Re: Custom user-defined connection credentials

2024-04-29 Thread Vieri
ole client could ask the user to pick any of its "credential sets" from the guac DB (or none for user input). I don't know if the "vault credential retrieval system" can be adapted to this simpler setup. Can the "vault" just be a table within guac DB? Vieri -

Custom user-defined connection credentials

2024-04-29 Thread Vieri
Updating the credentials would be up to each user, and it would greatly ease logging into systems when using an IdP which does not support clearpass hence no way of using ${GUAC_PASSWORD} (also when one needs to change the credentials anyway

Re: Unexpected error in REST endpoint

2024-03-18 Thread Vieri
s",     "namespace" : "customurls", "html" : [     "Note.html",     "CustomURLs.html" ] } So no, I don't see any incorrect paths or missing files. As for the "modification of the extension .jar wh

Re: Unexpected error in REST endpoint

2024-03-15 Thread Vieri
ely... but it does. As of the system I don't know where to look. Still, isn't it odd that restarting the Tomcat service solves the problem? Could it have anything to do with open file descriptors? Vieri -

Re: Unexpected error in REST endpoint

2024-03-15 Thread Vieri
On Friday, March 15, 2024 at 11:48:26 AM GMT+1, Nick Couchman wrote: > Can you get the full trace of this NullPointerExecption? It's the same as in my previous post: 2024-03-15 07:34:08,879 [https-openssl-apr-8543-exec-8] DEBUG o.a.g.rest.RESTExceptionMapper - Unexpected error in REST

Re: Unexpected error in REST endpoint

2024-03-15 Thread Vieri
? Tomcat 8.5 Guacamole client 1.5.4 Vieri On Wednesday, February 14, 2024 at 01:08:19 PM GMT+1, Vieri wrote: On Monday, February 12, 2024 at 08:10:23 PM GMT+1, Michael Jumper wrote: On 2/12/24 10:18, Vieri wrote: >> ... >> [https-openssl-apr-8543-ex

Re: Unexpected error in REST endpoint

2024-02-14 Thread Vieri
On Monday, February 12, 2024 at 08:10:23 PM GMT+1, Michael Jumper wrote: On 2/12/24 10:18, Vieri wrote: >> ... >> [https-openssl-apr-8543-exec-10] DEBUG o.a.g.rest.RESTExceptionMapper - >> Unexpected error in REST endpoint. >> java.lang.Nu

Unexpected error in REST endpoint

2024-02-12 Thread Vieri
ses SAML auth. What can I try if the problem were to come up again? Thanks, Vieri - To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org For additional commands, e-mail: user-h...@guacamole.apache.org

Re: Major bug message log in guacd 1.5.4

2024-01-25 Thread Vieri
On Wednesday, January 24, 2024 at 11:38:35 PM GMT+1, Nick Couchman wrote: > CentOS 7 > freerdp-libs 2.1.1-5.el7_9 > openssl-devel 1.0.2k-26.el7_9 I'm using: openssl 1.1.1l freerdp 2.4.1 In my case, guacd 1.5.3 works flawlessly whereas 1.5.4 fails.

Re: Major bug message log in guacd 1.5.4

2024-01-24 Thread Vieri
On Wednesday, January 24, 2024 at 04:01:52 PM GMT+1, Nick Couchman wrote: > When I say "underlying system" - I mean that I'm not running Docker > containers, I'm installing natively on CentOS7,  > and when I upgraded from 1.5.3 to 1.5.4, I did not update any of the other > dependencies

Re: Major bug message log in guacd 1.5.4

2024-01-24 Thread Vieri
On Tuesday, January 23, 2024 at 04:02:10 PM GMT+1, Nick Couchman wrote: On Tue, Jan 23, 2024 at 6:53 AM Vieri wrote: >> Hi, >> >> Even if the error message in the log refers to freerdp code there is >> something in guacd-1.5.4 that makes the service "in need&q

Re: Major bug message log in guacd 1.5.4

2024-01-23 Thread Vieri
e only observation I can make is that connections fail after a while with guacd 1.5.4 but work in a stable manner with guacd 1.5.3. The number of eventfds observed are very similar in both situations (1.5.3 vs 1.5.4). Not much I can add for debug because I am forced to use 1.5.3 on a produc

Re: Problems with SSH

2024-01-11 Thread Vieri
On Thursday, January 11, 2024 at 10:55:53 AM GMT+1, Anders Fogh Eriksen wrote: >  This could be related to the ”major bug” issue: >https://lists.apache.org/thread/z8m7y5n0nco0smn1mscdn0fhyxjctrtt > We have the same problem on our setup that after a certain amount of sessions > everything

Re: Major bug message log in guacd 1.5.4

2024-01-08 Thread Vieri
On Saturday, January 6, 2024 at 06:50:38 AM GMT+1, Michael Jumper wrote: > Interesting that there's so many eventfds. I wonder if there might be an > underlying library call that's leaking these... > > To my knowledge, we're not opening any eventfds directly within the Guacamole > codebase,

Re: Major bug message log in guacd 1.5.4

2024-01-04 Thread Vieri
us connections. It's hard to think it's a socket resource issue. I'll keep looking. Thanks, Vieri - To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org For additional commands, e-mail: user-h...@guacamole.apache.org

Re: Major bug message log in guacd 1.5.4

2024-01-03 Thread Vieri
uacamole 1.5.4 setup with FreeRDP 2.10.0 (upgrade 2.4.1 to 2.10.0), and leave my old guacamole 1.4.0 with FreeRDP 2.4.1 untouched. Regards, Vieri - To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org For additional comm

Re: Major bug message log in guacd 1.5.4

2024-01-02 Thread Vieri
>From the OP it seems that guacamole 1.5.3 did not have this issue, but it is >yet to be confirmed. - To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org For additional commands, e-mail:

Re: Major bug message log in guacd 1.5.4

2024-01-01 Thread Vieri
've restarted guacd 1.5.4 I cannot reproduce the problem for further research (until maybe it starts failing again which can take quite a while). Vieri - To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org For a

Re: connection sharing

2023-12-19 Thread Vieri
On Monday, December 18, 2023 at 07:12:16 PM GMT+1, Vieri wrote: > > The SAML response contains something like this: > > NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"> > my_user > Name="urn:oid:1.2.840.113556.1.2.102"  > Name

Re: connection sharing

2023-12-18 Thread Vieri
.w3.org/2001/XMLSchema-instance; xsi:type="xsd:string">my_admin_group Is it the format Guacamole expects? I have this in my guacamole.properties: saml-group-attribute: urn:oid:1.2.840.113556.1.2.102 Regards, Vieri - To un

Re: connection sharing

2023-12-17 Thread Vieri
t;SELECT * FROM guacamole_user_group_member;":  user_group_id | member_entity_id ---+-- 3 |    3 However, even after logging out and back in I still can't see the Sharing dropdown men

Re: connection sharing

2023-12-15 Thread Vieri
uper_user_group and this group has Sharing Profile enabled bob will still not be able to share his connection if Sharing Profile isn't explicitly enabled for user bob? If so then what's the point in enabling Sharing Profile at group level?

connection sharing

2023-12-14 Thread Vieri
aring profiles" for "my_admin_group" and "my_super_user_group", but if a user whose a member of one of those groups logs in the Sharing dropdown will not appear when in an RDP connection. What can I try? What can I check to see why Guacamole think

Re: guacamole client web UI

2023-12-14 Thread Vieri
rded-For addr. be used by Guacamole (if it "trusts" the >> proxy)? >> > > https://guacamole.apache.org/doc/gug/reverse-proxy.html#setting-up-the-remote-ip-valve Correct. I must have missed that part of the doc. Works great. Thanks, Vieri - To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org For additional commands, e-mail: user-h...@guacamole.apache.org

Re: [ANNOUNCE] Apache Guacamole 1.5.4

2023-12-14 Thread Vieri
Same thing happening on Gentoo Linux. Can the Guacamole makefile include -lrt? - To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org For additional commands, e-mail: user-h...@guacamole.apache.org

guacamole client web UI

2023-12-14 Thread Vieri
d-For addr. be used by Guacamole (if it "trusts" the proxy)? Regards, Vieri - To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org For additional commands, e-mail: user-h...@guacamole.apache.org

Re: clone a connection

2023-02-07 Thread Vieri
OK, I just got bitten by my own system. Guacamole is behind a reverse-proxy with ModSecurity. Sending variables as ${} is considered a potential attack, so I get this in the WAF: [id "932130"] [msg "Remote Command Execution: Unix Shell Expression Found"] [data "Matched Data:

Re: clone a connection

2023-02-07 Thread Vieri
On Tuesday, February 7, 2023 at 09:36:47 AM GMT+1, Vieri wrote: > > I haven't checked yet if the recorded file name actually contains the > expanded values. I just cjhecked and can confirm that ${GUAC_USERNAME}, ${GUAC_DATE} and ${GUAC_TIME} are properly expanded (ie. I can see f

Re: clone a connection

2023-02-07 Thread Vieri
The problem seems to be with special characters such as curly braces. I can reproduce the issue (blank error message) with both "cloning" and "creating" a connection -- it doesn't really matter (red herring). To reproduce it yourself, simply add ${GUAC_DATE} and/or ${GUAC_USERNAME} or anything

clone a connection

2023-02-06 Thread Vieri
the pink message box doesn't contain any text -- just "error"). Is there something special about "cloning" a connection configuration and saving it (after changing the name and target host of cours

Re: empty tomcat webapps/guacamole

2022-11-09 Thread Vieri
On Wednesday, November 9, 2022 at 12:05:32 PM GMT+1, Obuno wrote: > >  /usr/bin/unzip -o /var/lib/tomcat9/webapps/guacamole.war -d >/var/lib/tomcat9/webapps/guacamole/   AFAIK you don't need to unzip anything. Just copy the war file, and Tomcat will do the rest.

No readable active connection for tunnel

2022-10-14 Thread Vieri
such as: Exception in thread "Thread-32940" java.lang.IllegalStateException: The WebSocket session [231a] has been closed and no method (apart from close()) may be called on a closed session They seem to show up when "testuser" tries to connect. Any ideas? Using v.

let user select some guacamole options

2022-07-20 Thread Vieri
to provide the connection details, and in any case I don't want to give users permission to change all of the connection features. Regards, Vieri - To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org For additional c

Re: reverse proxy and SAML SSO

2022-06-30 Thread Vieri
ly way (if I wanted more than one webapp) is to configure 1 VitualHost that reverse-proxies to different specific Locations, one for each webapp. Thanks, Vieri - To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.or

Re: reverse proxy and SAML SSO

2022-06-30 Thread Vieri
ntainer/webapp how should I do that? I do not want to configure 1 virtual domain as the root reverse proxy and from there deploy tomcat webapps. I require each virtualhost to point to a specific tomcat webaoo, Vieri - To unsubscrib

Re: reverse proxy and SAML SSO

2022-06-30 Thread Vieri
The problem seems to be with the onelogin library: java-saml/core/src/main/java/com/onelogin/saml2/authn/SamlResponse.java contains:     protected void validateDestination(final Element element) throws ValidationError {     if (element.hasAttribute("Destination")) {

Re: reverse proxy and SAML SSO

2022-06-30 Thread Vieri
On Thursday, June 30, 2022, 01:22:13 AM GMT+2, Vieri wrote: > Apparently, the IdP had a misconfiguration for the guacamole SP. My original > error is now solved, and I can now log into the IdP. > However, when I am redirected back to guacamole I enter an infinite > redirection

Re: reverse proxy and SAML SSO

2022-06-29 Thread Vieri
domain.org/api/ext/saml/callback. Regards, Vieri - To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org For additional commands, e-mail: user-h...@guacamole.apache.org

Re: reverse proxy and SAML SSO

2022-06-29 Thread Vieri
On Wednesday, June 29, 2022 at 03:00:12 PM GMT+2, chomik MChamster wrote: > Hey Vieri, > Not sure if you want to try this - I could not get guacamole-auth-saml-1.4 > working with my guacamole 1.4 deployment. As far as I > remember it had to do with the proxy config (I'm not an

Re: reverse proxy and SAML SSO

2022-06-29 Thread Vieri
amole.apache.org/doc/1.4.0/gug/reverse-proxy.html Unfortunately, I do not have access to the IdP so I don't know if the problem is in my SP or in the remote IdP. Thanks anyway, Vieri - To unsubscribe, e-mail: user-unsubscr...@guaca

Re: reverse proxy and SAML SSO

2022-06-29 Thread Vieri
ithout the reverse proxy. The SAML callback URL seems to be the culprit, but I don't know why. Thanks, Vieri - To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org For additional commands, e-mail: user-h...@guacamole.apache.org

reverse proxy and SAML SSO

2022-06-29 Thread Vieri
Path /guacamole/ /             Require all granted     ProxyPass wss://localhost:8543/guacamole/websocket-tunnel     ProxyPassReverse wss://localhost:8543/guacamole/websocket-tunnel     Any thoughts?

Re: Logout when using SAML SSO

2022-06-07 Thread Vieri
On Tuesday, June 7, 2022, 02:27:50 PM GMT+2, Nick Couchman wrote: > Yes, SLO is not implemented in Guacamole at the moment - there are existing > Jira issues out there to implement this in each of the SSO extensions, but > this work has not been > done. OK, like this issue:

Logout when using SAML SSO

2022-06-07 Thread Vieri
thing like /endpoint/logout?ReturnTo=, but I'm unsure as how and where to do this. Regards, Vieri Jerome - To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org For additional commands, e-mail: user-h...@guacamole.apache.org

Re: Guacamole and web links: how to use RemoteApp

2022-06-07 Thread Vieri
quot;C:\Firefox\profile" leaving only the chrome/ subdir before actually running firefox.exe with its arguments. Sounds very ugly, but it might work if the user running the process can actually delete the dir content. Thanks, Vieri ---

Re: Guacamole and web links: how to use RemoteApp

2022-06-06 Thread Vieri
ure this is "safe" to be used in a multi-user environment. Thanks, Vieri Jerome - To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org For additional commands, e-mail: user-h...@guacamole.apache.org

Re: user logs in but cannot see authorized connection

2022-06-03 Thread Vieri
On Thursday, June 2, 2022, 02:35:47 AM GMT+2, Nick Couchman wrote: > Does the case of the groups created in JDBC match the case in this log > message? That was it -- silly me. Thanks! Vieri Jerome - To unsubscribe,

Guacamole and web links: how to use RemoteApp

2022-06-03 Thread Vieri
moteApp opens, so I cannot add things like javascript:winodw.close() or the likes.   Regards, Vieri Jerome - To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org For additional commands, e-mail: user-h...@guacamole.apache.org

Re: user logs in but cannot see authorized connection

2022-06-01 Thread Vieri
ing), group2(String), My_Group(String), group3(String) So what next? Am I misunderstanding the way SAML works with Guacamole, or could it be a bug or missing feature? Any answer will do... Thanks, Vieri Jerome - To unsubscribe

user logs in but cannot see authorized connection

2022-06-01 Thread Vieri
sponse - SAMLResponse has attributes: {urn:oid:1.2.840.113556.1.2.102=[Some_group, My_Group, Another_Group], urn:oid:2.5.4.3=[MyUser], IDP=[INTERNAL]} The group is there, so what's wrong? Vieri Jerome - To unsubscribe, e-mail:

Re: RDP virtual printing (PDF) fails on second try

2022-05-05 Thread Vieri
FWIW I can confirm that the problem is fixed with the latest GIT version of guacamole-server. Thanks, Vieri - To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org For additional commands, e-mail: user-h

Re: RDP virtual printing (PDF) fails on second try

2022-05-04 Thread Vieri
ay or two. Thanks, Vieri - To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org For additional commands, e-mail: user-h...@guacamole.apache.org

RDP virtual printing (PDF) fails on second try

2022-04-28 Thread Vieri
se parameters: gs -q -dNOPAUSE -dBATCH -dSAFER -dPARANOIDSAFER -sDEVICE=pdfwrite -sOutputFile=- -sstdout=/dev/null -f - # gs --version 9.55.0 What can I try? Vieri - To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org

Re: SAML SP metadata

2022-04-14 Thread Vieri
 On Sunday, March 27, 2022, 05:32:07 PM GMT+2, Vieri wrote: > > I created this: > https://issues.apache.org/jira/browse/GUACAMOLE-1565 Hi again, Regarding SAML there's another important feature I haven't requested on Jira yet. I require the guacamole application to allow acce

Re: Guacamole 1.4.0 problem using SAML authentication

2022-04-09 Thread Vieri
file to "ROOT.war". So with that in mind, one cannot have more than one backend on the reverse proxy? Vieri - To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org For additional commands, e-mail: user-h...@guacamole.apache.org

Re: SAML SP metadata

2022-03-27 Thread Vieri
On Saturday, March 26, 2022, 06:15:38 PM GMT+1, Vieri wrote: >> samlMap.put(SettingsBuilder.SP_X509CERT_PROPERTY_KEY, >> "SP_PEM_public_key_string"); >> samlMap.put(SettingsBuilder.SP_PRIVATEKEY_PROPERTY_KEY, >> "SP_PEM_private_key_string");

Re: SAML SP metadata

2022-03-26 Thread Vieri
On Saturday, March 26, 2022, 12:34:32 AM GMT+1, Vieri wrote: > samlMap.put(SettingsBuilder.SP_X509CERT_PROPERTY_KEY, > "SP_PEM_public_key_string"); > samlMap.put(SettingsBuilder.SP_PRIVATEKEY_PROPERTY_KEY, > "SP_PEM_private_key_string"); Just to let you kno

Re: SAML SP metadata

2022-03-25 Thread Vieri
: ERROR: value too long for type character varying(128) Regards, Vieri - To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org For additional commands, e-mail: user-h...@guacamole.apache.org

Re: Extension "guacamole-auth-jdbc-postgresql-1.4.0.jar" could not be loaded

2022-03-25 Thread Vieri
The version of Guacamole is downloaded from the Guacamole home page, but I think I must have gotten the GIT version instead. Now I re-built the 1.4.0, and I do not get the extension error anymore. Sorry for the confusion. Thanks, Vieri

Extension "guacamole-auth-jdbc-postgresql-1.4.0.jar" could not be loaded

2022-03-25 Thread Vieri
.findClass(ExtensionClassLoader.java:154)     at java.lang.ClassLoader.loadClass(ClassLoader.java:418)     at java.lang.ClassLoader.loadClass(ClassLoader.java:351)     ... 44 common frames omitted Vieri - To unsubscribe, e-mail: user-unsubsc

Re: SAML SP metadata

2022-03-25 Thread Vieri
On Friday, March 25, 2022, 12:03:21 PM GMT+1, Vieri wrote: > >Is the current implementation of guacamole-auth-sso-saml-1.4.0 capable of >decrypting SAML responses with the SP's private key? Maybe when https://github.com/apache/guacamole-client/blob/c63c02d645abf763db00de9174b4537

Re: SAML SP metadata

2022-03-25 Thread Vieri
it? Any alternative ideas such as maybe installing and configuring Shibboleth from https://shibboleth.net/downloads/service-provider/ and then Shibbolize the Guacamaole Tomcat web service (https://shibboleth.atlassian.net/wiki/spaces/SHIB2/pages/2577

Re: SAML SP metadata

2022-03-23 Thread Vieri
I can't get past this. I keep getting the "No private key available for decrypt, check settings" as seen here below: [https-openssl-apr-8543-exec-2] WARN  o.a.g.a.s.a.AssertionConsumerServiceResource - Authentication attempted with an invalid SAML response: Current SAML settings are

Re: SAML SP metadata

2022-03-23 Thread Vieri
On Tuesday, March 22, 2022, 11:26:59 PM GMT+1, Vieri wrote: >"No private key available for decrypt, check settings" How does the certificate bit work in layman's terms. My guacamole config is: extension-priority: saml saml-idp-metadata-url: https://idp.domain.org/idp/sh

Re: SAML SP metadata

2022-03-22 Thread Vieri
On Tuesday, March 22, 2022, 11:15:10 PM GMT+1, Vieri wrote: >"No private key available for decrypt, check settings" OK, scratch my last post. I think there's been a cert mixup between the SP and IdP. Either one is using the wron

Re: SAML SP metadata

2022-03-22 Thread Vieri
On Tuesday, March 22, 2022, 06:00:26 PM GMT+1, Vieri wrote: > My IdP has just now changed something (probably certificates), and I'm now > seeing this in my  guacamole logs while in a redirection loop between SP and > IdP: > "Current SAML settings are insufficient

Re: SAML SP metadata

2022-03-22 Thread Vieri
SAML response" What are the possible causes that trigger this message? (I sent guacamole's public cert to the IdP.) Thanks, Vieri - To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org For additional commands, e-

Re: SAML SP metadata

2022-03-20 Thread Vieri
On Sunday, March 20, 2022, 11:53:19 AM GMT+1, Vieri wrote: > This is my current guacamole.properties If I replace LDAP connection provisioning with a Postgresql backend, I get the expected result: connections are properly loaded even when authenticating with SAML. So I guess I'm bet

Re: SAML SP metadata

2022-03-20 Thread Vieri
I finally have SAML working with my Guacamole installation. The problem was on the IdP side as they were not using the right callback URL and they were setting the user name/ID in a custom attribute instead of using nameID. Now that I can log into Guacamole with the IdP via SAML, I'm unable to

Re: SAML SP metadata

2022-03-18 Thread Vieri
  org.apache.guacamole.log.LogModule - Loading logback configuration from "/etc/guacamole/logback.xml". # cat logback.xml                             %d [%thread] %-5level %logger{36} - %msg%n                                 Why isn't Tomcat/guacamole loggging the SAML replies? Regar

Re: SAML SP metadata

2022-03-18 Thread Vieri
On Friday, March 18, 2022, 09:52:11 AM GMT+1, Vieri wrote: > OK, so even if I remove my LDAP authentication extension and keep ONLY the > SAML SSO extension (to keep things simple) I still get a redirection loop: > > > DEBUG o.a.g.rest.RESTExceptionMapper - Client r

Re: SAML SP metadata

2022-03-18 Thread Vieri
ally rejecting a client already properly authenticated with the IdP? Regards, Vieri - To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org For additional commands, e-mail: user-h...@guacamole.apache.org

Re: SAML SP metadata

2022-03-17 Thread Vieri
I'm afraid it still doesn't work even though this time I'm not getting an infinite loop. I set guac SAML like this: extension-priority: saml saml-idp-metadata-url: https://idp.domain.org/idp/shibboleth saml-entity-id: https://guacamole.domain.org saml-callback-url:

Re: SAML SP metadata

2022-03-17 Thread Vieri
On Thursday, March 17, 2022, 01:14:18 PM GMT+1, Tyler Marcotte wrote: > Yes, you want to use "https:///api/ext/saml/callback" as the > callback URL to finish out the process. Thanks for that! Hope this small but important piece of information makes its way into

Re: SAML SP metadata

2022-03-17 Thread Vieri
main.org/api/ext/saml/callback; instead? It's not mentioned in the Apache Guacamole documentation found here: https://guacamole.apache.org/doc/gug/saml-auth.html Regards, Vieri - To unsubscribe, e-mail: user-unsubscr...@guacam

SAML SP metadata

2022-03-10 Thread Vieri
n="... AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="... So what are the SAML endpoints and bindings for Apache Guacamole? Does Guacamole generate an SP metadata XML file? Regards, Vieri ---

guacd segmentation fault

2022-02-10 Thread Vieri
5d 41 5c 41 5d 41 5e 41 5f e9 6b c7 ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 48 8b 07 45 31 c0 48 8b 40 10 48 8b 50 50 <8b> 52 10 85 d2 7f 07 48 83 78 58 00 74 04 44 89 c0 c3 44 8b 47 20 I'm using freerdp 2.4.1. Any ideas? Vieri ---

Re: 2FA: using TOTP authenticators (examples)

2022-02-10 Thread Vieri
An admin user such as default guacadmin cannot change any personal data within its own user details (web admin page). I get a permission denied message. Is it intended, a possible misconfiguration on my behalf or a bug? Vieri

Re: 2FA: using TOTP authenticators (examples)

2022-02-09 Thread Vieri
ing invalid TOTP > codes. OK, got it. That was the real issue then. Everything else was coincidental. So I guess there are still no authenticator apps out there that honor the totp-digits and totp-mode settings. Thanks, Vieri ---

Re: 2FA: using TOTP authenticators (examples)

2022-02-09 Thread Vieri
lowing change in the DB: update guacamole_user_attribute set attribute_value = 'false' where attribute_name = 'guac-totp-key-confirmed' and user_id = 1; That was enough to re-enroll. Thanks, Vieri - To unsubscribe, e-mail: user-

Re: 2FA: using TOTP authenticators (examples)

2022-02-09 Thread Vieri
How does one clear the TOTP data for the guacadmin user? Regards, Vieri - To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org For additional commands, e-mail: user-h...@guacamole.apache.org

Re: 2FA: using TOTP authenticators (examples)

2022-02-09 Thread Vieri
Here's what I did to make it work. I edited APP.NAME in /guacamole/src/main/frontend/src/translations/en.json and set the exact same string to totp-issuer. Rebuilt guacamole-client. Works now with authenticator apps. Any ideas why one can't customize totp-digits and totp-mode whlle using

Re: 2FA: using TOTP authenticators (examples)

2022-02-09 Thread Vieri
On Wednesday, February 9, 2022, 01:53:27 PM GMT+1, Vieri wrote: > Answering myself, totp-issuer has to be Apache Guacamole in order to work > out-of-the-box with Google Authenticator, MS Authenticator and the likes. > > If I wanted to change that string, where else should it be

Re: 2FA: using TOTP authenticators (examples)

2022-02-09 Thread Vieri
Answering myself, totp-issuer has to be Apache Guacamole in order to work out-of-the-box with Google Authenticator, MS Authenticator and the likes. If I wanted to change that string, where else should it be done for 2FA to work with these external apps? Regards, Vieri

2FA: using TOTP authenticators (examples)

2022-02-09 Thread Vieri
try to enter the 6 digits, I get a verification error. What can I try? Can I check the backend? Is the totp data stored in the db? Which table? Regards, Vieri - To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org

Re: guacamole-client: Temporary directory for libraries bundled with extension

2022-02-09 Thread Vieri
BTW, is there a drawback if I use the mysql java connector instead of mariadb's even though my backend is mariadb? Vieri - To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org For additional commands, e-mail: user-h

Re: guacamole-client: Temporary directory for libraries bundled with extension

2022-02-09 Thread Vieri
On Wednesday, February 9, 2022, 09:59:45 AM GMT+1, Vieri wrote: > If I set mysql-driver: mariadb I get an error (no suitable driver) if I ONLY > have mariadb-java-client-3.0.3.jar in /etc/guacamole/lib/ (I also tried an > earlier version). > If I add mysql-connector-jav

Re: guacamole-client: Temporary directory for libraries bundled with extension

2022-02-09 Thread Vieri
pom.properties   4725 Fri Jan 21 10:40:50 CET 2022 META-INF/versions/9/module-info.class Regards, Vieri - To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org For additional commands, e-mail: user-h...@guacamole.apache.org

Re: guacamole-client: Temporary directory for libraries bundled with extension

2022-02-08 Thread Vieri
s /etc/guacamole/lib/ mariadb-java-client-3.0.3.jar  mysql-connector-java-8.0.28.jar and then add /etc/guacamole/lib/mariadb-java-client-3.0.3.jar:/etc/guacamole/lib/mysql-connector-java-8.0.28.jar to my Tomat classpath. Vieri ---

Re: guacamole-client: Temporary directory for libraries bundled with extension

2022-02-08 Thread Vieri
On Tuesday, February 8, 2022, 04:59:41 PM GMT+1, Vieri wrote: On Tuesday, February 8, 2022, 03:47:46 PM GMT+1, Nick Couchman wrote: >> I'm trying to set up guacamole with mariadb + ldap + totp. >> # ls /etc/guacamole/lib/ >> mariadb-java-client-3.0.3.jar > &g

Re: guacamole-client: Temporary directory for libraries bundled with extension

2022-02-08 Thread Vieri
   46590  0t0  TCP 127.0.0.1:3306 (LISTEN) Thanks, Vieri - To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org For additional commands, e-mail: user-h...@guacamole.apache.org

guacamole-client: Temporary directory for libraries bundled with extension

2022-02-08 Thread Vieri
th extension" mean? I don't see a "lib" within the JDBC MySQL jar file. Regards, Vieri - To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org For additional commands, e-mail: user-h...@guacamole.apache.org

Re: Guacamole update: on-screen keyboard and printing

2022-01-28 Thread Vieri
to get rid of the on-screen keyboard reduces drastically the visual. Thanks, Vieri On Friday, January 14, 2022, 12:37:59 AM GMT+1, Hankins, Jonathan wrote: I believe it introduces the .setpdfwrite command, so you would need to remove it too: https://www.ghostscript.com/doc/current/Use.htm

Re: Guacamole update: on-screen keyboard and printing

2022-01-13 Thread Vieri
rite. In any case, I compile guacamole-server with this patch, and I can confirm that printing to PDF finally works. Is a bug report necessary? Thanks again, Vieri - To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org For additional commands, e-mail: user-h...@guacamole.apache.org

Re: Guacamole update: on-screen keyboard and printing

2022-01-13 Thread Vieri
On Thursday, January 13, 2022, 11:30:41 PM GMT+1, Vieri wrote: > It looks like the issue lies in GhostScript itself > Error: /undefined in .setpdfwrite > That option is indeed passed to "gs" in the case of the print filter command > used by the RDP support I downgra

Re: Guacamole update: on-screen keyboard and printing

2022-01-13 Thread Vieri
ll, that's "good" news! Thanks for looking into this. I have gs v. 9.55, and I can try to downgrade all the way down to v. 9.52. I'm guessing you're not seeing my printing problem, so what gs version are you using? Vieri --

Re: Guacamole update: on-screen keyboard and printing

2022-01-13 Thread Vieri
On Thursday, January 13, 2022, 11:46:38 AM GMT+1, Vieri wrote: >> Are you saying that if you run the 1.3.0 guacd with the 1.4.0 webapp, the >> problem disappears? > > No, in my case rolling back means going back to using my old server which has > both guacd and client

Re: Guacamole update: on-screen keyboard and printing

2022-01-13 Thread Vieri
> problem disappears? No, in my case rolling back means going back to using my old server which has both guacd and client at 1.3.0. I can try guacd 1.3.0 with client 1.4.0 if you think it's worth a try. Vieri new 1.pdf Description: Adobe PDF document -

Re: Guacamole update: on-screen keyboard and printing

2022-01-13 Thread Vieri
On Wednesday, January 12, 2022, 05:34:17 PM GMT+1, Vieri wrote: > > I have ghostscript-gpl-9.55.0. > > So I guess gs is not the issue here. > > Any suggestions? Hi, This has become a security issue for me because I cannot upgrade to 1.4.0 as my users require virtual pr

Re: Guacamole update: on-screen keyboard and printing

2022-01-12 Thread Vieri
Hi again, On the guacamole 1.4.0 server I ran the following test to somehow simulate the gs output guacd would expect (I guess): # pdf2ps guac_print.pdf    Warning: File has some garbage before %PDF- . # gs -sDEVICE=pdfwrite -sOutputFile=guac_print_test.pdf guac_print.ps If I open

  1   2   3   >