RE: Please add us as a support group for Guacamole

[Jim Sullivan]

Mike:



Thanks for the clarification. Based on that we are adding Guacamole support
to our website. We look forward to working with the community, and we look
forward to working with Guacamole users.



Jim Sullivan 

Certified Scrum Master 

Certified Scrum Professional 

Certified SAFe Program Consultant 

IBM Master Instructor 

*Voice:* 888-553-6563 ext 700

*Fax*: 888-553-6563

*Mobile*: 917-837-5210

Principal and Arcisphere Technical Lead

www.arcisphere.com

www.vmware4u.com

[image: btn_liprofile_blue_80x15]




*From:* Mike Jumper [mailto:mike.jum...@guac-dev.org]
*Sent:* Tuesday, May 31, 2016 4:54 PM
*To:* user@guacamole.incubator.apache.org
*Subject:* Re: Please add us as a support group for Guacamole



On Tue, May 31, 2016 at 1:34 PM, Jim Sullivan  wrote:

Mike:



We will add the Guacamole support to our website.



OK.



We were holding off as we wanted to establish the proper support
relationship.



I'm not sure exactly what you mean, but given the word "relationship", let
me quickly clarify:



The directory of commercial support providers on the Apache Guacamole
project website does not imply a relationship between the providers and the
project (or the ASF). It's a directory that we provide for the sake of the
community because we believe the availability of such support is critical.



Don't misunderstand - the community benefits from a growing list of
choices, and we are very happy to add your company to this list. I just
want to be clear that there is no implied relationship; the independence of
the project is paramount.



As far as the logo, yes, please extract what works from the logo file. I
also attached a different logo file. This one may be friendlier.



Excellent. Thanks!



- Mike

Re: Please add us as a support group for Guacamole

[Mike Jumper]

On Tue, May 31, 2016 at 1:34 PM, Jim Sullivan  wrote:

> Mike:
>
>
>
> We will add the Guacamole support to our website.
>

OK.

We were holding off as we wanted to establish the proper support
> relationship.
>

I'm not sure exactly what you mean, but given the word "relationship", let
me quickly clarify:

The directory of commercial support providers on the Apache Guacamole
project website does not imply a relationship between the providers and the
project (or the ASF). It's a directory that we provide for the sake of the
community because we believe the availability of such support is critical.

Don't misunderstand - the community benefits from a growing list of
choices, and we are very happy to add your company to this list. I just
want to be clear that there is no implied relationship; the independence of
the project is paramount.

As far as the logo, yes, please extract what works from the logo file. I
> also attached a different logo file. This one may be friendlier.
>
>
Excellent. Thanks!

- Mike

Re: Please add us as a support group for Guacamole

[Mike Jumper]

On Tue, May 31, 2016 at 1:19 PM, Jim Sullivan  wrote:

> Mike:
>
>
>
> That sounds great to me. Thanks.
>

Are you referring to the blurb, to my question regarding the logo, or both?
(See below)


> Please let me know the next step.
>

The next step for us is to simply add the content to the site, which is
pretty simple and automated. Before we do so, can you please address the
following:

1) Looking at your site, I don't see support services for Guacamole listed.
Where should I be looking?

2) Do you have a roughly-square logo? I can extract the image portion of
the logo PDF you sent, but don't want to do that without permission. If I
just use the logo as-is, it will end up resized to the point that it's
unreadable.

Thanks,

- Mike

RE: Please add us as a support group for Guacamole

[Jim Sullivan]

Mike:



That sounds great to me. Thanks. Please let me know the next step.



Jim Sullivan 

Certified Scrum Master 

Certified Scrum Professional 

Certified SAFe Program Consultant 

IBM Master Instructor 

*Voice:* 888-553-6563 ext 700

*Fax*: 888-553-6563

*Mobile*: 917-837-5210

Principal and Arcisphere Technical Lead

www.arcisphere.com

www.vmware4u.com

[image: btn_liprofile_blue_80x15]




*From:* Mike Jumper [mailto:mike.jum...@guac-dev.org]
*Sent:* Tuesday, May 31, 2016 4:16 PM
*To:* user@guacamole.incubator.apache.org
*Subject:* Re: Please add us as a support group for Guacamole



On Tue, May 31, 2016 at 12:26 PM, Jim Sullivan  wrote:

Mike:



We love Guacamole. We are a software engineering firm. We also provide
product training. That is how we started working with Guacamole, and it is
a fantastic product. We have struggled with it, learned it, and we have had
success with Guacamole. We also have had users get into some trouble with
respect to malware, so we have experience with those risks. Our firms loves
to share the success we have had with commercial, and open software
products. We would love to help clients with installation, and general
product usage.



OK. Trying to condense this down to around 50 words... Is the following
accurate?



"Arcisphere is a software engineering firm which started working with
Guacamole to provide product training. They continue to provide assistance
with Guacamole installation and general product usage, and love to share
the success they have had with both commercial and open software products."



Please feel free to reword the above - we just need to keep the company
blurb brief and (to the extent possible) unbiased from the perspective of
the project.



Here is our website, and I attached the logo.

http://arcisphere.com/



Looking at your site, I don't see support services for Guacamole listed.
Where should I be looking?



Do you have a roughly-square logo? I can extract the image portion of the
logo PDF you sent, but don't want to do that without permission. If I just
use the logo as-is, it will end up resized to the point that it's
unreadable.



Thanks,



- Mike

Re: guacd won't connect to RDP server using NLA and UPN

[Mike Jumper]

On Mon, May 30, 2016 at 11:07 PM, James Johnston <
johnstonj.pub...@codenest.com> wrote:

> Hi,
>
> I'm trying to connect to an RDP server that is set up with both TLS and
> NLA.  I
> want the RDP connection to take place using the username of the guacamole
> user
> who has logged in.  (guacamole has been linked with LDAP.)  Unfortunately,
> this
> doesn't work: the RDP server disconnects the client immediately (according
> to
> the guacamole web GUI).  docker logs guacd merely reports:
>
> guacd[41]: ERROR:   Error connecting to RDP server
> guacd[41]: INFO:Connection did not succeed
>
> My connection username is set to ${GUAC_USERNAME}.  Password is set to
> ${GUAC_PASSWORD}.  Domain box is left blank, security mode set to NLA, and
> Ignore server certificate has been checked to work around the issue in my
> last
> e-mail.  Everything is left at defaults.
>
>
Have you tried specifying the domain? (And only specifying the username for
the username, not username@domain)

Guacamole is integrated with Active Directory using LDAP, with a PostgreSQL
> back-end for configuration.  I set up docker to use the userPrincipalName
> LDAP
> attribute for usernames.  So e.g. I login to guacamole as "
> u...@mydomain.com".
>
>
I'm not sure if the RDP server will happily accept the full user@domain as
the username. If this works with other RDP clients, it may be that those
clients are parsing out the user and domain, and still pass them to the RDP
server separately.

I usually see users configuring Guacamole + Active Directory by:

1) Providing a search DN and password within guacamole.properties
2) Using "sAMAccountName" as the username attribute
3) Specifying the domain explicitly
4) Using "${GUAC_USERNAME}" for the username in the connection parameters

Note that I am using latest docker images for both guacd and guacamole.
>
> I have verified that logging in with regular Microsoft Remote Desktop
> client
> using the UPN works.  So that's not the problem...  On the other hand, if I
> manually type the UPN into the username box instead of using
> ${GUAC_USERNAME},
> it still doesn't work.
>

By "the username box", are you referring to Windows' own username/password
prompt when you're logging in, or are you referring to the connection
parameters within Guacamole?

Thanks,

- Mike

guacd won't connect to RDP server using NLA and UPN

[James Johnston]

Hi,

I'm trying to connect to an RDP server that is set up with both TLS and NLA.  I
want the RDP connection to take place using the username of the guacamole user
who has logged in.  (guacamole has been linked with LDAP.)  Unfortunately, this
doesn't work: the RDP server disconnects the client immediately (according to
the guacamole web GUI).  docker logs guacd merely reports:

guacd[41]: ERROR:   Error connecting to RDP server
guacd[41]: INFO:Connection did not succeed

My connection username is set to ${GUAC_USERNAME}.  Password is set to
${GUAC_PASSWORD}.  Domain box is left blank, security mode set to NLA, and
Ignore server certificate has been checked to work around the issue in my last
e-mail.  Everything is left at defaults.

Guacamole is integrated with Active Directory using LDAP, with a PostgreSQL
back-end for configuration.  I set up docker to use the userPrincipalName LDAP
attribute for usernames.  So e.g. I login to guacamole as "u...@mydomain.com".

Note that I am using latest docker images for both guacd and guacamole.

I have verified that logging in with regular Microsoft Remote Desktop client
using the UPN works.  So that's not the problem...  On the other hand, if I
manually type the UPN into the username box instead of using ${GUAC_USERNAME},
it still doesn't work.

How do I get ${GUAC_USERNAME} to work for logging in to RDP with a UPN?

Best regards,

James Johnston