Re: Installation script

2019-06-14 Thread Manoj Patil
The following URL is in script(guac-install.sh) On Fri, 14 Jun 2019, 19:27 Zer0Cool Hello, > > I wrote the script: https://github.com/Zer0CoolX/guacamole-install-rhel > > The problem you are having is not an issue with the script, its clearly a > network issue. > > 1) Try downloading the file at

Re: AD/LDAP Old/Disabled Users Still Listed?

2019-06-14 Thread Mike Jumper
On Fri, Jun 14, 2019, 14:35 sciUser wrote: > Yes, you are correct this is because Guacamole is Linux based, if you force > non-case sensitive on the Linux system for LDAP, this will break the > security of the box. I have found it best to have a parse interpreter > taking upper case make them lo

Re: AD/LDAP Old/Disabled Users Still Listed?

2019-06-14 Thread sciUser
Yes, you are correct this is because Guacamole is Linux based, if you force non-case sensitive on the Linux system for LDAP, this will break the security of the box. I have found it best to have a parse interpreter taking upper case make them lower when talking to Linux. Thank You - A Cyb

Re: AD/LDAP Old/Disabled Users Still Listed?

2019-06-14 Thread Hankins, Jonathan
Yes, but my point was that when guacamole reads the username from the login form and does the LDAP query against AD, the marching is done case sensitively, and will fail if your AD sAMAccountName or cn is in mixed case. For example: AD user JoeUser can login to their Windows workstation as "joeuse

Re: AD/LDAP Old/Disabled Users Still Listed?

2019-06-14 Thread sciUser
Windows usernames by default are not case sensitive, Active directory is case aware, unless you enable it to be case sensitive. Thank You - A Cybersecurity Enablement Company We don't just run you through the motions, Our labs teach you how to think! Known good Guacamole installations

Re: AD/LDAP Old/Disabled Users Still Listed?

2019-06-14 Thread Hankins, Jonathan
Since I see that the OP is authenticating against AD via LDAP, I just want to throw this out there: AD stores the cn or sAMAccountName attribute case-sensitively. Guacamole doesn't do a case-insensitive match (whereas Windows login does), so I had to make sure that my sAMAccountName / cn attributes

Re: Firefox client and Guacamole

2019-06-14 Thread Mike Jumper
On Thu, Jun 13, 2019 at 5:25 AM Vieri wrote: > > On Friday, June 7, 2019, 7:30:07 PM GMT+2, Mike Jumper > wrote: > > > > We have a test page for just the keyboard event handling which can be used > > to verify whether things are not behaving as expected in the client. Try > > testing against

Re: AD/LDAP Old/Disabled Users Still Listed?

2019-06-14 Thread Mike Jumper
On Fri, Jun 14, 2019, 07:06 Zer0Cool wrote: > Pardon my ignorance, but let me make sure I follow. > > So you are saying that the ldap filter (and thus results) are likely > up-to-date but that the database side of the account does not get > deleted/removed from the database when there is no longe

Re: AD/LDAP Old/Disabled Users Still Listed?

2019-06-14 Thread Zer0Cool
Pardon my ignorance, but let me make sure I follow. So you are saying that the ldap filter (and thus results) are likely up-to-date but that the database side of the account does not get deleted/removed from the database when there is no longer a matching LDAP account to go with it? So I would as

Re: Installation script

2019-06-14 Thread Zer0Cool
Hello, I wrote the script: https://github.com/Zer0CoolX/guacamole-install-rhel The problem you are having is not an issue with the script, its clearly a network issue. 1) Try downloading the file at that location yourself via a browser. 2) Try running the wget command yourself manually. If the

Re: Installation script

2019-06-14 Thread ivanmarcus
If your network is blocking direct downloads from some sites you may be able to utilise an ftpmail server (https://en.wikipedia.org/wiki/FTPmail), if there are any still running (a quick search suggests there may be some, but I've not tried them). Otherwise there's probably not a lot else anyo