(Adding back the mailing list)

On Tue, Oct 26, 2021 at 12:53 PM Jürgen Kuri <[email protected]> wrote:

> My Guacamole instance is running for more than a year or so. Initially, I
> filled the database with users, user groups and connections "manually"
> according to the instructions in
>
> http://guacamole.apache.org/doc/gug/jdbc-auth.html:
>
> -- Generate salt
> SET @salt = UNHEX(SHA2(UUID(), 256));
>
> -- Create base entity entry for user
> INSERT INTO guacamole_entity (name, type)
> VALUES ('myuser', 'USER');
>
> -- Create user and hash password with salt
> INSERT INTO guacamole_user (
>     entity_id,
>     password_salt,
>     password_hash,
>     password_date
> )
> SELECT
>     entity_id,
>     @salt,
>     UNHEX(SHA2(CONCAT('mypassword', HEX(@salt)), 256)),
>     CURRENT_TIMESTAMP
> FROM guacamole_entity
> WHERE
>     name = 'myuser'
>     AND type = 'USER';
>
>
> Similar I did for the creation of connections and user mappings by INSERTS
> into the guacamole_connection, guacamole_connection_permission and
> guacamole_connection_parameter.
>
>
> Cause I'm not understand fully, especially how connections are mapped in a
> way like "entity_id" ->
> "affected_connection_id/affected_connection_group_id", I just created:
>
>         1) a user "blah-blah-user"
>
>         2) a connection "blah-blah-host"
>
>         3) associated "blah-blah-user" with "blah-blah-host"
>
> via web frontend. Now, to my surprise, I cannot find the user
> "blah-blah-user" neither in table guacamole_entity nor in guacamole_user.
> Same with connection "blah-blah-host" in table guacamole_connection and
> needless to say not in guacamole_connection_permission and
> guacamole_connection_parameter.
>
>
If you create this in the web frontend and don't see the corresponding
database entries, then you're either looking at the wrong database or
schema, or you're looking at a replica of some sort that isn't consistent,
yet. Make sure you're connecting to the same database that your web
front-end is using, as configured in guacamole.properties.

-Nick

Reply via email to