Re: Performance testing of Guacamole

2018-03-07 Thread ivanmarcus
I see Mike's response to this, which was thorough and useful to know for 
my own planning.



That said, just to give you a comparison, I tried a similar test on a 
Ubuntu 16.04 Vbox VM (1gb RAM). With two concurrent RDP users, one 
streaming sometining on youtube, the load average was ~0.15, and guacd 
ranged from ~15% - 27% CPU...



On 7/03/2018 5:55 p.m., Amarjeet Singh wrote:

Hi Mike,

Now most of my feature related issues are known and most of them are 
fix, I moved to performance testing.


I am running Guacamole on a CentOS 7 VM, running on latest VMWare ESX 
on Dell 610. I did the test at night so there was no other load on the 
server.

My VM has 2 vCPU and 4 GB of RAM.

When I run a single session with Guacamole and open MSN and leave it 
open, I can see that the CPU utilization on my server fluctuates 
between 3% to 30%. Average is 5-6%, but sometimes it would hit 30% also.


Then I started a HD video in Youtube and left it. I see now that CPU 
on my server is almost 100% utilized.

The Video is not smooth anyway.
The process consuming all the CPU is guacd

With just a single user can guacd consume so much CPU?

Howe can we limit this.

I have to test this server to supprot around 50 simultaneous users. 
Although users are not going to do Youtube but with 5% of average CPU 
consumption for MSN.com for a single user, I dont see I could support 
more than 20 sessions.


What is your view and if you have recommendation to optimize CPU 
utilization by guacd.


Except for font smoothing, all other options on rdp are turned off. 
Bitmap caching and compression is ON.


Regards,
Amarjeet Singh




Re: Getting ERROR : Network too slow

2018-03-12 Thread ivanmarcus
Armajeet, have you tried using Wireshark to look at the traffic between 
Guacamole and your RDP server? I imagine this should show whether any 
delay originates with Guacamole, or is perhaps somewhere else in your 
system.



On 12/03/2018 9:45 p.m., Amarjeet Singh wrote:

Thanks Mike. I appreciate that.

I can't speak to why your RDP server is not responding within the
~15 seconds that Guacamole waits for connections to be
established. If the server was just started, it likely simply
isn't ready to accept RDP connections at the time the attempt was
made. 



How can we make sure that RDP server isn't ready to accept RDP 
connections ?


This is not only happening if server was just started but if user 
connects once and again try to reconnect after an hour ( any time ...)


Regards,
Amarjeet Singh

On Mon, Mar 12, 2018 at 8:44 AM, Mike Jumper > wrote:


On Fri, Mar 9, 2018 at 5:19 AM, Amarjeet Singh
mailto:amarjee...@gmail.com>> wrote:

...

*Is it really because of the Network too slow  ? [  How could
we make sure that it is really because of network too slow.  ]*


No, but as the error message says, that is the typical cause. In
this case, it's more likely that your RDP server is not responding
before Guacamole gives up.

or

*Is it taking time to communicate to AD for authentication ?*
*
*


I can't speak to why your RDP server is not responding within the
~15 seconds that Guacamole waits for connections to be
established. If the server was just started, it likely simply
isn't ready to accept RDP connections at the time the attempt was
made.

- Mike






Re: Input box to type ip?

2018-03-13 Thread ivanmarcus
Excellent idea, particularly for those who need to remotely admin random 
machines only occasionally and don't want to have to go to the trouble 
of setting up a new connection each time (or for whatever reason don't 
have access to the setup section).



On 14/03/2018 8:07 a.m., Nick Couchman wrote:


On Tue, Mar 13, 2018 at 14:53 michel.deschenes 
mailto:michel.desche...@wbgames.com>> 
wrote:


Hey,

I've been poking around but can't find anything on this..

Is it possible to display an input box so that the users can just
type in
the ip (or FQDN) of the machine they wish to RDP to? I am trying
to see if
we can use Guacamole to provide RDP access for roughly 700 people
so they
can remote into their work computers if working from home.


See:
https://github.com/apache/guacamole-client/pull/181

-Nick




I-pad keyboard input?

2018-03-20 Thread ivanmarcus

Good evening all.


I have a couple of people who've been interested in using Guacamole with 
an i-pad. I don't have one so am unable to test this but they've shown 
me that it's essentially unusable for them because of issues with 
bringing up and/or hiding of an on-screen keyboard.



A little research online shows that this has been a known issue, but 
there is a suggestion that it could have been resolved at some stage. 
However we're using 0.9.14 and the issue appears to remain.



I wonder if anyone is able to let me know if there's a way to 
practically make this work please? I note that we tried using different 
input methods, and different browsers (per 
https://sourceforge.net/p/guacamole/discussion/1110833/thread/d668c9ca/), 
but from what I could see it didn't really help them much, and 
unfortunately as a non-apple/i-pad person I'm unable to assist my guys 
any further.



Thanks.



Re: I-pad keyboard input?

2018-03-21 Thread ivanmarcus
Thanks Nick; you're right in that I wouldn't have picked it as a fix, 
but it would be great if it sorts the issue out.



I'm not sure how imminent 1.0.0 is but I'm inclined to wait for that at 
this stage. The system is running well enough otherwise and I think the 
i-pad thing isn't critical...



On 22/03/2018 6:09 a.m., Nick Couchman wrote:

I believe GUACAMOLE-352 addresses this issue:
https://issues.apache.org/jira/projects/GUACAMOLE/issues/GUACAMOLE-352

It's not directly related to the issue you're seeing, but I think the 
way it was implemented actually also helps with this.  This change 
went in after the 0.9.14 release, so it'll be in version 1.0.0, or you 
can build from git master and see if it works, there.


-Nick

On Wed, Mar 21, 2018 at 12:15 AM, ivanmarcus <mailto:ivanmar...@yahoo.com>> wrote:


Good evening all.


I have a couple of people who've been interested in using
Guacamole with an i-pad. I don't have one so am unable to test
this but they've shown me that it's essentially unusable for them
because of issues with bringing up and/or hiding of an on-screen
keyboard.


A little research online shows that this has been a known issue,
but there is a suggestion that it could have been resolved at some
stage. However we're using 0.9.14 and the issue appears to remain.


I wonder if anyone is able to let me know if there's a way to
practically make this work please? I note that we tried using
different input methods, and different browsers (per
https://sourceforge.net/p/guacamole/discussion/1110833/thread/d668c9ca/
<https://sourceforge.net/p/guacamole/discussion/1110833/thread/d668c9ca/>),
but from what I could see it didn't really help them much, and
unfortunately as a non-apple/i-pad person I'm unable to assist my
guys any further.


Thanks.






Re: changing the URL/Port on the guacamole server

2018-04-16 Thread ivanmarcus
Will, it looks like Nick replied but there was no text here. I'd defer 
to his answer but in the meantime:



Not sure what your OS is but in Ubuntu you can change the port number in 
the tomcat server.xml file with the line starting OS is different, or you need further help, there are quite a number of 
responses if you google your question.



I believe the question regarding the URL was recently answered on this 
forum, IIRC you simply change the name of the .war file. The location of 
this may also depend on your OS but is likely in your 
tomcat_installation_directory/webapps/ deirectory - in essence whatever 
you name it will be whatever is contained within your url.



On 17/04/2018 12:08 a.m., William Tyrell x1541 wrote:


Hello,

I am running a centos 7 box with guacamole. I cannot figure out how to 
change the URL, and port on the server. I would love to change it from 
8080 to port 80, and change the URL from /guacamole.


Does anyone know how to do this. I have attempted multiple articles 
online (including their guide which is for Ubuntu) and neither worked.


Thanks,

-Will




Please Consider The Environment Before Printing This Email.



This email and any files transmitted with it are confidential and 
intended solely for its intended recipient. Any views expressed in 
this message are those of the individual sender, except where the 
sender specifies and with authority, states them to be the views of 
Tessy Plastics Corporation.


Scanning of this message and addition of this footer is performed by 
email filtering and antivirus software. For any questions regarding 
this scanning, please forward this email to: in...@tessy.com



This message has been scanned for malware by Websense. 
www.websense.com 






Re: FW: RDP file transfer always 0ko

2018-05-22 Thread ivanmarcus
Patrick, if I read what you're saying correctly; transfered files arrive 
at the server either with 0 bytes, and/or the file permissions are read 
only?



Initially this would seem to me to be a permissions error between the RD 
user you log in as, and the server; does that user have full read/write 
access to the server? What happens if you log in as a the guac user 
directly on that machine and attempt the same thing?



On 23/05/2018 6:09 a.m., Mike Jumper wrote:

On Tue, May 22, 2018 at 9:30 AM, Patrick Torrent  wrote:

I'm using guacamole 0.9.14

OK.


and guacamole-auth-noauth 0.9.14

You should not use guacamole-auth-noauth for new deployments. It has
been deprecated since 0.9.13-incubating:

http://guacamole.apache.org/releases/0.9.13-incubating/#deprecation-of-the-noauth-extension

It has since been removed entirely following the 0.9.14 release, and
will not be present in future releases:

https://issues.apache.org/jira/browse/GUACAMOLE-493


When a user connects to RDP, the network drive is properly mounted. I can see 
the folders / files of the server side and windows side.

But when I want to send a file by drag & drop, an error is returned to me on 
the interface. The file is sent to the server and is on the network share.

The problem is that it weighs of this file is always 0ko (not readable).


What do you mean by "weighs of this file"? Where/what is this "0ko"?

- Mike




Re: Keyboard Lock, direct keyboard access

2018-06-27 Thread ivanmarcus
FWIW I've had several users wanting alt-tab and alt-q (the latter was a 
specific shortcut for a prog that we were able to change to ctrl-q which 
worked).



Emulating RD as much as possible would be good, IIRC the main thing that 
doesn't work there is just ctrl-alt-del (for which there's a different 
method).



Cheers.


On 28/06/2018 10:10 a.m., Nick Couchman wrote:
On Wed, Jun 27, 2018 at 18:06 uxes > wrote:


Hello,
I'm wondering if you guys are going to implement full access to
keyboard
which is going to be ready in following chrome ( Chrome for
desktop release
68  ) that
can be
useful in case of controlling some RDP.

https://w3c.github.io/keyboard-lock/


Interesting.  Do you have specific things you're thinking this would 
be useful for?  It seems like a lot of the key combos may still be 
intercepted by the O/S (e.g. Ctrl-Alt-Del), but I'm curious if there 
are keys you're thinking might be useful here?


-Nick




Re: Accessing webServer page using Guacamole

2018-07-02 Thread ivanmarcus
Perhaps I'm missing your point but "Apache Guacamole is a clientless 
remote desktop gateway", it's not a browser.



That said you could connect to another machine (using say RDP or VNC) 
via Guacamole and access websites that way.



Does that answer your question?


On 3/07/2018 5:44 p.m., Asbern wrote:


Hi all,

Is it possible to access any webpage using Guacamole?

Best Regards,
A. Asbern





Re: Slow connection to hyper-v guest via Preconntion PDU (Enhanced Session Available?

2018-08-07 Thread ivanmarcus

Sidney,

I've no experience with using a Pi with Guacamole but a Pi 2 isn't the 
fastest thing around...


A couple of things come to mind as part of the fault finding process:

(1) You might want to check that you have no performance-limiting 
options set in the individual connections.


(2) You could try a connection to one of your guests directly from the 
Pi itself and see how well that works?


Cheers.



On 8/08/2018 1:31 a.m., S-dn-Y wrote:

Hi all,

So I just started using Guacamole. I like it a lot, specially since it can
be used to directly connect to my Hyper-V guests, without using the Hyper-V
manager console.
I'm looking to start using Guacamole as a gateway for my Hyper-V environment
at home and possible dynamically filling the configuration files with new
machines that I've added.

It's all working, connection to my hosts (non domain-joined) is really quick
and steady, I do like it a lot!
The last individual thing I cannnot get to work fluent is the speed to my VM
directly.
It connects, starts the console but the connection is just to slow to work
with.
The screen refreshes in strokes, loading it bit by bit.
When I click an item though, it looks to be reacting quickly but the screen
doesn't refresh fast enough (so it seems).

I've tried to connect via rdcman 2.7, using (sort of) the same way with the
Preconnection PDU and it reacts like it should, faster.

A little extra info:
Guacamole 0.9.14 installed on a PI 2.
Servlet Container: Tomcat8
Hyper-V host uses all SSD storage on an i7.
Hyper-V on Server 2016, fully patched.

So my questions:
- How can I troubleshoot these kind of things? The logs (syslog and tomcat
logs) don't show any strange things and the connection is working, it's only
slow..
- Is there a way to let Guacamole to use Enhanced Session as the Hypervisor
itself is able to do?

Any help would be much appreciated.

Best regards,
Sidney



--
Sent from: 
http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/




Re: SSH issue with Ubuntu 18.04

2018-08-12 Thread ivanmarcus
Not sure if it helps but I just ran up a bare 18.04 VM, installed MySQL 
and tried that script. I note the install has a working ssh client already.


The script gave me an error saying that libssh2-1-dev is not available 
etc, and it fails. There were other errors too but that's probably the 
most pertinent.


That suggests to me there's something in the script that's looking for a 
specific version of ssh and failing when it can't find it. I've not 
looked at the script (no expert here) but perhaps it's worth 
investigating that and modifying as needed to suit 18.04?


Cheers.


On 13/08/2018 6:39 a.m., Nate Evans wrote:

I've got these two packages for libssh installed

libssh2-1/bionic,now 1.8.0-1 amd64 [installed]
libssh2-1-dev/bionic,now 1.8.0-1 amd64 [installed]

As for the version of guacd I installed Guacamole 0.9.14 using the 
MysticRyuujin install script here is a link to it. 
https://github.com/MysticRyuujin/guac-install


I've installed this successfully before without issue, but I did a new 
OS install and restored guacamole from a backup and it's had issues 
with ssh ever since. Other protocols work fine, I can RDP into my 
windows machines without issue it's only the ssh protocol that is 
having issues.


On Fri, Aug 10, 2018 at 11:26 AM Nick Couchman > wrote:




On Thu, Aug 9, 2018 at 3:07 PM Nate Evans mailto:nate...@gmail.com>> wrote:

I'm having an issue connecting to my linux server using SSH in
guacamole, RDP works fine but when I try to ssh to my machine
it attempts then times out.

catalina.out has this error

[http-nio-8080-exec-5] ERROR
o.a.g.s.GuacamoleHTTPTunnelServlet - HTTP tunnel request
failed: Connection to guacd timed out.

Syslog has this error

guacd[4235]: Creating new client for protocol "ssh"
guacd[25016]: Support for protocol "ssh" is not installed

The required ssh libraries are installed, and I'm at a loss as
to why I can't ssh into my server, Can anyone help with this
issue?


Did you install the libssh2-dev package?  Also, what version of
guacd are you installing, and how are you installing it?

-Nick





Re: SSH issue with Ubuntu 18.04

2018-08-12 Thread ivanmarcus

That was the MysticRyuujin install script, not the configure script.

I realise I may have confused things slightly, sorry; I would try 
compiling it manually but need to get the router configured, pfaffing 
around with adding proxies seems not to have worked as expected. I'll 
see if I can get that done ASAP and will report back.



On 13/08/2018 9:54 a.m., Nick Couchman wrote:



On Sun, Aug 12, 2018 at 4:17 PM ivanmarcus <mailto:ivanmar...@yahoo.com>> wrote:


Not sure if it helps but I just ran up a bare 18.04 VM, installed
MySQL and tried that script. I note the install has a working ssh
client already.

The script gave me an error saying that libssh2-1-dev is not
available etc, and it fails. There were other errors too but
that's probably the most pertinent.


Did the error come from that script or the configure script?  Did you 
try compiling it manually, without that script, and see if that works?


-Nick




Re: SSH issue with Ubuntu 18.04

2018-08-12 Thread ivanmarcus

Back again, got that sorted, however it will not install from configure:

checking for libssh2_session_init_ex in lssh2... no

Protocol support:

SSH  no

yet:

dpkg -l | grep -i libssh

ii libssh2-1:amd641.8.0-1amd64SSH2 client-side library


This is a bare install of 18.04 server, updated /upgraded today.






On 13/08/2018 11:38 a.m., ivanmarcus wrote:


That was the MysticRyuujin install script, not the configure script.

I realise I may have confused things slightly, sorry; I would try 
compiling it manually but need to get the router configured, pfaffing 
around with adding proxies seems not to have worked as expected. I'll 
see if I can get that done ASAP and will report back.



On 13/08/2018 9:54 a.m., Nick Couchman wrote:



On Sun, Aug 12, 2018 at 4:17 PM ivanmarcus <mailto:ivanmar...@yahoo.com>> wrote:


Not sure if it helps but I just ran up a bare 18.04 VM, installed
MySQL and tried that script. I note the install has a working ssh
client already.

The script gave me an error saying that libssh2-1-dev is not
available etc, and it fails. There were other errors too but
that's probably the most pertinent.


Did the error come from that script or the configure script?  Did you 
try compiling it manually, without that script, and see if that works?


-Nick






Re: SSH issue with Ubuntu 18.04 - updated detail

2018-08-12 Thread ivanmarcus
tatus: creating src/guacenc/Makefile
config.status: creating src/guacenc/man/guacenc.1
config.status: creating src/pulse/Makefile
config.status: creating src/protocols/rdp/Makefile
config.status: creating src/protocols/ssh/Makefile
config.status: creating src/protocols/telnet/Makefile
config.status: creating src/protocols/vnc/Makefile
config.status: creating config.h
config.status: config.h is unchanged
config.status: executing depfiles commands
config.status: executing libtool commands


guacamole-server version 0.9.14


   Library status:

 freerdp . no
 pango ... no
 libavcodec .. no
 libavutil ... no
 libssh2 . no
 libssl .. no
 libswscale .. no
 libtelnet ... no
 libVNCServer  no
 libvorbis ... no
 libpulse  no
 libwebp . no
 wsock32 . no

   Protocol support:

  RDP ... no
  SSH ... no
  Telnet  no
  VNC ... no

   Services / tools:

  guacd .. yes
  guacenc  no

   Init scripts: no

Type "make" to compile guacamole-server.

Hopefully that's of some use...


On 13/08/2018 12:55 p.m., ivanmarcus wrote:


Back again, got that sorted, however it will not install from configure:

checking for libssh2_session_init_ex in lssh2... no

Protocol support:

SSH  no

yet:

dpkg -l | grep -i libssh

ii libssh2-1:amd641.8.0-1amd64SSH2 client-side library


This is a bare install of 18.04 server, updated /upgraded today.






On 13/08/2018 11:38 a.m., ivanmarcus wrote:


That was the MysticRyuujin install script, not the configure script.

I realise I may have confused things slightly, sorry; I would try 
compiling it manually but need to get the router configured, pfaffing 
around with adding proxies seems not to have worked as expected. I'll 
see if I can get that done ASAP and will report back.



On 13/08/2018 9:54 a.m., Nick Couchman wrote:



On Sun, Aug 12, 2018 at 4:17 PM ivanmarcus <mailto:ivanmar...@yahoo.com>> wrote:


Not sure if it helps but I just ran up a bare 18.04 VM,
installed MySQL and tried that script. I note the install has a
working ssh client already.

The script gave me an error saying that libssh2-1-dev is not
available etc, and it fails. There were other errors too but
that's probably the most pertinent.


Did the error come from that script or the configure script?  Did 
you try compiling it manually, without that script, and see if that 
works?


-Nick








Re: SSH issue with Ubuntu 18.04 - updated detail

2018-08-13 Thread ivanmarcus

libssl-dev is the one.

Earlier I'd discovered that the directory paths between 16.04 and 18.04 
were quite different for some installed packages. If I put in some 
symbolic links it fixed some of the 'missing' issues, but it seemed like 
a long process and I'm sure there's a better way!


Anyway libssl-dev was the final step to getting it to compile with ssl, 
but still no recognised libssh2 (despite it being in place), nor pango 
(also in place).


FWIW the install to date wasn't easy, had to go looking for some 
packages in odd places and we're still not working. I expect just adding 
the repository and installing from there would be much more 
straightforward (?) but I guess that won't sort out the issues with this 
script and Nate's lack of ssh...



On 13/08/2018 10:45 p.m., Nick Couchman wrote:



On Sun, Aug 12, 2018 at 22:19 ivanmarcus <mailto:ivanmar...@yahoo.com>> wrote:



checking openssl/ssl.h usability... no
checking openssl/ssl.h presence... no
checking for openssl/ssl.h... no
checking for SSL_CTX_new in -lssl... no
configure: WARNING:
  
   Unable to find libssl.
   guacd will not support SSL connections.
  


Looks like maybe the OpenSSL development package is missing?  I can't 
remember what it is on Ubuntu, but probably something like libssl-dev 
or openssl-dev or something like that?


If I have a chance today I'll spin up that version and see what I can 
figure out.


-Nick




Re: SSH issue with Ubuntu 18.04 - updated detail

2018-08-13 Thread ivanmarcus
Sigh, I always seem to find the answer just after sending an email 
saying it won't work!


Just installed libssh2-1-dev (from 
http://security.ubuntu.com/ubuntu/pool/universe/libs/libssh2/libssh2-1-dev_1.8.0-1_amd64.deb), 
and libpango1.0-dev (native), and it now compiles with ssh/ssh. This is 
with some symbolic links in place so whether it'd work without I'm not 
sure at this stage.


Unfortunately I need to do some work right now but if it's useful I'll 
have another go with a fresh Ubuntu 18.04 tomorrow, and confirm what's 
needed from scratch with locations for downloading required packages as 
needed.


FWIW this is what I obtained externally and installed to date:

https://www.openssl.org/source/openssl-1.0.2g.tar.gz
http://ftp.br.debian.org/debian/pool/main/h/harfbuzz/libharfbuzz-dev_1.4.2-1_amd64.deb
http://ftp.br.debian.org/debian/pool/main/p/pango1.0/libpangoft2-1.0-0_1.40.5-1_amd64.deb
http://ftp.br.debian.org/debian/pool/main/p/pango1.0/libpangocairo-1.0-0_1.40.5-1_amd64.deb
http://archive.ubuntu.com/ubuntu/pool/universe/o/ossp-uuid/libossp-uuid16_1.6.2-1.5build4_amd64.deb
http://archive.ubuntu.com/ubuntu/pool/universe/o/ossp-uuid/libossp-uuid-dev_1.6.2-1.5build4_amd64.deb
http://archive.ubuntu.com/ubuntu/pool/universe/libs/libssh2/libssh2-1_1.8.0-1_amd64.deb

Not all may be necessary(?)


On 14/08/2018 8:41 a.m., ivanmarcus wrote:


libssl-dev is the one.

Earlier I'd discovered that the directory paths between 16.04 and 
18.04 were quite different for some installed packages. If I put in 
some symbolic links it fixed some of the 'missing' issues, but it 
seemed like a long process and I'm sure there's a better way!


Anyway libssl-dev was the final step to getting it to compile with 
ssl, but still no recognised libssh2 (despite it being in place), nor 
pango (also in place).


FWIW the install to date wasn't easy, had to go looking for some 
packages in odd places and we're still not working. I expect just 
adding the repository and installing from there would be much more 
straightforward (?) but I guess that won't sort out the issues with 
this script and Nate's lack of ssh...



On 13/08/2018 10:45 p.m., Nick Couchman wrote:



On Sun, Aug 12, 2018 at 22:19 ivanmarcus <mailto:ivanmar...@yahoo.com>> wrote:



checking openssl/ssl.h usability... no
checking openssl/ssl.h presence... no
checking for openssl/ssl.h... no
checking for SSL_CTX_new in -lssl... no
configure: WARNING:
  
   Unable to find libssl.
   guacd will not support SSL connections.
  


Looks like maybe the OpenSSL development package is missing?  I can't 
remember what it is on Ubuntu, but probably something like libssl-dev 
or openssl-dev or something like that?


If I have a chance today I'll spin up that version and see what I can 
figure out.


-Nick






Re: SSH issue with Ubuntu 18.04 - updated detail

2018-08-13 Thread ivanmarcus
Thanks Mike, it's not the way I'd normally do it - it was more of a test 
case to see why the Mystic script didn't work.


That said at least one of the required dependencies mentioned in the 
manual wouldn't install from the standard repository, and the same with 
the optional dependencies. The two that come to mind are libpng12-dev 
and libssh2-1-dev, possibly there were a couple more but I don't quite 
recall now.


I will follow this up from scratch again tomorrow and confirm, 
unfortunately I'm just not able to do it today.



On 14/08/2018 9:02 a.m., Mike Jumper wrote:
On Mon, Aug 13, 2018 at 1:58 PM, ivanmarcus <mailto:ivanmar...@yahoo.com>> wrote:


Sigh, I always seem to find the answer just after sending an email
saying it won't work!

Just installed libssh2-1-dev (from

http://security.ubuntu.com/ubuntu/pool/universe/libs/libssh2/libssh2-1-dev_1.8.0-1_amd64.deb

<http://security.ubuntu.com/ubuntu/pool/universe/libs/libssh2/libssh2-1-dev_1.8.0-1_amd64.deb>),
and libpango1.0-dev (native), and it now compiles with ssh/ssh.
This is with some symbolic links in place so whether it'd work
without I'm not sure at this stage.

Unfortunately I need to do some work right now but if it's useful
I'll have another go with a fresh Ubuntu 18.04 tomorrow, and
confirm what's needed from scratch with locations for downloading
required packages as needed.

FWIW this is what I obtained externally and installed to date:

https://www.openssl.org/source/openssl-1.0.2g.tar.gz
<https://www.openssl.org/source/openssl-1.0.2g.tar.gz>

http://ftp.br.debian.org/debian/pool/main/h/harfbuzz/libharfbuzz-dev_1.4.2-1_amd64.deb

<http://ftp.br.debian.org/debian/pool/main/h/harfbuzz/libharfbuzz-dev_1.4.2-1_amd64.deb>

http://ftp.br.debian.org/debian/pool/main/p/pango1.0/libpangoft2-1.0-0_1.40.5-1_amd64.deb

<http://ftp.br.debian.org/debian/pool/main/p/pango1.0/libpangoft2-1.0-0_1.40.5-1_amd64.deb>

http://ftp.br.debian.org/debian/pool/main/p/pango1.0/libpangocairo-1.0-0_1.40.5-1_amd64.deb

<http://ftp.br.debian.org/debian/pool/main/p/pango1.0/libpangocairo-1.0-0_1.40.5-1_amd64.deb>

http://archive.ubuntu.com/ubuntu/pool/universe/o/ossp-uuid/libossp-uuid16_1.6.2-1.5build4_amd64.deb

<http://archive.ubuntu.com/ubuntu/pool/universe/o/ossp-uuid/libossp-uuid16_1.6.2-1.5build4_amd64.deb>

http://archive.ubuntu.com/ubuntu/pool/universe/o/ossp-uuid/libossp-uuid-dev_1.6.2-1.5build4_amd64.deb

<http://archive.ubuntu.com/ubuntu/pool/universe/o/ossp-uuid/libossp-uuid-dev_1.6.2-1.5build4_amd64.deb>

http://archive.ubuntu.com/ubuntu/pool/universe/libs/libssh2/libssh2-1_1.8.0-1_amd64.deb

<http://archive.ubuntu.com/ubuntu/pool/universe/libs/libssh2/libssh2-1_1.8.0-1_amd64.deb>

Not all may be necessary(?)


The packages required for the build, as well as all optional packages 
for the various supported protocols, are all documented in the manual:


http://guacamole.apache.org/doc/gug/installing-guacamole.html#required-dependencies
http://guacamole.apache.org/doc/gug/installing-guacamole.html#optional-dependencies

You shouldn't need to download the packages manually. They're all in 
the Ubuntu repositories.


- Mike





Re: SSH issue with Ubuntu 18.04 - updated detail

2018-08-14 Thread ivanmarcus
Further to previous detail I resumed my install testing on a brand-new 
Ubuntu 18.04 server.


For me the MysticRyuujin script would not work and it failed, unable to 
locate a number of packages.


I then proceeded to build the guacamole-server per chapt 2 of the manual 
(Installing Guacamole natively)


Several required and optional packages were unavailable and I needed to 
get a .deb package elsewhere to install.


The following is the step-by-step process required (note I was building 
for ssh only:



apt-get update

apt-get install libcairo2-dev

apt-get install libjpeg-turbo8-dev

wget 
http://launchpadlibrarian.net/330752989/libossp-uuid16_1.6.2-1.5build4_amd64.deb


dpkg -i libossp-uuid16_1.6.2-1.5build4_amd64.deb

wget wget 
http://launchpadlibrarian.net/330752983/libossp-uuid-dev_1.6.2-1.5build4_amd64.deb


dpkg -i libossp-uuid-dev_1.6.2-1.5build4_amd64.deb

apt-get install libpango1.0-dev

apt-get install libgcrypt20-dev

wget http://launchpadlibrarian.net/319154355/libssh2-1_1.8.0-1_amd64.deb

dpkg -i libssh2-1_1.8.0-1_amd64.deb

wget http://launchpadlibrarian.net/319154354/libssh2-1-dev_1.8.0-1_amd64.deb

dpkg -i libssh2-1-dev_1.8.0-1_amd64.deb

apt-get install libssl-dev


From here obtain the guacamole-server source, untar and ./configure. 
This appeared to go through ok and reports that the SSH protocol is 
available. I've not gone on to compile from here.


I'm not sure if this helps Nate, but hopefully it may be of some use to 
others? If nothing else it'll be a useful record for me when I move my 
installation of Guacamole from 16.04 (probably when the 1.0 release is out).



On 14/08/2018 11:40 a.m., ivanmarcus wrote:


Thanks Mike, it's not the way I'd normally do it - it was more of a 
test case to see why the Mystic script didn't work.


That said at least one of the required dependencies mentioned in the 
manual wouldn't install from the standard repository, and the same 
with the optional dependencies. The two that come to mind are 
libpng12-dev and libssh2-1-dev, possibly there were a couple more but 
I don't quite recall now.


I will follow this up from scratch again tomorrow and confirm, 
unfortunately I'm just not able to do it today.



On 14/08/2018 9:02 a.m., Mike Jumper wrote:
On Mon, Aug 13, 2018 at 1:58 PM, ivanmarcus <mailto:ivanmar...@yahoo.com>> wrote:


Sigh, I always seem to find the answer just after sending an
email saying it won't work!

Just installed libssh2-1-dev (from

http://security.ubuntu.com/ubuntu/pool/universe/libs/libssh2/libssh2-1-dev_1.8.0-1_amd64.deb

<http://security.ubuntu.com/ubuntu/pool/universe/libs/libssh2/libssh2-1-dev_1.8.0-1_amd64.deb>),
and libpango1.0-dev (native), and it now compiles with ssh/ssh.
This is with some symbolic links in place so whether it'd work
without I'm not sure at this stage.

Unfortunately I need to do some work right now but if it's useful
I'll have another go with a fresh Ubuntu 18.04 tomorrow, and
confirm what's needed from scratch with locations for downloading
required packages as needed.

FWIW this is what I obtained externally and installed to date:

https://www.openssl.org/source/openssl-1.0.2g.tar.gz
<https://www.openssl.org/source/openssl-1.0.2g.tar.gz>

http://ftp.br.debian.org/debian/pool/main/h/harfbuzz/libharfbuzz-dev_1.4.2-1_amd64.deb

<http://ftp.br.debian.org/debian/pool/main/h/harfbuzz/libharfbuzz-dev_1.4.2-1_amd64.deb>

http://ftp.br.debian.org/debian/pool/main/p/pango1.0/libpangoft2-1.0-0_1.40.5-1_amd64.deb

<http://ftp.br.debian.org/debian/pool/main/p/pango1.0/libpangoft2-1.0-0_1.40.5-1_amd64.deb>

http://ftp.br.debian.org/debian/pool/main/p/pango1.0/libpangocairo-1.0-0_1.40.5-1_amd64.deb

<http://ftp.br.debian.org/debian/pool/main/p/pango1.0/libpangocairo-1.0-0_1.40.5-1_amd64.deb>

http://archive.ubuntu.com/ubuntu/pool/universe/o/ossp-uuid/libossp-uuid16_1.6.2-1.5build4_amd64.deb

<http://archive.ubuntu.com/ubuntu/pool/universe/o/ossp-uuid/libossp-uuid16_1.6.2-1.5build4_amd64.deb>

http://archive.ubuntu.com/ubuntu/pool/universe/o/ossp-uuid/libossp-uuid-dev_1.6.2-1.5build4_amd64.deb

<http://archive.ubuntu.com/ubuntu/pool/universe/o/ossp-uuid/libossp-uuid-dev_1.6.2-1.5build4_amd64.deb>

http://archive.ubuntu.com/ubuntu/pool/universe/libs/libssh2/libssh2-1_1.8.0-1_amd64.deb

<http://archive.ubuntu.com/ubuntu/pool/universe/libs/libssh2/libssh2-1_1.8.0-1_amd64.deb>

Not all may be necessary(?)


The packages required for the build, as well as all optional packages 
for the various supported protocols, are all documented in the manual:


http://guacamole.apache.org/doc/gug/installing-guacamole.html#required-dependencies
http://guacamole.apache.org/doc/gug/installing-guacamole.html#optional-dependencies

You shouldn't need to download the packages manually. They're all in 
the Ubuntu repositories.


- Mike







Re: SSH issue with Ubuntu 18.04 - updated detail

2018-08-15 Thread ivanmarcus

Thanks Nick, I can only assume I must be special then :-)

apt-get install build-essential autoconf libtool m4 libpng-dev 
libjpeg-dev libcairo-dev libossp-uuid-dev libtelnet-dev libpango1.0-dev 
libfreerdp-dev libssh2-1-dev libwebp-dev libvncserver-dev libpulse-dev 
libvorbis-dev

Reading package lists... Done
Building dependency tree
Reading state information... Done
Note, selecting 'libcairo2-dev' instead of 'libcairo-dev'
Package libssh2-1-dev is not available, but is referred to by another 
package.

This may mean that the package is missing, has been obsoleted, or
is only available from another source

E: Unable to locate package libossp-uuid-dev
E: Unable to locate package libtelnet-dev
E: Unable to locate package libfreerdp-dev
E: Package 'libssh2-1-dev' has no installation candidate

This is from a bare 18.04 server install, updated/upgraded.

From a personal perspective it's not a problem, I was merely doing this 
in order to [possibly] assist with Nate's issues, and anyone else 
installing to 18.04, but it would be interesting to know why it works 
for you, but not for me!



On 15/08/2018 12:35 p.m., Nick Couchman wrote:


I was able to get it built and installed on Ubuntu 18.04 without 
having to manually "wget" any of the files, just using apt-get to 
install dependencies:


guac@guachost3:~/guacamole-server$ sudo apt-get install 
build-essential autoconf libtool 
m4 libpng-dev libjpeg-dev libcairo-dev libossp-uuid-dev libtelnet-dev libpango1.0-dev libfreerdp-dev 
libssh2-1-dev libwebp-dev libvncserver-dev libpulse-dev libvorbis-dev

guac@guachost3:~/guacamole-server$ ./configure --prefix=/opt/guac
guac@guachost3:~/guacamole-server$ make
guac@guachost3:~/guacamole-server$ sudo make install

(Note that this builds for all the protocols, but no guacenc support.)

-Nick




Re: SSH issue with Ubuntu 18.04 - updated detail

2018-08-16 Thread ivanmarcus
No, nothing disabled. This was a clean version of server, installed in a 
VM, following which the only commands issued were to set a root pw, su, 
update, upgrade and the requisite package install for Guacamole...


Maybe I'll redo the base install just to see if there was anything amiss.

Otherwise thanks for the suggestion but as mentioned I'm not concerned 
about it and realise there are easier ways to install, it's more about 
trying to find out why this is occurring in case it happens to anyone 
else and/or there's a need to update install detail I guess (although I 
really think this problem is an outlier as I see others have installed 
Guacamole on 18.04 ok).


I did wonder if it could be something to do with the local (NZ) mirror, 
but haven't got any further than that at this stage.



On 16/08/2018 11:57 p.m., brian mullan wrote:

Did you disable any of the "repositories" ?

Install & run synaptic and search there for the lib you need using 
just the root of the name (ie libssh for example).




On Thu, Aug 16, 2018, 7:53 AM M D Barber <mailto:md...@aol.com>> wrote:


does 18.04 not have the same option as 16.04 during the install to
set different roles for the server? (and thus i assume install a
different range of packages from the selection)

Nick Couchman wrote:



On Thu, Aug 16, 2018 at 1:00 AM ivanmarcus mailto:ivanmar...@yahoo.com>> wrote:

Thanks Nick, I can only assume I must be special then :-)

apt-get install build-essential autoconf libtool m4
libpng-dev libjpeg-dev libcairo-dev libossp-uuid-dev
libtelnet-dev libpango1.0-dev libfreerdp-dev libssh2-1-dev
libwebp-dev libvncserver-dev libpulse-dev libvorbis-dev
Reading package lists... Done
Building dependency tree
Reading state information... Done
Note, selecting 'libcairo2-dev' instead of 'libcairo-dev'
Package libssh2-1-dev is not available, but is referred to by
another package.
This may mean that the package is missing, has been obsoleted, or
is only available from another source

E: Unable to locate package libossp-uuid-dev
E: Unable to locate package libtelnet-dev
E: Unable to locate package libfreerdp-dev
E: Package 'libssh2-1-dev' has no installation candidate

This is from a bare 18.04 server install, updated/upgraded.


Yeah, that's pretty much what I'm doing - I'm using 18.04.1,
Server ISO, and update/upgrade, but we should be getting to the
same point.  Very strange.

-Nick




<https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=emailclient>
Virus-free. www.avast.com

<https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=emailclient>


<#m_3265151677212653926_DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2>





Re: SSH issue with Ubuntu 18.04 - updated detail - Resolved

2018-08-16 Thread ivanmarcus

To follow on from this.

In looking to see if there was an issue with the local mirror I found 
that /etc/apt/sources.list contained just the three main repositories, 
none for Universe/Multiverse.


Adding these repositories (per 
https://help.ubuntu.com/lts/serverguide/configuration.html.en) meant 
that the requisite dependencies for Guacamole became available per 
Nick's findings.


I'm not sure why this happened - I've not used 18.04 much as all my 
servers are yet to be upgraded from 16.04, so haven't had much 
experience with any foibles it may have - but it's possibly something to 
do with the initial base install not having internet access. This is by 
design in the network I was running it within (although once installed 
and the nic configured etc it does have full access); it's not been an 
issue with previous versions of Ubuntu, however 18.04 may treat things 
differently.


If I find out anything further I'll update this post, although I expect 
for most people installing Guacamole this won't be an issue - if there's 
going to be some esoteric problem it's usually only me that has it!



On 17/08/2018 7:39 a.m., ivanmarcus wrote:


No, nothing disabled. This was a clean version of server, installed in 
a VM, following which the only commands issued were to set a root pw, 
su, update, upgrade and the requisite package install for Guacamole...


Maybe I'll redo the base install just to see if there was anything amiss.

Otherwise thanks for the suggestion but as mentioned I'm not concerned 
about it and realise there are easier ways to install, it's more about 
trying to find out why this is occurring in case it happens to anyone 
else and/or there's a need to update install detail I guess (although 
I really think this problem is an outlier as I see others have 
installed Guacamole on 18.04 ok).


I did wonder if it could be something to do with the local (NZ) 
mirror, but haven't got any further than that at this stage.



On 16/08/2018 11:57 p.m., brian mullan wrote:

Did you disable any of the "repositories" ?

Install & run synaptic and search there for the lib you need using 
just the root of the name (ie libssh for example).




On Thu, Aug 16, 2018, 7:53 AM M D Barber <mailto:md...@aol.com>> wrote:


does 18.04 not have the same option as 16.04 during the install
to set different roles for the server? (and thus i assume install
a different range of packages from the selection)

Nick Couchman wrote:



On Thu, Aug 16, 2018 at 1:00 AM ivanmarcus mailto:ivanmar...@yahoo.com>> wrote:

Thanks Nick, I can only assume I must be special then :-)

apt-get install build-essential autoconf libtool m4
libpng-dev libjpeg-dev libcairo-dev libossp-uuid-dev
libtelnet-dev libpango1.0-dev libfreerdp-dev libssh2-1-dev
libwebp-dev libvncserver-dev libpulse-dev libvorbis-dev
Reading package lists... Done
Building dependency tree
Reading state information... Done
Note, selecting 'libcairo2-dev' instead of 'libcairo-dev'
Package libssh2-1-dev is not available, but is referred to
by another package.
This may mean that the package is missing, has been
obsoleted, or
is only available from another source

E: Unable to locate package libossp-uuid-dev
E: Unable to locate package libtelnet-dev
E: Unable to locate package libfreerdp-dev
E: Package 'libssh2-1-dev' has no installation candidate

This is from a bare 18.04 server install, updated/upgraded.


Yeah, that's pretty much what I'm doing - I'm using 18.04.1,
Server ISO, and update/upgrade, but we should be getting to the
same point.  Very strange.

-Nick




<https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=emailclient>
Virus-free. www.avast.com

<https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=emailclient>


<#m_3265151677212653926_DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2>







Re: Newbie question: how to change to https (from http)

2018-09-04 Thread ivanmarcus

Hello,


More information on this is contained here:


https://guacamole.apache.org/doc/gug/proxying-guacamole.html


Regards


On 4/09/2018 8:56 p.m., Евгений Н. Жуков wrote:

Use any proxy like Nginx or Apache

вт, 4 сент. 2018 г. в 11:49, Reinert Korsnes 
mailto:reinert.kors...@online.no>>:


Dear all,

I managed to install guacamole on my raspberry pi using http.
However,
when I changed to https I have trouble.

Can someone indicate the minimum I have to change (from the "http
installation") to make encrypted communication (https) to
function? Yes,
I did read the guacamole manual...

The actual version of guacamole is the latest for Raspbian
(0.9.9+dfsg-1).

reinert

--
Евгений Жуков
+79534155676  skype: xrt_nn




Re: Lost Password

2018-09-18 Thread ivanmarcus

There has been some good direction you've got from the list.

I can't add much to that but you've not said what distribution you're 
running, nor if you've figured out the authentication mechanism etc, 
although it would seem it's likely to be using MySQL?


If this were me, assuming you've got root access to the server, and 
before going too far I'd have a look at the command history to see if 
there is any password detail there; you would also get an idea of what's 
been done to the server recently. Usually the command history is 
obtainable when logged into the cli as root simply by hitting the 'up 
arrow' key, or in some distributions via "less /root/.bash_history". If 
you're not logged in as root the command would be "sudo less 
/root/.bash_history" for the root history (it will ask for your 
password), or simply "less .bash_history" if it's the logged in user's 
history you want to check out.


If you were to look through that for a MySQL command such as 'mysql -u 
root -p x' you may discover a useful password to try, there may be 
other hints in the history list.


I expect you've also done the obvious by trying the machine that the 
previous admin normally used to access the server, to see if there were 
any saved passwords etc. Most of us won't allow that but you never know.


Apologies if this is already stuff you've done, however I thought it 
could be useful to mention if you've not had a lot to do with Linux.



On 19/09/2018 1:17 a.m., Kaos wrote:

Thanks for the response!

Could you point me in the direction of the schema file?

My comment re: Linux was moreso to show my weakness, anything in Linux takes
me ages because I am figuring it out as I go for the most part.

Thanks again!



--
Sent from: 
http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/




Re: Guac Access Over HTTPS w/ NGINX Reverse Proxy

2018-12-02 Thread ivanmarcus

Matthew,

It's possible your edge router isn't correctly set up. Typically you'd 
want external port 443 to resolve to the internal ip number of your 
Nginx instance on port 443.


If your router is translating the external https request (eg 443) to 
internal http (eg 80) then you may get the message you have.


Wireshark or similar may also be of some use in tracing what's happening 
internally when an external request is made...



On 3/12/2018 1:51 p.m., Matthew Lawson wrote:
I'm struggling to set up access to guacamole with a secured connection 
outside my home (local, internal) network.  I can login over http 
within my home network.  I can login using https from within my home 
network.  I can also log in from outside my home network over http.  I 
can even SSH into my home server.


However, I cannot figure out how to reach the guacamole login page 
from outside my home network over a secure connection.  When I try, I 
receive an error message. FF, for instance, indicates that 'SSL 
received a record that exceeded the maximum permissible length.'  
Apparently, that means I've mis-configured something, but I have not 
been able to figure out what.


If someone would be kind enough to point out where I've gone wrong in 
my setup, I would greatly appreciate it.


Best regards,

~ML



My nginx config file:
worker_processes  auto;

events {
worker_connections  1024;
}

http {
include   mime.types;
default_type  application/octet-stream;
include /etc/nginx/conf.d/*.conf;
server_tokens off;
ssl_certificate /etc/ssl/certs/nginx-selfsigned.crt;
ssl_certificate_key /etc/ssl/private/nginx-selfsigned.key;
ssl_ciphers  EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH;
ssl_protocols   TLSv1.1 TLSv1.2;
ssl_dhparam /etc/ssl/certs/dhparam.pem;
ssl_session_cache shared:SSL:10m;
ssl_session_timeout 10m;

sendfileon;

keepalive_timeout  75;

#gzip  on;
}


My server config file located in /etc/nginx/conf.d/

server {
listen  80;
server_name localhost
myDomainName.com
  ;
return 301 https://localhost$request_uri;
}
server {
listen  443 ssl http2; # default_server;
listen  [::]:443 ssl http2; # default_server;
server_name localhost;
root /var/www/example.com ; # root placeholder
index index.html;

location /guacamole/ {
proxy_pass http://localhost:8080/guacamole/;
proxy_buffering off;
proxy_http_version 1.1;
proxy_set_header X-Forwarded-For 
$proxy_add_x_forwarded_for;

proxy_set_header Upgrade $http_upgrade;
  proxy_set_header Connection $http_connection;
access_log off;
#   proxy_redirect http://localhost:8080/guacamole/ 
https://localhost:8080/guacamole/; # no noticeable effect;

}

gzip on;
gzip_comp_level 3;
gzip_types text/plain text/css application/javascript image/*;
}





Re: Built-in reflector/repeater support in guacd daemon (Guacamole protocol)

2018-12-18 Thread ivanmarcus
Please forgive me if I have this wrong but I think the essence of 
sapphireimsuat's request was to have two 'client' machines to connect to 
Guacamole and establish a (http[s]) link between them - but without 
using RDP/VNC and the concomittant issues around that (ie. having to 
setup routes, enable remote users etc)?


I think the best analogy would be a self-hosted Teamviewer or similar - 
although that requires a software installation on each client.


As I understand it, while it would be great if it could, Guacamole is 
not the right application for this. The closest I've found is Nomachine 
(but would be pleased to hear from anyone who's experience of anything 
else that works well).



On 19/12/2018 4:22 a.m., Nick Couchman wrote:
On Tue, Dec 18, 2018 at 9:22 AM sapphireimsuat 
mailto:sapphireims...@gmail.com>> wrote:


Hi Nick,

Thanks for your suggestion. My understanding on your approach is,
having two
guacacd instance between two different network and allow connection.

My query about roaming users is, assuming I have 100 end users and
they are
roaming in different locations and connecting to internet via
broadband
connection. All will have the client component and they should be
able to
connect to Guacamole server in a single port (where repeater is
running).
Connection will be initiated from roaming user-1 and reach repeater.
Technician-1 will also be connecting to repeater to make
connection with
roaming user-1.


So, maybe there's some misunderstanding, here, about how Guacamole 
works.  Guacamole is designed specifically for this type of scenario, 
and is designed to do it without any software other than a web browser 
on the client system.  The Guacamole Server (guacd) does the 
translation between the Guacamole Client and the remote desktop 
instances. Guacamole Client does not get installed on the roaming 
client machines, it gets installed on a Tomcat server that then 
translates between HTTP(S) and the Guacamole Protocol, communicating 
with guacd.  This actually works very well for the situation you 
mention, because you can set up that Guacamole Client system in a 
central location and have it facilitate the connections to the remote 
clients.


Hopefully this helps, let me know if you have any further questions.

-Nick




Re: Built-in reflector/repeater support in guacd daemon (Guacamole protocol)

2018-12-18 Thread ivanmarcus
This would be great, Mike, I expect quite a few people would appreciate 
such a facility.



On 19/12/2018 8:18 a.m., Mike Jumper wrote:
On Tue, Dec 18, 2018, 11:09 ivanmarcus <mailto:ivanmar...@yahoo.com> wrote:


...

I think the best analogy would be a self-hosted Teamviewer or
similar - although that requires a software installation on each
client.

As I understand it, while it would be great if it could, Guacamole
is not the right application for this.


Not currently, perhaps, but I think that's a rather good use case for 
guac. I've actually been looking into what would be necessary to 
develop the "agent" software component to establish the route and/or 
serve the remote desktop piece to a Guacamole server configured to 
accept that route. You'd then be able to connect via guac to any 
machine that runs that software.


- Mike





Re: ask information

2018-12-24 Thread ivanmarcus
Poubelle, this script may be of interest as a quick and easy way to 
instal 0.9.14:



https://github.com/MysticRyuujin/guac-install


As Nick has said, you will need to install VNC server on the machine you 
wish to connect to, and ensure that the relevant settings are entered 
into the Guacamole Connection setup (that it's using VNC, along with the 
IP number and port of that machine).



You will also need to set up a User with password etc, and then 
associated the Connection you've made with that User.




On 25/12/2018 5:21 a.m., Poubelle2539 wrote:

Thank you very much for your answer.

To help me I took a translator. By cons for your French is very good.

Is it still relevant?
Which version should I install for Debian?
Because version 0..9.1.4 contains unresolved bugs), it's on the 
website https://wiki.debian.org/Guacamole.


I do not understand anything anymore.


Unresolved bugs

 *

Bug #887565 - Please update to new upstream version


(depends on Bug #888321 migrate to freerdp2


) - as of this writing, only version 0.9.9 is available in Debian

 *

Bug #887464 - Can't set language or remote protocol, can't create
connections


- this bug makes the web application unusable, as such it must be
manually installed

 *

Bug #888973 - guacd segfaults, error 6 in libcrypto.so.1.1, can't
connect via SSH when using PKA


- this prevents using PKA on SSH connections, as a workaround
install guacd manually (see below)

Is it still relevant?



*De: *"Nick Couchman" 
*À: *user@guacamole.apache.org
*Envoyé: *Lundi 24 Décembre 2018 16:16:56
*Objet : *Re: ask information

Escuse me for my english, i'm french. I have installed guacamole
0.9.9 for Linux Debian.


Bonjour!  Bienvenue a Guacamole!

(And that's about all of the French that I know :-).  If you're 
installing version 0.9.9 then you're installing a very old version of 
Guacamole.  I think there's an old package in the Debian repository, 
but it hasn't been maintained in quite a while, so you should install 
the version from the Guacamole web site:


http://guacamole.apache.org


How to use VNC ? Duty I installer VNC server  on the debian. And
on customer i duty installer ultravnc or realvnc etc . ?


You'll need to have a VNC server to connect to, so, yes, you'll need 
to install the VNC server on whatever system you're trying to connect 
to.  Once you have that set up you just need to configuring the 
connection in Guacamole.  The Guacamole Manual can be found here:


http://guacamole.apache.org/doc/gug/

-Nick





Re: Copie Paste Not Working

2019-03-28 Thread ivanmarcus
You need to use CTRL+SHIFT+ALT in order to copy/paste between remote and 
local sessions.


It's largely described here: 
https://guacamole.apache.org/doc/gug/using-guacamole.html#using-the-clipboard



On 29/03/2019 6:13 a.m., Kamal Ezzaki wrote:

*Hello*
*it's seems like copie / paste is not working is there someting i must 
activate? *




Re: Copie Paste Not Working

2019-03-28 Thread ivanmarcus

Oh, there are browsers other than Firefox? :-)

Hopefully Firefox will implement this soon (there appears to be a 
working draft: 
https://developer.mozilla.org/en-US/docs/Web/API/Clipboard_API) but in 
the meantime I assume the only way to guarantee operation in any browser 
is the key combination [not wanting to start a flamewar but we simply 
don't use Chrome, nor IE, here]?



On 29/03/2019 7:53 a.m., Nick Couchman wrote:
On Thu, Mar 28, 2019 at 2:50 PM ivanmarcus <mailto:ivanmar...@yahoo.com>> wrote:


You need to use CTRL+SHIFT+ALT in order to copy/paste between
remote and local sessions.


You do not have to do this, no.  It is one way to accomplish it; 
however, there's a Clipboard extension and, more recently integration 
with the Clipboard API.


It's largely described here:

https://guacamole.apache.org/doc/gug/using-guacamole.html#using-the-clipboard



Yep, that's a good one.  There's also this link:

http://guacamole.apache.org/faq/#clipboard

-Nick




Re: Copie Paste Not Working

2019-03-28 Thread ivanmarcus
Do you know if the extension and API work with Chromium? It wasn't 
entirely clear from the brief search I just did.


As I recall in past tests Chromium doesn't do some of the evil stuff 
that Chrome does (we Wireshark these things before determining whether 
to use them or not...) and if it worked it may be a useful alternative.



On 29/03/2019 8:26 a.m., Nick Couchman wrote:
On Thu, Mar 28, 2019 at 3:22 PM ivanmarcus <mailto:ivanmar...@yahoo.com>> wrote:


Hopefully Firefox will implement this soon (there appears to be a
working draft:
https://developer.mozilla.org/en-US/docs/Web/API/Clipboard_API)
but in the meantime I assume the only way to guarantee operation
in any browser is the key combination [not wanting to start a
flamewar but we simply don't use Chrome, nor IE, here]?


It would be nice if all of them implemented it, yes, as that's pretty 
much the way to guarantee a uniform experience across multiple browsers.


But, yes, in the meantime, the key combo would be required for 
Firefox.  I use Chrome pretty exclusively and both the extension and 
the Async API work well.


-Nick




Re: Copie Paste Not Working

2019-03-28 Thread ivanmarcus
Thanks - will look into this (and, if necessary, the cliprdr plugin Mike 
mentioned, since most of our use is RDP).



On 29/03/2019 9:27 a.m., Christian Kraus wrote:

RE: Copie Paste Not Working


Firefox works for me with the clipboard already using version 66 on linux


rg

Christian
















-Ursprüngliche Nachricht-
*Von:* ivanmarcus 
*Gesendet:* Donnerstag 28 März 2019 20:22
*An:* user@guacamole.apache.org; Nick Couchman 
*Betreff:* Re: Copie Paste Not Working

Oh, there are browsers other than Firefox? :-)

Hopefully Firefox will implement this soon (there appears to be a
working draft:
https://developer.mozilla.org/en-US/docs/Web/API/Clipboard_API)
but in the meantime I assume the only way to guarantee operation
in any browser is the key combination [not wanting to start a
flamewar but we simply don't use Chrome, nor IE, here]?


On 29/03/2019 7:53 a.m., Nick Couchman wrote:

On Thu, Mar 28, 2019 at 2:50 PM ivanmarcus
mailto:ivanmar...@yahoo.com>> wrote:

You need to use CTRL+SHIFT+ALT in order to copy/paste
between remote and local sessions.


You do not have to do this, no.  It is one way to accomplish
it; however, there's a Clipboard extension and, more recently
integration with the Clipboard API.

It's largely described here:

https://guacamole.apache.org/doc/gug/using-guacamole.html#using-the-clipboard



Yep, that's a good one.  There's also this link:

http://guacamole.apache.org/faq/#clipboard

-Nick






Re: Running bash script on user login

2019-05-20 Thread ivanmarcus
I'm not sure if it would cover your scenario exactly but I have a small 
python script that tails the catalina.out log file in order to send a 
magic packet to a specific machine when a specific user logs in. To me 
it was a simple way to achieve what I needed, and it's been working 
reliably for a year or more, although I'm sure there are more elegant 
ways to do this.


That said it would be trivial to alter it to do other things such as run 
another script or direct command. I did post it to the group some time 
ago but can do so again if it's of use (or MIA!).



On 20/05/2019 11:51 p.m., purplebadger wrote:

does anyone have a simple mechanism or advice how to run a bash script when a
user logs into Guac?

We are running Duo authentication, the idea is to start a specific AWS
instance when a specific user logs into Guac - ideally the script would run
after the first part of the login process (ie pre-MFA) that way, by the time
DUO authentication has been navigated, the instance would /potentially/ have
had time to fully startup.

any examples or suggestions welcomed. Thanks



--
Sent from: 
http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org





Re: Problem w/2nd/3rd system

2019-05-22 Thread ivanmarcus
Just out of interest - did you try completely clearing the browser cache 
after the first connection (to 25)?



On 23/05/2019 9:20 a.m., Lance Gropper wrote:


Hello Mike and Nick:

Got a problem: So here we have approximately 50 (identical) systems 
that I?m going to try to connect to. Just arbitrarily, I picked system 
28 for the initial test ? that works fine. I just tried to connect to 
25 and 26 using the same settings and it won?t connect. These are VNC 
connections. Any ideas of what could be wrong? If you need logs this 
time, it may be difficult as my email system is now isolated from the 
system I?m accessing Guac with and for security reasons, the USB ports 
are disabled.


Lance

This e-mail and any attachments are intended only for use by the 
addressee(s) named herein and may contain confidential information. If 
you are not the intended recipient of this e-mail, you are hereby 
notified any dissemination, distribution or copying of this email and 
any attachments is strictly prohibited. If you receive this email in 
error, please immediately notify the sender by return email and 
permanently delete the original, any copy and any printout thereof. 
The integrity and security of e-mail cannot be guaranteed. 




Re: Installation script

2019-06-11 Thread ivanmarcus

Manoj,

I'm not sure what Linux you're using but there is a reasonably good 
explanation of how to install Guacamole on Ubuntu 18.04 here (there are 
also links to install on other distributions):


https://kifarunix.com/how-to-setup-guacamole-web-based-remote-desktop-access-tool-on-ubuntu-18-04/

I realise it's not a script but coupled with the detail from the 
guacamole project itself 
(https://guacamole.apache.org/doc/gug/installing-guacamole.html) you may 
find it's less daunting to install manually than it first appears.




On 11/06/2019 10:06 p.m., Manoj Patil wrote:

Dear,

Is there any automatically installation script for guacamole version 1.0



-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org





Re: Installation script

2019-06-11 Thread ivanmarcus
Ok, I'm not familiar CentOS but it may be similar enough to use this 
information in addition to the Guacamole project detail?:


https://kifarunix.com/how-to-install-and-configure-guacamole-on-fedora-29/

From what I see you may first need to do this:

https://www.ostechnix.com/install-dnf-centos-7/


On 12/06/2019 3:30 p.m., Manoj Patil wrote:

I am used centos 7.6 64 bit

On Wed, 12 Jun 2019, 01:53 ivanmarcus https://kifarunix.com/how-to-setup-guacamole-web-based-remote-desktop-access-tool-on-ubuntu-18-04/

I realise it's not a script but coupled with the detail from the
guacamole project itself
(https://guacamole.apache.org/doc/gug/installing-guacamole.html)
you may find it's less daunting to install manually than it first
appears.



On 11/06/2019 10:06 p.m., Manoj Patil wrote:

Dear,

Is there any automatically installation script for guacamole version 1.0



-
To unsubscribe, e-mail:user-unsubscr...@guacamole.apache.org
<mailto:user-unsubscr...@guacamole.apache.org>
For additional commands, e-mail:user-h...@guacamole.apache.org
<mailto:user-h...@guacamole.apache.org>







Re: Installation script

2019-06-11 Thread ivanmarcus
Ok, I'm not familiar with CentOS but it may be similar enough Fedora to 
use this information in addition to the Guacamole project detail?:


https://kifarunix.com/how-to-install-and-configure-guacamole-on-fedora-29/

Note that, from what I see, you may first need to do this:

https://www.ostechnix.com/install-dnf-centos-7/


On 12/06/2019 3:30 p.m., Manoj Patil wrote:

I am used centos 7.6 64 bit

On Wed, 12 Jun 2019, 01:53 ivanmarcus https://kifarunix.com/how-to-setup-guacamole-web-based-remote-desktop-access-tool-on-ubuntu-18-04/

I realise it's not a script but coupled with the detail from the
guacamole project itself
(https://guacamole.apache.org/doc/gug/installing-guacamole.html)
you may find it's less daunting to install manually than it first
appears.



On 11/06/2019 10:06 p.m., Manoj Patil wrote:

Dear,

Is there any automatically installation script for guacamole version 1.0



-
To unsubscribe, e-mail:user-unsubscr...@guacamole.apache.org
<mailto:user-unsubscr...@guacamole.apache.org>
For additional commands, e-mail:user-h...@guacamole.apache.org
<mailto:user-h...@guacamole.apache.org>







Re: Installation script

2019-06-11 Thread ivanmarcus
Apropos the earlier info I've passed on I should further note that the 
detail from kifarunix.com references Guaacmole 0.9.14, but the current 
version is 1.0.0.


However I believe the _process_ should be largely similar (just replace 
0.9.14 with 1.0.0) - if you had any difficulty I'd use the Guacamole 
project installation detail to assist.



On 12/06/2019 3:30 p.m., Manoj Patil wrote:

I am used centos 7.6 64 bit

On Wed, 12 Jun 2019, 01:53 ivanmarcus https://kifarunix.com/how-to-setup-guacamole-web-based-remote-desktop-access-tool-on-ubuntu-18-04/

I realise it's not a script but coupled with the detail from the
guacamole project itself
(https://guacamole.apache.org/doc/gug/installing-guacamole.html)
you may find it's less daunting to install manually than it first
appears.



On 11/06/2019 10:06 p.m., Manoj Patil wrote:

Dear,

Is there any automatically installation script for guacamole version 1.0



-
To unsubscribe, e-mail:user-unsubscr...@guacamole.apache.org
<mailto:user-unsubscr...@guacamole.apache.org>
For additional commands, e-mail:user-h...@guacamole.apache.org
<mailto:user-h...@guacamole.apache.org>







Re: Installation script

2019-06-12 Thread ivanmarcus

It works for me if I issue the command:

wget 
https://www.apache.org/dist/guacamole/1.0.0/source/guacamole-server-1.0.0.tar.gz


This will download the file into whatever directory you are working from 
at the time.



On 12/06/2019 7:00 p.m., Manoj Patil wrote:

i have issue to installation

https://apache.org/dyn/closer.cgi?action=download&filename=guacamole/1.0.0/source/guacamole-server-1.0.0.tar.gz
Resolving apache.org <http://apache.org> (apache.org 
<http://apache.org>)... 40.79.78.1, 95.216.24.32
Connecting to apache.org <http://apache.org> (apache.org 
<http://apache.org>)|40.79.78.1|:443... connected.

Unable to establish SSL connection.

On 12-Jun-2019, at 9:28 AM, ivanmarcus <mailto:ivanmar...@yahoo.com.INVALID>> wrote:


Apropos the earlier info I've passed on I should further note that 
the detail from kifarunix.com <http://kifarunix.com> references 
Guaacmole 0.9.14, but the current version is 1.0.0.


However I believe the _process_ should be largely similar (just 
replace 0.9.14 with 1.0.0) - if you had any difficulty I'd use the 
Guacamole project installation detail to assist.



On 12/06/2019 3:30 p.m., Manoj Patil wrote:

I am used centos 7.6 64 bit

On Wed, 12 Jun 2019, 01:53 ivanmarcus wrote:


Manoj,

I'm not sure what Linux you're using but there is a reasonably
good explanation of how to install Guacamole on Ubuntu 18.04
here (there are also links to install on other distributions):


https://kifarunix.com/how-to-setup-guacamole-web-based-remote-desktop-access-tool-on-ubuntu-18-04/

I realise it's not a script but coupled with the detail from the
guacamole project itself
(https://guacamole.apache.org/doc/gug/installing-guacamole.html)
you may find it's less daunting to install manually than it
first appears.



On 11/06/2019 10:06 p.m., Manoj Patil wrote:

Dear,

Is there any automatically installation script for guacamole version 1.0



-
To unsubscribe, e-mail:user-unsubscr...@guacamole.apache.org
<mailto:user-unsubscr...@guacamole.apache.org>
For additional commands, e-mail:user-h...@guacamole.apache.org
<mailto:user-h...@guacamole.apache.org>











Re: Installation script

2019-06-12 Thread ivanmarcus
If the primary site doesn't work for you, and Mike's suggestion doesn't 
reveal anything, there appear to be several mirrors that may be 
accessible and provide what you need, here's a couple:


http://apachemirror.wuchna.com/guacamole/1.0.0/source/

http://apache.mirror.iweb.com/guacamole/1.0.0/source/


On 13/06/2019 5:56 a.m., Mike Jumper wrote:
No. I don't believe the apache.org  servers block 
any IPs, and your logs specifically indicate it connected.


Maybe wget has a verbose option that would help see what isn't working 
on your end?


- Mike

On Wed, Jun 12, 2019, 09:26 Manoj Patil > wrote:


i think my ip is block by apache.org  server


On 12-Jun-2019, at 3:43 PM, Manoj Patil mailto:manoj2pa...@gmail.com>> wrote:

 have issue to installation


https://apache.org/dyn/closer.cgi?action=download&filename=guacamole/1.0.0/source/guacamole-server-1.0.0.tar.gz
Resolving apache.org  (apache.org
)... 40.79.78.1, 95.216.24.32
Connecting to apache.org  (apache.org
)|40.79.78.1|:443... connected.

Unable to establish SSL connection.



On 12-Jun-2019, at 12:25 AM, Mike Jumper mailto:mjum...@apache.org>> wrote:

On Tue, Jun 11, 2019 at 11:49 AM Manoj Patil
mailto:manoj2pa...@gmail.com>> wrote:

dear,

I found the script on below l


wgethttps://raw.githubusercontent.com/Zer0CoolX/guacamole-install-rhel/master/guac-install.sh


but when i am trying to install it on lentos 7.6 it raised error

Downloading Guacamole Packages
-Downloading Guacamole Server package for installation...
[-FAILED-]

%%% ERROR (Script Failed) | Line 1198 | Command:

wgethttps://apache.org/dyn/closer.cgi?action=download&filename=guacamole/1.0.0/source/guacamole-server-1.0.0.tar.gz-O
guacamole-server-1.0.0.tar.gz | Exit code: 4 %%%


From the wget manpage:

EXIT STATUS
   Wget may return one of several error codes if it
encounters problems.

   0   No problems occurred.
   1 Generic error code.
   2 Parse error---for instance, when parsing
command-line options, the .wgetrc or .netrc...
   3   File I/O error.
   4   Network failure.
   ...


- Mike








Re: Installation script

2019-06-14 Thread ivanmarcus
If your network is blocking direct downloads from some sites you may be 
able to utilise an ftpmail server 
(https://en.wikipedia.org/wiki/FTPmail), if there are any still running 
(a quick search suggests there may be some, but I've not tried them).


Otherwise there's probably not a lot else anyone is able to do, if 
you're not able to get the requisite files.



On 14/06/2019 4:18 a.m., Manoj Patil wrote:

both site are not run in office network .

On 13-Jun-2019, at 4:33 AM, ivanmarcus <mailto:ivanmar...@yahoo.com.INVALID>> wrote:


If the primary site doesn't work for you, and Mike's suggestion 
doesn't reveal anything, there appear to be several mirrors that may 
be accessible and provide what you need, here's a couple:


http://apachemirror.wuchna.com/guacamole/1.0.0/source/

http://apache.mirror.iweb.com/guacamole/1.0.0/source/


On 13/06/2019 5:56 a.m., Mike Jumper wrote:
No. I don't believe the apache.org <http://apache.org/> servers 
block any IPs, and your logs specifically indicate it connected.


Maybe wget has a verbose option that would help see what isn't 
working on your end?


- Mike

On Wed, Jun 12, 2019, 09:26 Manoj Patil <mailto:manoj2pa...@gmail.com>> wrote:


i think my ip is block by apache.org <http://apache.org/>??server


On 12-Jun-2019, at 3:43 PM, Manoj Patil mailto:manoj2pa...@gmail.com>> wrote:

??have issue to installation


https://apache.org/dyn/closer.cgi?action=download&filename=guacamole/1.0.0/source/guacamole-server-1.0.0.tar.gz
Resolving??apache.org <http://apache.org/>??(apache.org
<http://apache.org/>)... 40.79.78.1, 95.216.24.32
Connecting to??apache.org <http://apache.org/>??(apache.org
<http://apache.org/>)|40.79.78.1|:443... connected.

Unable to establish SSL connection.



On 12-Jun-2019, at 12:25 AM, Mike Jumper mailto:mjum...@apache.org>> wrote:

On Tue, Jun 11, 2019 at 11:49 AM Manoj Patil
mailto:manoj2pa...@gmail.com>> wrote:

dear,

I found the script on below l


wget??https://raw.githubusercontent.com/Zer0CoolX/guacamole-install-rhel/master/guac-install.sh


but when i am trying to install it on lentos 7.6 it raised
error

Downloading Guacamole Packages
-Downloading Guacamole Server package for installation...
[-FAILED-]

%%% ERROR (Script Failed) | Line 1198 | Command:

wget??https://apache.org/dyn/closer.cgi?action=download&filename=guacamole/1.0.0/source/guacamole-server-1.0.0.tar.gz??-O
guacamole-server-1.0.0.tar.gz | Exit code: 4 %%%


From the wget manpage:

EXIT STATUS
?? ?? ?? ??Wget may return one of several error codes if
it encounters problems.

?? ?? ?? ??0 ?? No problems occurred.
?? ?? ?? ??1 ?? Generic error code.
?? ?? ?? ??2 ?? Parse error---for instance, when parsing
command-line options, the .wgetrc or .netrc...
?? ?? ?? ??3 ?? File I/O error.
?? ?? ?? ??4 ?? Network failure.
?? ?? ?? ??...


- Mike












Re: Enter Guacamole with another URL

2019-06-20 Thread ivanmarcus
There are various examples of how to do this on the internet. It's worth 
bearing in mind that it's not Guacamole per se as Tomcat that defaults 
to 8080, so most examples of how to make such changes with Tomcat should 
be relevant to you in to some degree.


That said, and as you're wanting to also use https, I'd suggest this 
looks to be a reasonably thorough step-by-step guide that should achieve 
all of what you need:


https://www.vultr.com/docs/create-an-html-5-rdp-ssh-frontend-using-guacamole-on-ubuntu-16-04-lts

I've not used the guide myself, and your components may differ from 
theirs, but I'd encourage you to look at the process - which should be 
largely the same whatever.



On 20/06/2019 7:39 p.m., A. Yuesuen wrote:

Hello Guys,

Guacamole is working finei I can enter Gucamole by my LDap User on the 
Adress: "hostname.com:8080/guacamole 
" and started connections already.


Now i want change the Url from:
http://hostaname.com:8080/guacamole
in
https://hostname.com 

The Documentation in the web are a little diffcult to understand and 
cant follow them (most are without a path). Can someone send a 
Tutorial for beginners.


best wishes
Ajdar




Re: Struggling with guacamole installation for many many times

2019-07-28 Thread ivanmarcus

Ahmed,

This works for me from a bare, brand-new, Ubuntu 18.04 VM, no 
update/upgrade.


Note I've not much time right now so have simply got as far as 
confirming I can get the initial Guacamole login screen and gone no 
further (although I've no reason to assume it won't work as advertised 
from there):


apt-get install build-essential autoconf libtool m4 libpng-dev 
libjpeg-dev libcairo-dev libossp-uuid-dev libtelnet-dev libpango1.0-dev 
libfreerdp-dev libssh2-1-dev libwebp-dev libvncserver-dev libpulse-dev 
libvorbis-dev

apt-get install tomcat8 tomcat8-admin tomcat8-common tomcat8-user
wget 
https://www.apache.org/dist/guacamole/1.0.0/source/guacamole-server-1.0.0.tar.gz

tar -zxvf guacamole-server-1.0.0.tar.gz
cd guacamole-server-1.0.0
./configure --with-init-dir=/etc/init.d
make
make install
ldconfig
systemctl enable guacd
systemctl start guacd
wget https://www.apache.org/dist/guacamole/1.0.0/binary/guacamole-1.0.0.war
mkdir /etc/guacamole
cp guacamole-1.0.0.war /etc/guacamole/guacamole.war
ln -s /etc/guacamole/guacamole.war /var/lib/tomcat8/webapps/
systemctl restart tomcat8
systemctl restart guacd

go to browser and enter http://ip_address_of_vm:8080/guacamole



On 29/07/2019 4:11 p.m., Ahmed Khalil wrote:


Hello,

I seen guacamole for the first time at another company, and I I was 
amazed of how beautiful this product is.


I have been struggling to get it to work on my personal lab for quite 
a while, I tried different guides, but never got guacamole to work 
past the "HTTP Status 404 - Not Found" when accessing 
http://192.168.159.138:8080/guacamole


Can you please examine my case and guide my on the direction to get it 
to work, I have included the terminal history for how I installed it, 
nit planning to use ldap, or mysql initially, just the basic config on 
the user-mappings.xml, here is the log:


sudo apt-get update

sudo apt-get upgrade
101 apt-get install guacamole-tomcat (installs tons of packages)

Downloaded guacamole client 1.0.0.war and renamed it to guacamole.war
119 sudo cp guacamole.war /var/lib/tomcat8/webapps
121 sudo cp guacamole.war /usr/share/tomcat8
122 sudo cp guacamole.war /usr/share/tomcat8/webapps
sudo cp guacamole.war /var/lib/guacamole/guacamole.war
132 /etc/init.d/guacd start
133 /etc/init.d/tomcat8 restart
139 sudo mkdir /usr/share/tomcat8/.guacamole
141 sudo cp -s /etc/guacamole/guacamole.properties 
/usr/share/tomcat8/.guacamole

142 sudo service tomcat8 restart
143 sudo service guacd restart
146 service tomcat8 status
147 service guacd status
161 sudo systemctl daemon-reload
162 sudo service tomcat restart && sudo service guacd restart
163 sudo service tomcat8 restart && sudo service guacd restart

 also added "guacamole.home=/etc/guacamole" yo 
/var/lib/tomcat8/conf/catalina.properties


and authorized local account login to user-mappings.xml

Those are logs located at /var/log/tomcat8

192.168.17.1 - - [28/Jul/2019:20:06:53 -0700] "GET / HTTP/1.1" 200 
1896 (that was the root default index page - works fine)
192.168.17.1 - - [28/Jul/2019:20:06:53 -0700] "GET /favicon.ico 
HTTP/1.1" 404 1094
192.168.17.1 - - [28/Jul/2019:20:06:59 -0700] "GET /guacamole 
HTTP/1.1" 404 1092
192.168.17.1 - - [28/Jul/2019:20:07:03 -0700] "GET /guacamole 
HTTP/1.1" 404 1092
192.168.17.1 - - [28/Jul/2019:20:07:03 -0700] "GET /guacamole 
HTTP/1.1" 404 1092
192.168.17.1 - - [28/Jul/2019:20:07:04 -0700] "GET /guacamole 
HTTP/1.1" 404 1092
192.168.159.1 - - [28/Jul/2019:20:12:59 -0700] "GET /guacamole 
HTTP/1.1" 404 1092
192.168.159.1 - - [28/Jul/2019:20:12:59 -0700] "GET /favicon.ico 
HTTP/1.1" 404 1094


catalina.out log

27-Jul-2019 16:46:51.734 INFO 
[localhost-startStop-1] org.apache.catalina.startup.HostConfig.deployDescriptor 
Deploying configuration descriptor 
[/etc/tomcat8/Catalina/localhost/guacamole.xml]
27-Jul-2019 16:46:51.735 SEVERE 
[localhost-startStop-1] org.apache.catalina.startup.HostConfig.deployDescriptor 
Error deploying configuration descriptor 
[/etc/tomcat8/Catalina/localhost/guacamole.xml]
java.io.FileNotFoundException: 
/etc/tomcat8/Catalina/localhost/guacamole.xml (No such file or directory)


27-Jul-2019 16:46:58.426 INFO 
[localhost-startStop-1] org.apache.catalina.startup.HostConfig.deployDescriptor 
Deploying configuration descriptor 
[/etc/tomcat8/Catalina/localhost/guacamole.xml]
27-Jul-2019 16:46:58.873 SEVERE 
[localhost-startStop-1] org.apache.catalina.core.ContainerBase.addChildInternal 
ContainerBase.addChild: start:
org.apache.catalina.LifecycleException: Failed to start component 
[StandardEngine[Catalina].StandardHost[localhost].StandardContext[/guacamole]]

at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:167)
at 
org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:754)

at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:730)
at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:734)
at 
org.apache.catalina.startup.HostConfig.deployDescriptor(HostConfig.java:624)
at 

Re: SSH sessions never connect

2019-07-31 Thread ivanmarcus

Larry,

Although I don't use Mac's do you think it might be worth simply 
submitting a ticket, so the request is known, rather than berating the 
team for being out-dated?


This is a really useful project with fantastic support, I'd expect some 
positive input could result in some useful response(s) for those that 
use Apple's.


Cheers.


On 1/08/2019 3:09 p.m., Larry Athey wrote:
For the record. I currently use WebSSH to get a command prompt on 
Linux and Mac OS systems. I use the default VNC program in Mac OS to 
get a remote desktop, but it doesn't work with Vino based Linux 
systems for screen sharing. I looked at Guacamole because it looked 
like an all-in-one solution, but it's clear that it has a long way to 
go. I'll be unsubscribing here and restoring my VM. Hope you guys 
catch up in the future.




Larry Athey / *Director of Remote Support*
larryat...@mazaroth.com  / 949 220 
2949 


Mazaroth IT Solutions, Inc. /888 633 9271 
www.mazaroth.com 



On Wed, Jul 31, 2019 at 8:50 PM Larry Athey > wrote:


If the vast majority of Linux distributions out there can
successfully VNC into a Mac, and Guacamole can't...It's safe to
say that the problem isn't because "Apple made some changes". It's
safer to say that somebody else just isn't paying attention enough
to catch up.



Larry Athey / *Director of Remote Support*
larryat...@mazaroth.com  / 949 220
2949 

Mazaroth IT Solutions, Inc. /888 633 9271 
www.mazaroth.com 



On Wed, Jul 31, 2019 at 8:43 PM Larry Athey
mailto:larryat...@mazaroth.com>> wrote:

Ummm, Like I said, even Remminia on any Ubuntu distribution
derivative can VNC into a Mac. That's really not a useful answer.



Larry Athey / *Director of Remote Support*
larryat...@mazaroth.com  / 949
220 2949 

Mazaroth IT Solutions, Inc. /888 633 9271 
www.mazaroth.com 



On Wed, Jul 31, 2019 at 7:57 PM brian mullan
mailto:bmullan.m...@gmail.com>> wrote:

I'm not with Guacamole
But don't be cruel
They are open source.. is MAC OS?
I've seen alot of software that doesn't work on a Mac. 
Have Apple make some changes??


Just sayin
Brian

On Wed, Jul 31, 2019, 9:52 PM Larry Athey
mailto:larryat...@mazaroth.com>>
wrote:

I will be restoring the VM to prior to Guacamole. I
wish you guys the best of luck. But your tunnel vision
focusing on out-dated technology will be the death of
you unless you magically decide to get current.



Larry Athey / *Director of Remote Support*
larryat...@mazaroth.com
 / 949 220 2949


Mazaroth IT Solutions, Inc. /888 633 9271

www.mazaroth.com 



On Wed, Jul 31, 2019 at 7:49 PM Larry Athey
mailto:larryat...@mazaroth.com>> wrote:

Sadly, with all of the work that's been put into
this, the lack of support for Mac OS VNC server
looks like a painful oversight. If even Remminia
can do this and it's open source, there's no
reason that Guacamole can't handle this.



Larry Athey / *Director of Remote Support*
larryat...@mazaroth.com
 / 949 220 2949


Mazaroth IT Solutions, Inc. /888 633 9271

www.mazaroth.com 



On Wed, Jul 31, 2019 at 7:20 PM brian mullan
mailto:bmullan.m...@gmail.com>> wrote:

sorry didn't see orig post


On Wed, Jul 31, 2019 at 8:06 PM Larry Athey
mailto:larryat...@mazaroth.com>> wrote:

Port typo in the last reply, it should
have said 20001.



Larry Athey / *Director of Remote Support*
larryat...@mazaroth.com
 / 949 220
2949 

Mazaroth IT Solutions, Inc. /888 633 9271

www.mazaroth.com 



On Wed, Jul 31, 2019 at 6

Re: Us keyboard not work on XRDP

2019-08-15 Thread ivanmarcus

Manoj,

There is some explanation in the link that Nick included, you will also 
see that Nick has merged the fix into the master code.


In terms of your installation, no doubt someone will correct me if I'm 
wrong but I believe that if you (re)compiled Guacamole from source this 
fix would now be included and caps lock will work. However if you've 
installed from a binary it won't assist you until the next release.


I'm not sure of your exact issue but I expect you noted this: "it only 
impacts the key up and down events for the Caps Lock key, not Caps 
Lock's effect on sending uppercase [A-Z] characters"?


I mention this because I'm presently typing this response via a 1.0.0 
binary install of Guacamole to a Win7 VM and THE CAPS LOCK key works for 
capitalising what I type. FYI while I don't specifying it I am using a 
'US keyboard'.



On 16/08/2019 2:03 a.m., Manoj Patil wrote:

where is the solution of cap lock in this Pull request .

please describe.

On 15-Aug-2019, at 4:22 PM, Nick Couchman > wrote:


On Thu, Aug 15, 2019 at 2:49 AM Manoj Patil > wrote:


Dear,

I am setting US keyboard type on connection for xrdp session but
some keys is work but NUM KEYS and CAPS LOCK not work.


The CAPS lock key may be fixed by a recent pull request:
https://github.com/apache/guacamole-server/pull/236

Not sure about the NUM lock issue, but I don't use it much :-).

-Nick






Re: Us keyboard not work on XRDP

2019-08-18 Thread ivanmarcus

Manoj,

Unfortunately this group can't always give solutions, especially when 
there is little information. It would assist greatly if you could look 
for solutions yourself, post what you've done to resolve the issue and 
what you've found, and perhaps include log detail where useful (or when 
asked). All of this will help to narrow down what the issue might be.


Following on I've had a look to see what 'msctc' is but I'm unable to 
find out.


However per my previous respone I've found that caps lock works for me 
with Firefox v68 on Mint 19 -> Guacamole 1.0.0 -> Win7. I've just 
downloaded Chromium to test it for you and I find that caps lock works 
ok there too.


Per Nick's earlier suggestion it's possible that something at your 
client end is failing to pass on the necessary information to Guacamole. 
To help find out where the issue lays he's made a suggestion about 
trying the Guacamole on-screen keyboard, did you try that? Also, have 
you tried a completely different client? Can you get someone else to log 
in and see what happens?



On 19/08/2019 5:10 a.m., Manoj Patil wrote:

Please give solution

On Sat, 17 Aug 2019, 22:49 Manoj Patil <mailto:manoj2pa...@gmail.com> wrote:


Dear,

when i am  connecting through msctc cap lock work well but when i
am connecting through crome/firefox then cap lock not work . why?




On 17-Aug-2019, at 11:45 AM, Manoj Patil mailto:manoj2pa...@gmail.com>> wrote:

Dear ,

Cap lock work for some days but suddenly this not work .

where is the i want to change and compiled again .
please guide in details.




On 16-Aug-2019, at 3:54 AM, Nick Couchman mailto:vn...@apache.org>> wrote:

On Thu, Aug 15, 2019 at 3:28 PM ivanmarcus
mailto:ivanmar...@yahoo.com.invalid>> wrote:

Manoj,

There is some explanation in the link that Nick included,
you will also see that Nick has merged the fix into the
master code.

In terms of your installation, no doubt someone will correct
me if I'm wrong but I believe that if you (re)compiled
Guacamole from source this fix would now be included and
caps lock will work. However if you've installed from a
binary it won't assist you until the next release.


Yes, you're correct - the change has been merged into the master
code, so the fix will only be available if you check out the git
master branch and compile it.

We don't distribute any binaries of the guacd code - the closest
we come is the Docker images, which are still compiled from
source, so one way or the other you'll probably be compiling
this from source until we push new Docker images.

I'm not sure of your exact issue but I expect you noted
this: "it only impacts the key up and down events for the
Caps Lock key, not Caps Lock's effect on sending uppercase
[A-Z] characters"?

I mention this because I'm presently typing this response
via a 1.0.0 binary install of Guacamole to a Win7 VM and THE
CAPS LOCK key works for capitalising what I type. FYI while
I don't specifying it I am using a 'US keyboard'.



It's also worth noting that the Caps Lock key may be intercepted
by O/S, window manager, and/or browser before it actually hits
Guacamole - this will vary platform-to-platform and
browser-to-browser - so if you're just pressing the Caps Lock
key expecting it to turn on in the RDP session, you may be
expecting something that won't work on your own platform.  One
way to begin to track this down is to enable Guacaomle's
on-screen keyboard (through the menu) and toggle Caps Lock from
that keyboard to see if it works within the RDP session.

-Nick








Re: Us keyboard not work on XRDP

2019-08-19 Thread ivanmarcus

Thanks, that's useful as I wasn't aware you were using x11rdp.

I've not used it before but have just installed xrdp on another Mint 19 
machine and attempted a connect via Guacamole.


Unfortunately I get the login screen but when I enter the requisite 
detail it goes to a blank screen and I can't do anything further. Having 
had a look around it seems this isn't uncommon with xrdp on debian based 
systems but none of the fixes I've seen to date have been able to sort 
it out.


Thus I'm sorry I can't test that further right now (it''s getting late), 
however I did try the caps lock at the login prompt. What I found may be 
useful for further fault-finding(?):



Guacamole is 1.0.0 on Ubuntu server 16.04 server VM, keyboard for 
specified RDP connection is set to nothing, or US, or UK, target is xrdp 
0.9.5 on Linux Mint 19.0, client is FF 68.0.1 on Mimt 19.2:


At login the caps lock key doesn't work, shift will happily give caps

The Guacamole on-screen keyboard caps lock works fine.

If I switch back to the remote keyboard the state of the caps lock from 
the Guacamole keyboard remains (ie. all typing is in caps) and caps lock 
still doesn't do anything, however shift will return the typing to lower 
case while it's pressed.


If I set the Guacamole RDP connection to a Unicode keyboard the caps 
lock key *will* work as expected and I can select caps on / caps off 
with seemingly good results.


With the same Guacamole/Ubuntu VM and same client caps lock works fine 
to a Win7 target with nothing specified for the keyboard.


WIth the same Guacamole/Ubuntu VM and same client caps lock does NOT 
work to the Mint 19 target machine with x11VNC running on that machine 
(and appropriately set up in Guacamole - with no keyboard set).



Bear in mind I can't check within a xrdp session because I can't get 
beyond the login prompt but for the moment you might want to try 
changing your keyboard type to Unicode and test that out, then let us know.


This sort of information may be useful for those who know more about 
these things, it could give them a pointer as to what the issue is and 
if there is an easy way to address it.


At this stage, and with my single user case and limited knowledge, it 
suggests to me the issue is replicable between Guacamole and a Linux 
target, initially it doesn't seem to be client related, and may not be 
anything to do with the protocol in use (ie. VNC or RDP).



On 19/08/2019 9:06 p.m., Manoj Patil wrote:
Ok I know that without any log or details informatiom you can not give 
solution but someone have occurred this issues and someone gives the 
solution that's I am asking solution.


I am tested through windows mstsc (remote desktop servicce) to linux 
which have x11rdp installed ( centos7) that time cap locks work fine.
But when I am take remote from client side windows version (windows 7, 
Windows 8, windows 10) with version firefox 68 and crome 76 through 
guacamole 1.0 (keyboard type _ en us qwerty) that time cap lock not work.



If you want additional information please mail me


On Mon, 19 Aug 2019, 02:37 ivanmarcus <mailto:ivanmar...@yahoo.com> wrote:


Manoj,

Unfortunately this group can't always give solutions, especially
when there is little information. It would assist greatly if you
could look for solutions yourself, post what you've done to
resolve the issue and what you've found, and perhaps include log
detail where useful (or when asked). All of this will help to
narrow down what the issue might be.

Following on I've had a look to see what 'msctc' is but I'm unable
to find out.

However per my previous respone I've found that caps lock works
for me with Firefox v68 on Mint 19 -> Guacamole 1.0.0 -> Win7.
I've just downloaded Chromium to test it for you and I find that
caps lock works ok there too.

Per Nick's earlier suggestion it's possible that something at your
client end is failing to pass on the necessary information to
Guacamole. To help find out where the issue lays he's made a
suggestion about trying the Guacamole on-screen keyboard, did you
try that? Also, have you tried a completely different client? Can
you get someone else to log in and see what happens?


On 19/08/2019 5:10 a.m., Manoj Patil wrote:

Please give solution

On Sat, 17 Aug 2019, 22:49 Manoj Patil mailto:manoj2pa...@gmail.com> wrote:

Dear,

when i am ??connecting through msctc cap lock work well but
when i am connecting through crome/firefox then cap lock not
work . why?




On 17-Aug-2019, at 11:45 AM, Manoj Patil
mailto:manoj2pa...@gmail.com>> wrote:

Dear ,

Cap lock work for some days but suddenly this not work .

where is the i want to change and compiled ag

Re: Struggling with guacamole installation for many many times

2019-08-19 Thread ivanmarcus
I was setting up a new VM instance of Guacamole today and thought it 
could be useful to update/tidy up the install commands list I wrote up 
earlier (for Ubuntu server 18.04.2).


This now includes the necessary detail for a MySQL auth install:


# How-to: Install Guacamole 1.0.0 on Ubuntu 18.04.2 server (VM)

su
apt-get install build-essential autoconf libtool m4 libpng-dev 
libjpeg-dev libcairo-dev libossp-uuid-dev libtelnet-dev libpango1.0-dev 
libfreerdp-dev libssh2-1-dev libwebp-dev libvncserver-dev libpulse-dev 
libvorbis-dev

apt-get install tomcat8 tomcat8-admin tomcat8-common tomcat8-user
cd /tmp
wget 
https://www.apache.org/dist/guacamole/1.0.0/source/guacamole-server-1.0.0.tar.gz

tar -zxvf guacamole-server-1.0.0.tar.gz
cd guacamole-server-1.0.0
./configure --with-init-dir=/etc/init.d
make
make install
ldconfig
wget https://www.apache.org/dist/guacamole/1.0.0/binary/guacamole-1.0.0.war
mkdir /etc/guacamole
cp guacamole-1.0.0.war /etc/guacamole/guacamole.war
ln -s /etc/guacamole/guacamole.war /var/lib/tomcat8/webapps/
systemctl restart tomcat8
systemctl enable guacd
systemctl start guacd

# Above this line works in standard auth mode, below is detail for MySQL 
auth


su
cd /tmp
apt-get install mysql-server
apt-get install libmysql-java
wget 
https://www.apache.org/dist/guacamole/1.0.0/binary/guacamole-auth-jdbc-1.0.0.tar.gz

tar -zxvf guacamole-auth-jdbc-1.0.0.tar.gz
mkdir /etc/guacamole/extensions
mkdir /etc/guacamole/lib
cp guacamole-auth-jdbc-1.0.0/mysql/guacamole-auth-jdbc-mysql-1.0.0.jar 
/etc/guacamole/extensions/

nano /etc/guacamole/guacamole.properties

mysql-hostname: localhost
mysql-port: 3306
mysql-database: guacamole_db
mysql-username: guacamole_user
mysql-password:
(ctrl-x then y)

mysql -u root -p

create database guacamole_db;
create user 'guacamole_user'@'localhost' identified by '';
grant select,insert,update,delete on guacamole_db.* to 
'guacamole_user'@'localhost';

flush privileges;
quit

cat guacamole-auth-jdbc-1.0.0/mysql/schema/*.sql | mysql -u root -p 
guacamole_db

ln -s /usr/share/java/mysql-connector-java.jar /etc/guacamole/lib/
systemctl restart guacd
systemctl restart tomcat8.service


Go to http://:8080/guacamole
Default login guacadmin:guacadmin


On 31/07/2019 9:33 a.m., Ahmed Khalil wrote:

Worked great for me, thanks Ivan.

On Mon, Jul 29, 2019 at 1:33 AM ivanmarcus <mailto:ivanmar...@yahoo.com>> wrote:


Ahmed,

This works for me from a bare, brand-new, Ubuntu 18.04 VM, no
update/upgrade.

Note I've not much time right now so have simply got as far as
confirming I can get the initial Guacamole login screen and gone
no further (although I've no reason to assume it won't work as
advertised from there):

apt-get install build-essential autoconf libtool m4 libpng-dev
libjpeg-dev libcairo-dev libossp-uuid-dev libtelnet-dev
libpango1.0-dev libfreerdp-dev libssh2-1-dev libwebp-dev
libvncserver-dev libpulse-dev libvorbis-dev
apt-get install tomcat8 tomcat8-admin tomcat8-common tomcat8-user
wget

https://www.apache.org/dist/guacamole/1.0.0/source/guacamole-server-1.0.0.tar.gz
tar -zxvf guacamole-server-1.0.0.tar.gz
cd guacamole-server-1.0.0
./configure --with-init-dir=/etc/init.d
make
make install
ldconfig
systemctl enable guacd
systemctl start guacd
wget
https://www.apache.org/dist/guacamole/1.0.0/binary/guacamole-1.0.0.war
mkdir /etc/guacamole
cp guacamole-1.0.0.war /etc/guacamole/guacamole.war
ln -s /etc/guacamole/guacamole.war /var/lib/tomcat8/webapps/
systemctl restart tomcat8
systemctl restart guacd

go to browser and enter http://ip_address_of_vm:8080/guacamole



On 29/07/2019 4:11 p.m., Ahmed Khalil wrote:


Hello,

??

I seen guacamole for the first time at another company, and I I
was amazed of how beautiful this product is.??

??

I have been struggling to get it to work on my personal lab for
quite a while, I tried different guides, but never got guacamole
to work past the "HTTP Status 404 - Not Found" when
accessing??http://192.168.159.138:8080/guacamole??

??

Can you please examine my case and guide my on the direction to
get it to work, I have included the terminal history for how I
installed it, nit planning to use ldap, or mysql initially, just
the basic config on the user-mappings.xml, here is the log:

??

sudo apt-get update

sudo apt-get upgrade
101 apt-get install guacamole-tomcat (installs tons of packages)

Downloaded guacamole client 1.0.0.war and renamed it to guacamole.war
119 sudo cp guacamole.war /var/lib/tomcat8/webapps
121 sudo cp guacamole.war /usr/share/tomcat8
122 sudo cp guacamole.war /usr/share/tomcat8/webapps
sudo cp guacamole.war /var/lib/guacamole/guacamole.war
132 /etc/init.d/guacd start
133 /etc/init.d/tomcat8 restar

Re: Us keyboard not work on XRDP

2019-08-20 Thread ivanmarcus

In Guacamole itself there's a setting for keyboard layout.

This is located, from the web gui, in settings -> connections -> 
[connection name] -> basic settings -> keyboard layout


Try changing this option to Unicode


On 20/08/2019 8:46 p.m., Manoj Patil wrote:
i am setting keyboard type -unicode on firefox version 68 but still 
cap locks not work .




On 20-Aug-2019, at 5:02 AM, ivanmarcus <mailto:ivanmar...@yahoo.com>> wrote:


Manoj,

Have you tried setting the keyboard layout to 'unicode' in Guacamole?


On 19/08/2019 11:09 p.m., Manoj Patil wrote:

Dear thank

We used RDP protocol?? and xrdp version 0.9.6 with x11rdp session .


On Mon, 19 Aug 2019, 16:17 ivanmarcus <mailto:ivanmar...@yahoo.com> wrote:


Thanks, that's useful as I wasn't aware you were using x11rdp.

I've not used it before but have just installed xrdp on another
Mint 19 machine and attempted a connect via Guacamole.

Unfortunately I get the login screen but when I enter the
requisite detail it goes to a blank screen and I can't do
anything further. Having had a look around it seems this isn't
uncommon with xrdp on debian based systems but none of the fixes
I've seen to date have been able to sort it out.

Thus I'm sorry I can't test that further right now (it''s
getting late), however I did try the caps lock at the login
prompt. What I found may be useful for further fault-finding(?):


Guacamole is 1.0.0 on Ubuntu server 16.04 server VM, keyboard
for specified RDP connection is set to nothing, or US, or UK,
target is xrdp 0.9.5 on Linux Mint 19.0, client is FF 68.0.1 on
Mimt 19.2:

At login the caps lock key doesn't work, shift will happily give
caps

The Guacamole on-screen keyboard caps lock works fine.

If I switch back to the remote keyboard the state of the caps
lock from the Guacamole keyboard remains (ie. all typing is in
caps) and caps lock still doesn't do anything, however shift
will return the typing to lower case while it's pressed.

If I set the Guacamole RDP connection to a Unicode keyboard the
caps lock key *will* work as expected and I can select caps on /
caps off with seemingly good results.

With the same Guacamole/Ubuntu VM and same client caps lock
works fine to a Win7 target with nothing specified for the keyboard.

WIth the same Guacamole/Ubuntu VM and same client caps lock does
NOT work to the Mint 19 target machine with x11VNC running on
that machine (and appropriately set up in Guacamole - with no
keyboard set).


Bear in mind I can't check within a xrdp session because I can't
get beyond the login prompt but for the moment you might want to
try changing your keyboard type to Unicode and test that out,
then let us know.

This sort of information may be useful for those who know more
about these things, it could give them a pointer as to what the
issue is and if there is an easy way to address it.

At this stage, and with my single user case and limited
knowledge, it suggests to me the issue is replicable between
Guacamole and a Linux target, initially it doesn't seem to be
client related, and may not be anything to do with the protocol
in use (ie. VNC or RDP).??


On 19/08/2019 9:06 p.m., Manoj Patil wrote:

Ok I know that without any log or details informatiom you can
not give solution but someone have occurred this issues and
someone gives the solution that's I am asking solution.

I am tested through windows mstsc (remote desktop servicce) to
linux which have x11rdp installed ( centos7) that time cap
locks work fine.
But when I am take remote from client side windows version
(windows 7, Windows 8, windows 10) with version firefox 68 and
crome 76 through guacamole 1.0 (keyboard type _ en us qwerty)
that time cap lock not work.


If you want additional information please mail me


On Mon, 19 Aug 2019, 02:37 ivanmarcus mailto:ivanmar...@yahoo.com> wrote:

Manoj,

Unfortunately this group can't always give solutions,
especially when there is little information. It would
assist greatly if you could look for solutions yourself,
post what you've done to resolve the issue and what you've
found, and perhaps include log detail where useful (or when
asked). All of this will help to narrow down what the issue
might be.

Following on I've had a look to see what 'msctc' is but I'm
unable to find out.

However per my previous respone I've found that caps lock
works for me with Firefox v68 on Mint 19 -> Guacamole 1.0.0
-> Win7. I've just downloaded Chromium to test it for you
and I find that caps lock wo

Re: Us keyboard not work on XRDP

2019-08-20 Thread ivanmarcus
Ok, unfortunately that's different from my experience; there may not be 
a lot more I can help with.


However, it may be useful for others if you could let us know what 
happens if you use Guacamole's on-screen keyboard?



On 21/08/2019 4:04 p.m., Manoj Patil wrote:

thanks for response .

I am done all these setting but Cap lock not work in any condition.

please suggest any other solution.



On 20-Aug-2019, at 4:37 PM, ivanmarcus <mailto:ivanmar...@yahoo.com>> wrote:


In Guacamole itself there's a setting for keyboard layout.

This is located, from the web gui, in settings -> connections -> 
[connection name] -> basic settings -> keyboard layout


Try changing this option to Unicode


On 20/08/2019 8:46 p.m., Manoj Patil wrote:
i am setting keyboard type -unicode on firefox version 68 but still 
cap locks not work .




On 20-Aug-2019, at 5:02 AM, ivanmarcus <mailto:ivanmar...@yahoo.com>> wrote:


Manoj,

Have you tried setting the keyboard layout to 'unicode' in Guacamole?


On 19/08/2019 11:09 p.m., Manoj Patil wrote:

Dear thank

We used RDP protocol?? and xrdp version 0.9.6 with x11rdp session .


On Mon, 19 Aug 2019, 16:17 ivanmarcus <mailto:ivanmar...@yahoo.com> wrote:


Thanks, that's useful as I wasn't aware you were using x11rdp.

I've not used it before but have just installed xrdp on
another Mint 19 machine and attempted a connect via Guacamole.

Unfortunately I get the login screen but when I enter the
requisite detail it goes to a blank screen and I can't do
anything further. Having had a look around it seems this isn't
uncommon with xrdp on debian based systems but none of the
fixes I've seen to date have been able to sort it out.

Thus I'm sorry I can't test that further right now (it''s
getting late), however I did try the caps lock at the login
prompt. What I found may be useful for further fault-finding(?):


Guacamole is 1.0.0 on Ubuntu server 16.04 server VM, keyboard
for specified RDP connection is set to nothing, or US, or UK,
target is xrdp 0.9.5 on Linux Mint 19.0, client is FF 68.0.1
on Mimt 19.2:

At login the caps lock key doesn't work, shift will happily
give caps

The Guacamole on-screen keyboard caps lock works fine.

If I switch back to the remote keyboard the state of the caps
lock from the Guacamole keyboard remains (ie. all typing is in
caps) and caps lock still doesn't do anything, however shift
will return the typing to lower case while it's pressed.

If I set the Guacamole RDP connection to a Unicode keyboard
the caps lock key *will* work as expected and I can select
caps on / caps off with seemingly good results.

With the same Guacamole/Ubuntu VM and same client caps lock
works fine to a Win7 target with nothing specified for the
keyboard.

WIth the same Guacamole/Ubuntu VM and same client caps lock
does NOT work to the Mint 19 target machine with x11VNC
running on that machine (and appropriately set up in Guacamole
- with no keyboard set).


Bear in mind I can't check within a xrdp session because I
can't get beyond the login prompt but for the moment you might
want to try changing your keyboard type to Unicode and test
that out, then let us know.

This sort of information may be useful for those who know more
about these things, it could give them a pointer as to what
the issue is and if there is an easy way to address it.

At this stage, and with my single user case and limited
knowledge, it suggests to me the issue is replicable between
Guacamole and a Linux target, initially it doesn't seem to be
client related, and may not be anything to do with the
protocol in use (ie. VNC or RDP).??


On 19/08/2019 9:06 p.m., Manoj Patil wrote:

Ok I know that without any log or details informatiom you can
not give solution but someone have occurred this issues and
someone gives the solution that's I am asking solution.

I am tested through windows mstsc (remote desktop servicce)
to linux which have x11rdp installed ( centos7) that time cap
locks work fine.
But when I am take remote from client side windows version
(windows 7, Windows 8, windows 10) with version firefox 68
and crome 76 through guacamole 1.0 (keyboard type _ en us
qwerty) that time cap lock not work.


If you want additional information please mail me


On Mon, 19 Aug 2019, 02:37 ivanmarcus mailto:ivanmar...@yahoo.com> wrote:

Manoj,

Unfortunately this group can't always give solutions,
especially when there is little information. It would
assist greatly if you could look for solutions yourself,
post what you've done to resolve the issue and what
you've found, and per

Re: Us keyboard not work on XRDP

2019-08-20 Thread ivanmarcus
If you use the on-screen keyboard (control-shift-alt -> input method -> 
on screen keyboard) does the caps-lock work?



On 21/08/2019 4:43 p.m., Manoj Patil wrote:

dear,

when cam taking remote of x11rdp server(lentos 7) from windows through 
mstsc that time cap lock working fine .


but when taking remote through guacamole cap lock not working .

when in last month this cap lock with en_us_qwarety keyboard with 
guacamole is working fine but suddenly this stop working.




On 21-Aug-2019, at 9:57 AM, ivanmarcus <mailto:ivanmar...@yahoo.com>> wrote:


Ok, unfortunately that's different from my experience; there may not 
be a lot more I can help with.


However, it may be useful for others if you could let us know what 
happens if you use Guacamole's on-screen keyboard?



On 21/08/2019 4:04 p.m., Manoj Patil wrote:

thanks for response .

I am done all these setting but Cap lock not work in any condition.

please suggest any other solution.



On 20-Aug-2019, at 4:37 PM, ivanmarcus <mailto:ivanmar...@yahoo.com>> wrote:


In Guacamole itself there's a setting for keyboard layout.

This is located, from the web gui, in settings -> connections -> 
[connection name] -> basic settings -> keyboard layout


Try changing this option to Unicode


On 20/08/2019 8:46 p.m., Manoj Patil wrote:
i am setting keyboard type -unicode on firefox version 68 but 
still cap locks not work .




On 20-Aug-2019, at 5:02 AM, ivanmarcus <mailto:ivanmar...@yahoo.com>> wrote:


Manoj,

Have you tried setting the keyboard layout to 'unicode' in Guacamole?


On 19/08/2019 11:09 p.m., Manoj Patil wrote:

Dear thank

We used RDP protocol?? and xrdp version 0.9.6 with x11rdp session .


On Mon, 19 Aug 2019, 16:17 ivanmarcus <mailto:ivanmar...@yahoo.com> wrote:


Thanks, that's useful as I wasn't aware you were using x11rdp.

I've not used it before but have just installed xrdp on
another Mint 19 machine and attempted a connect via Guacamole.

Unfortunately I get the login screen but when I enter the
requisite detail it goes to a blank screen and I can't do
anything further. Having had a look around it seems this
isn't uncommon with xrdp on debian based systems but none of
the fixes I've seen to date have been able to sort it out.

Thus I'm sorry I can't test that further right now (it''s
getting late), however I did try the caps lock at the login
prompt. What I found may be useful for further fault-finding(?):


Guacamole is 1.0.0 on Ubuntu server 16.04 server VM,
keyboard for specified RDP connection is set to nothing, or
US, or UK, target is xrdp 0.9.5 on Linux Mint 19.0, client
is FF 68.0.1 on Mimt 19.2:

At login the caps lock key doesn't work, shift will happily
give caps

The Guacamole on-screen keyboard caps lock works fine.

If I switch back to the remote keyboard the state of the
caps lock from the Guacamole keyboard remains (ie. all
typing is in caps) and caps lock still doesn't do anything,
however shift will return the typing to lower case while
it's pressed.

If I set the Guacamole RDP connection to a Unicode keyboard
the caps lock key *will* work as expected and I can select
caps on / caps off with seemingly good results.

With the same Guacamole/Ubuntu VM and same client caps lock
works fine to a Win7 target with nothing specified for the
keyboard.

WIth the same Guacamole/Ubuntu VM and same client caps lock
does NOT work to the Mint 19 target machine with x11VNC
running on that machine (and appropriately set up in
Guacamole - with no keyboard set).


Bear in mind I can't check within a xrdp session because I
can't get beyond the login prompt but for the moment you
might want to try changing your keyboard type to Unicode and
test that out, then let us know.

This sort of information may be useful for those who know
more about these things, it could give them a pointer as to
what the issue is and if there is an easy way to address it.

At this stage, and with my single user case and limited
knowledge, it suggests to me the issue is replicable between
Guacamole and a Linux target, initially it doesn't seem to
be client related, and may not be anything to do with the
protocol in use (ie. VNC or RDP).??


On 19/08/2019 9:06 p.m., Manoj Patil wrote:

Ok I know that without any log or details informatiom you
can not give solution but someone have occurred this issues
and someone gives the solution that's I am asking solution.

I am tested through windows mstsc (remote desktop servicce)
to linux which have x11rdp installed ( centos7) that time
cap locks work fine.
But when I am take remote from client side windows version
(windows 7, Windows 8, window

Re: Us keyboard not work on XRDP

2019-08-21 Thread ivanmarcus

Thanks, that's useful.

In my test case the Guacamole on-screen keyboard works, and I can get it 
working with the physical keyboard if I change the Guacamole keyboard 
type to Unicode (local keyboard type remains US).


In your case the Guacamole on-screen keyboard also works correctly, but 
setting Unicode in Guacamole doesn't fix it for the physical keyboard.


I'm not certain but, bearing in mind Nick's earlier comments, I suspect 
this means the issue may be between your local machine and Guacamole 
(ie. it's probably not the target machine).


If it was working some time ago then I would look back to what changes 
or updates you have made to your local machine, and to the Guacamole 
machine, since then. It's possible some small change or update has 
affected the keyboard operation.


As I don't use Centos, and don't seem to be able to easily get xrdp 
running on my test machine anyway, I'm not able to clone your 
installation or exactly replicate the problem, sorry. Therefore I think 
we've probably reached the limit of what I'm able to do to help.


Beyond this it will need someone with better skills than mine to assist 
further, however if I think of anything else I'll pass that on.



On 21/08/2019 6:40 p.m., Manoj Patil wrote:

yes it work .


On 21-Aug-2019, at 11:58 AM, ivanmarcus <mailto:ivanmar...@yahoo.com>> wrote:


If you use the on-screen keyboard (control-shift-alt -> input method 
-> on screen keyboard) does the caps-lock work?



On 21/08/2019 4:43 p.m., Manoj Patil wrote:

dear,

when cam taking remote of x11rdp server(lentos 7) from windows 
through mstsc that time cap lock working fine .


but when taking remote through guacamole cap lock not working .

when in last month this cap lock with en_us_qwarety keyboard with 
guacamole is working fine but suddenly this stop working.




On 21-Aug-2019, at 9:57 AM, ivanmarcus <mailto:ivanmar...@yahoo.com>> wrote:


Ok, unfortunately that's different from my experience; there may 
not be a lot more I can help with.


However, it may be useful for others if you could let us know what 
happens if you use Guacamole's on-screen keyboard?



On 21/08/2019 4:04 p.m., Manoj Patil wrote:

thanks for response .

I am done all these setting but Cap lock not work in any condition.

please suggest any other solution.



On 20-Aug-2019, at 4:37 PM, ivanmarcus <mailto:ivanmar...@yahoo.com>> wrote:


In Guacamole itself there's a setting for keyboard layout.

This is located, from the web gui, in settings -> connections -> 
[connection name] -> basic settings -> keyboard layout


Try changing this option to Unicode


On 20/08/2019 8:46 p.m., Manoj Patil wrote:
i am setting keyboard type -unicode on firefox version 68 but 
still cap locks not work .




On 20-Aug-2019, at 5:02 AM, ivanmarcus <mailto:ivanmar...@yahoo.com>> wrote:


Manoj,

Have you tried setting the keyboard layout to 'unicode' in 
Guacamole?



On 19/08/2019 11:09 p.m., Manoj Patil wrote:

Dear thank

We used RDP protocol?? and xrdp version 0.9.6 with x11rdp 
session .



On Mon, 19 Aug 2019, 16:17 ivanmarcus <mailto:ivanmar...@yahoo.com> wrote:


Thanks, that's useful as I wasn't aware you were using x11rdp.

I've not used it before but have just installed xrdp on
another Mint 19 machine and attempted a connect via Guacamole.

Unfortunately I get the login screen but when I enter the
requisite detail it goes to a blank screen and I can't do
anything further. Having had a look around it seems this
isn't uncommon with xrdp on debian based systems but none
of the fixes I've seen to date have been able to sort it out.

Thus I'm sorry I can't test that further right now (it''s
getting late), however I did try the caps lock at the
login prompt. What I found may be useful for further
fault-finding(?):


Guacamole is 1.0.0 on Ubuntu server 16.04 server VM,
keyboard for specified RDP connection is set to nothing,
or US, or UK, target is xrdp 0.9.5 on Linux Mint 19.0,
client is FF 68.0.1 on Mimt 19.2:

At login the caps lock key doesn't work, shift will
happily give caps

The Guacamole on-screen keyboard caps lock works fine.

If I switch back to the remote keyboard the state of the
caps lock from the Guacamole keyboard remains (ie. all
typing is in caps) and caps lock still doesn't do
anything, however shift will return the typing to lower
case while it's pressed.

If I set the Guacamole RDP connection to a Unicode
keyboard the caps lock key *will* work as expected and I
can select caps on / caps off with seemingly good results.

With the same Guacamole/Ubuntu VM and same client caps
lock works fine to a Win7 target with nothing specified
for the keyboard.

WIt

Re: guacd rdp support

2019-09-01 Thread ivanmarcus
Guacd may be logging to syslog, so check that out when attempting a 
connect. Here's an example of a successful connection:


Sep  2 07:19:05 guac-server guacd[1117]: Creating new client for 
protocol "rdp"
Sep  2 07:19:05 guac-server guacd[1117]: Connection ID is 
"$a2e9c5a9-01ce-4176-869f-2dd6f4d622c2"
Sep  2 07:19:05 guac-server guacd[13269]: No security mode specified. 
Defaulting to RDP.

Sep  2 07:19:05 guac-server guacd[13269]: Resize method: none
Sep  2 07:19:05 guac-server guacd[13269]: User 
"@d590bf5d-58f2-45cb-b90a-b3f96e95f947" joined connection 
"$a2e9c5a9-01ce-4176-869f-2dd6f4d622c2" (1 users now present)

Sep  2 07:19:05 guac-server guacd[13269]: Loading keymap "base"
Sep  2 07:19:05 guac-server guacd[13269]: Loading keymap "en-us-qwerty"
Sep  2 07:19:05 guac-server guacd[13269]: guacdr connected.
Sep  2 07:19:05 guac-server guacd[13269]: guacsnd connected.
Sep  2 07:19:05 guac-server guacd[13269]: Connected to RDPDR 1.12 as 
client 0x0002
Sep  2 07:19:05 guac-server guacd[13269]: Ignoring server capability set 
type=0x0001, length=44
Sep  2 07:19:05 guac-server guacd[13269]: Ignoring server capability set 
type=0x0002, length=8
Sep  2 07:19:05 guac-server guacd[13269]: Ignoring server capability set 
type=0x0003, length=8
Sep  2 07:19:05 guac-server guacd[13269]: Ignoring server capability set 
type=0x0004, length=8
Sep  2 07:19:05 guac-server guacd[13269]: Ignoring server capability set 
type=0x0005, length=8

Sep  2 07:19:05 guac-server guacd[13269]: Sending capabilities...
Sep  2 07:19:05 guac-server guacd[13269]: Capabilities sent.
Sep  2 07:19:05 guac-server guacd[13269]: Client ID confirmed


On 2/09/2019 7:10 a.m., Halil Karakose wrote:

Thanks Mike. Where can I find guacd logs?

1 Eyl 2019 Paz, saat 21:46 tarihinde Mike Jumper 
mailto:mike.jum...@glyptodon.com>> ??unu yazd??:


On Sun, Sep 1, 2019 at 11:37 AM Halil Karakose mailto:karha...@gmail.com>> wrote:

Here is my observation about the installation:

I installed both guacd and guacamole web application on the
same machine.

I can telnet to 4899.


Are you sure you don't mean 4822?

...
Following exception is displayed in Tomcat logs:
18:31:14.918 [http-nio-8080-exec-4] DEBUG
o.a.g.w.GuacamoleWebSocketTunnelEndpoint - Error connecting
WebSocket tunnel.
org.apache.guacamole.GuacamoleUpstreamTimeoutException:
Connection to guacd timed out.
...
So, is my rdp credentials wrong?


You need to check your guacd logs. Only guacd is aware of anything
RDP-specific, not Tomcat or the web application. The error you're
seeing from the web application suggests that it simply cannot
connect to guacd, not necessarily that there is a problem with the
configuration of the RDP connection. The logs from guacd should
provide the details you need.

- Mike





How to install Guacamole with MySQL on Debian Buster (10.1)

2019-09-16 Thread ivanmarcus
With regard to the recent enquiry about installing Guacamole on Debian 
Buster 
(https://lists.apache.org/thread.html/ff5b707b06d31458eb4716b56560d50112efd7e68e0beccc8063100f@%3Cdev.guacamole.apache.org%3E), 
and for anyone wanting to give this a try...


... I've found the following works from a fresh install of the netinst 
version of Debian in a VM:



su

apt-get install gnupg
PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
wget http://repo.mysql.com/mysql-apt-config_0.8.13-1_all.deb
dpkg -i mysql-apt-config_0.8.13-1_all.deb (select the requisite version 
of MySQL & then 'ok' - I used 5.7)

apt-get update

apt-get install mysql-server
apt-get install build-essential autoconf libtool m4 libpng-dev 
libjpeg-dev libcairo-dev libossp-uuid-dev libtelnet-dev libpango1.0-dev 
libssh2-1-dev libwebp-dev libvncserver-dev libpulse-dev libvorbis-dev


nano /etc/apt/sources to incl stretch repo (deb 
http://deb.debian.org/debian/ stretch main)

apt update

apt-get install libmysql-java libfreerdp-dev
apt-get install tomcat8 tomcat8-admin tomcat8-common tomcat8-user

apt-get install git
git clone git://github.com/apache/guacamole-server.git
cd guacamole-server
autoreconf -fi
./configure --with-init-dir=/etc/init.d
make
make install
ldconfig

mysql -u root -p
create database guacamole_db;
create user 'guacamole_user'@'localhost' identified by '';
grant select,insert,update,delete on guacamole_db.* to 
'guacamole_user'@'localhost';

flush privileges;
quit

wget 
https://www.apache.org/dist/guacamole/1.0.0/binary/guacamole-auth-jdbc-1.0.0.tar.gz

tar -zxvf guacamole-auth-jdbc-1.0.0.tar.gz
mkdir /etc/guacamole
mkdir /etc/guacamole/extensions
mkdir /etc/guacamole/lib

wget https://www.apache.org/dist/guacamole/1.0.0/binary/guacamole-1.0.0.war
cp guacamole-1.0.0.war /etc/guacamole/guacamole.war
cp guacamole-auth-jdbc-1.0.0/mysql/guacamole-auth-jdbc-mysql-1.0.0.jar 
/etc/guacamole/extensions/

ln -s /etc/guacamole/guacamole.war /var/lib/tomcat8/webapps/
systemctl enable guacd

nano /etc/guacamole/guacamole.properties
 mysql-hostname: localhost
 mysql-port: 3306
 mysql-database: guacamole_db
 mysql-username: guacamole_user
 mysql-password:
(ctrl-x then y)

cat guacamole-auth-jdbc-1.0.0/mysql/schema/*.sql | mysql -u root -p 
guacamole_db

ln -s /usr/share/java/mysql-connector-java.jar /etc/guacamole/lib/
mkdir -p /usr/lib/$(dpkg-architecture -qDEB_BUILD_GNU_TYPE)/freerdp
ln -s /usr/local/lib/freerdp/guac*.so /usr/lib/$(dpkg-architecture 
-qDEB_BUILD_GNU_TYPE)/freerdp/

ldconfig
systemctl restart guacd
systemctl restart tomcat8.service


YMMV - I did try various things before I could get it to work (incl 
MariaDB, but that got a bit hard) so this is a bit messy and I expect 
this could be tidied up and improved on.




Re: Windows 10 licencing

2019-09-18 Thread ivanmarcus
I find it difficult to discuss M$ licensing and business practice 
without wanting to scream but, as far as I've been able to work out 
(after _many_ hours of research), if you want to run M$ Windows in a VM 
and access it remotely you can do this with:


- a VDA (Virtual Desktop Access) license

- Enterprise with SA 'software assurance'

I believe both of these require an annual fee (something that's an 
anathema to my clients, and me).


Trying to understand and explain this cr*p to clients is a nightmare. 
Quite reasonably one asked me just a couple of days ago 'why can't I 
just buy two normal licenses for the two remote machines I want to 
connect to my accounting package?'. Oh my! - that's all the poor guy 
wants to do, and the fact that it's _easy_ to do technically (either 2 x 
VM's or use the termiserv.dll to allow multiple connects [that M$ 
released]) , but is complicated to to hell and gone by M$ rapaciousness 
really makes me spit.


G [sound of deep breathing and counting to 1000].

Anyway, that's my read of it, but you'd really need to consult M$ to be 
sure. In practice I expect many just give up and either do it anyway, or 
find an alternative.


In the absence of a Linux application and with regard to the latter if 
anyone has any experience of 'TSPlus' 
(https://www.terminalserviceplus.com) or Graphon go-global 
(https://www.graphon.com/) I'd be pleased to hear from you - I'd still 
like to get this guy access to his package without having to interact 
with M$ and have it cost the earth, forever, and these two application 
publishing systems appear to offer a possible way forward



On 19/09/2019 6:41 a.m., Nick Couchman wrote:
On Wed, Sep 18, 2019 at 7:12 AM James Allsopp 
 wrote:


Hi,
I was wondering what Windows 10 licences people were using for
Guacamole? We want to have users logging in one at a time, but
have the windows 10 machine installed as a VM on a VMware Esxi
server, with Guacamole connecting to the server via RDP. We're
planning on buying retail Windows licences.

Section 2c v.) of the Windows Licence (

https://www.microsoft.com/en-us/Useterms/Retail/Windows/10/Useterms_Retail_Windows_10_English.htm
 )
seems to prohibit this;
/ install the software on a server and allow users to access it
remotely, or install the software on a device for use only by
remote users; /

This seems to contradict 2d v.)
/Other users, at different times, may access the licensed device
from another device using remote access technologies, but only on
devices separately licensed to run the same or higher edition of
this software. /
/
/
But does that mean that it's only within licence terms to access
the machines from a Windows 10 Home pc?


It's been a while since I dealt directly with Windows workstation 
licensing, but my recollection of the license terms are as follows:
- You can use the remote desktop feature of a Windows workstation on a 
standard PC to access that system from a Windows edition of equal or 
greater (e.g. Pro -> Pro, Enterprise -> Pro, etc. - 2d).
- You *cannot* run any edition of Windows lower than Enterprise on a 
server to use in a "VDI"-type scenario. This means using Retail 
edition for VDI-like functionality is a no-go in Microsoft licensing 
terms.
- Not only do you need Enterprise Edition or higher (I think Ultimate 
is higher), you also need to maintain Software Assurance on the 
licenses you use for VDI.


Again, that's my recollection.  I'm also not sure how much of that 
guidance was "reseller guidance" (someone who's in it for the $$) and 
how much of that was honest legal guidance (if you do this, you're 
actually in violation of the EULA).  I'd recommend you consult someone 
intimately familiar with Microsoft licensing, but who's not in it to 
get your money (good luck finding said person).


-Nick




Re: Windows 10 licencing

2019-09-18 Thread ivanmarcus
I'm interested in this statement - not to start any debate, but because 
I'd like to know the veracity of it:



On 19/09/2019 12:00 p.m., sciUser wrote:

Windows 7 as of 2020 will require no
licenses


As far as I'm aware M$ making something EOL  != no licence required? If 
so, whereabouts is their definitive statement to this effect?


Thanks.



Re: 6 Monitors/6 miniPCs - How to set up Guacamole

2019-10-01 Thread ivanmarcus
FWIW, per David's response, I have a site that is very similar to yours 
insofar as there are several M$ machines that are accessed via a 
Guacamole instance that is itself running on a M$ machine.


I achieve this by running Guacamole in an Ubuntu VM from Virtualbox, 
this runs happily on a machine that is also in daily use for other 
tasks, and is occasionally itself accessed via Guacamole. You probably 
don't need a lot of Linux experience to get this working as there are 
various examples of how to install Virtualbox on M$, and Ubuntu (or 
whatever) as a VM under Vbox. Once you've done it a couple of times I'm 
sure you'd find it fairly easy in fact.


From there installing Guacamole is relatively straightforward; I know 
I've posted to this forum a couple of step by step command lists that 
would get it up and running in a relatively short time (maybe 15mins?).


On 2/10/2019 10:48 a.m., Randy wrote:

@David - Thanks for your reply. I was hoping there might be a Win-based
solution but kinda knew it was going to be a long shot. Appreciate your
input Sir!



--
Sent from: 
http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org





Re: Upgrading to 1.0.0, url for login

2019-10-08 Thread ivanmarcus

FWIW I've just checked this with one of my instances.

I'm unable to replicate the issue with Guacamole 1.0.0, MySQL 5.7.27, 
Ubuntu 16.04.6, Pacific TZ.


In the past I've found weird things can happen around timezones and so I 
did try setting different TZ's in Guacamole (keeping the system TZ 
intact) but couldn't get it to operate differently.


As I recall this was a new installation of 1.0.0, if yours is an upgrade 
I wonder if there's some hangover that's causing an issue from your 
0.9.13 install?



On 9/10/2019 11:57 a.m., Nick Couchman wrote:
On Tue, Oct 8, 2019 at 6:45 PM Nick Couchman > wrote:


On Tue, Oct 8, 2019 at 5:57 PM Nick Couchman mailto:vn...@apache.org>> wrote:

On Mon, Oct 7, 2019 at 1:02 PM Steven Pollock
mailto:jacksonp2...@gmail.com>> wrote:

Thanks Nick,

I have the 0.9.13 &  1.0.0 side by side and they have
exactly the same system time and are using the same
backend DB.


I'll have to spin up 1.0.0 and see what happens, but I'm
testing with git code (not sure exact version right now) and
PostgreSQL as the DB, and I am not seeing this behavior.  I go
into the GUI, create a test user, set the user's access times
and account validity dates, along with timezone, and the dates
do not move.  I can subsequently go in and adjust them and
they stay consistent with what I input on the GUI side.

I'll see what happens on 1.0.0.


I have confirmed that version 1.0.0 with PostgreSQL behaves as
expected - the date does not change when the user account is
created/saved.


It appears to work fine for me on version 1.0.0.  My database server 
is 5.5.60-MariaDB MariaDB Server, running on CentOS7.


-Nick





Re: Windows 10 Virtual box RDP

2019-10-10 Thread ivanmarcus
I've had exactly the same issue with W10. Could log on fine with RDP or 
even Remmina, and W7 was fine via Guacamole... other than all the usual 
stuff I needed to check/do this:


Ensure NLA is off

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal 
Server\WinStations\RDP-Tcp]


???SecurityLayer??? = 1

???UserAuthentication??? = 0


On 11/10/2019 2:03 p.m., Peter Gui wrote:
Darren, Thanks, I have to pull myself away from this for the rest of 
the evening but perhaps we could try that out tomorrow? In the mean 
time I want to try using freerdp client by itself to see if that is 
indeed the problem. I also thought about down grading the remote 
desktop app in Windows to an older version but it sounds like that 
should not be necessary.
Nick, Yes I have disabled NLA and my connection via rdesktop relies on 
authentication at Windows sign in.

Thanks I will let you all know tomorrow if I have any luck

On Thu, Oct 10, 2019 at 5:12 PM Nick Couchman > wrote:




On Thu, Oct 10, 2019 at 2:57 PM Peter Gui mailto:pguit...@gmail.com>> wrote:

Hello everyone
I have just installed Windows 10 pro inside of a VirtualBox
VM. It is the newest version of windows and is currently
un-activated although I have an OEM key ready. My problem is
that I cannot get remote desktop to work with Guacamole from
my Linux machine.

Here is what does work:
rdesktop (RDP client) works with remote desktop.
Guacamole works with vrde
 via RDP

Here is what I have tried:
modified registry keys


ignore cert and security


Guacamole will try to connect but will ultimately time out
with the web application stating "The connection has been
closed because the server is taking to long to respond..."

user-mapping.xml:

  rdp
  my local ip
  3389
  any
  true



What I do not see here, that is almost certainly required for RDP
access to a Windows 10 system, is a username and password.  If
your Win 10 system is set up to require NLA (which it is by
default), then the username and password *must* be provided at
connection time, or the connection will fail.  At this point
Guacamole does not support prompting for parameters, though that
is in the works, so you will have to provide this information or
you will need to turn off the NLA requirement for Windows 10.

-Nick





Re: Windows 10 flaky RDP

2019-10-21 Thread ivanmarcus
I see Mike's post regarding which VM you're rebooting etc, so with that 
in mind it may be useful to know that I also have a similar system in 
operation and that, with one exception, it runs reasonably well (thus, 
one would hope, so should yours :-).


I utilise Vbox 6, Win10Pro in a VM, Guacamole 1.0.0 in a VM (Ubuntu 
18.04), all hosted on a Mint 19 based box. I've not tried VRDE but the 
Win10 desktop direct, or via another Win RDP connection or Guacamole, 
performs reasonably well with no connection failures.


The one issue I have is high CPU idle usage (>100%) by the Win10 VM. As 
I understand it this is not uncommon with Win10 on Vbox, but there 
doesn't appear to be a consistent fix for it at this time (annoyingly). 
This does seem to slow down the Win10 operation at times, and it (Win) 
has crashed a couple of times, but it doesn't seem to cause any 
connection problems per se. The Ubuntu VM, and the Mint box both have 
reasonable CPU utilisation.


To carry on with your specific issue -  while you don't mention if 
you're hosting Guacamole as VM, or natively, and whether it and the Win 
VM are on the same host (part of Mike's uncertainty I think), it may be 
useful to look at resource utilisation, particularly while refreshing. 
Although I don't necessarily expect it to be a the nub of your problem 
it's a simple thing to check, just in case it's maxing out and dropping 
the connection.


Other things that would be useful to check are:

(1) do you connect to anything else with your Guacamole instance and, if 
so, are there any issues with that?


(2) How does a direct Win or Linux client RDP connection to the Win10 VM 
perform (ie. not using Guacamole)?


(3) Was your Win10 VM a new install or imported from somewhere else? If 
the latter are the network adapter settings correct (this can sometimes 
cause issues with Vbox)?


(4) Is there any anti-virus software running on the Win10 VM? If so, try 
disabling that to see if for some reason it's objecting and shutting 
down the connection.


etc...


On 22/10/2019 12:14 p.m., Peter Gui wrote:

Hello everyone.
I was just wondering if any one has experience with remote desktop in 
Windows 10 pro.
I am running Windows 10 pro in a VirtualBox VM. I have Guacamole 
configured to work with remote desktop but I am frustrated with the 
connection. The most reproducible version of this problem is a simple 
browser refresh of Guacamole's Windows connection, on reload I get the 
error message "The connection has been closed because the server is 
taking too long to respond..."  The worst part is that I have to 
reboot the VM to get it working again. I have Windows configured with 
the following settings:
modified registry keys 

ignore cert and security 

I also have a Linux VM running VNC works much more consistently. And 
VRDE  (VirtualBox's 
RDP client) also works consistently.


I see 4 potential solutions to this problem:

  * Spend more time trying to configure remote desktop in Windows.
  * Install Windows Server (which would have the added benefit of
allowing multiple connections.
  * Install and use TightVNC instead of remote desktop (also may allow
multiple connections)
  * Switch to purely using VRDE for my Windows connections (most
limiting and hacky feeling solution)

Let me know what you think of these options or if you have another 
solution.

Thanks




Re: AW: Windows 10 flaky RDP

2019-10-22 Thread ivanmarcus

That's interesting Joachim,

FWIW in the scenario I described earlier for my Win10 VM instance I 
block all M$ connections at the edge router, so the Win10 install cannot 
change - in which case I wouldn't notice if they broke anything.


I also do the same thing with a 60+ user instance of native Win machines 
I have connecting via Guacamole.


Having M$ automatically eff around with your systems is not ok IMV! At 
least if you apply a patch yourself and something stops working 
afterwards you've got a clue as to why, but it's much more difficult to 
fault find if it happens without you knowing.


Anyway, the upshot of this is that if what you say is correct then I 
would anticipate other people should have the same issue, whereas I may 
not. However I've not heard of any widespread problems (other than 
Peter's earlier) - is your flaky connection just to one machine or do 
you have it across multiple?



On 22/10/2019 8:02 p.m., Joachim Lindenberg wrote:


I am experiencing ???flaky??? connections recently with plain mstsc RDP 
connections, w10pro to w10pro. I suspect Microsoft introduced a 
regression recently.


Regards, Joachim

*Von:*Peter Gui 
*Gesendet:* Tuesday, 22 October 2019 01:14
*An:* user@guacamole.apache.org
*Betreff:* Windows 10 flaky RDP

Hello everyone.

I was just wondering if any one has experience with remote desktop in 
Windows 10 pro.


I am running Windows 10 pro in a VirtualBox VM. I have Guacamole 
configured to work with remote desktop but I am frustrated with the 
connection. The most reproducible version of this problem is a simple 
browser refresh of Guacamole's Windows connection, on reload I get the 
error message "The connection has been closed because the server is 
taking too long to respond..."  The worst part is that I have to 
reboot the VM to get it working again. I have Windows configured with 
the following settings:


modified registry keys 



ignore cert and security 



I also have a Linux VM running VNC works much more consistently. And 
VRDE  (VirtualBox's 
RDP client) also works consistently.


I see 4 potential solutions to this problem:

  * Spend more time trying to configure remote desktop in Windows.
  * Install Windows Server (which would have the added benefit of
allowing multiple connections.
  * Install and use TightVNC instead of remote desktop (also may allow
multiple connections)
  * Switch to purely using VRDE for my Windows connections (most
limiting and hacky feeling solution)

Let me know what you think of these options or if you have another 
solution.


Thanks





Re: Some info for a newbie

2019-12-10 Thread ivanmarcus

Hi,

Re your questions, this is my view:

(1) A separate instance per site would be the best, and what everyone 
would recommend. I suppose you could use a central instance and provide 
sufficient routes to each individual PC but I expect it would be much 
slower from a user perspective, and less secure - altogether a bad idea.


(2) If I understand your question I'd say you could connect to as many 
PC's as your browser and machine memory would allow. I regularly run 
several hundred tabs in Firefox, it would make little difference whether 
they were all connections to Guacamole, or any random website.


(3) I have 60+ [possible] users installed on a VM with 2Gb RAM. They do 
not all work at the same time however, I think there's typically no more 
than 10 concurrent users and it works fine. I think I upped it from 1Gb 
RAM a while ago because I thought it was getting a bit close, but it did 
work ok with that when there were less users.


(4) I'm not sure, I seem to recollect Mike or Nick may have made some 
calculation/suggestion around this - perhaps you could search the 
archives to see? If not I expect someone will respond.


(5) I can't speak from experience myself but I undertand there are 
people that have had success with a Pi. I've tended to use a VM because, 
amongst other things, it's easilyreplicable across sites and I have 
spare machines there (including machines that people also work on at the 
same time). That said I'd not hesitate to use a Pi, particularly a 4/4 
if you anticipated a few concurrent users.


(6) A while ago I wrote a small Python script that runs with Guacamole 
and sends out the necessary magic packet. In the site I have this 
running on it has worked well. Once again the detail on that is in the 
archives here: 
http://mail-archives.apache.org/mod_mbox/guacamole-user/201802.mbox/%3c1519671051084-0.p...@n4.nabble.com%3E 
Having said that I believe Nick was working on a 'proper' WOL extension 
for Guacamole at one stage. This may integrate with the GUI, allowing 
one to set the MAC address in the connection page, although that's 
purely my speculation! Nick may update us on this?


On 11/12/2019 4:40 a.m., WhiteTiger wrote:

I'm new with Guacamole.
I'm already reading the manual but I need some information to get started.
I have to connect my PC to different remote PCs located in different
locations.
There are PC and server both Windows and Linux.
Obviously, each location has a different public IP and an internal PC
network behind a router/firewall.
I currently use TeamViewer (Pro License).

1) Do I need to install a Guacamole server in each location or can I install
only one "general server"?
2) From my PC, via browser can I connect to how many remote PCs?
3) How much memory do I have to provide for the Guacamole server?
4) How much memory for each connection?
5) Can I install Guacamole on a Raspberry Pi 3/4 dedicated exclusively to
this service?

Furthermore, with TeamViewer I can see which PCs are active and if necessary
turn them on via WOL. TeamViewer uses one of the other active PCs to launch
the Magic Packet.
I suppose this is no longer possible with Guacamole.
6) So, do you have any suggestions for an alternative?

Thanks in advance.
WT



--
Sent from: 
http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org





Re: Some info for a newbie

2019-12-11 Thread ivanmarcus

If I understand your use case I guess you'd need

(1) a TSR prog running on each PC behind the router/firewall

(2) have the TSR remotely interrogable

(3) have the TSR send the magic packet to whichever local machine the 
interrogation commanded


Presumably this is something Teamview does; in my infrequent 
interactions with it I seem to recall it loads a TSR if not told otherwise.


I recollect that Mike thought there was a use case for Guacamole to do 
something similar to Teamviewer. This would be excellent in my view 
(Guacamole being open, and amongst other things the Teamviewer license 
model/cost is 'difficult' for very low and/or intermittent commercial 
use), but I expect it would require a similar small TSR of some sort to 
operate. While there are other things it would need to do I guess this 
magic packet functionality could be included...


Obviously this would require some work and while I like to help sadly 
I'm no programmer - therefore it would need to wait till whenever 
someone with the necessary skills is able to do this.


In the interim, if it were me, I'd guess I'd consider assigning one 
machine in each remote as a 'server', which doesn't have WOL enabled, 
and run a small permanent [Linux] VM effectively as a TSR that would 
allow you to interrogate and command a magic packet to whichever [other] 
machine you want to turn on.


In effect this is what I do in one office with Guacamole running as a 
permanent VM on a M$ box that is also used as a standard client machine. 
This VM allows remote access to the host and other PC's in that office. 
Should the host machine be turned off Vbox just runs on start, and loads 
the Guacamole VM in the background - in your case you'd not require 
Guacamole, just a very minimal Linux install. It's a little clunky but 
it could work?



On 12/12/2019 12:30 a.m., WhiteTiger wrote:

Thanks for the reply.
I am also used to installing services behind the firewall of remote offices.
But I often find myself in the need to connect offices with a few PCs, from
2 to 5, and it is not always possible to mount a dedicated PC or even a
Raspberry.
This is why I imagined a central server that would allow connections in this
way:
PC 1-1 = IP1: Port 6901
PC 1-2 = IP1: Port 6902
PC 2-1 = IP2: Port 6901
...
PC N-1 = IP "N": Port 6901

Obviously the local firewall addressed the traffic coming from the IP of the
Guacamole Server to the various PCs using the ports as a reference.

About your answer on WOL, I find it useless if the Guacamole server is
behind the firewall because I could very well take control of the server and
from there send the Magic Packet using one of the many Linux utilities.
The situation would be different if the server is centralized, but there
would always be the problem of how to send the Magic Packet to the various
networks via the Internet.

Team Viewer uses the other PCs in the network.
First I identify in the configuration the various PCs and when I want to
turn on the PC number 5, for example, TeamViewer goes to see if there is
another PC active and sends the Magic Packet from this to the number 5.
I don't know how to do it, I never investigated it.
However, this is convenient because if I have to connect to a PC that is
turned off, I don't have to make another remote connection just to turn it
on.
Maybe there's another utility in Linux


ivanmarcus wrote

(1) A separate instance per site would be the best, and what everyone
would recommend. I suppose you could use a central instance and provide
sufficient routes to each individual PC but I expect it would be much
slower from a user perspective, and less secure - altogether a bad idea.

...

(6) A while ago I wrote a small Python script that runs with Guacamole
and sends out the necessary magic packet. In the site I have this
running on it has worked well. Once again the detail on that is in the
archives here:
http://mail-archives.apache.org/mod_mbox/guacamole-user/201802.mbox/%
3C1519671051084-0.post@.nabble
%3E
Having said that I believe Nick was working on a 'proper' WOL extension
for Guacamole at one stage. This may integrate with the GUI, allowing
one to set the MAC address in the connection page, although that's
purely my speculation! Nick may update us on this?





--
Sent from: 
http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org





Re: RDP - Initial program

2019-12-19 Thread ivanmarcus
I've not needed to do anything like this, so perhaps I'm missing 
something, but I guess you could write the necessary script and wrap it 
up as an .exe if it won't run as a batch file on start?


Other than that, would this be of any use?: 
https://docs.microsoft.com/en-us/dotnet/api/system.serviceprocess.sessionchangedescription?redirectedfrom=MSDN&view=netframework-4.8


On 20/12/2019 7:59 a.m., Ashish Purohit wrote:

Yes I tried with MS Remote Desktop Client and it didn't work . I read
few articles about it and they have mentioned to enable terminal
services . With Terminal service enable it is opening only as single
app mode same as remote app. But we want to render complete desktop
and execute script or exe file on background for every user login to
capture session's details

  I am trying to understand if we can use initial program to run
background script for every user's login ?  Do you have any suggestion
how to accomplish this?


On Thu, Dec 19, 2019 at 1:34 PM Nick Couchman  wrote:

On Thu, Dec 19, 2019 at 1:24 PM Ashish Purohit  
wrote:

Hi ,

I would like to appreciate and thanks entire Apache guacamole team for
the wonderful product .

I am trying to execute an program on every users login to fetch the
LOGONID from security event to track user's activities. I am unable to
run the exe file using Initial-program parameter . I am passing it as
GuacamoleConfiguration parameter through custom Guacamole client code
as config.setParameter("initial-program"," full path to exe file"). Is
there something  I am  missing here?


Have you tried with something other than Guacamole to see if it works as 
expected - either xfreerdp or MS Remote Desktop Client?

-Nick

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org





Re: Guacamole Stopped - guacd = Unable to bind socket to any addresses.

2020-01-20 Thread ivanmarcus

Dennis,

I've had nothing to do with CentOS (so you might need to modifiy the 
paths/filenames I give below) but the detail Mike is talking about may 
be located in your syslog.


This is what I'd do in Ubuntu/Debian:

cat /var/log/syslog | grep guacd   - this will troll through the system 
log and report any line that starts with 'guacd'


At some point you may also want to look at the tomcat catalina.out file.

tail -600 /var/log/tomcat7/catalina.out | less   - would give you the 
last 600 lines of this log file, piping it to less which will allow you 
to scroll through it nicely. You can change the 600 to any number you 
like, or use 'f' which will give you a live view.


With luck the data in these log files will give you some pointers as to 
what's going on.



On 21/01/2020 9:44 a.m., Newman, Dennis wrote:


No other messages when guacd started

Connecting to the website as guacadmin gives me the full user and 
system config pages – but attempting to connect to any remote desktop 
times out


Forgive my ignorance, but where would I read the guacd log?  I don’t 
see any logs by that name.


Dennis

*From:* Mike Jumper 
*Sent:* Monday, January 20, 2020 2:26 PM
*To:* user@guacamole.apache.org
*Subject:* Re: Guacamole Stopped - guacd = Unable to bind socket to 
any addresses.


On Mon, Jan 20, 2020 at 12:17 PM Newman, Dennis 
mailto:dennis.new...@spglobal.com>> wrote:


... Now the Guacamole Gateway is reachable – but nobody can
connect to their RDP sessions.

Killed guacd

Restarted guacd – get

Guacamole proxy daemon (guacd) version 1.0.0 started

But still cannot connect to any remote desktop sessions

Is guacd now running? What other messages are logged by guacd as it 
starts?


What messages are logged by guacd when a failed attempt is made to 
connect to a remote desktop?


- Mike




The information contained in this message is intended only for the 
recipient, and may be a confidential attorney-client communication or 
may otherwise be privileged and confidential and protected from 
disclosure. If the reader of this message is not the intended 
recipient, or an employee or agent responsible for delivering this 
message to the intended recipient, please be aware that any 
dissemination or copying of this communication is strictly prohibited. 
If you have received this communication in error, please immediately 
notify us by replying to the message and deleting it from your 
computer. S&P Global Inc. reserves the right, subject to applicable 
local law, to monitor, review and process the content of any 
electronic message or information sent to or from S&P Global Inc. 
e-mail addresses without informing the sender or recipient of the 
message. By sending electronic message or information to S&P Global 
Inc. e-mail addresses you, as the sender, are consenting to S&P Global 
Inc. processing any of your personal data therein.




Install process for Apache Guacamole 1.1.0 on Ubuntu 18.04.3 server

2020-01-30 Thread ivanmarcus

Thanks for the new version of Guacamole :-)

I thought it might be useful to update the previous step-by-step install 
detail I'd done for Guacamole 1.0.0 on Ubuntu 18.04.2 server.


The following worked for me in a new VM, but note that I installed 
libpng-dev rather than libpng12-dev, seemingly with no detriment. Also I 
didn't need to create a reduced-privilege user with writable home 
directory as I understand has been required for some. That said my 
testing has been brief and limited to one RDP session only, so YMMV...


---

su
apt-get install build-essential libcairo2-dev libjpeg-turbo8-dev 
libpng-dev libtool-bin libossp-uuid-dev libavcodec-dev libavutil-dev 
libswscale-dev freerdp2-dev libpango1.0-dev libssh2-1-dev libtelnet-dev 
libvncserver-dev libwebsockets-dev libpulse-dev libssl-dev libvorbis-dev 
libwebp-dev

apt-get install tomcat8 tomcat8-admin tomcat8-common tomcat8-user
cd /tmp
wget 
https://www.apache.org/dist/guacamole/1.1.0/source/guacamole-server-1.1.0.tar.gz

tar -zxvf guacamole-server-1.1.0.tar.gz
cd guacamole-server-1.1.0
./configure --with-init-dir=/etc/init.d
make
make install
ldconfig
wget https://www.apache.org/dist/guacamole/1.1.0/binary/guacamole-1.1.0.war
mkdir /etc/guacamole
cp guacamole-1.1.0.war /etc/guacamole/guacamole.war
ln -s /etc/guacamole/guacamole.war /var/lib/tomcat8/webapps/
systemctl restart tomcat8
systemctl enable guacd
systemctl start guacd

# Above this line should work in standard auth mode, below is detail for 
MySQL auth


su
cd /tmp
apt-get install mysql-server
apt-get install libmysql-java
wget 
https://www.apache.org/dist/guacamole/1.1.0/binary/guacamole-auth-jdbc-1.1.0.tar.gz

tar -zxvf guacamole-auth-jdbc-1.1.0.tar.gz
mkdir /etc/guacamole/extensions
mkdir /etc/guacamole/lib
cp guacamole-auth-jdbc-1.1.0/mysql/guacamole-auth-jdbc-mysql-1.1.0.jar 
/etc/guacamole/extensions/

nano /etc/guacamole/guacamole.properties

mysql-hostname: localhost
mysql-port: 3306
mysql-database: guacamole_db
mysql-username: guacamole_user
mysql-password:
(ctrl-x then y)

mysql -u root -p

create database guacamole_db;
create user 'guacamole_user'@'localhost' identified by '';
grant select,insert,update,delete on guacamole_db.* to 
'guacamole_user'@'localhost';

flush privileges;
quit

cat guacamole-auth-jdbc-1.1.0/mysql/schema/*.sql | mysql -u root -p 
guacamole_db

ln -s /usr/share/java/mysql-connector-java.jar /etc/guacamole/lib/
systemctl restart guacd
systemctl restart tomcat8.service


Go to http://:8080/guacamole
Default login guacadmin:guacadmin


Re: Install process for Apache Guacamole 1.1.0 on Ubuntu 18.04.3 server

2020-01-31 Thread ivanmarcus

Hi David,

No particular reason, other perhaps than that I'm fairly [very] 
conservative and had no issues with Tomcat 8.


However I've just spun up a new VM and installed Guacamole+Tomcat 9, and 
am writing this via that installation now. It should have some more 
testing I suppose but at this stage it appears to be working fine.


I did nothing more than replace '8' with '9' in the list, but for 
completeness and to save anyone else the need!:


---

su
apt-get install build-essential libcairo2-dev libjpeg-turbo8-dev 
libpng-dev libtool-bin libossp-uuid-dev libavcodec-dev libavutil-dev 
libswscale-dev freerdp2-dev libpango1.0-dev libssh2-1-dev libtelnet-dev 
libvncserver-dev libwebsockets-dev libpulse-dev libssl-dev libvorbis-dev 
libwebp-dev

apt-get install tomcat9 tomcat9-admin tomcat9-common tomcat9-user
cd /tmp
wget 
https://www.apache.org/dist/guacamole/1.1.0/source/guacamole-server-1.1.0.tar.gz

tar -zxvf guacamole-server-1.1.0.tar.gz
cd guacamole-server-1.1.0
./configure --with-init-dir=/etc/init.d
make
make install
ldconfig
wget https://www.apache.org/dist/guacamole/1.1.0/binary/guacamole-1.1.0.war
mkdir /etc/guacamole
cp guacamole-1.1.0.war /etc/guacamole/guacamole.war
ln -s /etc/guacamole/guacamole.war /var/lib/tomcat9/webapps/
systemctl restart tomcat9
systemctl enable guacd
systemctl start guacd

# Above this line should work in standard auth mode, below is detail for 
MySQL auth


su
cd /tmp
apt-get install mysql-server
apt-get install libmysql-java
wget 
https://www.apache.org/dist/guacamole/1.1.0/binary/guacamole-auth-jdbc-1.1.0.tar.gz

tar -zxvf guacamole-auth-jdbc-1.1.0.tar.gz
mkdir /etc/guacamole/extensions
mkdir /etc/guacamole/lib
cp guacamole-auth-jdbc-1.1.0/mysql/guacamole-auth-jdbc-mysql-1.1.0.jar 
/etc/guacamole/extensions/

nano /etc/guacamole/guacamole.properties

mysql-hostname: localhost
mysql-port: 3306
mysql-database: guacamole_db
mysql-username: guacamole_user
mysql-password:
(ctrl-x then y)

mysql -u root -p

create database guacamole_db;
create user 'guacamole_user'@'localhost' identified by '';
grant select,insert,update,delete on guacamole_db.* to 
'guacamole_user'@'localhost';

flush privileges;
quit

cat guacamole-auth-jdbc-1.1.0/mysql/schema/*.sql | mysql -u root -p 
guacamole_db

ln -s /usr/share/java/mysql-connector-java.jar /etc/guacamole/lib/
systemctl restart guacd
systemctl restart tomcat9.service


Go to http://:8080/guacamole
Default login guacadmin:guacadmin



On 31/01/2020 11:54 p.m., David Barber wrote:

Nice job there ivanmarcus,

 can i just ask is there a reason you are still favouring tomcat 8 
over 9? (9 is quite mature now?)



ivanmarcus wrote:

Thanks for the new version of Guacamole :-)

I thought it might be useful to update the previous step-by-step 
install detail I'd done for Guacamole 1.0.0 on Ubuntu 18.04.2 server.


The following worked for me in a new VM, but note that I installed 
libpng-dev rather than libpng12-dev, seemingly with no detriment. 
Also I didn't need to create a reduced-privilege user with writable 
home directory as I understand has been required for some. That said 
my testing has been brief and limited to one RDP session only, so 
YMMV...


---

su
apt-get install build-essential libcairo2-dev libjpeg-turbo8-dev 
libpng-dev libtool-bin libossp-uuid-dev libavcodec-dev libavutil-dev 
libswscale-dev freerdp2-dev libpango1.0-dev libssh2-1-dev 
libtelnet-dev libvncserver-dev libwebsockets-dev libpulse-dev 
libssl-dev libvorbis-dev libwebp-dev

apt-get install tomcat8 tomcat8-admin tomcat8-common tomcat8-user
cd /tmp
wget 
https://www.apache.org/dist/guacamole/1.1.0/source/guacamole-server-1.1.0.tar.gz

tar -zxvf guacamole-server-1.1.0.tar.gz
cd guacamole-server-1.1.0
./configure --with-init-dir=/etc/init.d
make
make install
ldconfig
wget 
https://www.apache.org/dist/guacamole/1.1.0/binary/guacamole-1.1.0.war

mkdir /etc/guacamole
cp guacamole-1.1.0.war /etc/guacamole/guacamole.war
ln -s /etc/guacamole/guacamole.war /var/lib/tomcat8/webapps/
systemctl restart tomcat8
systemctl enable guacd
systemctl start guacd

# Above this line should work in standard auth mode, below is detail 
for MySQL auth


su
cd /tmp
apt-get install mysql-server
apt-get install libmysql-java
wget 
https://www.apache.org/dist/guacamole/1.1.0/binary/guacamole-auth-jdbc-1.1.0.tar.gz

tar -zxvf guacamole-auth-jdbc-1.1.0.tar.gz
mkdir /etc/guacamole/extensions
mkdir /etc/guacamole/lib
cp 
guacamole-auth-jdbc-1.1.0/mysql/guacamole-auth-jdbc-mysql-1.1.0.jar 
/etc/guacamole/extensions/

nano /etc/guacamole/guacamole.properties

mysql-hostname: localhost
mysql-port: 3306
mysql-database: guacamole_db
mysql-username: guacamole_user
mysql-password:
(ctrl-x then y)

mysql -u root -p

create database guacamole_db;
create user 'guacamole_user'@'localhost' identified by '';
grant select,insert,update,delete on guacamole_db.* to 
'guacamole_

Re: FreeRDP Writable User Home Dir?

2020-02-04 Thread ivanmarcus
I can't completely answer your question but thought I'd drop in to say 
that in the several instances of Guacamole I have running I always check 
'ignore cert', IOW I consider this normal practice.


In my largest installation (~60 possible users), presently utilising 
Guacamole 1.0.0., we have a mix of Win7 and Win10 machines.  If I don't 
check the box at least one group of machines fails to connect (it's 
currently in use so I can't check for sure which group - or if it's both).


Given what I've read I suspect it occurs due to uncheckable self-signed 
certs, but I've never pursued the 'why'. As I trust the machines I set 
the specific connections up for within the internal network I don't see 
the need to go much further in terms of security checking.



On 5/02/2020 5:00 a.m., Zer0Cool wrote:

Rebooted (though restarting services would likely work too) and got past the
home dir error, however I faced a new error (/var/log/messages) and RDP not
connecting:

guacd[9918]: Certificate validation failed
guacd: guacd[9918]: INFO:#011Certificate validation failed
guacd: guacd[9918]: ERROR:#011Error connecting to RDP server
guacd[9918]: Error connecting to RDP server

The client is a Windows 7 Pro box. I found that if I checked the box for
this connection labeled "Ignore server certificate" then I could connect to
this connection.

Any idea why this would be needed? Previously, Guac 1.0.0, freerdp 1.x,
CentOS 7.7 and the same Windows 7 client did not require this box to be
checked to connect.

What does the error actually mean? What certificate failed verification? IS
this correctable or is the only option to ignore the cert?




Re: Blank logon screen

2020-02-05 Thread ivanmarcus

Seth,

Probably asking the obvious but did you do _anything_ else after your 
fresh install - any other upgrades or changes?


Seems quite similar to this earlier issue:

https://sourceforge.net/p/guacamole/discussion/1110834/thread/d09a44e6/


On 6/02/2020 4:23 p.m., Seth Atangcho wrote:


I recently did a fresh install of Guacamole 1.0.0 on a CentOS 7 server 
and I was able to successfully logon the first couple of times. 
However, after a while, I would get a blank logon screen and get this 
error message in the logs:


13:23:26.728 [http-bio-8080-exec-8] ERROR o.a.g.rest.RESTExceptionMapper - 
Unexpected internal error:
### Error querying database.  Cause: java.sql.SQLException: Error setting 
driver on UnpooledDataSource. Cause: java.lang.ClassNotFoundException: 
com.mysql.jdbc.Driver
### The error may exist in org/apache/guacamole/auth/jdbc/user/UserMapper.xml
### The error may involve 
org.apache.guacamole.auth.jdbc.user.UserMapper.selectOne
### The error occurred while executing a query
### Cause: java.sql.SQLException: Error setting driver on UnpooledDataSource. 
Cause: java.lang.ClassNotFoundException: com.mysql.jdbc.Driver



I have the driver in the /lib directory

> cd /usr/share/tomcat/.guacamole/lib/
  :lib -> ls
  mysql-connector-java-8.0.19 mysql-connector-java-8.0.19(1).tar.gz 
mysql-connector-java-8.0.19.jar

I recently installed a platform independent version of the driver from 
MySQL's dev website, which temporarily fixed the problem.


Need help ASAP.

Thanks,

Seth


--
Seth G Atangcho, CTR, CTA
Systems Administrator
DoD Cyber Crime Center
(410) 694-6622
seth.atangcho@dc3.mil 
seth.atang...@dcita.edu 




Re:

2020-02-07 Thread ivanmarcus

Manoj,

I wouldn't have thought 1.2MB too onerous, and I suspect you can't 
change the .js interaction, but you could have a look at this extension:


https://github.com/Zer0CoolX/guacamole-customize-loginscreen-extension

I've not utilised it myself, and I don't know to what extent you could 
reduce the transaction bandwith with it, however it may give you some 
pointers/assistance for what you want to do?


I hesitate to comment on things that I don't know much about, however I 
wonder if with some experimentation you may be able to reduce the font 
requirements?




On 7/02/2020 10:32 p.m., Manoj Patil wrote:

Hello Team,

We are facing problem while loading guacamole login page that most of 
bandwidth around 1.2 MB is used per user login page load.


We have deployed lots of clients on this platform and almost all of 
available bandwidth is used by guacamole login page.


FYR i have attached screenshot indicating bandwidth usage.

--
Thanks & Regards,

Manoj Patil.(Asst. Manager DBA)
Netwin Systems & Softwares(I) Pvt.Ltd
Nasik.
Mobile No -+91-9922507588
Email- manoj2pa...@gmail.com 


-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org




Re: TOTP enable

2020-02-08 Thread ivanmarcus

Manoj,

This:

https://guacamole.apache.org/doc/gug/totp-auth.html

and this:

http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/How-to-Guacamole-with-Google-Authenticator-for-2FA-td1843.html

and also this:

https://github.com/Zer0CoolX/guacamole-install-rhel/wiki/TOTP-2FA

May be of some assistance?


On 9/02/2020 12:28 a.m., Manoj Patil wrote:

Dear,

I want to enable TOTP in guacamole setup please guide me .
 and how this work.

--
Thanks & Regards,

Manoj Patil.(Asst. Manager DBA)
Netwin Systems & Softwares(I) Pvt.Ltd
Nasik.
Mobile No -+91-9922507588
Email- manoj2pa...@gmail.com 




Re: Error 114 in gaucd?

2020-02-14 Thread ivanmarcus
I'm not familiar with the error, and I don't know what the most recent 
form of that script does in terms of installed packages, but it may be 
worth checking the version of FreeRDP you have installed is compatible 
with whatever version of Guacamole you are running?


Guacamole 1.1.0 uses FreeRDP 2, earlier versions require FreerRDP 1.

Also, if you'd like to check out this thread you'll see a cople of posts 
I made that show the steps required to install Guacamole 1.1.0 to a 
fresh Ubuntu server 18.04.2 VM:


http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/ANNOUNCE-Apache-Guacamole-1-1-0-td7127.html

I ran through that install process several times so I'm reasonably happy 
it should work 'out of the box' for RDP sessions if you followed the 
steps laid down.




On 15/02/2020 10:16 a.m., bferrell wrote:

I used Mystic's  install script
   to get Guacamole running
in a new Ubuntu 18.04 VM, and it connects to my Linux VNC clients fine, but
when I try to RDP it drops to black, tries to connect, and then fails with a
"you have been disconnected message".  When I look at my syslog I see this.


Feb 14 21:03:29 guacamole guacd[1503]: Creating new client for protocol
"rdp"
Feb 14 21:03:29 guacamole guacd[1503]: Connection ID is "$xyz"
Feb 14 21:03:30 guacamole guacd[29738]: No security mode specified.
Defaulting to security mode negotiation with server.
Feb 14 21:03:30 guacamole guacd[29738]: Resize method: none
Feb 14 21:03:30 guacamole guacd[29738]: User "@abc" joined connection "$xyz"
(1 users now present)
Feb 14 21:03:30 guacamole guacd[29738]: Loading keymap "base"
Feb 14 21:03:30 guacamole guacd[29738]: Loading keymap "en-us-qwerty"
Feb 14 21:03:30 guacamole guacd[29738]: Connected to RDPDR 1.13 as client
0x0004
Feb 14 21:03:31 guacamole *kernel: [70397.118595] guacd[29744]: segfault at
0 ip  sp 7f388b7dcb18 error 14 in
guacd*[55899f077000+7000]
Feb 14 21:03:31 guacamole guacd[1503]: Connection "$xyz" removed.



--
Sent from: 
http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org





Re: Error 114 in gaucd?

2020-02-16 Thread ivanmarcus
Ok, sorry, I've never had that error and not knowing what had transpired 
during the script install thought it may have been something to do with 
that...


However, given you've utilised the steps I posted, and I know for sure 
that works for Win10, you may simply find it's a matter of setting the 
correct parameters in Guacamole and/or the Win10 box.


Other than the requisite IP address and port etc my Guacamole is set 
only to "ignore server certificate" (and one or two other things 
regarding font smooting and colour depth). Try setting that if you 
haven't already.


Unfortunately the notes I have for my Win7/10 clients aren't to hand at 
present, so I can't be sure if there's anything else we do, but if that 
doesn't work you could try disabling NLA on the Win10 box to see if that 
sorts it out.



On 16/02/2020 5:38 p.m., Brett Ferrell wrote:

Ivan,

Thanks, I just spun a fresh VM and ran through your steps (starting 
with the 1:18 am posting), and everything seemed to go OK, but I still 
get the ERROR 14 connecting to my Win10 VMs.


So, probably my other setup is/was working OK, and there's something 
odd in my (Win10) configuration, but I can't think of what it might 
be.  As I say, I can RDP with the MS Mac client and Remmina (which is 
totally vanilla) from the guac VM, so I know the client can work, and 
both of my Guac vms are throwing this error.  I'm sure that should be 
telling me something, but I have no idea what it is.



Feb 16 04:21:34 guacdev guacd[31201]: Creating new client for 
protocol "rdp"
Feb 16 04:21:34 guacdev guacd[31201]: Connection ID is 
"$ed6a7ee8-e082-4dfb-be73

-9cdd920d080f"
Feb 16 04:21:34 guacdev guacd[32066]: No security mode specified. 
Defaulting to

security mode negotiation with server.
Feb 16 04:21:34 guacdev guacd[32066]: Resize method: none
Feb 16 04:21:34 guacdev guacd[32066]: User 
"@7866772d-d299-4583-b95f-b87d1682598
4" joined connection "$ed6a7ee8-e082-4dfb-be73-9cdd920d080f" (1 users 
now presen

t)
Feb 16 04:21:34 guacdev guacd[32066]: Loading keymap "base"
Feb 16 04:21:34 guacdev guacd[32066]: Loading keymap "en-us-qwerty"
Feb 16 04:21:35 guacdev guacd[32066]: Connected to RDPDR 1.13 as 
client 0x0002
Feb 16 04:21:35 guacdev kernel: [ 4967.241677] guacd[32072]: segfault 
at 0 ip 00
00 sp 7f925133db18 *_error 14 in 
guacd_*[5576d4bbf000+7000]
Feb 16 04:21:35 guacdev guacd[31201]: Connection 
"$ed6a7ee8-e082-4dfb-be73-9cdd9

20d080f" removed.

bferrell@clone:/var/log$ lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description: *Ubuntu 18.04.4 LTS*
Release: 18.04
Codename: bionic



--
Brett Ferrell
bferr...@fastmail.fm <mailto:bferr...@fastmail.fm>




On Fri, Feb 14, 2020, at 7:06 PM, ivanmarcus wrote:


I'm not familiar with the error, and I don't know what the most 
recent form of that script does in terms of installed packages, but 
it may be worth checking the version of FreeRDP you have installed is 
compatible with whatever version of Guacamole you are running?


Guacamole 1.1.0 uses FreeRDP 2, earlier versions require FreerRDP 1.

Also, if you'd like to check out this thread you'll see a cople of 
posts I made that show the steps required to install Guacamole 1.1.0 
to a fresh Ubuntu server 18.04.2 VM:


http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/ANNOUNCE-Apache-Guacamole-1-1-0-td7127.html

I ran through that install process several times so I'm reasonably 
happy it should work 'out of the box' for RDP sessions if you 
followed the steps laid down.




On 15/02/2020 10:16 a.m., bferrell wrote:

I used Mystic's  install script
<https://github.com/MysticRyuujin/guac-install> 
<https://github.com/MysticRyuujin/guac-install>to get Guacamole running

in a new Ubuntu 18.04 VM, and it connects to my Linux VNC clients fine, but
when I try to RDP it drops to black, tries to connect, and then fails with a
"you have been disconnected message".  When I look at my syslog I see this.


Feb 14 21:03:29 guacamole guacd[1503]: Creating new client for protocol
"rdp"
Feb 14 21:03:29 guacamole guacd[1503]: Connection ID is "$xyz"
Feb 14 21:03:30 guacamole guacd[29738]: No security mode specified.
Defaulting to security mode negotiation with server.
Feb 14 21:03:30 guacamole guacd[29738]: Resize method: none
Feb 14 21:03:30 guacamole guacd[29738]: User "@abc" joined connection "$xyz"
(1 users now present)
Feb 14 21:03:30 guacamole guacd[29738]: Loading keymap "base"
Feb 14 21:03:30 guacamole guacd[29738]: Loading keymap "en-us-qwerty"
Feb 14 21:03:30 guacamole guacd[29738]: Connected to RDPDR 1.13 as client
0x0004
Feb 14 21:03:31 guacamole *kernel: [70397.118595] guacd[29744]: segfault at
0 ip  sp 7f388b7dcb18 erro

Re: Required help for reducing High Bandwidth Utilization of Guacamole

2020-02-16 Thread ivanmarcus

In the Guacamole GUI there's a tickbox 'disable audio'

You could also check this out:

http://guacamole.apache.org/doc/gug/configuring-guacamole.html

which explains how the audio works (and from that perhaps how you might 
deal with it in your configuration).



On 16/02/2020 12:05 p.m., Manoj Patil wrote:

Hi
I agree to we can not send u un- encrypted traffic for checking but as 
per discussion I ask you how to check at guacamole end if audio is 
enabled? And if enabled then give me solution for disable the audio 
streaming


On Thu, 13 Feb 2020, 22:19 Nick Couchman, > wrote:


On Thu, Feb 13, 2020 at 9:03 AM Manoj Patil mailto:manoj2pa...@gmail.com>> wrote:

Hello Mike,

We have investigate further and there in we found that there's
an continues ACK/SYN/PING traffic flows between server and
client for an absolutely idle session.


Yes, this is by design - the Guacamole protocol has built-in
mechanisms to verify that the connection is still active and
prevent the server (guacd) from dropping the connection.  However,
as Mike stated, the amount of traffic generates solely for keeping
alive an idle connection is very low - 17Kb/s - so it does not
account for all of the traffic you are seeing - something else is
going on.

Due to which number of packets and in turn data exchange
increases continuously for an absolutely idle session.


Absolutely idle is a little bit of a misnomer, here. If a session
is in progress, it will *never* be "absolutely idle" - that is,
there will always be some amount of minimal data exchange in order
to keep the session alive - else it will shut down.  This is true
of pretty much any protocol - RDP, VNC, SSH, Telnet, and Guacamole
- all will have some minimal amount of overhead client/server
traffic even when there are no mouse/keyboard actions and the
screen is not being updated.


Can you please guide us on how to stop continues server
PING/NOP/ACK/SYN ?


No, this cannot be disabled without changing the code, and the
result would be undesirable - the remote connection would shut
down.  And, this isn't a problem - again, the amount of data
you're seeing shows that something else is going on aside from a
completely idle connection.  You might check and see if audio is
being generated that would account for the higher bandwidth
utilization, or if file sharing is enabled.

And, as Mike said, in order to truly debug what's going on, here,
you need to look at the traffic un-encrypted.  This will allow you
to see the actual Guacamole protocol packets that are being
exchanged and figure out where the data is coming from.

-Nick





Re: Error 114 in gaucd?

2020-02-16 Thread ivanmarcus

Here's an abridged version of what we do for the Win machines:


Use secpol, set to not display last username

Set account lockout threshold, duration and counter

Allow connections from any version of RD

Regedit:
 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal 
Server\WinStations\RDP-Tcp]

“SecurityLayer”=dword:0001

As we use WOL there's also some power management stuff to set.


Guacacmole I've previously described. FYI I don't set the sim 
connection, nor do I set authentication detail (users first log into 
Guacamole, then need to enter their Win user/pass).


This works fine, however I did have a similar issue to what you describe 
with another client (Remmina worked, Win RDP client worked fine, but 
Guacamole wouldn't) and although I no longer recollect the error number 
in the end it turned out to be some specific security policy they'd 
implemented on the Winboxen.


As I wasn't too involved in that side of it I can't be any more specific 
but the above may be enough for you to get it operational anyway?




On 17/02/2020 5:15 a.m., Brett Ferrell wrote:
Yea, I've tried with and without NLA enabled on the target, and have 
turned on ignore cert in gauc.  Remmina seems only to have 32bit 
color, negotiate security, and sound off, and it connects fine. I'm 
sure I'm doing something wrong, but just in case someone sees it when 
I don't.  I really do appreciate the input.


  * MacOS RDP connects fine
  * Remmina on GuacVM connects fine


  * NLA is disabled on Win10 target
  * Guac-have checked IP and port (actual doesn't seem to care if port
is blank)
  * Guac-have checked to 'ignore cert' (it does seem to need this)
  * Guac-have set to 32b color (doesn't seem to care about this)
  * Guac-have checked pass/user (it clearly breaks with a bad pass)
  * Guac-have selected RDP protocol/location root
  * Guac-have set simultaneous connections to 10/10
  * Guac-security method, have tried blank/any/and NLA (when NLA was
turned on on Win10)
  * Guac-everything else is blank
  * Guac-log seems to connect briefly before the error 14 in guacd
  * Guac-SSH protocol connects fine


Any RDP connection ends with ERROR 14.  I think I'll try spinning up a 
Ubuntu 16 VM to see if it acts different.  Very odd and annoying.



--
Brett Ferrell
bferr...@fastmail.fm <mailto:bferr...@fastmail.fm>




On Sun, Feb 16, 2020, at 3:51 AM, ivanmarcus wrote:


Ok, sorry, I've never had that error and not knowing what had 
transpired during the script install thought it may have been 
something to do with that...


However, given you've utilised the steps I posted, and I know for 
sure that works for Win10, you may simply find it's a matter of 
setting the correct parameters in Guacamole and/or the Win10 box.


Other than the requisite IP address and port etc my Guacamole is set 
only to "ignore server certificate" (and one or two other things 
regarding font smooting and colour depth). Try setting that if you 
haven't already.


Unfortunately the notes I have for my Win7/10 clients aren't to hand 
at present, so I can't be sure if there's anything else we do, but if 
that doesn't work you could try disabling NLA on the Win10 box to see 
if that sorts it out.



On 16/02/2020 5:38 p.m., Brett Ferrell wrote:

Ivan,

Thanks, I just spun a fresh VM and ran through your steps (starting 
with the 1:18 am posting), and everything seemed to go OK, but I 
still get the ERROR 14 connecting to my Win10 VMs.


So, probably my other setup is/was working OK, and there's something 
odd in my (Win10) configuration, but I can't think of what it might 
be.  As I say, I can RDP with the MS Mac client and Remmina (which 
is totally vanilla) from the guac VM, so I know the client can work, 
and both of my Guac vms are throwing this error.  I'm sure that 
should be telling me something, but I have no idea what it is.



Feb 16 04:21:34 guacdev guacd[31201]: Creating new client for 
protocol "rdp"
Feb 16 04:21:34 guacdev guacd[31201]: Connection ID is 
"$ed6a7ee8-e082-4dfb-be73

-9cdd920d080f"
Feb 16 04:21:34 guacdev guacd[32066]: No security mode specified. 
Defaulting to

security mode negotiation with server.
Feb 16 04:21:34 guacdev guacd[32066]: Resize method: none
Feb 16 04:21:34 guacdev guacd[32066]: User 
"@7866772d-d299-4583-b95f-b87d1682598
4" joined connection "$ed6a7ee8-e082-4dfb-be73-9cdd920d080f" (1 
users now presen

t)
Feb 16 04:21:34 guacdev guacd[32066]: Loading keymap "base"
Feb 16 04:21:34 guacdev guacd[32066]: Loading keymap "en-us-qwerty"
Feb 16 04:21:35 guacdev guacd[32066]: Connected to RDPDR 1.13 as 
client 0x0002
Feb 16 04:21:35 guacdev kernel: [ 4967.241677] guacd[32072]: 
segfault at 0 ip 00
00 sp 7f925133db18 *_error 14 in 
guacd_*[5576d4bbf000+7000]
Feb 16 04:2

Re: Error 114 in gaucd?

2020-02-16 Thread ivanmarcus

Brett (and Andrew),

It does seem there's some RD issues with Win10 1903 vs 1809, although 
they're meant to be addressed by now.


If you've still got the 18.04 VM running with Guacamole 1.1.0 you could 
try disabling "use WDDM graphics display driver for remote desktop 
connection" in the Win10 machine?


This should be available via Group Policy Editor:

-Local Computer Policy
-Computer Configuration
-Administrative Templates
-Windows Components
-Remote Desktop Services
-Remote Session Environment

It could be a complete red herring, but if it were me I'd spend a couple 
of minutes trying it out.


As I expect you know Guacamole 1.0.0 uses FreeRDP 1.x whereas 1.1.0 
utilises the new FreeRDP 2. I believe this is still in beta; maybe 
there's some issues still to be resolved and although I didn't see any 
from a cursory inspection it might be worth a more in-depth check?



On 17/02/2020 4:29 p.m., Brett Ferrell wrote:
All: I just finished setting up a 16.04 with 1.0.0 and it works fine 
(Yah!).  Not sure if the issue is with 18.04 or 1.1.0 yet.  I will 
look back around and try 1.0.0 on 18.04 at some point and report 
back.  I'd rather be on 18.04, and I a hunch it's something to do with 
1.1.  We'll see.



--
Brett Ferrell
bferr...@fastmail.fm <mailto:bferr...@fastmail.fm>




On Sun, Feb 16, 2020, at 8:20 PM, Andrew Sedlak wrote:

Hi all,
I ran into the exact same issue and found the following RDP weirdness 
with Guacamole 1.1.0

Connecting to Windows 7 machines posed no issues.
Connecting to a Windows 2012R2 posed no issues.
Connecting to Windows 10 (1809) posed no issues.
However once I upgraded that particular windows 10 machine to 1903, 
the issue began.
I tested both a physical and VM with same results. 1809 worked fine, 
1903 gave the error.

Have a great day,
Andrew
On 17 Feb. 2020, 11:12, at 11:12, ivanmarcus 
 wrote:

>Here's an abridged version of what we do for the Win machines:
>
>
>Use secpol, set to not display last username
>
>Set account lockout threshold, duration and counter
>
>Allow connections from any version of RD
>
>Regedit:
> [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal
>Server\WinStations\RDP-Tcp]
>???SecurityLayer???=dword:0001
>
>As we use WOL there's also some power management stuff to set.
>
>
>Guacacmole I've previously described. FYI I don't set the sim
>connection, nor do I set authentication detail (users first log into
>Guacamole, then need to enter their Win user/pass).
>
>This works fine, however I did have a similar issue to what you
>describe
>with another client (Remmina worked, Win RDP client worked fine, but
>Guacamole wouldn't) and although I no longer recollect the error number
>
>in the end it turned out to be some specific security policy they'd
>implemented on the Winboxen.
>
>As I wasn't too involved in that side of it I can't be any more
>specific
>but the above may be enough for you to get it operational anyway?
>
>
>
>On 17/02/2020 5:15 a.m., Brett Ferrell wrote:
>> Yea, I've tried with and without NLA enabled on the target, and have
>> turned on ignore cert in gauc.  Remmina seems only to have 32bit
>> color, negotiate security, and sound off, and it connects fine. I'm
>> sure I'm doing something wrong, but just in case someone sees it when
>
>> I don't.  I really do appreciate the input.
>>
>>   * MacOS RDP connects fine
>>   * Remmina on GuacVM connects fine
>>
>>
>>   * NLA is disabled on Win10 target
>>   * Guac-have checked IP and port (actual doesn't seem to care if
>port
>> is blank)
>>   * Guac-have checked to 'ignore cert' (it does seem to need this)
>>   * Guac-have set to 32b color (doesn't seem to care about this)
>>   * Guac-have checked pass/user (it clearly breaks with a bad pass)
>>   * Guac-have selected RDP protocol/location root
>>   * Guac-have set simultaneous connections to 10/10
>>   * Guac-security method, have tried blank/any/and NLA (when NLA was
>> turned on on Win10)
>>   * Guac-everything else is blank
>>   * Guac-log seems to connect briefly before the error 14 in guacd
>>   * Guac-SSH protocol connects fine
>>
>>
>> Any RDP connection ends with ERROR 14. I think I'll try spinning up
>a
>> Ubuntu 16 VM to see if it acts different.  Very odd and annoying.
>>
>>
>> --
>> Brett Ferrell
>> bferr...@fastmail.fm <mailto:bferr...@fastmail.fm>
>>
>>
>>
>>
>> On Sun, Feb 16, 2020, at 3:51 AM, ivanmarcus wrote:
>>>
>>> Ok, sorry, I've never had that error and not knowing what had
>>> tr

Re: Error 114 in gaucd?

2020-02-17 Thread ivanmarcus
As I understand it the fundamental issue is primarily down to OEM 
graphics drivers for older machines being incompatible with the >1903 
version of Win 10.


Although I've not had the problem myself it initially seemed to me from 
what I read that it's all to do with the server end and there'd be 
nothing the client could do, but further reading, and from what Brett 
and Andrew report, it suggests that may not be the case?


While the issue appears to be recognised, and the WDDM->XDDM change on 
the server fixes it, I couldn't find anything that explicitly sorted it 
from the client end using FreeRDP. Most writers suggested it was up to 
M$ to fix, and patch KB4512941 was meant to deal with it, but I get the 
feeling that doesn't actually sort it either.


From some further reading it seemed possible that there could also be a 
link between the issue and particular VM's, but it appeared a little 
tenuous.


If I could reproduce the issue I'd be happy to trial a few things at the 
client end (passing some parms to FreeRDP, trialling a different 
VM/distribution etc), but as I specifically block M$ 'updates' to our 
client machines (and/or they're fairly new so the graphics driver issue 
doesn't arise) I can't...


So to cap it off; right at this point I couldn't find anything simple 
one could do with Guacamole/FreeRDP, other than perhaps flag something 
more useful to the user if error 114 arose?


Therefore I think some more info/testing is needed to find a resolution 
or provide a workaround at the client (Guacamole/FreeRDP) end, otherwise 
I guess the issue may dissipate as machines are upgraded, or M$  provide 
a [working] fix?



On 18/02/2020 12:32 a.m., Nick Couchman wrote:
On Mon, Feb 17, 2020 at 12:00 AM ivanmarcus 
 wrote:


Brett (and Andrew),

It does seem there's some RD issues with Win10 1903 vs 1809,
although they're meant to be addressed by now.

If you've still got the 18.04 VM running with Guacamole 1.1.0 you
could try disabling "use WDDM graphics display driver for remote
desktop connection" in the Win10 machine?

This should be available via Group Policy Editor:

-Local Computer Policy
-Computer Configuration
-Administrative Templates
-Windows Components
-Remote Desktop Services
-Remote Session Environment

It could be a complete red herring, but if it were me I'd spend a
couple of minutes trying it out.

As I expect you know Guacamole 1.0.0 uses FreeRDP 1.x whereas
1.1.0 utilises the new FreeRDP 2. I believe this is still in beta;
maybe there's some issues still to be resolved and although I
didn't see any from a cursory inspection it might be worth a more
in-depth check?



Wow, nice find!  I wonder if there's a flag you can/should set on the 
RDP connection side to disable this, or if there's something else that 
needs to be implemented in Guacamole's RDP library to either take 
advantage of it or tune it down.


-Nick




Re: Question about connecting centos through rdp and vnc

2020-02-24 Thread ivanmarcus

Do you mean on the Guacamole server?

If so the Guacamole manual lays it out:

https://guacamole.apache.org/doc/gug/ - Chapt 2 in particular.

In case it's of any interest I posted an install procedure for Guacamole 
1.1.0 on a fresh Ubuntu 18.04 load. I realise it's not CENTOS (sorry), 
but it'd be reasonably easy to spin up a VM and test... Although I've 
not tried it with VNC it should work, however it works fine with RDP to 
Winboxen and exhibits none of the issues you mention. I can't comment on 
connections to XRDP, I've never tried it:


http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/ANNOUNCE-Apache-Guacamole-1-1-0-td7127.html

In general use over the past two or three years I've not had any issues 
at all, except for one related to RAM. I see others have commented 
similarly and I would concur that increasing RAM allocation  may assist. 
I have 2Gb allocated to my VM's, this serves a total of ~60 users well, 
with a max of 5-9 concurrent connections.



On 25/02/2020 3:48 p.m., benchu yao wrote:
What do you usually install on a linux server to support rdp and vnc 
protocols


Mike Jumper mailto:mjum...@apache.org>> 
于2020年2月25日周二 上午10:27写道:


On Mon, Feb 24, 2020 at 5:36 PM benchu yao mailto:yaoben...@gmail.com>> wrote:

In fact, when I only connect to linux via ssh or rdp to
windows, there is no problem.

The problem only occurs when I connect to the linux system
through rdp or vnc. Maybe it is a problem with xrdp and
vncserver. Maybe it is a problem with my configuration, but
there is actually no configuration.
I wonder if it may be that the connection has not been closed
since the connection was opened, and it directly appears that
the resources have not been released.

I'm still looking for a solution


I can't speak to whether XRDP might be holding on to any
resources, but the Guacamole webapp and guacd will both
automatically close the underlying RDP connection and release all
related resources after you have disconnected or closed the tab.
If network disruption occurs and the client can't signal the
server to disconnect, the server will still automatically do so
after the client has been unresponsive for around 15 seconds.

- Mike





Re: Required help for reducing High Bandwidth Utilization of Guacamole

2020-03-02 Thread ivanmarcus

Manoj,

I've followed this thread with some interest, and have learnt something 
from what Mike's been saying about how Guacamole handles image 
compression etc.


I'm not able to contribute much from a softwarec perspective but there 
are a couple of things that I wonder about.


In your tests it appears to me that, generally, the Guacamole <-> xrdp 
traffic is much higher than Tomcat <-> browser, as one would anticipate. 
Assuming your Guacamole <-> xrdp connections to be on an internal 1GbE 
network then one would expect Tomcat <-> [external] browser experience 
to be much quicker than say xrdp <-> [external] MSRD client.


In an earlier post you said:


My Observation is---

we observe that in my colleague company those people used Microsoft 
remote desktop Web client (using activex) for 1200 connection in 10 
Mbps for huge transaction. and


we used Xrdp+wine+Guacamole with 600 connection with 50 Mbps bandwidth .

what protocol they are used  ( Microsoft remote desktop Web client ) 
is taking less bandwidth compare  with  Guacamole.


From this I was interested to see what information there was regarding 
the bandwidth requirements for MS RD Web Client vs MS Terminal Services 
Client.


I found this website article:

https://www.rdsgurus.com/microsoft-rd-web-client-html5-performance-testing-part-1/

Although not completely clear my take on their results is that MSRDWC 
could use similar, or possibly more, bandwith than MSTSC (or it could 
use ~1/2 in some cases). They explicitly state further research is 
needed so the results should be considered provisional at this time.


*If* these results are in the typical ballpark then it would seem to me 
somewhat at odds with what you said earlier, and with the results you've 
charted.


To clarifiy.

(1) From the article let's say MSRDWC bandwith typically = MSTSC bandwith.

(2)You measure Guacamole <-> xrdp bandwidth significantly higher than 
Tomcat <-> browser (let's say this equates to what we'd expect typical 
MSTSC bandwidth to be).


(3) Extapolating; your colleague company is using MSRDWC, therefore with 
no other changes or tuning we might ordinarily expect their bandwith 
requirements to be higher than yours since, from your's and Mike's data, 
the Tomcat <-> browser bandwidth should effectively be less than MSRDWC.


(4) Yet you've said they have twice the connection numbers with 1/5 
available bandwith, and although not stated the intimation is that their 
user's experience could be better than yours?


Now I realise I'm drawing a fairly long bow, and making some pretty wild 
assumptions based on possibly erroneous data, but at this point the 
comparision just doesn't add up.


There are many possibly variables that might explain this but I wonder, 
initially, if there are some other differences in what service your 
colleague company is delivering compared with yours? For example is 
theirs a much reduced colour depth, is it limited to a specific app with 
little screen updates, do they have burst mode data capacity, do they 
have fewer _concurrent_ users etc?


Ultimately Mike has said several times that you simply need to allocate 
more resource for what you're doing, but it may assist yourself and the 
community if you could obtain a similar bandwith log from your colleague 
company as you have for yours. It would be good if the data were 
standardised as much as possible (ie. perform exactly the same desktop 
tasks) and the same colour depth settings etc were utilised.


If this were effected I think we'd have a much better idea as to the 
bandwith requirements of Guacamole vs MSRDWC. From this one might then 
know if there's any real (comparative) issue between your service and 
that of your colleague company, or not. It could also give some 
potentially useful info around Guacamole/MSRDWC performance...



On 3/03/2020 4:06 p.m., Manoj Patil wrote:

What tool u used for measuring bandwidth.

Is there any resolution?

As per your snanshot RDP take to much bandwidth utilization . if u 
also 600 active connwction then the bandwidth utilization is around 
40- 45 mbps.


On Mon, 2 Mar 2020, 00:45 Mike Jumper, > wrote:


On Sun, Mar 1, 2020 at 1:59 AM Manoj Patil mailto:manoj2pa...@gmail.com>> wrote:

Dear,

I am deployed the Microsoft environment at my end and measure
the bandwidth data send and received.
 using wireshark.

please find the attached file one is microsoft web rdp
bandwidth calculation using wireshark and second snapshot is
guacamol server calculation using wireshark .


If you want to compare bandwidth usage reliably, you will need to
measure and compare the two sides of the same session: one
measurement being the browser <--> Guacamole traffic and the other
being the guacd <--> RDP traffic. For example, here's my
statistics for the first week of December last year:

glen-demo-stats-2019-12-01-through-2019-12-07.png

  

Re: How many users can use Guacamole simultaneously?

2020-03-03 Thread ivanmarcus
There have been several similar queries in the past and Mike has 
suggested you "generally need 1 core and 2 GB for every 25 concurrent 
users at peak".


In a more recent discussion he's pointed to the following two threads 
that give more information:


https://mail-archives.apache.org/mod_mbox/guacamole-user/201803.mbox/%3CCALKeL-Oc6xnj99D9G9mE3aAS1Bj6xL%3DRnCM%3D052VCeMn%3DdBs9g%40mail.gmail.com%3E

https://mail-archives.apache.org/mod_mbox/guacamole-user/201906.mbox/%3CCALKeL-PXE%2BfwgQ8TzTN51hMKHJ4LJUh0gvBj0t_oxJqANtek3w%40mail.gmail.com%3E

FWIW these were referenced in 
http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/concurrent-performance-of-Guacamole-td6923.html#a6956



On 4/03/2020 8:42 a.m., Newman, Dennis wrote:


That link is for a 2013 discussion, is there any more current discussion.

We are currently running Guac v1.0.0 on a Cent OS 7 Virtual machine 
(ESXI6.7) with 4 processors 8 Gig ram and a 100 gb hard drive.


We currently have 32 simultaneous users (Just checked “currently 
logged on”) our resources are sitting at 940MHz CPU – 409 MB memory 
and 50.8 GB hard drive.


Our current system consists of the Guac system and 30 installed and 
running Win 7 desktops on one server and a “sister” server that holds 
about 40 more virtual Win 7 desktops.


Along with the virtual users, who connect from all over the world, we 
have about 30 “potential” users that occasionally connect through 
Guacamole to their physical Windows 10 systems here in the local office.


All of our users log into their virtual desktops to run an IBM ACS 
green screen emulator for data entry into an IBM Power system.


As well as running Chrome on their virtual desktops for data lookup.

We have been asked to increase our setup by “up to” 100 more users.  I 
am hoping that we can get away with just adding drive space and memory 
to the “sister” server.  As the OP was wondering how many simultaneous 
users you can run, I also would like to know if we will need to set up 
a second Guac server to accomplish our required task.


*From:*Adrian Owen 
*Sent:* Tuesday, March 3, 2020 10:36 AM
*To:* user@guacamole.apache.org; Stewart Alexander 


*Subject:* RE: How many users can use Guacamole simultaneously?

https://sourceforge.net/p/guacamole/discussion/1110834/thread/666f7a9f/

*From:*Stewart Alexander [mailto:stewart.alexan...@alamancecc.edu]
*Sent:* 03 March 2020 12:47
*To:* user@guacamole.apache.org 
*Subject:* How many users can use Guacamole simultaneously?

Hi all,

Does anyone know how many users can login through Guacamole 
simultaneously?


What are the bottlenecks?

Thank you,

Stewart Alexander

-- Original Message --

From: "Fabio Corsi" >


To: user@guacamole.apache.org 

Sent: 3/2/2020 5:01:07 PM

Subject: Re: ldap-user-search-filter problem

CAUTION: This email originated from outside your organization.
Exercise caution when opening attachments or clicking links,
especially from unknown senders.

Hi,

I was wondering if anyone could provide some insight on this issue.

To recap my previous message I have a ldap-user-search-filter set to


(&(objectClass=person)(memberof=cn=guacusers,ou=groups,dc=asrc,dc=crossroads))

however any valid LDAP user is allowed to login on the Guacamole
web page.

My configuration: Guacamole 1.1.0, Ubuntu 18.04, openLDAP
(libldap-2.4-2:amd64) on a separate Ubuntu 18.04 VM.

since my first message I’ve done some additional investigation
into the problem.

By looking at the logs on my LDAP server I can see that the
filters are passed on to the LDAP server and they do return the
correct number of entries.

There are a couple of things that seem strange to me:

  * Not sure why the "(|(uid=*)) clause is added to the main group
filter defined in my configuration
  * For the user in the guacusers group the SeeAlso seems to
expand to all the object of class groupOfNames in my directory

Here are the log entries for the user that is in the guacusers group:

slapd[904]: conn=9470 fd=48 ACCEPT from IP=10.16.33.12:52422
(IP=0.0.0.0:389)
slapd[904]: conn=9470 op=0 BIND
dn="uid=user_in_guacusers,ou=users,dc=my,dc=domain" method=128
slapd[904]: conn=9470 op=0 BIND
dn="uid=user_in_guacusers,ou=users,dc=my,dc=domain"
mech=SIMPLE ssf=0
slapd[904]: conn=9470 op=0 RESULT tag=97 err=0 text=
slapd[904]: conn=9470 op=1 SRCH
base="ou=groups,dc=my,dc=domain" scope=2 deref=0

filter="(&(!(objectClass=guacConfigGroup))(|(member=uid=user_in_guacusers,ou=users,dc=my,dc=domain)))"
slapd[904]: conn=9470 op=1 SEARCH RESULT tag=101 err=0
nentries=5 text=
slapd[904]: conn=9470 fd=48 closed (connection lost)
slapd[904]: conn=9471 fd=48 ACCEPT from IP=10.16.33.12:

Re: Biggest Guacamole User - fame at last

2020-03-05 Thread ivanmarcus

Wow, that many on 16MB, impressive :-D


On 6/03/2020 11:57 a.m., Adrian Owen wrote:


Hi Guacamole forum users,



Many users ask how many concurrent sessions. To which there are 
academic answers.


So I though ask the forum.


What is the highest number of concurrent users a Forum user has 
experienced?



I'll kick it off:
50 concurrent
Debian stretch
16 MB RAM
100 MB/Sec HDD
Xeon 4 core


Can anyone improve on that?


Adrian




Re: Biggest Guacamole User - fame at last

2020-03-05 Thread ivanmarcus

It was just a little light amusement.

Max site I have 65+ users with typically up to 10-20% of them on at any 
one time - so somewhat less than yours.


VM has 2 cores and 2Gb RAM.


On 6/03/2020 12:56 p.m., Adrian Owen wrote:


Thank you for correction. 16GB RAM

*From:*ivanmarcus [mailto:ivanmar...@yahoo.com]
*Sent:* 05 March 2020 23:41
*To:* user@guacamole.apache.org; Adrian Owen 
*Subject:* Re: Biggest Guacamole User - fame at last

Wow, that many on 16MB, impressive :-D

On 6/03/2020 11:57 a.m., Adrian Owen wrote:

Hi Guacamole forum users,

Many users ask how many concurrent sessions. To which there are
academic answers.

So I though ask the forum.�

What is the highest number of concurrent users a Forum user has
experienced?

I'll kick it off:

50 concurrent

Debian stretch�

16�MB RAM

100 MB/Sec HDD

Xeon 4 core

Can anyone improve on that?�

Adrian





Re: Can't copy/paste large text blocks

2020-03-09 Thread ivanmarcus
I've just tried a text document of ~26,000 characters and Guacamole 
1.1.0 copies that fine from a RDP session to a local document.


Although I may not be able to directly assist myself it could be useful 
if you gave more detail on what you're doing, inc.luding the protocol 
and version of Guaccamole you're using?


Initially I wonder if there are any special characters that could be 
truncating the data? It may be worth trying a simple text document copy 
as a check for this and letting us know the result.



On 9/03/2020 11:13 p.m., Davy wrote:

I'm trying to copy/paste a lot of SQL outputs, mostly a few thousand up to
tens of thousands of characters. a normal RDP connection would do this
perfectly, however when doing it in Guacamole it doesn't do more than 200
SQL outputs at a time. Is there any way to change this? As it is something
we use quite frequently on daily base.



--
Sent from: 
http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org





Re: Required help for reducing High Bandwidth Utilization of Guacamole

2020-03-09 Thread ivanmarcus

Manoj,

We may have exhausted our ability to help. As Stefan has pointed out 
there have been a number of suggestions and explanations around the 
issue you raise; it could be useful if you were to pursue those in the 
first instance.


One thing that strikes me from your latest post is that you're 
introducing too many variables when attempting to compare systems. If 
you want to make comparisons then you should start with as identical a 
system as possible and  change just *one* parameter first. In this way 
you will generally be a lot clearer around what changes have an affect 
on something.


To be specific. You say MSRDWC uses a lot less bandwidth than Guacamole, 
however (if I understand correctly) from what you say you're using 
Guacamole with a Xrdp client machine, and MSRDWC with a MSRD client 
machine. I suggest you should first test with Guacamole to the MSRD 
client, and then MSRDWC to the *same* client with the *same* parameters 
and the *same* series of tests. IOW the *only* change in the lineup is 
MSRDWC vs Guacamole - NOT the client machine as well.


Moving on from this, I don't have access to MSRDWC and have never used 
it but if possible the next test might be to utilise it with an Xrdp 
client machine and compare that with Guacamole to the *same* client. 
Such logical steps would lend much more credence to your results, and 
may provide a clearer pointer to you as to where the issue, if there is 
one, lays.




On 9/03/2020 8:58 p.m., Manoj Patil wrote:

Dear,

Any Resolution on my Issues.

Please suggest any changes at guacamole server and Xrdp host server.


On Tue, 3 Mar 2020 at 13:22, Manoj Patil <mailto:manoj2pa...@gmail.com>> wrote:


Dear


  ivanmarcus/mike,


The MSRDP setup is done at my end for testing purpose with same
user ,same screen,same depth etc. we measure the bandith for
singile session and it is too low. i am already sharing a snapshot
in preious mail.

*My point is if i used MSRDP web client to acees the server it
take low bandwidth utilization . when i am using guacd with xrdp
it uses high bandwidth.*
*
*
*
*





Re: Required help for reducing High Bandwidth Utilization of Guacamole

2020-03-09 Thread ivanmarcus

Manoj,

Perhaps I'm struggling to understand completely, but maybe we should 
just go through this one step at a time.


(1) Is the bandwidth issue you're presenty raising between Guacamole and 
the local (Xrdp) client - NOT between Guacamole and the remote browser?



On 10/03/2020 4:20 p.m., Manoj Patil wrote:

Dear ivanmarcus,

To be specific. You say MSRDWC uses a lot less bandwidth than 
Guacamole, however (if I understand correctly) from what you say 
you're using Guacamole with a Xrdp client machine, and MSRDWC with a 
MSRD client machine. I suggest you should first test with Guacamole to 
the MSRD client, and then MSRDWC to the *same* client with the *same* 
parameters and the *same* series of tests. IOW the *only* change in 
the lineup is MSRDWC vs Guacamole - NOT the client machine as


I am done the setup of MSRDC at my place and measuring the sam scenario
Guacamole to xrdp client 

When connecting through browser to guacamole it's low bandwidth . when 
connect guacad to xrdp host its huge bandwidth.


Guacamole to MSRDC client--

We test this setup with guacamole to MSRDC host through client there 
is also a bandwidth utilization . we measure theough wireshark

MSRDC to same client --

When i am connected to  MSRDC with same parameter of bpp, width , 
height etc and measure through wireshark there is tremendous different 
, its take very low bandwidth .


When I am in idle mode in guacamole to xrdp its continuously check 
keepalive and bandwidth utilizated that time.


When i am in idle in MSRDC there is no keepalive checking see in 
wireshark hence bandits is very low .



On Tue, 10 Mar 2020, 02:00 ivanmarcus,  
wrote:


Manoj,

We may have exhausted our ability to help. As Stefan has pointed
out there have been a number of suggestions and explanations
around the issue you raise; it could be useful if you were to
pursue those in the first instance.

One thing that strikes me from your latest post is that you're
introducing too many variables when attempting to compare systems.
If you want to make comparisons then you should start with as
identical a system as possible and  change just *one* parameter
first. In this way you will generally be a lot clearer around what
changes have an affect on something.

To be specific. You say MSRDWC uses a lot less bandwidth than
Guacamole, however (if I understand correctly) from what you say
you're using Guacamole with a Xrdp client machine, and MSRDWC with
a MSRD client machine. I suggest you should first test with
Guacamole to the MSRD client, and then MSRDWC to the *same* client
with the *same* parameters and the *same* series of tests. IOW the
*only* change in the lineup is MSRDWC vs Guacamole - NOT the
client machine as well.

Moving on from this, I don't have access to MSRDWC and have never
used it but if possible the next test might be to utilise it with
an Xrdp client machine and compare that with Guacamole to the
*same* client. Such logical steps would lend much more credence to
your results, and may provide a clearer pointer to you as to where
the issue, if there is one, lays.



On 9/03/2020 8:58 p.m., Manoj Patil wrote:

Dear,

Any Resolution on my Issues.

Please suggest any changes at guacamole server and Xrdp host server.


On Tue, 3 Mar 2020 at 13:22, Manoj Patil mailto:manoj2pa...@gmail.com>> wrote:

Dear


  ivanmarcus/mike,


The MSRDP setup is done at my end for testing purpose with
same user ,same screen,same depth etc. we measure the bandith
for singile session and it is too low. i am already sharing a
snapshot in preious mail.

*My point is if i used MSRDP web client to acees the server
it take low bandwidth utilization . when i am using guacd
with xrdp it uses high bandwidth.*
*
*
*
*







Re: Required help for reducing High Bandwidth Utilization of Guacamole

2020-03-10 Thread ivanmarcus

Manoj,

I think the answer you're giving is 'yes' - ie. that the issue you're 
experiencing is in fact between Guacamole and the Xrdp machine(?).


In that case, for the next step, could you try connecting to your Xrdp 
machine directly via:


(1) MSRD client

(2) FreeRDP client

And compare the experience/bandwidth utilisation of these two clients 
(doing the same tasks, incl idle)?




On 10/03/2020 5:48 p.m., Manoj Patil wrote:

dear Mkie/


  ivanmarcus


can i share  a html code of MSRDC . through this html you can able to 
connect windows machine.

 share this html on that mailid or any personal maild ?

see the snap shot .

When i am check MSRDC at high network latency(600-700 ms) it run 
smoothly . but in guacamole breaks the connection in time to 
time(connect-reconnect).


Also we check at this latency typing is very fast there is no laggy in 
keyboard typing.


In guacamole to Xrdp at same latency there is  keyboard 
laagy occur means slow typing at client end.


we also see when i am connect to MSRDC(windows) host through client 
its take first time 8-10 kbps continilously transfer data  in 
transection mode .


in idle  mode there is no any bandwidth utilization.



On Tue, 10 Mar 2020 at 09:06, ivanmarcus 
 wrote:


Manoj,

Perhaps I'm struggling to understand completely, but maybe we
should just go through this one step at a time.

(1) Is the bandwidth issue you're presenty raising between
Guacamole and the local (Xrdp) client - NOT between Guacamole and
the remote browser?


On 10/03/2020 4:20 p.m., Manoj Patil wrote:

Dear ivanmarcus,

To be specific. You say MSRDWC uses a lot less bandwidth than
Guacamole, however (if I understand correctly) from what you say
you're using Guacamole with a Xrdp client machine, and MSRDWC
with a MSRD client machine. I suggest you should first test with
Guacamole to the MSRD client, and then MSRDWC to the *same*
client with the *same* parameters and the *same* series of tests.
IOW the *only* change in the lineup is MSRDWC vs Guacamole - NOT
the client machine as

I am done the setup of MSRDC at my place and measuring the sam
scenario
Guacamole to xrdp client 

When connecting through browser to guacamole it's low bandwidth .
when connect guacad to xrdp host its huge bandwidth.

Guacamole to MSRDC client--

We test this setup with guacamole to MSRDC host through client
there is also a bandwidth utilization . we measure theough wireshark
MSRDC to same client --

When i am connected to  MSRDC with same parameter of bpp, width ,
height etc and measure through wireshark there is tremendous
different , its take very low bandwidth .

When I am in idle mode in guacamole to xrdp its continuously
check keepalive and bandwidth utilizated that time.

When i am in idle in MSRDC there is no keepalive checking see in
wireshark hence bandits is very low .


    On Tue, 10 Mar 2020, 02:00 ivanmarcus,

<mailto:ivanmar...@yahoo.com.invalid> wrote:

Manoj,

We may have exhausted our ability to help. As Stefan has
pointed out there have been a number of suggestions and
explanations around the issue you raise; it could be useful
if you were to pursue those in the first instance.

One thing that strikes me from your latest post is that
you're introducing too many variables when attempting to
compare systems. If you want to make comparisons then you
should start with as identical a system as possible and 
change just *one* parameter first. In this way you will

generally be a lot clearer around what changes have an affect
on something.

To be specific. You say MSRDWC uses a lot less bandwidth than
Guacamole, however (if I understand correctly) from what you
say you're using Guacamole with a Xrdp client machine, and
MSRDWC with a MSRD client machine. I suggest you should first
test with Guacamole to the MSRD client, and then MSRDWC to
the *same* client with the *same* parameters and the *same*
series of tests. IOW the *only* change in the lineup is
MSRDWC vs Guacamole - NOT the client machine as well.

Moving on from this, I don't have access to MSRDWC and have
never used it but if possible the next test might be to
utilise it with an Xrdp client machine and compare that with
Guacamole to the *same* client. Such logical steps would lend
much more credence to your results, and may provide a clearer
pointer to you as to where the issue, if there is one, lays.



On 9/03/2020 8:58 p.m., Manoj Patil wrote:

Dear,

Any Resolution on my Issues.

Please suggest any changes at guacamole server and Xrdp host
server.


On Tue, 3 Mar 20

Re: Required help for reducing High Bandwidth Utilization of Guacamole

2020-03-10 Thread ivanmarcus

Manoj,


On 11/03/2020 12:02 a.m., Manoj Patil wrote:
When connect to FreeRDP client-> xrdp ,bandwidth utilization is also 
High in idle condition.  In running condition using freerdp client 
utilization is High.


Thank you for doing this test. From the above comment I take it that 
what you experience with the FreeRDP client <-> Xrdp is similar to what 
you have with Guacamole <-> Xrdp, and results in the issue you raise.


As you're probably aware Guacamole uses FreeRDP for RDP connections to 
Xrdp. If the bandwidth requirement using FreeRDP directly, without 
Guacamole, is problematic for you then it's likely the issue results 
from FreeRDP rather than Guacamole.


FreeRDP is a separate project to Guacamole. You should research your 
issue in relation to FreeRDP, rather than Guacamole, as this may give 
you the answers you're looking for. Possibly it's just a function of the 
way FreeRDP works and you will simply need to allocate more bandwidth as 
Mike has already suggested, or there may be some parameters you can tweak.


Concluding, I note that FreeRDP, as with Guacamole, is an open-source 
project. If you've discovered an issue that is causing you a problem 
then your company could consider putting some resource into 
fixing/improving that issue? Not only would that make things better for 
you, it would also assist the wider community who've provided the base 
for your service, including, ultimately, Guacamole.


Re: Required help for reducing High Bandwidth Utilization of Guacamole

2020-03-10 Thread ivanmarcus

Manoj,

If you've isolated your bandwidth issue to Xrdp that's useful. My 
comments around FreeRDP could be equally applied to Xrdp insofar as 
there may be some tweaks available, or some useful resource your company 
could provide the Xrdp project.


I've not had a lot to do with Xrdp myself so there's nothing more I can 
say. Others may be able to comment but ultimately you will probably need 
to research that yourself. Should you achieve your goal it would be 
useful to post back what you did to the group.


I see Mike has replied to you regarding the browser <-> Guacamole 
disconnect you're experiencing.



On 11/03/2020 4:15 p.m., Manoj Patil wrote:

ivanmarcus,

Thanks for cooperation .

Xrdp observation--

As per observation and experience i think the measure issue at Xrdp 
side . Xrdp send the images in bitmap and jpeg compression but i could 
not see the compression is done or not.


second thing is when you move the mouse pointer on RDp session then it 
also send the bytes .


third one is , its calculate the RDP desktop in BPP,Width and 
Hight and show  this bitmap to client . (rendering)


TLS 1.2 calls is default implemented in and it send request(read 
write) in 100 ms .


At Guacamole Side---

When Browser to Guacamole in idle no send receive .

But when connect to RDP session its continuously checking keepalive 
then some bytes to be increased .


When at client side latency is 400-500 guacamole disconnected frequently .

 can you help in this to increased the parameter for checking the 
connection to keepalive and checking latency.










On Wed, 11 Mar 2020 at 02:12, ivanmarcus 
 wrote:


Manoj,


On 11/03/2020 12:02 a.m., Manoj Patil wrote:

When connect to FreeRDP client-> xrdp ,bandwidth utilization is
also High in idle condition.  In running condition using freerdp
client utilization is High.


Thank you for doing this test. From the above comment I take it
that what you experience with the FreeRDP client <-> Xrdp is
similar to what you have with Guacamole <-> Xrdp, and results in
the issue you raise.

As you're probably aware Guacamole uses FreeRDP for RDP
connections to Xrdp. If the bandwidth requirement using FreeRDP
directly, without Guacamole, is problematic for you then it's
likely the issue results from FreeRDP rather than Guacamole.

FreeRDP is a separate project to Guacamole. You should research
your issue in relation to FreeRDP, rather than Guacamole, as this
may give you the answers you're looking for. Possibly it's just a
function of the way FreeRDP works and you will simply need to
allocate more bandwidth as Mike has already suggested, or there
may be some parameters you can tweak.

Concluding, I note that FreeRDP, as with Guacamole, is an
open-source project. If you've discovered an issue that is causing
you a problem then your company could consider putting some
resource into fixing/improving that issue? Not only would that
make things better for you, it would also assist the wider
community who've provided the base for your service, including,
ultimately, Guacamole.



--
Thanks & Regards,

Manoj Patil.(Asst. Manager DBA)
Netwin Systems & Softwares(I) Pvt.Ltd
Nasik.
Mobile No -+91-9922507588
Email- manoj2pa...@gmail.com <mailto:manoj2pa...@gmail.com>




Re: CentOS 8 - FreeRDP 2 and Zer0CoolX's script

2020-03-11 Thread ivanmarcus

Yes you can use the 1.0.0 data.

The way I would do it is to dump the Guacamole MySQL database from 
1.0.0, drop the existing Guacamole database in 1.1.0, create a fresh 
database and import the 1.0.0 data. Actually I'd also dump the 1.1.0 
database before dropping it so I could restore in case something messed up!


Following this you would need to use the update script per this link:

https://guacamole.apache.org/doc/gug/jdbc-auth.html#idm46420849413472 - 
it should be something like upgrade-pre-1.1.0.sql


The reason for this is any new fields etc that have been created for the 
new Guacamole version.


I believe this should work but haven't yet tried it for 1.1.0. If I have 
time in the next day I'll check it out and report back.



On 12/03/2020 8:03 a.m., Newman, Dennis wrote:


Worked out the cert – was easier than I was trying to make it.

Replaced the guacamole.crt and guacamole.key files in /etc/nginx/ and 
restart.


Still looking to see if we can transfer our v1.0 users and connections 
to v1.1 or if we need to spend the time hand keying them in.


Thanks

*From:* Newman, Dennis 
*Sent:* Wednesday, March 11, 2020 10:30 AM
*To:* user@guacamole.apache.org
*Subject:* RE: CentOS 8 - FreeRDP 2 and Zer0CoolX's script

So I went with CentOs 7 and Guacamole 1.1.0

Zer0CoolX has done a great job on making the RHEL or CentOs install 
easy to do.


Configured with Nginx and the MariaDB/MySql

However when tried using the Let’s Encrypt certificate service it 
failed the install (I think because of the issues recently in the news 
about Let’s Encrypt).


After that fail, I blew the virtual drive away rebuilt the Linux and 
went with the self-signed cert.


As of this moment, everything is working – even have the new system 
self-branded.


What I want to know is –

Can I take user and connection databases from the Guac 1.0 system or 
do I need to hand key those in?


If I can, is it as simple as grabbing a couple files? 
Or copy and paste from inside some csv’s? or what?


I also would like to take my company branded wildcard cert – any 
instruction sets on what to change and where to go from a self-signed 
to a  DigiCert wildcard cert?


Thanks

**

*Dennis*

*From:* Nick Couchman mailto:vn...@apache.org>>
*Sent:* Friday, March 6, 2020 11:23 AM
*To:* user@guacamole.apache.org 
*Subject:* Re: CentOS 8 - FreeRDP 2 and Zer0CoolX's script

On Fri, Mar 6, 2020 at 11:45 AM Newman, Dennis 
mailto:dennis.new...@spglobal.com>> wrote:


Working on re-building my Guacamole system – originally used
Centos 6 and the Zer0CoolX  script.

Just wondering – the latest script and instruction set
https://github.com/Zer0CoolX/guacamole-install-rhel

Is for Guac 1.1.0 and Centos 7 – can I use Centos 8? Or should I
stick with 7?

I know of at least one issue you'll run into trying to install on 
CentOS8 - it has been reported that RHEL8/CentOS8 no longer ship with 
libssh2 (they've gone back to libssh), so getting SSH support compiled 
might be a little tricky.  There's a JIRA issue out there in the 
Guacamole project for migrating from libssh2 to libssh, or at least 
adding support, but it hasn't been worked, yet, so at present you'd 
have to compile and install libssh2 on CentOS 8.


There may be other issues, but perhaps others in the community can 
jump in and add their experiences.


-Nick




The information contained in this message is intended only for the 
recipient, and may be a confidential attorney-client communication or 
may otherwise be privileged and confidential and protected from 
disclosure. If the reader of this message is not the intended 
recipient, or an employee or agent responsible for delivering this 
message to the intended recipient, please be aware that any 
dissemination or copying of this communication is strictly prohibited. 
If you have received this communication in error, please immediately 
notify us by replying to the message and deleting it from your 
computer. S&P Global Inc. reserves the right, subject to applicable 
local law, to monitor, review and process the content of any 
electronic message or information sent to or from S&P Global Inc. 
e-mail addresses without informing the sender or recipient of the 
message. By sending electronic message or information to S&P Global 
Inc. e-mail addresses you, as the sender, are consenting to S&P Global 
Inc. processing any of your personal data therein.






Re: RDP connection problem

2020-03-12 Thread ivanmarcus

Are you using the GUI?

If so then for a connection to a 'standard' Win7 machine you may want to 
check that 'ignore server certificate' is ticked.


In my connections that's all I tick, other than setting the protocol, ip 
number/port, set 32-bit colour and enable font smoothing.


This isn't the only way to do it and does mean a user will need to 
connect to Guacamole first, then to their assigned connection and enter 
another user/pass, but I utilise that as a second level of authentication.


Some Win10 machines may also require a specific change on the target 
machine, but it shouldn't be an issue for the others you have.



On 12/03/2020 10:41 p.m., Piviul wrote:
Hi all, I'm new in this list. I'm testing guacamole 1.1.0 on a debian 
10 and I find it amazing even if I find some trouble connecting to 
win7/winserver2008/win10 clients (Winxp RDP seems to works correctly).


These are the logs for a win7 client:
Mar 11 15:21:28 guacamole guacd[179]: Creating new client for 
protocol "rdp"
Mar 11 15:21:28 guacamole guacd[179]: Connection ID is 
"$9b2f3e8d-0aae-4f20-ad85-3a3974a9d50a"
Mar 11 15:21:28 guacamole guacd[1745]: No security mode specified. 
Defaulting to security mode negotiation with server.

Mar 11 15:21:28 guacamole guacd[1745]: Resize method: none
Mar 11 15:21:28 guacamole guacd[1745]: User 
"@bde0ddcd-6252-4af9-8223-1078d087851a" joined connection 
"$9b2f3e8d-0aae-4f20-ad85-3a3974a9d50a" (1 users now present)

Mar 11 15:21:28 guacamole guacd[1745]: Loading keymap "base"
Mar 11 15:21:28 guacamole guacd[1745]: Loading keymap "en-us-qwerty"
Mar 11 15:21:28 guacamole guacd[1745]: Error connecting to RDP server
Mar 11 15:21:28 guacamole guacd[1745]: User 
"@bde0ddcd-6252-4af9-8223-1078d087851a" disconnected (0 users remain)
Mar 11 15:21:28 guacamole guacd[1745]: Last user of connection 
"$9b2f3e8d-0aae-4f20-ad85-3a3974a9d50a" disconnected


Can anyone please help me to find where is the connection problem?

these are the freerdp packages installed:
freerdp2-dev
libfreerdp-client2-2
libfreerdp-server2-2
libfreerdp-shadow-subsystem2-2
libfreerdp-shadow2-2
libfreerdp2-2

and the tomcat version installed is the one in debian 10: Tomcat9

Have a great day!

Piviul


-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org





Re: CentOS 8 - FreeRDP 2 and Zer0CoolX's script

2020-03-12 Thread ivanmarcus

Mike,

I was about to try transferring a running 1.0.0 I have to a new 1.1.0 
instance so I could confirm the process I'd suggested earlier. Out of 
interested I checked out the database tables first.


Here's 1.0.0:

+---+
| Tables_in_guacamole_db|
+---+
| guacamole_connection  |
| guacamole_connection_group|
| guacamole_connection_group_permission |
| guacamole_connection_history  |
| guacamole_connection_parameter|
| guacamole_connection_permission   |
| guacamole_sharing_profile |
| guacamole_sharing_profile_parameter   |
| guacamole_sharing_profile_permission  |
| guacamole_system_permission   |
| guacamole_user|
| guacamole_user_history|
| guacamole_user_password_history   |
| guacamole_user_permission |
+---+

14 rows in set


Then in 1.1.0 I find:

+---+
| Tables_in_guacamole_db|
+---+
| guacamole_connection  |
| guacamole_connection_attribute|
| guacamole_connection_group|
| guacamole_connection_group_attribute  |
| guacamole_connection_group_permission |
| guacamole_connection_history  |
| guacamole_connection_parameter|
| guacamole_connection_permission   |
| guacamole_entity  |
| guacamole_sharing_profile |
| guacamole_sharing_profile_attribute   |
| guacamole_sharing_profile_parameter   |
| guacamole_sharing_profile_permission  |
| guacamole_system_permission   |
| guacamole_user|
| guacamole_user_attribute  |
| guacamole_user_group  |
| guacamole_user_group_attribute|
| guacamole_user_group_member   |
| guacamole_user_group_permission   |
| guacamole_user_history|
| guacamole_user_password_history   |
| guacamole_user_permission |
+---+
23 rows in set


The 1.0.0 instance has been running fine since a few days after release 
and was an upgrade from 0.9.14. Not sure if that makes a difference or 
not but I would have thought from the above that one would need to run 
the script to create the new tables etc for 1.1.0?



On 12/03/2020 9:33 a.m., Mike Jumper wrote:
On Wed, Mar 11, 2020, 12:50 ivanmarcus  
wrote:


Yes you can use the 1.0.0 data.

The way I would do it is to dump the Guacamole MySQL database from
1.0.0, drop the existing Guacamole database in 1.1.0, create a
fresh database and import the 1.0.0 data. Actually I'd also dump
the 1.1.0 database before dropping it so I could restore in case
something messed up!

Following this you would need to use the update script per this link:

https://guacamole.apache.org/doc/gug/jdbc-auth.html#idm46420849413472
- it should be something like upgrade-pre-1.1.0.sql

The reason for this is any new fields etc that have been created
for the new Guacamole version.

I believe this should work but haven't yet tried it for 1.1.0. If
I have time in the next day I'll check it out and report back.


There have been no schema changes since the 1.0.0 release. The 
database from 1.0.0 can be used with 1.1.0 directly.


- Mike





Re: CentOS 8 - FreeRDP 2 and Zer0CoolX's script

2020-03-12 Thread ivanmarcus

Thanks Mike,

Oddly enough it's working fine with no reported errors (and has for the 
past few hundred days...).


Fairly sure the necessary update was run at the time, but either way 
that one's going to 1.1.0 shortly so it should be properly sorted.



On 13/03/2020 3:27 p.m., Mike Jumper wrote:
On Thu, Mar 12, 2020 at 1:36 PM ivanmarcus <mailto:ivanmar...@yahoo.com>> wrote:


Mike,

I was about to try transferring a running 1.0.0 I have to a new
1.1.0 instance so I could confirm the process I'd suggested
earlier. Out of interested I checked out the database tables first.

Here's 1.0.0:

+---+
| Tables_in_guacamole_db|
+---+
| guacamole_connection  |
| guacamole_connection_group|
| guacamole_connection_group_permission |
| guacamole_connection_history  |
| guacamole_connection_parameter|
| guacamole_connection_permission   |
...

14 rows in set


This is not a 1.0.0 database. You're missing the guacamole_entity 
table, guacamole_user_group table, etc. which were added in 1.0.0 as 
part of adding group support. See the changes applied by the 
"upgrade-pre-1.0.0.sql" script:


https://github.com/apache/guacamole-client/blob/3b97349f055b064c8994c7a2ac3f0cfd6ed39e27/extensions/guacamole-auth-jdbc/modules/guacamole-auth-jdbc-mysql/schema/upgrade/upgrade-pre-1.0.0.sql

And the relevant section of the compatibility notes for the 1.0.0 release:

http://guacamole.apache.org/releases/1.0.0/#database-schema-changes

Then in 1.1.0 I find:

+---+
| Tables_in_guacamole_db|
+---+
| guacamole_connection  |
| guacamole_connection_attribute|
| guacamole_connection_group|
| guacamole_connection_group_attribute  |
| guacamole_connection_group_permission |
| guacamole_connection_history  |
| guacamole_connection_parameter|
| guacamole_connection_permission   |
| guacamole_entity  |
...
23 rows in set


This is the correct schema for 1.0.0 and forward, including 1.1.0. 
There have been no changes to the schema since 1.0.0:


[mjumper@dev-mjumper guacamole-client]$ git diff --stat 0.9.14..1.0.0 
extensions/guacamole-auth-jdbc/modules/guacamole-auth-jdbc-mysql/schema/001-create-schema.sql
 .../schema/001-create-schema.sql   | 284 
++---

 1 file changed, 248 insertions(+), 36 deletions(-)
[mjumper@dev-mjumper guacamole-client]$ git diff --stat 1.0.0..1.1.0 
extensions/guacamole-auth-jdbc/modules/guacamole-auth-jdbc-mysql/schema/001-create-schema.sql
[mjumper@dev-mjumper guacamole-client]$ git diff --stat 
1.1.0..staging/1.2.0 
extensions/guacamole-auth-jdbc/modules/guacamole-auth-jdbc-mysql/schema/001-create-schema.sql

[mjumper@dev-mjumper guacamole-client]$

The 1.0.0 instance has been running fine since a few days after
release and was an upgrade from 0.9.14. Not sure if that makes a
difference or not but I would have thought from the above that one
would need to run the script to create the new tables etc for 1.1.0?


There are no new tables for 1.1.0. There were new tables for 1.0.0, 
which would be created if you run the "upgrade-pre-1.0.0.sql" script. 
I'm not sure why the older 0.9.14 database would be working with 1.0.0 
or onward, but my guess would be that it isn't, and that if it's not 
failing with blatant errors it may be failing in other more subtle 
ways. It's definitely the wrong schema.


- Mike





Re: Can't copy/paste large text blocks

2020-03-14 Thread ivanmarcus

I don't immediately see anything that should cause an issue.

Have you tried copying a 'standard' document with more than 200 lines?

If you want to email me something that you *can't* copy I'll have a go 
here and see if there's any issue for me. Best zip it up as an 
attachment in the format you use, rather than send inline.



On 13/03/2020 10:27 p.m., Davy wrote:

Hi Ivan,

Thank you for answering. Below is a paste of 100 sequel lines that copy
perfectly fine. However when doing more, for example 1500 lines, or even 200
lines it will not copy anything at all.

sql_COPY-PASTE_data_format.txt


Please do let me know if there's any idea as of why it is going wrong.



--
Sent from: 
http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org





Re: guacamole and wake-on-LAN

2020-03-14 Thread ivanmarcus
I've already written a Python script that reads the log and sends the 
magic packet as needed. It's been running for a couple of years now, 
here's a link:


http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/Wake-on-lan-function-working-td2832.html

Nick has been working on a proper extension. I've no idea how far on it 
is at present but here's a link for it:


https://github.com/necouchman/guacamole-client/tree/jira/513/extensions/guacamole-auth-wol


On 15/03/2020 2:26 p.m., Vieri wrote:

Hi,

I'd like to boot machines up if offline through Guacamole. I've seen that other 
users propose to use a script that reads guacamole's log, gets the connection 
attempts, looks up the MAC address and performs WOL.

I guess it might also be done through an extension. Any pointers? Or better 
yet, any ready-made code? ;-)

Thanks,

Vieri


-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org





Re: guacamole and wake-on-LAN

2020-03-15 Thread ivanmarcus

The requirements are Python 2.7 installed on the Guacamole machine.

You should be able to run the script from anywhere (I use 
/home/adminuserx) and start with /home/adminuserx/guac_wol.py &! 
(guac_wol.py being the script name I use). The macs.list file is in the 
same directory as the script.


I use it with Guacamole 1.1.0, I needed to change the path to 
catalina.out in the script because I upgraded to tomcat8 from 7, but 
that was about it. You may need to change the path to the macs.list file 
as well.


To my mind it was an interim step until someone with better coding 
skills than me produced a 'proper' version that integrated with 
Guacamole, or it became part of Guacamole itself. It is a little 
'clunky' in that you need to ensure the connection number produced in 
the catalina.out log file is correct for the that machine's mac address 
as listed in the macs.list file, but that said it's worked well enought 
for me in the past couple of years (~60 users).


To my mind it would be best if it were a form field in the individual 
connection settings, but that was way beyond my capabilities. However 
Nick has mentioned a couple of times that he was producing the extension 
I referenced. I expect this would be a lot better, but I've not used it 
myself and don't know how finished it is. He may be able to provide an 
update?



On 16/03/2020 11:45 a.m., Giorgio wrote:

Hello Ivan,

Could you please explain how to implement your script into guacamole ? 
Does it work with guacamole 1.1.0 ?
Place to put, and how to execute upon request.. any detail will be of 
help.

Thank you in advance
Tedd


*From: * ivanmarcus 
*To: * , Vieri 
*Sent: * 3/15/2020 2:57 AM
*Subject: * Re: guacamole and wake-on-LAN

I've already written a Python script that reads the log and sends
the magic packet as needed. It's been running for a couple of
years now, here's a link:


http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/Wake-on-lan-function-working-td2832.html

Nick has been working on a proper extension. I've no idea how far
on it is at present but here's a link for it:


https://github.com/necouchman/guacamole-client/tree/jira/513/extensions/guacamole-auth-wol


On 15/03/2020 2:26 p.m., Vieri wrote:

Hi,

I'd like to boot machines up if offline through Guacamole. I've seen that 
other users propose to use a script that reads guacamole's log, gets the 
connection attempts, looks up the MAC address and performs WOL.??

I guess it might also be done through an extension. Any pointers? Or better 
yet, any ready-made code? ;-)

Thanks,

Vieri


-
To unsubscribe, e-mail:user-unsubscr...@guacamole.apache.org
<mailto:user-unsubscr...@guacamole.apache.org>
For additional commands, e-mail:user-h...@guacamole.apache.org
<mailto:user-h...@guacamole.apache.org>







Re: sshd error not exposed to client

2020-03-15 Thread ivanmarcus

Jason,

Like Mike I'm struggling a little to understand your particular 
use-case, although I get the sudden interest in remote operation.


Is it that you want to reduce admin overhead by having users self-manage 
multiple connections, or is there some other reason for letting them do 
their own thing? Also, do you want them to connect just to a specific 
desktop or two (from which I would have thought they'd ordinarily 
connect to whatever further remote system was permitted), or directly to 
other random systems within your network?


While I suspect you're really wanting to be able to provide a specific 
reduced-privilege template to certain users (which isn't available that 
I'm aware of) I wonder if there are other ways to achieve your goal?


For instance Guacamole does offer an ad-hoc connection facility 
https://guacamole.apache.org/doc/gug/adhoc-connections.html which may go 
a way towards simple self-management. Although I've not used it myself I 
don't believe it would expose the recording options etc directly to the 
user (although a savvy user might figure out how to do that I guess). 
You could just provide a sample URI with requisite parameters to users 
and explain how to make straightforward changes to that such as target 
machine / user etc.


If you were further concerned about limiting connections (damage 
control!) I guess you could get creative with iptables, and maybe run 
several instances of Guacamole for different user classes, but perhaps 
I've missed your point?


BTW, ex-UoC '90's?




On 16/03/2020 12:54 p.m., Jason Haar wrote:

This is a good opportunity for me to bring up several gotchas I had

I'm running a new fully patched CentOS-7 system with standard repo 
installs of apache-2.4.6, tomcat-7, guacd and with the WAR file from 
guacamole-1.1.0, along with the jdbc-mysql, header and quickconnect 
extensions.


Apache is configured with mod_auth_mellon (SAML) and uses a header to 
pass the username to guacamole-auth-header, and the reverse-proxy part 
is configured as


 
ProxyPass http://127.0.0.1:8080/guacamole/ flushpackets=on
ProxyPass http://127.0.0.1:8080/guacamole/
ProxyPassReverseCookiePath /guacamole/ /



Header set Connection Upgrade
Header set Upgrade %{HTTP_UPGRADE}e
ProxyPass ws://127.0.0.1:8080/guacamole/websocket-tunnel 

ProxyPassReverse ws://127.0.0.1:8080/guacamole/websocket-tunnel 


ProxyPassReverseCookiePath /guacamole/ /


You will notice the WebSocket headers - I had real difficulties 
getting websocket to work - even though mod_proxy_wstunnel is loaded - 
so I hard-wired those two headers in and that seemed to fix things.


As far as your "only admins should edit connections" comment goes, 
yeah I know that is how guacamole intends to do things, but 
"CoronaVirus". I am doing this as a POC with the intention to allow 
arbitrary staff remote access from their personal/home computers to 
their workstations - so I'm testing giving all users "create new 
connections" privs (because they would also use it to access Cloud 
systems that can only be accessed from work IPs, etc). Frankly it's 
not looking like a workable option, it's one thing to expect 
"guacamole admins" to have good working knowledge of the product, but 
not hundreds of engineers and other "normal" staff.


Also, I think there'd need to be more global control over what is 
available in the "Connection" options. eg remove references to 
recording to disk or sharing drives, globally ignoring cert validation 
would be needed for quickconnect, etc. Great product - but I think I'm 
pushing beyond its target market


On Sat, Mar 14, 2020 at 12:04 PM Mike Jumper 
mailto:mike.jum...@glyptodon.com>> wrote:


On Fri, Mar 13, 2020 at 3:26 PM Jason Haar mailto:jason_h...@trimble.com>> wrote:

This is a CentOS7 system running the downloaded install of
guacamole-1.1.0 - but using the yum install guacd
(guacd-1.1.0-1.el7.x86_64). Even if I have an older version,
the error msg you see (Log in failed. Please reconnect and try
again) is also misleading. No amount of reconnecting is going
to fix this :-)


In your specific case, perhaps not. In general, the expectation
would be that entering invalid credentials could be resolved by
reconnecting and entering the correct credentials, or by the
administrator resolving whatever transient configuration issue is
preventing credentials from being accepted. Guacamole has an error
code for invalid credentials which produces that message, however
there is no distinct error code for "your credentials are invalid,
but also the server will never accept any of that type of
credentials and reconnecting is pointless".

There is an error code for when the remote desktop server is
refusing the connection. That might be more appropriate for the
case that the server is refusing t

Re: Problems to RDP windows 10

2020-03-17 Thread ivanmarcus
Others have posted useful information around connection parms etc but 
bear in mind you may be running into a specific Win10 issue around later 
builds. This thread will explain that issue, and what to do to fix it:


http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/Error-114-in-gaucd-td7242.html#a7279

On 18/03/2020 4:57 a.m., Guilherme Carvalho wrote:
Hello guys, i´m having problems to RDP to some windows 10, i can 
connect into Windows Server 2012 R2 with no problem, in some windows 
10 i can too, but most off all my Windows 10 computers i can´t, the 
screen flashes and nothing happens, and into the guacamole i got a 
message "You have been disconnected", anybody could fix that?


thanks.




Re: Captcha on guacamole login

2020-03-19 Thread ivanmarcus

I highly recommend fail2ban.

If you do implement it then I suggest you consider including the 
recidive option.


Attached are two plots, one showing current fail2ban blacklisted ip's 
(including recidive), and one showing the effect of introducing recidive 
last year...



On 20/03/2020 8:18 a.m., Guilherme Carvalho wrote:
Yes, you´re right, i am looking for fail2ban right now, but the 
captcha would be perfect, the first login user password and captcha, 
than the TOTP.


Thanks Nick.

Em qui., 19 de mar. de 2020 às 15:29, Nick Couchman > escreveu:


On Thu, Mar 19, 2020 at 12:12 PM Guilherme Carvalho
mailto:gccarva...@gmail.com>> wrote:

Hello guys, i have a doubt, is it possible to setup a Captcha
on the first login page??


I have no doubt this would be possible.  There's no out-of-the-box
way to do it, today, but I would think an extension could be
written to allow it to function very similarly to TOTP or RADIUS
with MFA.

I´m using LDAP + TOTP, but the problems is, if somebody tried
to connect many times with an user on the guacamole, this
account got blocked on the AD, so many services will stop and
i couldn´t connect.


I think Mike has suggested previously elsewhere that fail2ban
might be a good option for preventing these sorts of attacks as it
will block access to the server from that IP.  Obviously if
someone is intent on attacking they will do so from multiple IPs,
so it won't be perfect, but nothing is.

-Nick




-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

Re: Captcha on guacamole login

2020-03-19 Thread ivanmarcus
Bad form replying to my own post I know but just in case, for the 
eagle-eyed, you will see the plots I included weren't actually for 
Guacamole.


The reason for that is simply that while my Guacamole VM's do have 
fail2ban (and recidive) operational I don't plot their fail2ban data 
over time.


Obviously I do for postfix and the plots I included were intended simply 
to show the effect of recidive. Presently I have no blacklisted hosts on 
Guacamole, partly due to some other measures in use, nevertheless I 
consider fail2ban an important tool in protecting the system(s).



On 20/03/2020 10:12 a.m., ivanmarcus wrote:


I highly recommend fail2ban.

If you do implement it then I suggest you consider including the 
recidive option.


Attached are two plots, one showing current fail2ban blacklisted ip's 
(including recidive), and one showing the effect of introducing 
recidive last year...



On 20/03/2020 8:18 a.m., Guilherme Carvalho wrote:
Yes, you´re right, i am looking for fail2ban right now, but the 
captcha would be perfect, the first login user password and captcha, 
than the TOTP.


Thanks Nick.

Em qui., 19 de mar. de 2020 às 15:29, Nick Couchman <mailto:vn...@apache.org>> escreveu:


On Thu, Mar 19, 2020 at 12:12 PM Guilherme Carvalho
mailto:gccarva...@gmail.com>> wrote:

Hello guys, i have a doubt, is it possible to setup a Captcha
on the first login page??


I have no doubt this would be possible.  There's no
out-of-the-box way to do it, today, but I would think an
extension could be written to allow it to function very similarly
to TOTP or RADIUS with MFA.

I´m using LDAP + TOTP, but the problems is, if somebody tried
to connect many times with an user on the guacamole, this
account got blocked on the AD, so many services will stop and
i couldn´t connect.


I think Mike has suggested previously elsewhere that fail2ban
might be a good option for preventing these sorts of attacks as
it will block access to the server from that IP.  Obviously if
someone is intent on attacking they will do so from multiple IPs,
so it won't be perfect, but nothing is.

-Nick





-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org




Re: Cloning Guac VM

2020-03-23 Thread ivanmarcus

Dennis,

I understand your issue and what you're trying to do, but don't use 
either your hypervisor or VM OS so anything I say will be fairly generic.


That said, have you changed the hostname, ipaddress and - importantly - 
the MAC address on the second VM instance? If these were the same I 
guess it could cause a wierd issue.


As part of sorting it out perhaps you could spin up the second VM off 
the network and see what it does?




On 24/03/2020 8:52 a.m., Newman, Dennis wrote:


But actually what I was attempting to do was split the users between 
two servers – I had assumed that db named localhost – each server 
would only talk with itself. But with the two servers set up – If we 
change on one – it shows up on the other.


In my case esxi host 2 has more memory and processor resources, so I 
was planning on either splitting things and giving one system more 
resources, or just move the whole system.  About 100 users virtual 
systems and this week we added about 50 users from home with 
connections to physical systems. And the virtual users are now 
complaining about more “bad connection” errors


My honest belief is that we have gone from supporting 5 offices to 
supporting 150 “mini” offices as everyone is working from home, which 
throws unknown internet quality into the mix.  But I had figured 
moving the Guacamole system to a faster processor and giving it a 
little more memory “couldn’t hurt”


Dennis

*From:* Mike Jumper 
*Sent:* Monday, March 23, 2020 2:30 PM
*To:* user@guacamole.apache.org
*Subject:* Re: Cloning Guac VM

On Mon, Mar 23, 2020, 12:25 sciUser > wrote:


If you want to have two Guacamole head servers EntryA EntryB (load
balanced)
and have them write to a common database (G-DB), you will need to
write some
logic for EntryA and EntryB to know what is written in the
database, which
is a third system G-DB so you do not get duplicate entries and it
is aware
of active sessions.

Two Guacamole instances can safely share the same database. You do not 
need some third system or additional logic to prevent duplicates.


- Mike




The information contained in this message is intended only for the 
recipient, and may be a confidential attorney-client communication or 
may otherwise be privileged and confidential and protected from 
disclosure. If the reader of this message is not the intended 
recipient, or an employee or agent responsible for delivering this 
message to the intended recipient, please be aware that any 
dissemination or copying of this communication is strictly prohibited. 
If you have received this communication in error, please immediately 
notify us by replying to the message and deleting it from your 
computer. S&P Global Inc. reserves the right, subject to applicable 
local law, to monitor, review and process the content of any 
electronic message or information sent to or from S&P Global Inc. 
e-mail addresses without informing the sender or recipient of the 
message. By sending electronic message or information to S&P Global 
Inc. e-mail addresses you, as the sender, are consenting to S&P Global 
Inc. processing any of your personal data therein.




Re: Settings Batch Import?

2020-03-26 Thread ivanmarcus

Chris,

There isn't a batch import option in the GUI. You'd need to import 
direct to the MySQL database, which shouldn't be too hard.


Although you may be able to do it direct from MySQL I'd suggest a Python 
script might be a good option. Given time I may have a go at producing 
something, but can't right the moment (vy busy supporting lots of 
remotes). However it's possible someone has already done this.


You could do the same for the connections as well I expect, if that were 
useful.



On 26/03/2020 9:01 p.m., Chris Lee wrote:


Hi All,

Does User and Connections support batch import (e.g CSV file)?

I want to create all the AD users and PC info on Excel, export to CVS 
file and import to MySQL database.


Regards,

Chris



This message and its attachment (if any) are strictly confidential and 
sent to the designated recipient(s) only. If you are not the intended 
recipient, please notify the sender by e-mail and delete this message 
and its attachment (if any) from your computer system immediately . 
Century City International Holdings Limited, Paliburg Holdings 
Limited, Regal Hotels International Holdings Limited, its respective 
related subsidiaries, associated companies and affiliates do not 
guarantee this message and its attachment (if any) are free of 
computer virus and would not accept any liability whatsoever arising 
from Internet transmission.




  1   2   3   >