Hi,

In our team we are doing some tests to interact with the rest api in
guacamole. Inspecting the traffic with the browser dev tools we found out
how to create connections and users in guacamole using the api. Our tests
are accessible here
https://github.com/pescobar/ansible-playbook-guacamole-api

After our initial testing we have two doubts:

1) Does anyone has any docs for the api? Anything that  could save us some
time inspecting the http traffic or the source code would be very helpful
and appreciated. e.g. I still couldn't find how to get a list of existing
connections.

2) We did a test with a guacamole instance using OpenID auth (
https://guacamole.apache.org/doc/gug/openid-auth.html) and 2FA and we could
authenticate with the api using a local guacamole admin account. I mean, if
I access guacamole with a browser I have to use EduID+2FA but our ansible
code can "bypass" it and authenticate with the api using the local
guacamole account. For us it's convenient because we can use the api even
with EduID+2FA enabled but I am not sure if this is a bug or a feature. Is
it the expected behavior?

Thanks in advance for any help or suggestion.
regards,
Pablo.

-- 
Pablo Escobar López
Linux/HPC systems engineer
sciCORE, University of Basel
SIB Swiss Institute of Bioinformatics

Reply via email to