Hi. Does anyone who have something information about this issue?
Please help me On Mon, Apr 13, 2020 at 10:05 AM Toshitaka Kawamura <[email protected]> wrote: > Hi. > > Thank you for replying. > > Sorry. I didn't explain detail. > I know that the latest release version is 1.1.0. > > I checked out latest code of guacamole-client as of 02/04/2020, > And I built it to docker image. > so, I called as ver 1.2.0 > > The reason I use 1.2 was the redirect loop bug was fixed. > This is chiket > https://issues.apache.org/jira/browse/GUACAMOLE-805 > > Anyway,Thank you for blog information. > I'll read and try it. > > Thanks. Regards > > On Sat, Apr 11, 2020 at 2:46 PM Sebastian Männling < > [email protected]> wrote: > >> Hi, >> are you sure you’re using version 1.2.0? >> As far as I know the official docker image is version 1.1.0 ( >> https://hub.docker.com/r/guacamole/guacamole/tags) >> >> I also ran into a redirect loop using the docker setup. I stumbled across >> the following blog post: >> https://blog.exceptionerror.io/2019/06/10/home-lab-2019/ >> which explains how to patch the openid module: >> >> ``` >> git clone https://github.com/apache/guacamole-client >> git checkout 1.1.0 >> git checkout -b open-id-fix >> git cherry-pick -m 1 0344ef30e45954d1252d44b9826c7eedad8b02f3 >> >> cd extensions/guacamole-auth-openid >> mvn clean install >> ``` >> >> After that you can use the patches guacamole-auth-openid.jar which worked >> (at least for me) >> Using docker I just volume mounted it over the existing one... >> >> Greetings, >> Sebastian >> >> >> On 11. Apr 2020, at 06:57, Toshitaka Kawamura <[email protected]> >> wrote: >> >> >> Hi >> >> I want to use OpenID authentication with G-Suite. >> But I'm having trouble with a redirection loop on the login screen. >> Is there anyway solution this issue? >> And is it possible with authenticate G Suite? >> >> I have installed as follows. >> >> - Guacamole 1.2.0 in Docker >> - guacamole-auth-openid is 1.2.0 >> >> I have recieved following info by our G Suite Admin.（Some of them are >> dummies） >> ------------------------------------------------------------ >> client_id : "${client_id}", >> project_id : "${project_id}", >> auth_uri : "https://accounts.google.com/o/oauth2/auth";, >> token_uri : "https://oauth2.googleapis.com/token";, >> auth_provider_x509_cert_url: "https://www.googleapis.com/oauth2/v1/certs >> ", >> client_secret: "${client_secret}", >> redirect_uris: "https://my-guacamole-server/guacamole/"; , >> javascript_origins: "https://my-guacamole-server"; >> ------------------------------------------------------------ >> >> So, I set it up as follows in docker-compose.yaml. >> I'm not sure if this is the right setting. >> ------------------------------------------------------------ >> OPENID_AUTHORIZATION_ENDPOINT=https://accounts.google.com/o/oauth2/auth >> OPENID_JWKS_ENDPOINT= >> https://accounts.google.com/.well-known/openid-configuration >> OPENID_ISSUER=https://accounts.google.com/ >> OPENID_CLIENT_ID=${client_id} >> OPENID_REDIRECT_URI=https://my-guacamole-server/guacamole/ >> ------------------------------------------------------------ >> >> After reboot, once I logged in, it occured redirect loop. >> I suppose that authentication is probably successful because the token >> has been returned from GSuite. >> Is above setting correct? >> And Is there any help this issue? >> >> Thanks. >> >> Toshi. >> >>
