On Mon, Dec 20, 2021 at 8:48 AM Regev Batchen <batch...@gmail.com> wrote:
> Hello,
> Using docker guacamole + guacd 1.3.0
> And file transfer to the machine is denied , this machine is set in
> guacamole using api :
>
> "parentIdentifier":"ROOT",
> "name":randomClientAddon,
> "protocol":"rdp",
> "parameters":{
> "port":"3389",
> "security":"any",
> "ignore-cert":"true",
> "enable-drive":"true",
> "create-drive-path":"true",
> "drive-path":"shared-" + str(name),
> "drive-name":"G",
> "hostname":host,
> "username":userGen,
> "password":passwordGen
>
> All other params are empty so i didnt add it here.
>
> This is an example from guacamole DB of how a connection is created:
>
> 15 | drive-name | G
> 15 | security | any
> 15 | hostname | 10.x.x.x
> 15 | password | ZpnHh4534ucvSG3
> 15 | ignore-cert | true
> 15 | drive-path | shared-AOI
> 15 | create-drive-path | true
> 15 | port | 3389
> 15 | enable-drive | true
> 15 | username | William
>
>
> Also have checked this in the guacd :
> guacd@0f63ae381ad6:/usr/lib/x86_64-linux-gnu/freerdp2$ ls -l
> total 4
> lrwxrwxrwx 1 root root 62 Dec 29 2020 libguac-common-svc-client.so ->
> /usr/local/guacamole/lib/freerdp2/libguac-common-svc-client.so
> lrwxrwxrwx 1 root root 53 Dec 29 2020 libguacai-client.so ->
> /usr/local/guacamole/lib/freerdp2/libguacai-client.so
>
> When i try to transfer a file using the ctrl+shift+alt -> upload files ->
> select notepad file
> i get this error msg :
>
> You do not have permission to upload this file. If you require access,
> please check your system settings, or check with your system administrator.
> loogs show :
> guacd_1 | guacd[8]: ERROR: Unable to create directory
> "shared-AOI": Permission denied
>
>
This indicates that the user account under which guacd is running does not
have access to the folder that you've tried to share. Based on the
configuration you posted above, the folder would be the "shared-AOI" folder
under the home directory of the user running guacd. Looks like that account
doesn't have write access to its home directory, so you'll want to check
that.
-Nick
>
