Hi Mike, On 08/13/2016 12:59 AM, Mike Jumper wrote: > On Fri, Aug 12, 2016 at 3:18 PM, Steffen Moser <[email protected] > <mailto:[email protected]>> wrote: > > Hi Benjamin, > > On 08/12/2016 08:39 PM, Cahill, Benjamin wrote: > >... > > > > I failed to mention that I have already done this. The connections are > > also failing in the same way for Windows XP RDP connections as well as > > Linux SSH connections. > > > > Other ideas? > > I had quite similar problems when I upgraded from Tomcat 6 to Tomcat 8 > (both running on Solaris 11.3) after a server crash. The RDP connection > was closed immediately after opening it and the message you mentioned > was displayed. I didn't see any helpful logs, but I must admit that I > unfortunately didn't have much time for further analyzing, because I had > to restore the production system after its breakdown. > > Downgrading to Tomcat 6 fixed the problem for me. > > > Tomcat 8 *should* work fine (as should 7). I highly recommend against > downgrading all the way to Tomcat 6 - you'll lose support for WebSocket, > as well as any other enhancements the Tomcat community has made since.
I totally agree, it was only a very quick fix. After a severe crash of one of our RAID systems, I had to re-setup a few things and used this to upgrade from Tomcat 6.0.45 to Tomcat 8.0.32. Both versions of Tomcat are available as packages in Oracle Solaris 11.3. After the upgrade, I had exactly the same problem which Benjamin reported about in this thread. So to get the system up quickly, I did the downgrade to Tomcat 6.0.45 and Guacamole began to work fine again. In the meantime (and also initiated by your message) I took some time to narrow down the problem. It seems it is related to websockets, and it also seems to be related to encryption. Currently, our users are accessing Guacamole directly which means there isn't any Apache or NGINX Reverse Proxy between user and the servlet container Tomcat. For this reason, Tomcat is doing the security (TLS) itself. As soon as I disable SSL/TLS and use HTTP instead of HTTPS for Guacamole, it works well with Tomcat 8.0.32. So there seems to be an issue which SSL/TLS, and we also found out that the issue does not affect all browsers: Safari on OS X 10.11.6 works well. Chrome and Firefox don't (tested with OS X, Windows and Linux). > If you find Tomcat 8 is failing, it'd be better to try a slightly-newer > or slightly-older version of the same (but still 8.0.x). You shouldn't > need to fall down two whole major releases. I've seen that there are some websocket-related changes and bug fixes in newer versions of Tomcat (beginning in version 8.0.33 and newer). I am going to upgrade the platform to the latest SRU (patch level) of Solaris 11.3 in the next days. This includes an upgrade to Tomcat 8.5.3. If the problem still occurs with this version of Tomcat, I'll spend time for digging more deeply. Kind regards, Steffen
