So is the correct solution to this issue to create a user to run guacd, set the guacd service to run from that user and have that user to run guacd have a writable home folder?
Yes, I think that's correct. Modifying file src/guacd/systemd/guacd.service.in before running configure should do half of the job (see below). The other half is creating the user, which will create the home directory by default. Cheers Stefan smr:guacamole-server-1.1.0 smr$ cat src/guacd/systemd/guacd.service.in | fgrep -1 User=daemon [Service] User=daemon ExecStart=@sbindir@/guacd -f On Feb 4, 2020, at 16:09, Zer0Cool <[email protected]<mailto:[email protected]>> wrote: I should have specified before, this is Guac 1.1.0, CentOS 7.7. I am installing Guac server from source direct from the apache guacamole site: "https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fapache.org%2Fdyn%2Fcloser.cgi%3Faction%3Ddownload%26filename%3Dguacamole%2F%24&data=02%7C01%7Csmr%40kmi.com%7C4eddfcfcaf2d4a80f76c08d7a9842c6d%7Cc2283768b8d34e008f3d85b1b4f03b33%7C0%7C0%7C637164257464459596&sdata=%2FxtiukSBxp5jiAoz6LZQcVdRj5VbgSIJNHXosRHB%2B4M%3D&reserved=0{GUAC_VER}/", not a repo like EPEL. I ran the following command: ps aux | grep guacd This returned: daemon 22404 0.0 0.3 116488 13068 ? Ss 09:28 0:00 /usr/local/sbin/guacd -f So apparently the user that guacd runs off for me is "daemon". getent passwd returns: daemon:x:2:2:daemon:/sbin:/sbin/nologin Which explains why sbin is listed as the home folder via the error message in /var/log/messages. So is the correct solution to this issue to create a user to run guacd, set the guacd service to run from that user and have that user to run guacd have a writable home folder? If that's correct, how do I set what user runs guacd? Thanks -- Sent from: https://nam04.safelinks.protection.outlook.com/?url=http%3A%2F%2Fapache-guacamole-general-user-mailing-list.2363388.n4.nabble.com%2F&data=02%7C01%7Csmr%40kmi.com%7C4eddfcfcaf2d4a80f76c08d7a9842c6d%7Cc2283768b8d34e008f3d85b1b4f03b33%7C0%7C0%7C637164257464459596&sdata=69hBMGTGr9GjvSIjJWDr4r902hQqdLzXld%2BL2i1Hb1Y%3D&reserved=0 --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected]<mailto:[email protected]> For additional commands, e-mail: [email protected]<mailto:[email protected]> CONFIDENTIALITY NOTICE: This communication may contain privileged and confidential information, or may otherwise be protected from disclosure, and is intended solely for use of the intended recipient(s). If you are not the intended recipient of this communication, please notify the sender that you have received this communication in error and delete and destroy all copies in your possession.
