On Fri, Apr 28, 2017 at 10:33 AM, Suncatcher16 <[email protected]>
wrote:

>
> The only way I can debug this is via foreground running of guacd with -d
> option?


That should be -f, not -d.

Options which affect the verbosity of logging are always useful for
debugging. In most cases, that would mean changing the log level to "info"
or even "debug", but the unfortunate fact of the matter here is that
FreeRDP library messages are logged in such a way that Guacamole cannot
redirect them to its own logs, nor control the verbosity of the messages
logged.

And what about  this article
> <http://www.liberalcode.com/2014/06/fixing-gucamale-error-
> remote-desktop.html>
> ? Is it still actual? Does Guacamole support NLA and/or should I always
> disable server certificate?
>
>
Yes, NLA is supported. If your server requires it, you will need to specify
your username and password with the connection parameters:

http://guacamole.incubator.apache.org/doc/gug/configuring-guacamole.html#rdp-authentication

Note, specifically:

"Network Level Authentication. This mode requires the username and
password, and performs an authentication step before the remote desktop
session actually starts. If the username and password are not given, the
connection cannot be made."

As for disabling validation of the server certificate, no, you shouldn't do
this as a matter of course. Validation of certificates is important. You
should only do so if your RDP server uses a self-signed certificate which
cannot be validated, which will be the case unless you've configured your
RDP server to use a certificate from a CA.

- Mike

Reply via email to