A little background: my goal was to move our project showcase system from Ubuntu 16.04, tomcat7, guacamole 0.9.9 with auth-noauth, to
Ubuntu 20.04, tomcat9, guacamole 1.1.0 (at least) with auth header-auth. However, we're finding there are just too many changes to do all of this at once. So, now the plan is to just take the existing system -- guacamole 0.9.9 with auth-noauth -- and move it to Ubuntu 20.04 -- changing as little as possible to get it working... except, tomcat7 must be replaced by tomcat9. I have the new system set up, and everything *looks* good, but when I go to the main page (http://agora.cs.calvin.edu:8080), it does not take me to my home page but, after a bit of delay, to the login page. Looking at the console logs, I see this: POST http://agora2004.cs.calvin.edu:8080/agora/api/tokens 403 I don't know if that really is the problem, but I don't see that on my old server on Ubuntu 16.04. When I drill down on that error, I see this: * * Request URL: http://agora2004.cs.calvin.edu:8080/agora/api/tokens * Request Method: POST * Status Code: 403 * Remote Address: 153.106.195.16:8080 * Referrer Policy: no-referrer-when-downgrade 1. Response Headersview source * Connection: keep-alive * Content-Type: application/json * Date: Fri, 19 Jun 2020 14:15:14 GMT * Keep-Alive: timeout=20 * Transfer-Encoding: chunked 2. Request Headersview source * Accept: application/json, text/plain, */* * Accept-Encoding: gzip, deflate * Accept-Language: en-US,en;q=0.9 * Cache-Control: no-cache * Connection: keep-alive * Content-Length: 0 * Content-Type: application/x-www-form-urlencoded * Cookie: JSESSIONID=0A776B90C0F6F15BED7FB7B82D917B40; JSESSIONID=2267FCDCA11585C196863C27E9E7F6C6 * DNT: 1 * Host: agora2004.cs.calvin.edu:8080 * Origin: http://agora2004.cs.calvin.edu:8080 * Pragma: no-cache * Referer: http://agora2004.cs.calvin.edu:8080/agora/ * User-Agent: Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.106 Mobile Safari/537.36 I wonder if the guac auth-noauth is actually being used or not? It seems to be configured correctly, with correct file permissions, etc. But, there are no log messages to indicate it is being loaded, etc. -- even on the old system there are no log messages about auth-noauth being used -- but it is. I wonder if there is just a directory that does not have the correct permissions? Or is there a tomcat9 configuration option I'm missing? Any ideas on what might be wrong or how to further debug this? Help! Prof. Victor Norman Computer Science Calvin College University [email protected]<mailto:[email protected]> ----- "A designer knows he has achieved perfection not when there is nothing left to add, but when there is nothing left to take away." -- Antoine de Saint Exupéry
