On Fri, Apr 28, 2023 at 8:00 PM Gabriel Huerta Araujo <[email protected]> wrote: > > Ok Nick > > My feedback > > 1.- About concurrent sessions, I think this should not be shareable. Is it > necessary to use non-shareable connections to be able to use the load > balancer? How do I differentiate between them (shareable vs not shareable)? > or how can I configure them? >
You can use shareable connections, you just have to be aware that, if people try to share them, unexpected things might happen when Guacamole is behind a load balancer. If you don't create shared connections, you won't face this issue. In order to create shared connections, you need to create a sharing profile - if you're not creating a sharing profile, users cannot share connections (except administrative access to connections, which is always enabled, but will also produce unexpected results). > 2.- If I pretend implementing a solution, where it is the place to do them? I > mean there are two places to do the changes. When user log in (to record log > in access and ask the next time when same user access) and when user log out > (delete record access to make it accesible). Is there a way to make it, > using Open-Close principle (close to change, open to extension). If you're asking what would have to change in order to share active connection information between two systems, that's a fairly complex task. Currently the JDBC module is the only module that implements active connection tracking, and it would need to be modified such that it would synchronize information with another system/module. This would likely require some modeling of the active connections, too, similar to what is done with the rest of the information in the JDBC module, since you don't actually want to synchronize the entire connection, just the record of the connection, between the two systems. There's no doubt in my mind that it's doable, but I wouldn't consider it a simple task. > > Another question: > > 3.- There is a requirement to create a Guacamole option, where all users are > shown, mainly whom are logged. And one option when I select one or various > users, I can log out them from Guacamole web application. ¿Which is your > recommendation?, ¿is this posible?, ¿could I add this functionality into > Guacamole application? Yes, this is possible - it should be relatively easy to put another page in the Settings section, for example, that lists logged in users, similar to how active connections are listed. I would think that just looking at the current tokens within the authentication system would provide this detail. -Nick --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
