Re: Separating username from display name

[Nick Couchman]

On Mon, Oct 9, 2023 at 3:13 PM Najib .  wrote:

> Hey Nick,
>
>
>
> I definitely dont want to sound the alarm bells on this because as all
> your points are indeed very valid, the trust starts at the Idp. But let me
> perhaps mention a real world scenario and why this came up.
>
>
>
> Microsoft Entra is currently employed as the IdP. It has this concept
> called B2B trust which essentially allows you to open your application to
> external Microsoft Entra tenants which you trust. This is itself is very
> useful as you don’t need to manage all these users yourself on your home
> tenant as long as they meet some continuous approval process. But now you
> must guarantee that that these claims remain static of these external IdPs
> after validation and this is very hard to do as even the helpdesk
> administrator role can change the display names or emails of regular users.
> So after someone was granted access to the application their displayname or
> email could be modified but their access remains valid as for the IdP its
> still the same user with the same application assignment but now on the
> guac side you might have a local db user that has admin privileges called
> “admin” (I know bad name to use) which will map this new displayname to
> this admin user that perhaps has high privileges.
>
>
>
> So prevent such scenario our only option was to use an immutable claim
> such as the object id but the downside is that we had to sacrifice human
> readability in guac.
>
>
>
>
>

Great point - thank you for clarifying the exact scenario.

-Nick

>

Re: When enabling the gfx (Graphics Pipeline Extension), the mouse cursor isn't updated.

[Michael Jumper]

On 10/10/2023 6:11 AM, Nick Couchman wrote:
On Tue, Oct 10, 2023 at 3:47 AM Antoine Besnier 
 wrote:


Hi,

I've had users complain about this issue, but had no idea what could
be the cause.
What do you mean by "when enabling the gfx"? Is it a compilation
option? A connection option? A RDP server option?


It's a connection parameter - as mentioned in the original post, 
"enable-gfx" for the RDP connection.




The "enable-gfx" parameter became "disable-gfx" (with the RDP Graphics 
Pipeline Extension being enabled by default) as of:


https://github.com/apache/guacamole-server/commit/da80163e24dbf728f5c2e1245c23ded5f629917e

- Mike

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

Re: When enabling the gfx (Graphics Pipeline Extension), the mouse cursor isn't updated.

[Nick Couchman]

On Tue, Oct 10, 2023 at 3:47 AM Antoine Besnier
 wrote:

> Hi,
>
> I've had users complain about this issue, but had no idea what could be
> the cause.
> What do you mean by "when enabling the gfx"? Is it a compilation option?
> A connection option? A RDP server option?
>
>
It's a connection parameter - as mentioned in the original post,
"enable-gfx" for the RDP connection.

-Nick

>

Re: Features of "Recent connections"

[Nick Couchman]

On Tue, Oct 10, 2023 at 7:04 AM Julien Lejeune 
wrote:

> Hi all,
>
>
>
> I am new to the mailing and I don’t know if my questions have already been
> asked.
>
> I have looked to the github project and I did not find any PR related to
> the features.
>
> I guessed this mailing list is the best place to ask. Let me know if I’m
> wrong.
>

Yes, you're in the right place! :-)


>
>
> Does anybody know if the following features already exists or are
> « planned » for future releases :
>
>- For a user or an administrator, to remove the « Recent connections »
>section of the home page of Guacamole, only to keep the « All Connections »
>and the filter.
>
>
I have not seen this request, either on the list or in the Jira issue
tracker before, and I don't know of any plans to do this. However, it
shouldn't be terribly difficult to implement such a feature, either as
something that could be turned off globally, or as something that could be
set as a per-user (or perhaps per-browser, since Recent Connections are
kept in local browser storage) preference.


>
>- For a user, to remove a specific connection in the « Recent
>connections ». An use case would be to remove a connection I connected to
>once to only keep the connection I usually connect to on a regular basis.
>   - Bonus : if I have five connections (which seems to be the limit)
>   showing in the « Recent connections » section and I remove one of them, 
> the
>   sixth last connection would come back as a suggestion, so I still have 
> five
>   recent connections showing, but only the ones I want.
>
>
Also not something we have planned or that has been requested before, but,
again, something that I think would be completely doable.


>
>- For a user, to « star » a connection, so it’s easier to find the
>most userd/important connections a user need.
>
>
I have seen this request maybe one other time - a "Favorites" section - but
I'm not sure if anything ever came of it, and I searched for an existing
Jira issue for this and didn't find one. Again, entirely doable, but
doesn't appear to be on the roadmap at this point.

For any/all of these issues, you're welcome to request a Jira account and
put in Jira tickets to request features - and, if you have the ability and
time, jump in and start developing them. I would say the first two could
probably be combined into a single issue - the third item (favorites) seems
distinct.

Here's a link to the Jira tracker - there's a link at the top of the
tracker to request an account:

https://issues.apache.org/jira/projects/GUACAMOLE/issues

-Nick

>

Features of "Recent connections"

[Julien Lejeune]

Hi all,

I am new to the mailing and I don't know if my questions have already been 
asked.
I have looked to the github project and I did not find any PR related to the 
features.
I guessed this mailing list is the best place to ask. Let me know if I'm wrong.

Does anybody know if the following features already exists or are < planned > 
for future releases :

  *   For a user or an administrator, to remove the < Recent connections > 
section of the home page of Guacamole, only to keep the < All Connections > and 
the filter.
  *   For a user, to remove a specific connection in the < Recent connections 
>. An use case would be to remove a connection I connected to once to only keep 
the connection I usually connect to on a regular basis.
 *   Bonus : if I have five connections (which seems to be the limit) 
showing in the < Recent connections > section and I remove one of them, the 
sixth last connection would come back as a suggestion, so I still have five 
recent connections showing, but only the ones I want.
  *   For a user, to < star > a connection, so it's easier to find the most 
userd/important connections a user need.

Best regards,

Julien Lejeune
IT administrator

+32(0) 81 33 11 11
www.actia.be [Linkedin] 




This email message as well as all attachments are for the sole use of the 
intended recipient(s) and may contain confidential and privileged information.
Any unauthorized review, use, disclosure or distribution is prohibited.
If you are not the intended recipient, please contact the sender by reply 
e-mail and destroy all copies of the original message. Thank you.

Re: When enabling the gfx (Graphics Pipeline Extension), the mouse cursor isn't updated.

[Antoine Besnier]

 Hi, 
I've had users complain about this issue, but had no idea what could be the 
cause.What do you mean by "when enabling the gfx"? Is it a compilation option? 
A connection option? A RDP server option?
CheersAntoine
Le jeudi 5 octobre 2023 à 10:39:29 UTC+2, Andrey Khramov 
 a écrit :  
 
 Hi, there
While using Apache Guacamole (the latest "master" branch), I've found the issue 
that the mouse cursor isn't updated when enabling the gfx ("enable-gfx" is 
true).
I've recorded the issue to a video file and attached it to this email.Please 
check the video.
Please let me know how I can resolve this issue.
Thanks. Regards.

-
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org