On 6/22/23 14:50, Jason Keltz wrote:
...

What do you see in your guacd logs for the connection in question?

I am now seeing a few errors that I didn't see before:

For grepping for ssh from guacd logs, the only error I'm seeing (not frequently) is:

- Unable to set the timezone: SSH server refused to set "TZ" variable.


This is non-fatal. Guacamole tries to advise the SSH server of the user's timezone, but the SSH server need not honor this.

but I  only see a few of them..

For SFTP, I'm seeing a few of these:

- Cannot create SFTP filesystem - "<user>" is not a valid path - but I have the full path specified to the user everywhere and the handful of them in the logs aren't referring to my user anyway..


This is definitely going to prevent your attempts to use SFTP from functioning, and the error is correct. You will need to double-check your configuration again, as there is definitely something incorrect about the path provided.

There are very few reasons that that message can appear. It will appear if:

* The path is not absolute.
* The path is too deep (we currently enforce a limit of 1024 components)
* The path is too long (we currently enforce a limit of 2048 characters)

Of the above, it is most likely that the path is simply not an absolute path (no leading "/"). It would be very odd if your path somehow exceeds the length/depth limits.

- and I see a few instances of:

  - Parameter "sftp-disable-download" omitted. Using default value of 0.

  - Parameter "sftp-disable-upload" omitted. Using default value of 0.

But I have so many users logging in and very few errors..

Now, albeit guacd debug mode is now turned back off but this is what I'm seeing when I login from syslog..

2023-06-22T17:46:21.056398-04:00 remote guacd[1351060]: Creating new client for protocol "rdp"
...
Not even a mention of sftp....

If the SFTP connection fails, there will be a fatal error logged and the connection will abort entirely.

If the SFTP connection succeeds, nothing about SFTP will be logged unless debug-level logging is enabled.

If debug-level logging is enabled, the only case where nothing would be logged about SFTP is if SFTP is not enabled.

Assuming you continue to encounter this, the things to do would be:

1) Pick a single connection that is not working as expected.
2) Enable debug-level logging for guacd and attempt to use that connection.
3) Assuming it does not work, post the logs from that connection attempt here, along with a screenshot of the connection configuration from the Guacamole UI (redacted as necessary).

The cause will likely be apparent from that.

- Mike

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to