Re: Enable RestAPI logging

[Nick Couchman]

On Sun, Aug 21, 2022 at 11:14 PM 林 政剛  wrote:
>
> Hi,
>
> I need to enable logging of the rest api, for example, all of the 
> requests/responses of HTTP.
> I did some research on the Internet. I think I need to set the logging filter 
> for Jersey like this.
> But I don't know how to do it in Guacamole.
>
> 
>  
> com.sun.jersey.spi.container.ContainerRequestFilters
>  
> com.sun.jersey.api.container.filter.LoggingFilter
>  
>  
>  
> com.sun.jersey.spi.container.ContainerResponseFilters
>  
> com.sun.jersey.api.container.filter.LoggingFilter
>  
>

Logging for Guacamole is controlled by the logback.xml file in the
GUACAMOLE_HOME directory (/etc/guacamole, usually), as documented in
the manual:

https://guacamole.apache.org/doc/gug/configuring-guacamole.html#logging-within-the-web-application

However, perhaps it would be better if you'd explain in more detail
what you're trying to achieve by logging these REST API calls? There
may be other ways to gather the information that you need outside of
enabling this logging.

-Nick

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

Issue with users in behind ZScaler

[Lockhart, Roland]

Hi

We have a couple of users that connect to the internet via an edge appliance 
called ZScaler from their corporate network

They seem to have intermittent connection problems, a session of say 30 seconds 
elapses or a few minutes, then sessions are stable for a couple of hours, then 
back to tripping at 30 seconds.

This is not the same experience that our other users have with the Guacamole 
service.

Anyone experience this with something similar?

Is there anything we can recommend to their IT or tune in Guacamole to help 
with this?

Thanks



[AAM Group]
Roland Lockhart
DevOps Team Lead
+61 8 9228 6807
+61 408 384 993
r.lockh...@aamgroup.com
aamgroup.com
[https://aamgroup.com/wp-content/uploads/2021/07/icon-linkedin.png]
 [https://aamgroup.com/wp-content/uploads/2021/07/icon-twitter.png] 
  
[https://aamgroup.com/wp-content/uploads/2021/07/icon-youtube.png] 



 Attention 
Email Disclaimer Notice - This message is the property of AAM Pty Ltd. The 
information in this email is confidential and may be legally privileged. It is 
intended solely for the addressee. Access to this email by anyone else is 
unauthorised. If you are not the intended recipient, any disclosure, copying, 
distribution or any action taken or omitted to be taken in reliance on it is 
prohibited and may be unlawful. If you have received this message in error 
please notify AAM Pty Ltd immediately via email to mailad...@aamgroup.com This 
email has been scanned and cleared by Exchange Online Protection, however AAM 
Pty Ltd does not guarantee this message free of viruses, or interference.

Re: Issue with users in behind ZScaler

[Nick Couchman]

On Tue, Aug 23, 2022 at 11:04 AM Lockhart, Roland 
wrote:

> Hi
>
>
>
> We have a couple of users that connect to the internet via an edge
> appliance called ZScaler from their corporate network
>
>
>
> They seem to have intermittent connection problems, a session of say 30
> seconds elapses or a few minutes, then sessions are stable for a couple of
> hours, then back to tripping at 30 seconds.
>
>
>
> This is not the same experience that our other users have with the
> Guacamole service.
>
>
>
> Anyone experience this with something similar?
>
>
>
> Is there anything we can recommend to their IT or tune in Guacamole to
> help with this?
>
>
>

I'll only throw out that I use Guacamole over Zscaler on a daily basis, for
several hours per day, to manage several hundred servers, and don't usually
experience these issues. The only time I do have trouble is when my local
ISP or WiFi has issues, but not generally any issues with Zscaler.

-Nick

>

Re: Set connection attributes for ad-hoc/quickconnect connections

[Nick Couchman]

On Sun, Aug 21, 2022 at 12:15 AM Yang Yang  wrote:
>
> Hello,
>
> Can I specify guacd parameters for ad-hoc/quickconnect connections? The guide 
> only tells how to set connection parameters, and when I tried to set 
> attributes by appending "&guacd-hostname=X” so as to use another guacd 
> server, it did not work that the request still goes to the default one.
>
> Could you help to shed some light?
>

I don't think it's possible to set the attributes - only the
connection parameters. If you're needing to set the guacd-hostname
attribute globally you can do so in guacamole.properties, but that
will set it for all connections and won't allow it to be set on a
per-connection basis.

-Nick

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

SAML Redirect Loop

[Sky...]

I have guacamole setup in docker container with SAML configured, but I am
getting login redirect loop. The guacamole container is behind AWS ALB.
Notice the issue is response received at HTTP instead of HTTPS.  Look over
AWS documentation and ALB should send x-forward-proto to the
target server.  Any help?

Authentication attempted with an invalid SAML response: SAML response did
not pass validation: The response was received at
http://gc.mydomain.com/api/ext/saml/callback instead of
https://gc.mydomain.com/api/ext/saml/callback


Thank you