Re: Connection close

2017-03-17 Thread Mike Jumper 
On Mon, Mar 13, 2017 at 5:03 PM, Marko Nikolić 
wrote:

> Hello,
>
> I am writing an java extension on the server side that should detect when
> the connection is closed, either by using Logout or closing the browser
> window.
>
> I have found TunnelCloseEvent/Listener in the Java API, but it seems that
> it is not used any more. Is there some other method for detecting
> connection close event within extension?
>
>
The place for this is within the close() function of the GuacamoleTunnel
returned by each Connection's connect() function:

http://guacamole.incubator.apache.org/doc/guacamole-common/org/apache/guacamole/net/GuacamoleTunnel.html#close--

http://guacamole.incubator.apache.org/doc/guacamole-ext/org/apache/guacamole/net/auth/Connectable.html#connect-org.apache.guacamole.protocol.GuacamoleClientInformation-

That function will always be invoked when the connection has closed for any
reason.

The easiest way to do this is to override the close() function of an
existing GuacamoleTunnel implementation. Just be sure to invoke
super.close() to ensure resources are reclaimed in addition to whatever you
need to do upon closure, and that failures within your additional
functionality will not prevent those resources from being reclaimed.

- Mike

RES: Lack of support?

2017-03-17 Thread Thiago dos Santos Nunes 
I agree 1000%.

The developers are very.very.  dedicated. Is not fair with them.

Personally I´m very happy with guacamole (even with some bugs that I have 
faced). 

It´s a great...great product!!!

Fique com DEUS.

Aude et Effice!



-Mensagem original-
De: Maxim Golodnyuk [mailto:m...@ioprojects.ru] 
Enviada em: sexta-feira, 17 de março de 2017 09:34
Para: user@guacamole.incubator.apache.org
Assunto: Re: Lack of support?

I'd kindly ask tek0011 to stop spaming to this mail list. This way of 
communication can end up in ban list. 

If you do not like open source way of support via community JUST STOP USING 
THIS PRODUCT. 
And switch to smth that suits your expectations. 

All you should express here is great gratitude to developers who  over the 
years SPEND THEIR TIME free of charge for you to have this product. 




С уважением,
Максим Голоднюк


> 16 марта 2017 г., в 22:37, tek0011  написал(а):
> 
> Open source is not an excuse. 
> 
> There are 100,000's of open source products that provide immeasurable 
> support.  They have taken the time to build a community.  I started 
> using this ~ 3 years ago, although sparingly and never dove into it.  
> You had a community back on sourceforge.  Look at it compared to this.  
> There are posts that are a month old on here with not a single reply.  
> I only wish I knew this product better so I could help too.  But its 
> really hard to learn it when there is a severe lack of information and 
> documentation on it.  No issue tracker, no issue submission for git..
> 
> A few quick google searches will lead you to dozens of pages that 
> specifically state "the manual is missing most this information, and there
> isnt much support."   I just dont want this to die, and the community from
> where it was, to where it is has gone down hill.
> 
> 
> 
> --
> View this message in context: 
> http://apache-guacamole-incubating-users.2363388.n4.nabble.com/Lack-of
> -support-tp570p577.html Sent from the Apache Guacamole (incubating) - 
> Users mailing list archive at Nabble.com.

Re: 2FA Duo not redirecting back - Error 500 response

2017-03-17 Thread Tomas Maggio 
So, LDAP was not configured BUT the extension was installed. It's now gone,
and made some progress:

This error now comes back after I successfully approve the DUO push code:

http://imgur.com/84SpPdD



The error relates to the following piece of code :

*-// If signed response does not verify this user's identity, abort auth
-if (!duoWebService.isValidSignedResponse(authenticatedUser,
signedResponse))
-throw new
GuacamoleClientException("LOGIN.INFO_DUO_VALIDATION_CODE_INCORRECT");*


Going to try and see if I can get more logs or find a clue on why it fails.

Cheers




Regards,

Tomas Maggio
+64 22 040 9517

On Fri, Mar 17, 2017 at 8:46 PM, Tomas Maggio  wrote:

> Hi Mike,
>
> Yeah, I saw that and it's odd cause I'm not using LDAP. I'll double check
> it's not enabled.
>
> I have the feeling that could be related to permissions from some file
> related to the 2FA extension. I'm going to go over the documentation again
> and make sure they have the right owners set.
>
> Cheers
>
>
> On 17 Mar 2017 3:40 p.m., "Mike Jumper"  wrote:
>
> Hi Tomas,
>
> Judging from the other error, you are also configuring LDAP, correct? It
> looks like you're missing one of the properties required for LDAP auth to
> work, "ldap-user-base-dn":
>
> http://guacamole.incubator.apache.org/doc/gug/ldap-auth.html
>
> Are you using anything else besides Duo and LDAP?
>
> - Mike
>
>
> On Wed, Mar 15, 2017 at 2:46 PM, Tomas Maggio 
> wrote:
>
>> Hi,
>>
>> I've managed to configure *2FA* using the *Duo* documentation. In the
>> environment that I installed Guacamole I use a reverse NGINX proxy (all
>> setup as per documentation and seems to work perfectly before configuring
>> 2FA).
>>
>> www > FW > Nginx > Tomcat/Guacamole
>>
>> This is the successful result of DUO:
>> http://pix.toile-libre.org/upload/original/1489613233.png
>>
>> This is the response that I see in the browser:
>> http://pix.toile-libre.org/upload/original/1489613315.png
>>
>>
>> *Catalina* log shows:
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>> *Mar 16, 2017 10:39:52 AM org.webjars.servlet.WebjarsServlet doGetINFO:
>> Webjars resource requested:
>> /META-INF/resources/webjars/filesaver/1.3.3/FileSaver.min.jsMar 16, 2017
>> 10:39:52 AM org.webjars.servlet.WebjarsServlet doGetINFO: Webjars resource
>> requested:
>> /META-INF/resources/webjars/angular-module-shim/0.0.4/angular-module-shim.jsMar
>> 16, 2017 10:40:10 AM com.sun.jersey.spi.container.ContainerResponse
>> logExceptionSEVERE: Mapped exception to response: 500 (Internal Server
>> Error)org.apache.guacamole.rest.APIExceptionat
>> org.apache.guacamole.rest.RESTExceptionWrapper.invoke(RESTExceptionWrapper.java:187)
>> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)at
>> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
>> at
>> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
>> at java.lang.reflect.Method.invoke(Method.java:498)at
>> com.sun.jersey.spi.container.JavaMethodInvokerFactory$1.invoke(JavaMethodInvokerFactory.java:60)*
>>
>> Locahost *access* log (tomcat) shows:
>> 192.168.2.184 - - [16/Mar/2017:10:39:52 +1300] "GET
>> /guacamole/webjars/blob-polyfill/1.0.20150320/Blob.js HTTP/1.1" 200 6148
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>> *192.168.2.184 - - [16/Mar/2017:10:39:52 +1300] "GET
>> /guacamole/webjars/filesaver/1.3.3/FileSaver.min.js HTTP/1.1" 200
>> 2446192.168.2.184 - - [16/Mar/2017:10:39:52 +1300] "GET
>> /guacamole/webjars/angular-module-shim/0.0.4/angular-module-shim.js
>> HTTP/1.1" 200 774192.168.2.184 - - [16/Mar/2017:10:39:52 +1300] "GET
>> /guacamole/app.js?v=0.9.11-incubating HTTP/1.1" 200 289363192.168.2.184 - -
>> [16/Mar/2017:10:39:53 +1300] "GET /guacamole/api/patches HTTP/1.1" 200
>> 352192.168.2.184 - - [16/Mar/2017:10:39:53 +1300] "GET
>> /guacamole/api/languages HTTP/1.1" 200 136192.168.2.184 - -
>> [16/Mar/2017:10:39:53 +1300] "GET /guacamole/translations/en.json HTTP/1.1"
>> 200 31949192.168.2.184 - - [16/Mar/2017:10:39:53 +1300] "POST
>> /guacamole/api/tokens HTTP/1.1" 403 237192.168.2.184 - -
>> [16/Mar/2017:10:40:00 +1300] "POST /guacamole/api/tokens HTTP/1.1" 403
>> 529192.168.2.184 - - [16/Mar/2017:10:40:10 +1300] "POST
>> /guacamole/api/tokens HTTP/1.1" 500 211*
>> Wonder if any of you guys saw anything like this or can point me in the
>> right direction.
>>
>>
>> Cheers,
>>
>> Tomas Maggio
>> +64 22 040 9517 <+64%2022%20040%209517>
>>
>
>
>

Re: 2FA Duo not redirecting back - Error 500 response

2017-03-17 Thread Tomas Maggio 
Hi Mike,

Yeah, I saw that and it's odd cause I'm not using LDAP. I'll double check
it's not enabled.

I have the feeling that could be related to permissions from some file
related to the 2FA extension. I'm going to go over the documentation again
and make sure they have the right owners set.

Cheers


On 17 Mar 2017 3:40 p.m., "Mike Jumper"  wrote:

Hi Tomas,

Judging from the other error, you are also configuring LDAP, correct? It
looks like you're missing one of the properties required for LDAP auth to
work, "ldap-user-base-dn":

http://guacamole.incubator.apache.org/doc/gug/ldap-auth.html

Are you using anything else besides Duo and LDAP?

- Mike


On Wed, Mar 15, 2017 at 2:46 PM, Tomas Maggio  wrote:

> Hi,
>
> I've managed to configure *2FA* using the *Duo* documentation. In the
> environment that I installed Guacamole I use a reverse NGINX proxy (all
> setup as per documentation and seems to work perfectly before configuring
> 2FA).
>
> www > FW > Nginx > Tomcat/Guacamole
>
> This is the successful result of DUO:
> http://pix.toile-libre.org/upload/original/1489613233.png
>
> This is the response that I see in the browser:
> http://pix.toile-libre.org/upload/original/1489613315.png
>
>
> *Catalina* log shows:
>
>
>
>
>
>
>
>
>
>
>
>
> *Mar 16, 2017 10:39:52 AM org.webjars.servlet.WebjarsServlet doGetINFO:
> Webjars resource requested:
> /META-INF/resources/webjars/filesaver/1.3.3/FileSaver.min.jsMar 16, 2017
> 10:39:52 AM org.webjars.servlet.WebjarsServlet doGetINFO: Webjars resource
> requested:
> /META-INF/resources/webjars/angular-module-shim/0.0.4/angular-module-shim.jsMar
> 16, 2017 10:40:10 AM com.sun.jersey.spi.container.ContainerResponse
> logExceptionSEVERE: Mapped exception to response: 500 (Internal Server
> Error)org.apache.guacamole.rest.APIExceptionat
> org.apache.guacamole.rest.RESTExceptionWrapper.invoke(RESTExceptionWrapper.java:187)
> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)at
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
> at
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
> at java.lang.reflect.Method.invoke(Method.java:498)at
> com.sun.jersey.spi.container.JavaMethodInvokerFactory$1.invoke(JavaMethodInvokerFactory.java:60)*
>
> Locahost *access* log (tomcat) shows:
> 192.168.2.184 - - [16/Mar/2017:10:39:52 +1300] "GET
> /guacamole/webjars/blob-polyfill/1.0.20150320/Blob.js HTTP/1.1" 200 6148
>
>
>
>
>
>
>
>
>
>
> *192.168.2.184 - - [16/Mar/2017:10:39:52 +1300] "GET
> /guacamole/webjars/filesaver/1.3.3/FileSaver.min.js HTTP/1.1" 200
> 2446192.168.2.184 - - [16/Mar/2017:10:39:52 +1300] "GET
> /guacamole/webjars/angular-module-shim/0.0.4/angular-module-shim.js
> HTTP/1.1" 200 774192.168.2.184 - - [16/Mar/2017:10:39:52 +1300] "GET
> /guacamole/app.js?v=0.9.11-incubating HTTP/1.1" 200 289363192.168.2.184 - -
> [16/Mar/2017:10:39:53 +1300] "GET /guacamole/api/patches HTTP/1.1" 200
> 352192.168.2.184 - - [16/Mar/2017:10:39:53 +1300] "GET
> /guacamole/api/languages HTTP/1.1" 200 136192.168.2.184 - -
> [16/Mar/2017:10:39:53 +1300] "GET /guacamole/translations/en.json HTTP/1.1"
> 200 31949192.168.2.184 - - [16/Mar/2017:10:39:53 +1300] "POST
> /guacamole/api/tokens HTTP/1.1" 403 237192.168.2.184 - -
> [16/Mar/2017:10:40:00 +1300] "POST /guacamole/api/tokens HTTP/1.1" 403
> 529192.168.2.184 - - [16/Mar/2017:10:40:10 +1300] "POST
> /guacamole/api/tokens HTTP/1.1" 500 211*
> Wonder if any of you guys saw anything like this or can point me in the
> right direction.
>
>
> Cheers,
>
> Tomas Maggio
> +64 22 040 9517 <+64%2022%20040%209517>
>