On Mon, Oct 16, 2017 at 2:21 PM, Felix Wolfheimer <
[email protected]> wrote:

>
> Hi,
>
> I'm trying to get a VNC connection working using Guacamole. I built and
> installed the guacd and the client without issues, started guacd and
> tomcat, and can see the login page of Guacamole when connecting with the
> browser, but whatever I try with the user-mapping.xml file, I can't log in.
> I installed the "user-mapping.xml" file to /usr/share/tomcat/.guacamole
> (the HOME of the tomcat user is /usr/share/tomcat) and the user-mapping.xml
> file is the one and only file in this directory. It has the following
> content:
>
> <user-mapping>
>   <authorize username="testuser" password="testing">
>     <connection name="Cloud Workstation">
>        <protocol>vnc</protocol>
>        <param name="hostname">localhost</param>
>        <param name="port">5901</param>
>    </connection>
>   </authorize>
> </user-mapping>
>
> The only message I can find on the server about the failed login is the
> following line in /var/log/messages:
>
> WARN  o.a.g.r.auth.AuthenticationService - Authentication attempt from
> x.x.x.x for user "testuser" failed.
>
> I've entered the password multiple times to make sure that I just made a
> typo.
>
> Is there anything I'm missing and are there other places where I can find
> debugging information about the login process which could help
> understanding what goes wrong?
>
> Thanks!
>
> Everything you've done looks fine to me, but I'd suggest doing the
following:
- Edit your catalina.properties file (stored in the same place as the rest
of the Tomcat configs, like server.xml) and add the following line:
guacamole.home=/etc/guacamole
- Create the /etc/guacamole directory and set up permissions such that the
user running Tomcat can access it.
- Put your user-mapping.xml file in /etc/guacamole and restart Tomcat.
Verify permissions on that file, too, to make sure the Tomcat user has read
access.

See if that works - like I said, what you've done seems like it should
work, so not sure what's going on, but maybe this will help.

-Nick

Reply via email to