Re: Docker Guacamole Radius Auth Port Ignored

[Mark Rupright]

Hi Mike,

Yes. However, that was not my issue as the variables are all in uppercase
as they should be in my compose file. After I emailed the list, I noticed
that I spelled RADIUS as RAIDUS even though I checked my compose file
numerous times...c’est la vie.

Radius authentication is working quite well now.

I appreciate your help.

Thanks!

On Wed, Sep 27, 2023 at 3:21 PM Michael Jumper  wrote:

> On 9/27/2023 1:16 PM, Mark Rupright wrote:
> > Hello all,
> >
> > I compiled and installed the radius plugin for docker guac and set my
> > variables for it in the compose file. From what I can tell, it applies
> > all of the variables except for the "radius_auth_port" variable. I need
> > this variable as our radius server listens on a port other than 1812.
> > When I run tcpdump, I can see radius requests going to the default port
> > and not the port I set via radius_auth_port.
> >
> > Any thoughts?
> >
>
> There is no "radius_auth_port" variable. Did you mean "RADIUS_AUTH_PORT"?
>
> - Mike
>
>
> -
> To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
> For additional commands, e-mail: user-h...@guacamole.apache.org
>

Re: Docker Guacamole Radius Auth Port Ignored

[Michael Jumper]

On 9/27/2023 1:16 PM, Mark Rupright wrote:

Hello all,

I compiled and installed the radius plugin for docker guac and set my 
variables for it in the compose file. From what I can tell, it applies 
all of the variables except for the "radius_auth_port" variable. I need 
this variable as our radius server listens on a port other than 1812. 
When I run tcpdump, I can see radius requests going to the default port 
and not the port I set via radius_auth_port.


Any thoughts?



There is no "radius_auth_port" variable. Did you mean "RADIUS_AUTH_PORT"?

- Mike


-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

Docker Guacamole Radius Auth Port Ignored

[Mark Rupright]

Hello all,

I compiled and installed the radius plugin for docker guac and set my
variables for it in the compose file. From what I can tell, it applies
all of the variables except for the "radius_auth_port" variable. I need
this variable as our radius server listens on a port other than 1812. When
I run tcpdump, I can see radius requests going to the default port and not
the port I set via radius_auth_port.

Any thoughts?

Thanks!

Re: Docker Guacamole Radius Support

[Mark Rupright]

Yes! It was in fact a formatting error on my part. I have since corrected
it. I will still need to compile and add the required jar file for radius
though.

Thanks!


On Wed, Sep 27, 2023 at 11:58 AM Michael Jumper  wrote:

> On 9/27/2023 6:21 AM, Nick Couchman wrote:
> > On Wed, Sep 27, 2023 at 9:09 AM Antoine Besnier
> >  wrote:
> >
> > The extension needs to be built separately (license issue).
> > But follow the documentation, and you're good to go:
> > RADIUS Authentication — Apache Guacamole Manual v1.5.3
> > 
> >
> > Regards
> > Antoine
> >
> >
> > Good point, Antoine - the stock Docker image likely does not contain the
> > JAR file for the RADIUS extension due to these license issues, and it
> > will likely need to be built manually with the correct options.
> >
> >
> > Le mercredi 27 septembre 2023 à 05:45:29 UTC+2, Mark Rupright
> >  a écrit :
> >
> >
> > Does the guacamole docker container natively support radius? If not,
> > would someone kindly point me in the right direction to get it
> > configured? I have added the variables for radius thinking it was
> > supported to my compose file and receive the following error(s)
> > referencing each variable:
> >
> >   services.guacamole Additional property RADIUS_HOSTNAME is not
> allowed
> >
> >
> > Can you confirm the version of the Docker image you're running, and from
> > what source? This doesn't look like an error message that is part of the
> > official Guacamole image/startup script.
> >
>
> I think that error is from Docker Compose, reporting that the
> docker-compose.yml file is malformed.
>
> - Mike
>
>
> -
> To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
> For additional commands, e-mail: user-h...@guacamole.apache.org
>

Re: Docker Guacamole Radius Support

[Michael Jumper]

On 9/27/2023 6:21 AM, Nick Couchman wrote:
On Wed, Sep 27, 2023 at 9:09 AM Antoine Besnier 
 wrote:


The extension needs to be built separately (license issue).
But follow the documentation, and you're good to go:
RADIUS Authentication — Apache Guacamole Manual v1.5.3


Regards
Antoine 



Good point, Antoine - the stock Docker image likely does not contain the 
JAR file for the RADIUS extension due to these license issues, and it 
will likely need to be built manually with the correct options.



Le mercredi 27 septembre 2023 à 05:45:29 UTC+2, Mark Rupright
 a écrit :


Does the guacamole docker container natively support radius? If not,
would someone kindly point me in the right direction to get it
configured? I have added the variables for radius thinking it was
supported to my compose file and receive the following error(s)
referencing each variable:

  services.guacamole Additional property RADIUS_HOSTNAME is not allowed


Can you confirm the version of the Docker image you're running, and from 
what source? This doesn't look like an error message that is part of the 
official Guacamole image/startup script.




I think that error is from Docker Compose, reporting that the 
docker-compose.yml file is malformed.


- Mike


-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

Re: Is Guacamole susceptible to the WEBP Exploit | CVE-2023-4863

[Michael Jumper]

On 9/27/2023 8:50 AM, Caleb Coverdale wrote:

Hey there,

I was wondering if ApacheGuacamole was susceptible to the webp exploit 
that was announced. I see in the Guacamole Server code that it is using 
WebP as the encoder, so I assume that it may be?

https://github.com/apache/guacamole-server/blob/master/src/libguac/encode-webp.c 




No. CVE-2023-4863 (aka CVE-2023-5129) deals specifically with decoding 
WebP images, not encoding.


You would also receive updates to libwebp from your distribution as the 
library itself is not bundled within Guacamole. If using our Docker 
images, the images are automatically rebuilt nightly to bring in updates 
from the maintainer of the base image (Alpine Linux), and a pull of the 
latest would give you an updated image.


- Mike

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

Is Guacamole susceptible to the WEBP Exploit | CVE-2023-4863

[Caleb Coverdale]

Hey there, 

I was wondering if ApacheGuacamole was susceptible to the webp exploit that was 
announced. I see in the Guacamole Server code that it is using WebP as the 
encoder, so I assume that it may be?
 
https://github.com/apache/guacamole-server/blob/master/src/libguac/encode-webp.c

Just wondering if there needs to be any testing done on this to see if it’s 
exploitable. 

Thanks! 

Caleb 

Re: Docker Guacamole Radius Support

[Nick Couchman]

On Wed, Sep 27, 2023 at 9:09 AM Antoine Besnier
 wrote:

> The extension needs to be built separately (license issue).
> But follow the documentation, and you're good to go:
> RADIUS Authentication — Apache Guacamole Manual v1.5.3
> 
>
> Regards
> Antoine
>

Good point, Antoine - the stock Docker image likely does not contain the
JAR file for the RADIUS extension due to these license issues, and it will
likely need to be built manually with the correct options.


>
> Le mercredi 27 septembre 2023 à 05:45:29 UTC+2, Mark Rupright
>  a écrit :
>
>
> Does the guacamole docker container natively support radius? If not, would
> someone kindly point me in the right direction to get it configured? I have
> added the variables for radius thinking it was supported to my compose file
> and receive the following error(s) referencing each variable:
>
>  services.guacamole Additional property RADIUS_HOSTNAME is not allowed
>

Can you confirm the version of the Docker image you're running, and from
what source? This doesn't look like an error message that is part of the
official Guacamole image/startup script.

-Nick

>

Re: Docker Guacamole Radius Support

[Antoine Besnier]

 The extension needs to be built separately (license issue).But follow the 
documentation, and you're good to go:RADIUS Authentication — Apache Guacamole 
Manual v1.5.3

RegardsAntoine 
Le mercredi 27 septembre 2023 à 05:45:29 UTC+2, Mark Rupright 
 a écrit :  
 
 Does the guacamole docker container natively support radius? If not, would 
someone kindly point me in the right direction to get it configured? I have 
added the variables for radius thinking it was supported to my compose file and 
receive the following error(s) referencing each variable:

 services.guacamole Additional property RADIUS_HOSTNAME is not allowed
I appreciate the help.