LDAP extension problems

2020-05-27 Thread Samuel Schumacher
Hey there, So I have Guacamole 1.1.0 with an Postgresql as Backend and have added the LDAP extension. The login works just fine but there are some problems with the authentication itself. I added a query, that only Objects in a group can login. But still every ldap Posixaccount can login and

Re: Get token from REST API with OpenID authentication

2020-05-27 Thread Tom Schoonjans
Hi Nick, Unfortunately your approach doesn’t work: as soon as LDAP is the primary authentication mechanism, OIDC is ignored: the login page switches back to the default Guacamole page, and there is no way anymore for users to login using their OpenID credentials. Tom > On 26 May 2020, at

Re: LDAP extension problems

2020-05-27 Thread Fabio Corsi
Hi Samuel, I have the same problem. I was told that you need to enable the ldap-search-bind-dn (with the corresponding ldap-serach-bind-password), because guacamole will first query the LDAP directory using the search-bind-dn user (applying the ldap-user-search-filter) and then authenticate

Force rdp drive_path to something like /basepath/$user_id via guacd

2020-05-27 Thread Lorenzo Faleschini
Hi everyone. I've edited the sources of guacamole-server-1.1.0 to fit my needs, for example: enable rdp drive, create drive, use NLA by default. I've edited "src/protocols/rdp/settings.c" file and changed the needed values (as here from 0 to 1) - /* Drive enable/disable */

Guacamole Installation with separate servers for DMZ and Internal Setup

2020-05-27 Thread MARTINEZ, ARIEL
Hello, From reviewing the documentation, I gather it is possible to install the tomcat Guacamole component on one server and have the guacd proxy on another. But I am unsure how to configure it as such. Can anyone provide some pointers or more detailed info how to get this done? Thanks.

Re: Guacamole Installation with separate servers for DMZ and Internal Setup

2020-05-27 Thread Nick Couchman
On Wed, May 27, 2020 at 7:10 PM MARTINEZ, ARIEL wrote: > Hello, > > From reviewing the documentation, I gather it is possible to install the > tomcat Guacamole component on one server and have the guacd proxy on > another. But I am unsure how to configure it as such. Can anyone provide > some

Re: Force rdp drive_path to something like /basepath/$user_id via guacd

2020-05-27 Thread Nick Couchman
On Wed, May 27, 2020 at 12:54 PM Lorenzo Faleschini wrote: > Hi everyone. > > I've edited the sources of guacamole-server-1.1.0 to fit my needs, for > example: enable rdp drive, create drive, use NLA by default. > I've edited "src/protocols/rdp/settings.c" file and changed the needed > values

Re: LDAP extension problems

2020-05-27 Thread Nick Couchman
On Wed, May 27, 2020 at 1:07 PM Fabio Corsi < fabio1299.discussionli...@gmail.com> wrote: > Hi Samuel, > > I have the same problem. > > I was told that you need to enable the ldap-search-bind-dn (with the > corresponding ldap-serach-bind-password), because guacamole will first > query the LDAP

Re: Get token from REST API with OpenID authentication

2020-05-27 Thread Nick Couchman
On Wed, May 27, 2020 at 6:27 AM Tom Schoonjans wrote: > Hi Nick, > > > Unfortunately your approach doesn’t work: as soon as LDAP is the primary > authentication mechanism, OIDC is ignored: the login page switches back to > the default Guacamole page, and there is no way anymore for users to

Ad-hoc Connection escape character

2020-05-27 Thread Ignacio Turegano
Is there a way to escape characters in the url for the quickconnect extension? protocol://username:password@host:port/?parameters Example not working because of @ and /: rdp://guacamole:jx67YYY@Vf$YpoLkjiA/u...@fqdn.domain.com/?domain=LocalCross=nla=true Empty password is not an option for NLA

MFA on RDP

2020-05-27 Thread Wesley de Graaf
Hi, Sometimes we encounter an issue with the default timeout on the RDP connection in the guacamole. As far as we know the default is 15 seconds. But in some cases a user has to give an MFA consent on RDP connection and then the 15 seconds are to short and the connection is closed and

Re: seeing username, password and TOTP in plain text after logging into Guacamole

2020-05-27 Thread Saxa Egea
I'm not an expert nor developer... but if you use a DB as users repository (PGSQL) there is no password in the cookie. De: "Nick Couchman" A: "user" Enviats: Dilluns, 25 Maig de 2020 19:36:30 Assumpte: Re: seeing username, password and TOTP in plain text after logging into Guacamole