Re: Connection groups load balancing error

2024-11-06 Thread Michael Jumper
On 11/6/24 10:39 AM, Nick Couchman wrote: On Wed, Nov 6, 2024 at 1:30 PM Steven Barnhart wrote: This has been our experience at least lately as well. The connection groups aren’t balancing. To say "the connection groups aren't balancing" is not accurate - they do balance, but there is cu

Re: Continued spam from "HostPapa"

2024-10-30 Thread Michael Jumper
o the ticket they sent me asking for info on how it got there but I won’t hold my breath. –Steve On Oct 30, 2024, at 1:52 PM, Michael Jumper wrote: Hello all, I've reached out to the ASF's Infra to try to chase down and eliminate the spam that's coming to dev@ subscribers from &q

Continued spam from "HostPapa"

2024-10-30 Thread Michael Jumper
Hello all, I've reached out to the ASF's Infra to try to chase down and eliminate the spam that's coming to dev@ subscribers from "HostPapa". My best guess for the moment is that either "HostPapa" is scraping our archives or an email address on the list is automatically forwarding received e

Re: [#11339581] Kerberos support in guacamole for SSO

2024-10-25 Thread Michael Jumper
tpapa? I did get the email back directly with my exact subject after emailing the dev list the Kerberos question. –Steve On Oct 25, 2024, at 1:26 PM, Michael Jumper wrote: There are no subscribers from the "hostpapasupport.com" domain on the dev@ list. Can you see from the raw conten

Re: Fwd: [#11339581] Kerberos support in guacamole for SSO

2024-10-25 Thread Michael Jumper
There are no subscribers from the "hostpapasupport.com" domain on the dev@ list. Can you see from the raw contents of the email whether they are emailing you directly without using the dev@ list? - Mike On 10/25/24 7:34 AM, Michael Jumper wrote: I have moderator privileges on this l

Re: Fwd: [#11339581] Kerberos support in guacamole for SSO

2024-10-25 Thread Michael Jumper
I have moderator privileges on this list - I'll take to see if I can find where these are coming from and remove the subscriber. - Mike On 10/25/24 7:14 AM, Steven Barnhart wrote: "Hostpapa" I received this automated e-mail after e-mailing the guacamole dev list. Please stop this soliciting.

Re: Remove outstanding issues without merged code from 1.6.0

2024-08-26 Thread Michael Jumper
On 8/26/24 1:58 PM, Nick Couchman wrote: On Mon, Aug 26, 2024 at 4:46 PM Michael Jumper wrote: In the interest of cutting a 1.6.0 release this month (ish), I think we should remove the following issues from scope as they do not yet have any merged code changes and look to me like they may

Remove outstanding issues without merged code from 1.6.0

2024-08-26 Thread Michael Jumper
In the interest of cutting a 1.6.0 release this month (ish), I think we should remove the following issues from scope as they do not yet have any merged code changes and look to me like they may better fit in a different release: - https://issues.apache.org/jira/browse/GUACAMOLE-536 ("Support

Clarified handling of staging branch in branching scheme documentation

2024-08-06 Thread Michael Jumper
With 1.6.0 progressing and the usual dependency updates underway, I noticed that the previous branching scheme documentation is incorrect with respect to handling of changes tied to a release while the staging branch for that release exists. I've updated things to clarify: * The "patch" branc

Re: Pushing forward with 1.6.0 Release

2024-07-13 Thread Michael Jumper
Yes! I'll see if I can finish up at least the graphical performance improvements this weekend, and take a stab at any low-hanging fruit while I'm at it. I think we can probably get this release finalized by August. - Mike On July 6, 2024 12:50:52 PM PDT, Nick Couchman wrote: >Hello everyone,

Automatic scroll detection and optimization of graphical updates

2024-06-11 Thread Michael Jumper
Hello all, I've completed a large body of initial work in implementing a new "guac_display" API for libguac which is capable of automatically recognizing and optimizing scrolls/copies in real time: https://github.com/apache/guacamole-server/pull/525 There's definitely more to be done here, p

Re: On to 1.6.0?

2024-04-21 Thread Michael Jumper
As long as we continue merging bugfixes to the recently-adopted "patch" branch, we maintain the flexibility to cut a 1.5.6 patch release independently of ongoing plans for 1.6.0. - Mike On 4/16/24 7:42 PM, Steven Barnhart wrote: That makes sense. I will admit selfishly I am heavily anticipati

[ANNOUNCE] Apache Guacamole 1.5.5 released

2024-04-06 Thread Michael Jumper
The Apache Guacamole community is proud to announce the release of Apache Guacamole 1.5.5. Apache Guacamole is a clientless remote desktop gateway which supports standard protocols like VNC, RDP, and SSH. We call it "clientless" because no plugins or client software are required; once Guacamol

[RESULT] [VOTE] Release Apache Guacamole 1.5.5 (RC1)

2024-04-05 Thread Michael Jumper
On 4/1/24 1:26 AM, Michael Jumper wrote: Hello all, The first release candidate for Apache Guacamole 1.5.5 has been uploaded and is ready for VOTE. The draft release notes (along with links to artifacts, signatures/checksums, and updated documentation) can be found here: https

[VOTE] Release Apache Guacamole 1.5.5 (RC1)

2024-04-01 Thread Michael Jumper
Hello all, The first release candidate for Apache Guacamole 1.5.5 has been uploaded and is ready for VOTE. The draft release notes (along with links to artifacts, signatures/checksums, and updated documentation) can be found here: https://guacamole.apache.org/releases/1.5.5/ The git tag for

Re: Listing Company in Apache Guacamole Commercial Support Page

2024-03-08 Thread Michael Jumper
(Here's a copy of a portion of the instructions I sent to you directly when your emails were bouncing from the list) ... All that's necessary is that you open a pull request that satisfies the minimal requirements. A good example of such a pull request is here: https://github.com/apache/guaca

Re: [DISCUSS] Branching strategy and roadmap for 1.5.x, 1.6.x, 2.0.x (and beyond)

2024-03-01 Thread Michael Jumper
That would be my view, as well. I don't think there is enough demand to warrant specifically targeting Spring Boot, and I don't think the webapp itself would benefit from adopting Spring Boot internally. I'd also expect that a framework like Spring Boot that sits on top of JavaEE would be able

Re: [DISCUSS] Branching strategy and roadmap for 1.5.x, 1.6.x, 2.0.x (and beyond)

2024-02-25 Thread Michael Jumper
On 2/22/24 09:25, Michael Jumper wrote: On 2/22/24 08:16, Christopher Speck wrote: As a community member and minor contributor this sounds good. I had a few questions. - Is there only ever a single patch version supported at a time? Yes. - Will there be a regular cadence of merging "

Re: [DISCUSS] Branching strategy and roadmap for 1.5.x, 1.6.x, 2.0.x (and beyond)

2024-02-22 Thread Michael Jumper
On 2/22/24 08:16, Christopher Speck wrote: As a community member and minor contributor this sounds good. I had a few questions. - Is there only ever a single patch version supported at a time? Yes. - Will there be a regular cadence of merging "main" into "next" so actively developed work i

[DISCUSS] Branching strategy and roadmap for 1.5.x, 1.6.x, 2.0.x (and beyond)

2024-02-22 Thread Michael Jumper
(This is particularly relevant to the Angular and X.Org changes.) We have a ton of changes in flight of all sizes, both from Guacamole committers and from contributors. The larger changes tend to get stuck because ... they're large. The smaller changes tend to get stuck because of basic issues

[SECURITY] CVE-2023-43826: Apache Guacamole: Integer overflow in handling of VNC image buffers

2023-12-19 Thread Michael Jumper
Severity: important Base CVSS Score: 7.5 (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Affected versions: - Apache Guacamole through 1.5.3 Description: Apache Guacamole 1.5.3 and older do not consistently ensure that values received from a VNC server will not result in integer overflow. If a

Re: issue since 1.5.4

2023-12-11 Thread Michael Jumper
On 12/11/2023 12:51 AM, Geschwentner, Patrick wrote: Dear Ladies and Gentlemen! Since Release 1.5.4 the connection to a RDP Server which is on localhost (127.0.0.1) does not work anymore: (this screen shows for >10 seconds) Afterwards this: Can you provide your logs from guacd? What doe

[ANNOUNCE] Apache Guacamole 1.5.4

2023-12-08 Thread Michael Jumper
The Apache Guacamole community is proud to announce the release of Apache Guacamole 1.5.4. Apache Guacamole is a clientless remote desktop gateway which supports standard protocols like VNC, RDP, and SSH. We call it "clientless" because no plugins or client software are required; once Guacamol

[RESULT] [VOTE] Release Apache Guacamole 1.5.4 (RC2)

2023-12-07 Thread Michael Jumper
On 12/4/2023 2:06 PM, Michael Jumper wrote: Hello all, The second release candidate for Apache Guacamole 1.5.4 has been uploaded and is ready for VOTE. The draft release notes (along with links to artifacts, signatures/checksums, and updated documentation) can be found here: http

[VOTE] Release Apache Guacamole 1.5.4 (RC2)

2023-12-04 Thread Michael Jumper
Hello all, The second release candidate for Apache Guacamole 1.5.4 has been uploaded and is ready for VOTE. The draft release notes (along with links to artifacts, signatures/checksums, and updated documentation) can be found here: http://guacamole.apache.org/releases/1.5.4/ The git tag for

[CANCEL] [VOTE] Release Apache Guacamole 1.5.4 (RC1)

2023-12-01 Thread Michael Jumper
On 11/28/2023 4:07 PM, Michael Jumper wrote: Hello all, The first release candidate for Apache Guacamole 1.5.4 has been uploaded and is ready for VOTE. The draft release notes (along with links to artifacts, signatures/checksums, and updated documentation) can be found here: http

[VOTE] Release Apache Guacamole 1.5.4 (RC1)

2023-11-28 Thread Michael Jumper
Hello all, The first release candidate for Apache Guacamole 1.5.4 has been uploaded and is ready for VOTE. The draft release notes (along with links to artifacts, signatures/checksums, and updated documentation) can be found here: http://guacamole.apache.org/releases/1.5.4/ The git tag for

Re: Guacamole 1.5.3 not compatible with Apache Tomcat 10.1.13

2023-10-06 Thread Michael Jumper
On 10/6/2023 10:52 AM, Nick Couchman wrote: On Fri, Oct 6, 2023 at 1:27 PM Rihab Kasim wrote: Can we do it by ourselves? Is it possible? If not when we can expect the changes . Since upgrade to Tomcat 10+ is recommended due to some vulnerabilities. Yes, you can definitely do it yourself - i

Re: Introducing the Unholy Guacamole Project - Enhanced Security and Efficiency for Apache Guacamole

2023-09-19 Thread Michael Jumper
Hi Daphna, Please: 1) Do not use any of the community mailing lists to post unsolicited messages advertising a product or service, even if you genuinely believe folks on the list would be interested or would benefit. 2) Do not use the name "Guacamole" in the branding of third-party software

[ANNOUNCE] Apache Guacamole 1.5.3 released

2023-08-01 Thread Michael Jumper
The Apache Guacamole community is proud to announce the release of Apache Guacamole 1.5.3. Apache Guacamole is a clientless remote desktop gateway which supports standard protocols like VNC, RDP, and SSH. We call it "clientless" because no plugins or client software are required; once Guacamol

[RESULT] [VOTE] Release Apache Guacamole 1.5.3 (RC2)

2023-07-31 Thread Michael Jumper
On 7/26/23 06:58, Michael Jumper wrote: Hello all, The second release candidate for Apache Guacamole 1.5.3 has been uploaded and is ready for VOTE. The draft release notes (along with links to artifacts, signatures/checksums, and updated documentation) can be found here: https

[VOTE] Release Apache Guacamole 1.5.3 (RC2)

2023-07-26 Thread Michael Jumper
Hello all, The second release candidate for Apache Guacamole 1.5.3 has been uploaded and is ready for VOTE. The draft release notes (along with links to artifacts, signatures/checksums, and updated documentation) can be found here: https://guacamole.apache.org/releases/1.5.3/ The git tag fo

Re: [CANCEL] [VOTE] Release Apache Guacamole 1.5.3 (RC1)

2023-07-25 Thread Michael Jumper
k On Fri, Jul 21, 2023 at 3:38 PM Michael Jumper wrote: On 7/17/23 11:50, Michael Jumper wrote: Hello all, The first release candidate for Apache Guacamole 1.5.3 has been uploaded and is ready for VOTE. The draft release notes (along with links to artifacts, signatures/checksums, and up

[CANCEL] [VOTE] Release Apache Guacamole 1.5.3 (RC1)

2023-07-21 Thread Michael Jumper
On 7/17/23 11:50, Michael Jumper wrote: Hello all, The first release candidate for Apache Guacamole 1.5.3 has been uploaded and is ready for VOTE. The draft release notes (along with links to artifacts, signatures/checksums, and updated documentation) can be found here: https

[VOTE] Release Apache Guacamole 1.5.3 (RC1)

2023-07-17 Thread Michael Jumper
Hello all, The first release candidate for Apache Guacamole 1.5.3 has been uploaded and is ready for VOTE. The draft release notes (along with links to artifacts, signatures/checksums, and updated documentation) can be found here: https://guacamole.apache.org/releases/1.5.3/ The git tag for

Re: Azure Bastion uses your code in it is that known?

2023-07-05 Thread Michael Jumper
On 7/4/23 15:22, The Carpenter wrote: Hi there, Consider me an interested party in the greater good and someone who's vigilant on others actions that may cause arm or pose a problem to others... I'm here to share with you some findings I've done around Azure Bastion! I've seen this also,

Re: Decorating Extension with Single-Use Password

2023-06-30 Thread Michael Jumper
On 6/30/23 08:13, Nick Couchman wrote: I decided to take a shot at writing a One-Time Password extension that sends the OTP via e-mail, providing multi-factor authentication by implementing it as a decorating authentication extension. I've got quite a bit of it written and mostly working, but I'm

Re: Development of new features - open for help

2023-06-22 Thread Michael Jumper
Please don't double-post. For anyone encountering this thread in the archives, the original thread on user@ is here: https://lists.apache.org/thread/kl88z41j6b2qmbftc0onrsq6zc8hvs86 https://lists.apache.org/thread/1wfoqctc62jc71hngx9l8mjcm195skg0 (responses somehow got split into a separate t

Re: Segfault in 1.5.2 on CentOS7

2023-06-06 Thread Michael Jumper
On 6/6/23 11:12, Nick Couchman wrote: Hey, everyone, Having now deployed 1.5.2 into my production environment, I'm getting a consistent segfault when establishing a RDP connection. Backtrace is as follows: [Switching to Thread 0x7fffebfff700 (LWP 42436)] 0x76ff16fd in write () from /lib6

[SECURITY] CVE-2023-30576: Apache Guacamole: Use-after-free in handling of RDP audio input buffer

2023-06-06 Thread Michael Jumper
Severity: moderate Base CVSS Score: 6.8 (AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N) Affected versions: - Apache Guacamole 0.9.10 through 1.5.1 Description: Apache Guacamole 0.9.10 through 1.5.1 may continue to reference a freed RDP audio input buffer. Depending on timing, this may allow an attacker

[SECURITY] CVE-2023-30575: Apache Guacamole: Incorrect calculation of Guacamole protocol element lengths

2023-06-06 Thread Michael Jumper
Severity: moderate Base CVSS Score: 6.5 (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Affected versions: - Apache Guacamole through 1.5.1 Description: Apache Guacamole 1.5.1 and older may incorrectly calculate the lengths of instruction elements sent during the Guacamole protocol handshake, potentia

[ANNOUNCE] Apache Guacamole 1.5.2 released

2023-05-26 Thread Michael Jumper
The Apache Guacamole community is proud to announce the release of Apache Guacamole 1.5.2. Apache Guacamole is a clientless remote desktop gateway which supports standard protocols like VNC, RDP, and SSH. We call it "clientless" because no plugins or client software are required; once Guacamol

[RESULT] [VOTE] Release Apache Guacamole 1.5.2 (RC1)

2023-05-25 Thread Michael Jumper
On 5/22/23 12:01, Michael Jumper wrote: Hello all, The first release candidate for Apache Guacamole 1.5.2 has been uploaded and is ready for VOTE. The draft release notes (along with links to artifacts, signatures/checksums, and updated documentation) can be found here: http

[VOTE] Release Apache Guacamole 1.5.2 (RC1)

2023-05-22 Thread Michael Jumper
Hello all, The first release candidate for Apache Guacamole 1.5.2 has been uploaded and is ready for VOTE. The draft release notes (along with links to artifacts, signatures/checksums, and updated documentation) can be found here: http://guacamole.apache.org/releases/1.5.2/ The git tag for

[ANNOUNCE] Apache Guacamole 1.5.1

2023-04-14 Thread Michael Jumper
The Apache Guacamole community is proud to announce the release of Apache Guacamole 1.5.1. Apache Guacamole is a clientless remote desktop gateway which supports standard protocols like VNC, RDP, and SSH. We call it "clientless" because no plugins or client software are required; once Guacamole is

[RESULT] [VOTE] Release Apache Guacamole 1.5.1 (RC1)

2023-04-13 Thread Michael Jumper
On Mon, Apr 10, 2023 at 11:39 AM Michael Jumper wrote: > Hello all, > > The first release candidate for Apache Guacamole 1.5.1 has been uploaded > and is ready for VOTE. The draft release notes (along with links to > artifacts, signatures/checksums, and updated documentation) can

[VOTE] Release Apache Guacamole 1.5.1 (RC1)

2023-04-10 Thread Michael Jumper
Hello all, The first release candidate for Apache Guacamole 1.5.1 has been uploaded and is ready for VOTE. The draft release notes (along with links to artifacts, signatures/checksums, and updated documentation) can be found here: http://guacamole.apache.org/releases/1.5.1/ The git tag for all r

Re: Passing authToken in header

2023-03-04 Thread Michael Jumper
On Wed, Mar 1, 2023 at 8:16 PM Ankit Raibole wrote: > Hello Dev team, > > My doubt is regarding passing the authToken in the header instead of query > parameters. > Currently, I am passing the authToken as query params like > "{guacServerURL}/#client/{connectionId}/token?{authToken}". and changin

[ANNOUNCE] Apache Guacamole 1.5.0

2023-02-19 Thread Michael Jumper
The Apache Guacamole community is proud to announce the release of Apache Guacamole 1.5.0. Apache Guacamole is a clientless remote desktop gateway which supports standard protocols like VNC, RDP, and SSH. We call it "clientless" because no plugins or client software are required; once Guacamole is

[RESULT] [VOTE] Release Apache Guacamole 1.5.0 (RC1)

2023-02-18 Thread Michael Jumper
On Tue, Feb 14, 2023, 3:24 PM Michael Jumper wrote: > Hello all, > > The first release candidate for Apache Guacamole 1.5.0 has been > uploaded and is ready for VOTE. The draft release notes (along with links > to artifacts, signatures/checksums, and updated documentation) can

[VOTE] Release Apache Guacamole 1.5.0 (RC1)

2023-02-14 Thread Michael Jumper
Hello all, The first release candidate for Apache Guacamole 1.5.0 has been uploaded and is ready for VOTE. The draft release notes (along with links to artifacts, signatures/checksums, and updated documentation) can be found here: http://guacamole.apache.org/releases/1.5.0/ The git tag for all r

Re: [guacamole-client] Bug: An error occurs when I connect to casdoor with OpenId

2023-01-16 Thread Michael Jumper
On Mon, Jan 16, 2023 at 9:22 PM kang hu wrote: > ... > > When I log in, I will still stay on the current page > > > > tomcat log is this : > > 12:46:32.209 [http-nio-8080-exec-1] INFO > > o.a.g.a.o.t.TokenValidationService - Rejected invalid OpenID token: JWT > > rejected due to invalid signatu

Re: cant connect on apache guacamole

2023-01-04 Thread Michael Jumper
On Wed, Jan 4, 2023, 8:26 PM Rifki Mirfiza wrote: > Dear, > I tried to connect my BMC Server to VNC on Apache Guacamole but always > failed, please need your help. Here I attach the error message > [image: image.png] > Previously I had filled in "edit connection" and "network parameters and > aut

Re: SAML null pointer exception in docker

2022-11-17 Thread Michael Jumper
Is this a build of the SAML extension from git master and not the 1.4.0 release? The following line: org.apache.guacamole.auth.saml.conf.ConfigurationService.getSamlSettings(ConfigurationService.java:327) does not refer to an actual statement in the source that's part of 1.4.0. It does refer to

Re: Working Postgres sql fragment for updating password hash manually that works for documentation update and documentation correction

2022-11-15 Thread Michael Jumper
On Tue, Nov 15, 2022 at 10:38 AM Mark Li wrote: > I think you are missing "it". > The point of my email was to offer: > 1) working Postgres code for password hashing for Guac > 2) describe that Java tostring() function returns uppercase hex and the > analogous Postgres encode() function returns l

Re: Commercial support

2022-08-16 Thread Michael Jumper
(Beware that your message hit the moderation queue because you are not subscribed to the list. You will need to subscribe to respond or receive any further responses.) All you need to do to be listed is open a pull request against the guacamole-website repository that adds your company. A good exa

Re: Spice Protocol Audio Input

2022-07-29 Thread Michael Jumper
st to pick a > fixed/constant buffer size, maybe based on time constant (10 seconds?) > and then multiply that by audio rate and channels to get required > buffer size? > > -Nick > > On Sun, Jul 17, 2022 at 1:09 AM Michael Jumper wrote: > > > > If the Spice protocol

Re: Spice Protocol Audio Input

2022-07-16 Thread Michael Jumper
If the Spice protocol doesn't appear to require anything specific in terms of packet size, I'd try just sending packets of data identical to the blobs received from the webapp, resampling as needed. I believe the only reason that's necessary in the RDP case is that RDP is *very* particular about t

Re: SAML SSO issue URL is continuously looping

2022-04-26 Thread Michael Jumper
Please don't double-post. For anyone encountering this thread in the archives, the original post is here: https://lists.apache.org/thread/5cdgmd0k9r4ns5mjbxb4bd4ckcq8r54x - Mike On Tue, Apr 26, 2022, 02:57 shivangi singh wrote: > Hi Team, > > Can you please update on this request. > > On Fri

Re: SAML SSO issue URL is looping continuously

2022-04-26 Thread Michael Jumper
On Thu, Apr 21, 2022, 06:18 Shivangi, Shivangi wrote: > Hi Guacamole Team, > > > > I have taken the maxwaldorf image from docker hub and everything is > working fine like connections ,adding users ,load balancers and adding the > DNS name into route 53 in AWS account. > Beware that the project d

Re: Looping issue after adding SSO

2022-04-07 Thread Michael Jumper
On Thu, Apr 7, 2022 at 5:22 AM Shivangi, Shivangi wrote: > Hi Guacamole Team, > > I have installed new image of maxwaldorf/guacamole and added > guacamole-auth-sso-1.4.0.jar to Extensions, > when we add extension-priority: saml in Guacamole.properties, its looping > while we hit the URL . > > If