I've made it :-) ! I found a way to make what I want without modifications to the server side but I had to find a workaround for the Cross-Origin requests so it is still a bit complicated (use of reverse proxy + Cors values rewrite but I could also use the same FQDN it may be easier).
On server side, I used the quickconnect extensions in order to do that. I then wrote a custom javascript to call the guacamole API (get token, create quikconnection then redirect to the connection URL). About your security concerns, my own web app is managing who accesses what. This is also why I don't understand why I still need another frontend client (guacamole-client) to connect to resources when I could interact directly with GUACD. Also, my users are already "power users" and already have access to the whole lab network and credentials. They can crash the whole stack if they want (and sometimes then even have to for test purposes ;-) ), it's just a lab and we have backups/procedures to rebuild it. The HTML RDP/SSH is only provided for convenience. They can also use their own RDP/SSH clients. About the docker environment you provide, I had to use another docker image because the official images do not have the extensions installed. Could you consider providing the extensions and a label to enable them on-demand ? Like this one does : https://github.com/oznu/docker-guacamole <https://github.com/oznu/docker-guacamole> ) Thank you very much for your help and time and for developping such a nice solution :-) I will try to share my custom script when it will be clean enough. -- Sent from: http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/ --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
