the first posting. -David -- Sent from: http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-02-21 Thread drhy
Hi Kamal, I'm not clear myself how the authentication actually works when you use Groups and you use both Radius and a database. But I do not how to make it work. Hopefully someone else can help. -David -- Sent from: http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-02-21 Thread Kamal Ezzaki
Hello, i change the name of radius module so that it's loaded first and Guacamole check in radius server first than go back to jdbc but the problème is how to not go back to jdbc and check only radius if the user existe than go to jdbc for users data ( permission , connections ).

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-02-20 Thread drhy
Re "AD User/Group Objects with the User/Group objects in MySql". Yes. The Group name for a user in MySQL and AD needs to be identical. The user in AD and in MySQL should be a member of both groups. -David -- Sent from: http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-02-20 Thread drhy
Yes. For example if AD user "userX" is a member of AD Group "guacusers", then in MySQL: create a group "guacusers", create a user "userX", and make "userX" a member of "guacusers". -David -- Sent from: http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-02-20 Thread PlayerOne
Thank you David! Reposting this below in case you missed it above. "Ok that all went well, I just need to do the Windows MFA/Radius side now. I see your notes in your file, could you elaborate a little more on what needs to be done please? Is this where I need to match AD User/Group Objects

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-02-20 Thread drhy
Hi PlayerOne, I've created the replacement pom.xml files. Copy the attached surefirefix.zip file to the root (/) of your CentOS volume cd / unzip surefirefix.zip It should overwrite the affected pom.xml files in /root/guacamole-client-1.0.0/ Run maven per the command in my first post. Let me

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-02-20 Thread PlayerOne
Ok that all went well, I just need to do the Windows MFA/Radius side now. I see your notes in your file, could you elaborate a little more on what needs to be done please? Is this where I need to match AD User/Group Objects with the User/Group objects in MySql? -- Sent from:

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-02-20 Thread PlayerOne
Hi David, yes it does contain that line. I tried the skiptests but that also failed. I'll start working my way through these files. Thanks for the help. -- Sent from: http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-02-20 Thread drhy
Hi PlayerOne, It looks like the surefire plugin being downloaded has been corrupted on their web site. Must have just happened. You need to bypass testing. Try: mvn install -DskipTests If that doesn't work then go through each pom.xml in the expanded tarball and comment out the use of the

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-02-20 Thread PlayerOne
Hi David, Yes I did that's right. I've come across another problem, I hope you can help. I've built a VM twice now on the Maven step thinking I may have done something wrong, just a base CentOS 7 install. I've run the maven commands and both times come up with this error. [INFO]

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-02-20 Thread drhy
Hi PlayerOne, Bearing in my how newbie I am, it'll either be me omitting a command. Or it might be that the following line didn't get executed: echo '/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.191.b12-1.el7_6.x86_64/jre/lib/amd64/jli' >> /etc/ld.so.conf.d/java.conf Look in the file: /etc/ld.so.conf

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-02-20 Thread PlayerOne
I managed to fix it, although it did run this command with no errors './configure --with-java-home=/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.191.b12-1.el7_6.x86_64/' didn't apply the java-home. I manually updated it in /etc/systemd/system/tomcat.service and now tomcat starts ok. -- Sent from:

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-02-20 Thread PlayerOne
David, I'm at the point in your guide where I've just rebooted after permitting java to listen on privileged ports. Tomcat seems to not want to start now, I get this error: root@GUACA01/opt systemctl status tomcat.service ● tomcat.service - Apache Tomcat Web Application Container Loaded:

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-02-20 Thread Nick Couchman
On Wed, Feb 20, 2019 at 3:44 PM drhy wrote: > Hi, > If you look at the script you'll see that it changes the name of the > Authentication Providers slightly. The Providers are loaded and executed by > Guacamole in alphanumeric sequence, so renaming is needed to ensure Radius > is loaded before

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-02-20 Thread PlayerOne
Thank you David, I did actually catch that in the other thread, but thank you again for keeping things neat and tidy by updating your posts here. It's unbelievably annoying coming across those kind of dead end threads! -- Sent from:

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-02-20 Thread PlayerOne
I'm currently installing this on CentOS 7, the latest download available. -- Sent from: http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-02-20 Thread drhy
Hi, If you look at the script you'll see that it changes the name of the Authentication Providers slightly. The Providers are loaded and executed by Guacamole in alphanumeric sequence, so renaming is needed to ensure Radius is loaded before MySQL. -David -- Sent from:

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-02-20 Thread Kamal Ezzaki
it's not an issue i think it's just something i must do with the configuration because my guacamole check first the database than go to radius , but i want guacamole to check users in radius, if the user existe than he complete with the database , if not PRINT incorrect

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-02-20 Thread Kamal Ezzaki
Centos 7 For Guacamole Freeradius Ubuntu 18

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-02-20 Thread drhy
Two attempts about a fortnight apart. In the first attempt I just assumed that Groups would work - I had all Users and all Connection belonging to just one Group. It appeared to be the easiest to administer. But all I saw after Radius authentication of a user was an empty Connection list - it

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-02-19 Thread Robert Dinse
The people who have this working, what operating system(s) are you running it on? -_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_- Eskimo North Linux Friendly Internet Access, Shell Accounts, and Hosting. Knowledgeable human assistance, not telephone

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-02-19 Thread PlayerOne
great work! I need Azure MFA with Guacd so I'll be testing this out. Will provide feedback when I do. One question, how did you confirm radius wont work with groups? Can I ask what you tried? -- Sent from: http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-02-19 Thread drhy
This step-by-step for Linux newbies builds a vanilla Guacamole 1.0.0, developed by a very newbie who needed it. (Dated February 2019.) With thanks to the web contributors too numerous to mention along the way. It builds the default XML file authentication provider, with an option to instead use

Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-02-19 Thread drhy
guacmole_setup.txt Hopefully the plain text (Notepad) version provides a format-free alternative. -- Sent from: http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies

2019-02-19 Thread drhy
This step-by-step for Linux newbies builds a vanilla Guacamole 1.0.0, developed by a very newbie who needed it. (Dated February 2019.) With thanks to the web contributors too numerous to mention along the way. It builds the default XML file authentication provider, with an option to instead use