On Mon, Dec 15, 2025 at 5:24 PM Makarem Dandouna <[email protected]> wrote: > > > > Hello Nick, > > Thank you for your answer. Here are some details: > -in a direct connection, i specify in the hostname field of the connection > parameters the ip address of the target machine to which i want to connect as > the network flow is opened between guacamole server and this machine. > > -in the connection through a jumpbox, in the hostname I specify the ip > address of an intermediate machine (the jumpbox) that acts as a proxy > between the Guacamole servers and the target machine to which i want to > connect. When user connect whith ssh to the jumpbox, a command line is > executed automatically to run a gcloud ssh command to allow him to connect > from the jumpbox to the target machine using the google tunnel iap. > In this case, if user want to copy a file using SFTP from the side menu > option, files are copied to the jumpbox and not to the target machine as the > ip address is specified in the hostname field of the connection parameters. >
Okay - I think I understand what's going on, though I'm not familiar with the Google Tunnel API or how, exactly, that works. If you have a link to the software/documentation for it, that might be helpful. That said, I suspect that when the SFTP channel of the SSH session is established, the Jumpbox SSH server is not executing the command line to run the gcloud ssh command, so the SFTP connection just stays on the jump box. I don't think there's really much that can be done about this from within Guacamole, as my guess at this point is that the limitation is more on the fact that SFTP channels on SSH servers don't generally allow execution of commands. I could be wrong about that - just going off what little I understand at this point. There is a Jira issue out there, with some in-progress pull requests, to allow tunneling connections over SSH connections, which might help this. However, it isn't done, yet: https://issues.apache.org/jira/browse/GUACAMOLE-312 -Nick --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
