Re: ESXi VNC over websocket connection
This is super interesting! I would love to use this instead of RDP. With best regards, Rasmus Haslund Principal Technologist & VMCT Program Manager | Veeam Software | Phone: +40 372 821 972 | Twitter: @haslund From: Lukáš Raška Reply to: "user@guacamole.apache.org" Date: Friday, 28 April 2023 at 08.10 To: "user@guacamole.apache.org" Subject: Re: ESXi VNC over websocket connection This is the first time you've received an email from this sender lukas @ raska.me, please exercise caution when clicking on links or opening attachments. Hi, I've done implementation of WebMKS (that's now VMware calls it) using that kind of approach - create raw WS connection and just tunnel the VNC connection inside that tunnel via UNIX sockets. That works fine and I can actually connect to the remote console, however there are few caveats when it comes to providing as additional Guacamole-supported protocol. Based on the VMware WebMKS architecture, https://vdc-download.vmware.com/vmwb-repository/dcr-public/8c1815ce-2f69-4b0b-a50c-ed8b305c22c0/e01e3448-99e8-4b7c-b26b-f0f02c45fb91/GUID-635B3A9F-C62E-4A97-9FAB-FBCAA3914FDA.html for example, you first need to obtain a ticket from vSphere / vCloud Director, which is short lived. With that token you actually get an URL you can use with the WS-VNC connection. So using that within some integrated product (that just provides the valid data to Guacamole) is fine and works, but implementing UI where you could easily connect to any VM console means, you need to have access to vSphere API to acquire the WebMKS ticket and then guacd needs to have connection to every possible ESXi server. Thanks, Lukas pá 28. 4. 2023 v 2:19 odesílatel Stephen Young mailto:stephenryoungs...@gmail.com>> napsal: Thanks for the replies. I’ll have a look at using libwebsockets. Yes, ‘stalled’ was a poor choice of words :) - Stephen > On Apr 27, 2023, at 5:12 PM, Nick Couchman > mailto:vn...@apache.org>> wrote: > > On Thu, Apr 27, 2023 at 6:02 PM Michael Jumper > mailto:mjum...@apache.org>> wrote: >> >>> On Thu, Apr 27, 2023, 2:55 PM Stephen Young >>> mailto:stephenryoungs...@gmail.com>> wrote: >>> >>> Hi all, >>> >>> In ESXi 7.0, VMWare has removed TCP access to the bundled VNC server built >>> into their ESXi hypervisor. Instead the VNC protocol is tunneled over a >>> websocket. Are there any plans to support VNC over websockets to facilitate >>> connections in cases like this? I noticed that there was interest in >>> https://issues.apache.org/jira/browse/GUACAMOLE-1641 but that seems stalled. >>> Does anyone have any advice or experience connecting guacd to the ESXi >>> bundled VNC server over websockets? I wondered if using a TCP to websocket >>> proxy/bridge like unwebsockify would be possible. >> >> >> libwebsockets is already used within guacamole-server for accessing >> Kubernetes. The same could probably be done as an alternative backend >> connection mode for VNC, though I'm not sure whether libvncclient has the >> necessary support for plugging in arbitrary transports. >> > > I've done some work recently on support for tunneling the various > protocols over SSH, and, assuming libwebsockets can open a standard > UNIX socket, this should work. > > Also, it's hard to categorize this issue as "stalled" - it was > entered, but hasn't really had any serious activity at all, and also > isn't that old :-). > > -Nick > > - > To unsubscribe, e-mail: > user-unsubscr...@guacamole.apache.org<mailto:user-unsubscr...@guacamole.apache.org> > For additional commands, e-mail: > user-h...@guacamole.apache.org<mailto:user-h...@guacamole.apache.org> > - To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org<mailto:user-unsubscr...@guacamole.apache.org> For additional commands, e-mail: user-h...@guacamole.apache.org<mailto:user-h...@guacamole.apache.org> -- Best Regards Lukáš Raška
Re: VMRC protocol support?
I would LOVE to do the same. Aaron, can you name any examples of extensions that can do this? With best regards, Rasmus Haslund Principal Technologist & VMCT Program Manager | Veeam Software | Phone: +40 372 821 972 | Twitter: @haslund From: Aaron Meyer Reply to: "user@guacamole.apache.org" Date: Thursday, 23 March 2023 at 14.21 To: "user@guacamole.apache.org" Subject: VMRC protocol support? I’ve seen a few commercial products that use guacd as a gateway for VMware VM console access using VMRC but I haven’t been able to find any documentation on how to utilize this. Can someone please give me direction to documentations / examples on how to effect this – or is VMRC an example of a proprietary extension to the guacd project? In your service, Aaron Meyer
Re: Understanding Sharing Profile for Non-Admins
Is it not possible to pre-share a connection that another non-admin user can use to “monitor” a users connection? With best regards, Rasmus Haslund Principal Technologist & VMCT Program Manager | Veeam Software | Phone: +40 372 821 972 | Twitter: @haslund From: "Leath, Austin" Reply to: "user@guacamole.apache.org" Date: Tuesday, 1 March 2022 at 18.40 To: "user@guacamole.apache.org" Subject: RE: Re: Understanding Sharing Profile for Non-Admins CAUTION - This email originated from outside of Veeam. Do not click links or open attachments unless you recognize the sender. Hello, we are utilizing the guacamole API and are really wanting to know if there is a PATCH API endpoint that allows us to add sharing profile connection permissions to user groups programmatically. All of the sharing profile connections are already created, all we need to do is figure out a way to add permissions for specific user groups to access them I have been using some documentation that I found on GitHub that covers another version of Guacamole (Version 1.1.0), and while I know it is out of date it has mostly everything we need to create synchronization scripts. I made an issue in that GitHub project that better describes what we are looking for: https://github.com/ridvanaltun/guacamole-rest-api-documentation/issues/8 On 2022/03/01 01:08:18 Mike Jumper wrote: > On Mon, Feb 28, 2022, 12:42 Khoe, Yonathan > mailto:yo...@unt.edu>> wrote: > > > Hello, > > > > We set up sharing profiles for all of our connections under an admin > > account. We want the ability for our students to be able to generate a > > share link to their connection viewing (to their professor) when they are > > remoted to a machine. We thought that this was the idea when we create the > > sharing profiles individually and giving them a read-only option and name, > > but it turns out that our students cannot see the “Share” button when > > opening the Guacamole menu (ctrl+alt+shift). The student accounts > > themselves do not have any permissions; the user groups that the students > > belong to also do not have permissions set (we only use it to assign the > > connection groups). Are we missing something in terms of letting > > non-admins to be able to generate a share link to be given to other people? > > > > You need to additionally grant the users (or the relevant group) access to > the sharing profile, not just the connection. Only users with access to a > particular sharing profile will be able to share the relevant connection > using that profile. > > - Mike >
Re: Guacamole 1.4.0 - Shared Connections
Does anyone know if it is possible to create these shared connections via the API? With best regards, Rasmus Haslund Principal Technologist & VMCT Program Manager | Veeam Software | Phone: +40 372 821 972 | Twitter: @haslund From: Luciano Oliveira Reply to: "user@guacamole.apache.org" Date: Tuesday, 25 January 2022 at 20.47 To: "user@guacamole.apache.org" Cc: "Khoe, Yonathan" Subject: RE: Guacamole 1.4.0 - Shared Connections CAUTION - This email originated from outside of Veeam. Do not click links or open attachments unless you recognize the sender. Hello, Ok! Ok! In connection, press shift+ctrl+alt, share, copy link and send to users! [cid:39e9523a-d990-4a70-ad8c-78c7a79c544f] In the connection configuration, new shared connection needs to be set! De: Hankins, Jonathan Enviado: terça-feira, 25 de janeiro de 2022 15:43 Para: user@guacamole.apache.org Cc: Khoe, Yonathan Assunto: Re: Guacamole 1.4.0 - Shared Connections See here: https://guacamole.apache.org/doc/gug/administration.html#connection-sharing Specifically: Unlike connections and groups, there is no “New Sharing Profile” button. Sharing profiles are created through clicking the “New Sharing Profile” placeholders which appear when connections are expanded. Just as expanding a connection group reveals the connections or groups therein, expanding a connection reveals the sharing profiles associated with that connection. This holds true with both the list of connections in the connection management screen and the list of connections in the user editor. On Tue, Jan 25, 2022 at 12:13 PM CVAD IT Service Desk mailto:cvad.itservi...@unt.edu>> wrote: Good afternoon everyone. We are using Guacamole 1.4.0 and would like to create a shared connection as noted in the guacamole documentation, however don’t see the “share” dialogue anywhere on our instance. Is this something that we have to enable in the guacamole configuration files on the server? We have scoured the guacamole documentation and have found no inferences on how to enable this functionality. Any guidance would be appreciated. Thank you! -- Jonathan Hankins Homewood City Schools W: 205-877-4548 This e-mail is intended only for the recipient and may contain confidential or proprietary information. If you are not the intended recipient, the review, distribution, duplication or retention of this message and its attachments are prohibited. Please notify the sender of this error immediately by reply e-mail, and permanently delete this message and its attachments in any form in which they may have been preserved.
Allow non-admin access to "active sessions" for certain users
Hi everyone, I would like to allow one user, a teacher, access to the settings/active sessions and to be able to interact with a student session as needed, but only for the students assigned to them. I don’t want the teacher to be full admin. I can’t seem to figure out how to do this. Any suggestions? Thank you in advance, Rasmus Haslund Principal Technologist & VMCT Program Manager Veeam Software<http://www.veeam.com/vmce> E-mail: ras...@vee.am<mailto:ras...@vee.am> Phone: +40 372 821 972 [Authorized Instructor][Microsoft Certified Trainer 2020-2021][VMware Certified Instructor][cidimage004.jpg@01D72097.E88FD5D0]
Copy/paste functionality
Hi folks, It is my understanding that for RDP connections copy/paste functionality from outside Guacamole into the RDP session should work out of the box with Google Chrome; however, I can’t get it to work. I don’t want to have to open the CTRL+ALT+SHIFT menu as an intermediate copy paste location. I noticed that if I change input method to “text input” then it seems to work. Is this the expected requirement? If yes, how can I change the defaults to have text input enabled/selected by default? Any advice? Thank you in advance, Rasmus Haslund Principal Technologist & VMCT Program Manager Veeam Software<http://www.veeam.com/vmce> E-mail: ras...@vee.am<mailto:ras...@vee.am> Phone: +40 372 821 972 [Authorized Instructor][Microsoft Certified Trainer 2020-2021][VMware Certified Instructor][cidimage004.jpg@01D72097.E88FD5D0]
Connection shadowing
Hi everyone, I am a new Guacamole user and am hoping to use it for a training scenario such as: * 12 student users have each their own single connection to a RDP host * 1 instructor has access to all twelve student connections and can see what is happening on their screens without disconnecting the students. * Ideally, the instructor can interact with the connections without disconnecting the student in case they can’t find the right button to click etc. To test it out I have created three users: * Lab-test-01 * Lab-test-02 * Lab-test-instructor And two connections: * Lab-test-01 * Lab-test-02 However, whenever the instructor user connects after a student the student will get disconnected. Is what I am trying to achieve even possible with Guacamole on RDP? Thank you in advance, Rasmus Haslund Principal Technologist & VMCT Program Manager Veeam Software<http://www.veeam.com/vmce> E-mail: ras...@vee.am<mailto:ras...@vee.am> Phone: +40 372 821 972 [Authorized Instructor][Microsoft Certified Trainer 2020-2021][VMware Certified Instructor][cidimage004.jpg@01D72097.E88FD5D0]
