Re: How to get client IP address ?

2024-04-27 Thread Stephan von Krawczynski
Really, people talking about security and mentioning firewall in terms of securing a service have not done their homework. Else they should have understood that the most vital part in security is securing services as an immanent part of their design by using a libwrap approach or an authentication

Re: How to get client IP address ?

2024-04-26 Thread Sean Hulbert
Its easy when you know how! Guacamole is very well thought out Mike and team have done an exceptional job, however we customize guacamole to do what we want it to do, strip out the code not used, then harden it with FIPS140-2, I merely gave examples of what you could do, beside you should be u

Re: How to get client IP address ?

2024-04-26 Thread Stephan von Krawczynski
You are aware that the talk is about a piece of information (IP) the basic service (indeed apache) has naturally. Your explanation alone shows how broken by design the thing is. You need a logfile, a database, a script and a layer 7 firewall for obtaining an IP? And then you call it easy. Gimme a b

Re: How to get client IP address ?

2024-04-26 Thread Sean Hulbert
This is easy, 1. Use a SIEM on the NGINX or Apache log files set your trigger to look for the api token. 2. Parse the log file directly using bash awk sed if fi else then pull the IP address 3. Create a new table in the Guacamole database then add a variable to the connection info page, ta

Re: How to get client IP address ?

2024-04-26 Thread Nick Couchman
On Fri, Apr 26, 2024 at 6:47 AM Molina de la Iglesia, Manuel wrote: > Hello, > > After following the provided documentation, I cannot find a solution to > get the real client IP. > > I have my application (PHP) on the same Guacamole Server, this application > gets the user token: > > [image: imag

Re: How to get client IP address ?

2024-04-26 Thread Molina de la Iglesia, Manuel
Hello, After following the provided documentation, I cannot find a solution to get the real client IP. I have my application (PHP) on the same Guacamole Server, this application gets the user token: [image: image.png] The Tomcat log (after use the following pattern on the server.xml valve) I us

Re: How to get client IP address ?

2024-04-21 Thread Nick Couchman
On Sun, Apr 21, 2024 at 5:18 PM Ivanmarcus wrote: > Stephan, > > Having been around here for a while I'd be very surprised to find code > contributions simply 'ignored'. If you look at Guacamole's development > history I think you'd see that contributions are welcomed, and where > they address a

Re: How to get client IP address ?

2024-04-21 Thread Ivanmarcus
Stephan, Having been around here for a while I'd be very surprised to find code contributions simply 'ignored'. If you look at Guacamole's development history I think you'd see that contributions are welcomed, and where they address a need and/or fit the project well they are incorporated. N

Re: How to get client IP address ?

2024-04-21 Thread Stephan von Krawczynski
On Sun, 21 Apr 2024 07:12:36 -0400 Nick Couchman wrote: > I'll keep this response shorter. > > It seems unlikely we're going to come to an understanding or agreement on > how Guacamole should be implemented. The great thing is that Guacamole is > open source, and it sounds like you have some sof

Re: How to get client IP address ?

2024-04-21 Thread Stephan von Krawczynski
tation/guacamole-integration. > I am not telling it cannot be done differently, but asking just for > authentication is too limiting. Regards, Joachim > > -Ursprüngliche Nachricht- > Von: Stephan von Krawczynski > Gesendet: Sonntag, 21. April 2024 00:16 > An: user@guacamo

Re: How to get client IP address ?

2024-04-21 Thread Nick Couchman
I'll keep this response shorter. It seems unlikely we're going to come to an understanding or agreement on how Guacamole should be implemented. The great thing is that Guacamole is open source, and it sounds like you have some software development experience, so you can fork the source code and mo

Re: How to get client IP address ?

2024-04-21 Thread Stephan von Krawczynski
On Sat, 20 Apr 2024 21:38:20 -0400 Nick Couchman wrote: > > > > Hello Nick, > > > > first of all, thank you for looking into the issue. So please let me ask > > this > > as a real question and no offence. > > > > None taken, perfectly fine to ask this. > > > > Why does the project _at all_ u

AW: How to get client IP address ?

2024-04-20 Thread Joachim Lindenberg
Betreff: Re: How to get client IP address ? On Sat, 20 Apr 2024 15:52:58 -0400 Nick Couchman wrote: > > > > > > > I believe the issue that Stephan is describing is that, when the > > > user > > logs > > > in to Guacamole, and the remote LDAP serv

Re: How to get client IP address ?

2024-04-20 Thread Nick Couchman
> > Hello Nick, > > first of all, thank you for looking into the issue. So please let me ask > this > as a real question and no offence. > None taken, perfectly fine to ask this. > Why does the project _at all_ use a rather complicated API for > authentication > instead of "outsourcing" the func

Re: How to get client IP address ?

2024-04-20 Thread Stephan von Krawczynski
On Sat, 20 Apr 2024 15:52:58 -0400 Nick Couchman wrote: > > > > > > > I believe the issue that Stephan is describing is that, when the user > > logs > > > in to Guacamole, and the remote LDAP server that is authenticating the > > user > > > logs a client IP address, it should log the IP

Re: How to get client IP address ?

2024-04-20 Thread Nick Couchman
> > > > I believe the issue that Stephan is describing is that, when the user > logs > > in to Guacamole, and the remote LDAP server that is authenticating the > user > > logs a client IP address, it should log the IP address of the browser > (far > > end client) and not the IP address of the Guaca

Re: How to get client IP address ?

2024-04-18 Thread Stephan von Krawczynski
On Thu, 18 Apr 2024 10:18:03 -0400 Nick Couchman wrote: > I believe the issue that Stephan is describing is that, when the user logs > in to Guacamole, and the remote LDAP server that is authenticating the user > logs a client IP address, it should log the IP address of the browser (far > end cli

Re: How to get client IP address ?

2024-04-18 Thread Stephan von Krawczynski
On Thu, 18 Apr 2024 09:47:21 -0400 Nick Couchman wrote: > On Thu, Apr 18, 2024 at 8:24 AM Stephan von Krawczynski > wrote: > > > Hello all, > > > > I have a setup of guacamole where the user authentication is done by ldap > > (openldap slapd). Is there an easy way to hand the client IP over to

Re: How to get client IP address ?

2024-04-18 Thread Nick Couchman
On Thu, Apr 18, 2024 at 10:00 AM Molina de la Iglesia, Manuel wrote: > Hi, > > Similar situation, I have an application that authenticates the user, the > a connection ID and "build" the URL with the token that is where the user > goes. The IP that appears on the log is the address of the server

Re: How to get client IP address ?

2024-04-18 Thread Molina de la Iglesia, Manuel
Hi, Similar situation, I have an application that authenticates the user, the a connection ID and "build" the URL with the token that is where the user goes. The IP that appears on the log is the address of the server where the intermediate application is. Any suggestions? Thanks *Manel Molina*

Re: How to get client IP address ?

2024-04-18 Thread Nick Couchman
On Thu, Apr 18, 2024 at 8:24 AM Stephan von Krawczynski wrote: > Hello all, > > I have a setup of guacamole where the user authentication is done by ldap > (openldap slapd). Is there an easy way to hand the client IP over to ldap > bind > requests? > > Maybe you can provide a little more detail o

How to get client IP address ?

2024-04-18 Thread Stephan von Krawczynski
Hello all, I have a setup of guacamole where the user authentication is done by ldap (openldap slapd). Is there an easy way to hand the client IP over to ldap bind requests? -- Regards, Stephan - To unsubscribe, e-mail: user-un

Re: How to get client ip address on guacamole

2019-05-31 Thread Mike Jumper
On Fri, May 31, 2019 at 8:29 PM Manoj Patil wrote: > Ok > Is there any way to pass this ip to xrdp session on linux > No, I don't believe so. For Windows RDP, yes, but I'm not sure about XRDP. For Windows RDP, I think the best option would be the "CLIENTNAME" environment variable, set via Guaca

Re: How to get client ip address on guacamole

2019-05-31 Thread Manoj Patil
Ok Is there any way to pass this ip to xrdp session on linux On Fri, 31 May 2019, 23:39 Mike Jumper On Fri, May 31, 2019 at 10:46 AM Manoj Patil > wrote: > >> Means I am not catch actual client ip address is it right. >> >> If any ideas to catch this client lan ip address and pass through the >>

Re: How to get client ip address on guacamole

2019-05-31 Thread Mike Jumper
On Fri, May 31, 2019 at 10:46 AM Manoj Patil wrote: > Means I am not catch actual client ip address is it right. > > If any ideas to catch this client lan ip address and pass through the xrdp > session. > As far as your server is concerned, the WAN IP of the firewall *is* the client IP address.

Re: How to get client ip address on guacamole

2019-05-31 Thread Manoj Patil
Means I am not catch actual client ip address is it right. If any ideas to catch this client lan ip address and pass through the xrdp session. On Fri, 31 May 2019, 19:55 Mike Jumper On Thu, May 30, 2019 at 8:52 PM Manoj Patil wrote: > >> Dear Mike, >> >> In my case firewall is not perform NAT.

Re: How to get client ip address on guacamole

2019-05-31 Thread Mike Jumper
On Thu, May 30, 2019 at 8:52 PM Manoj Patil wrote: > Dear Mike, > > In my case firewall is not perform NAT. means NAT not configured in > firewall. > If: 1) A user with IP address X is connecting behind some sort of firewall device (router?). 2) The firewall itself has a WAN port with its own I

Re: How to get client ip address on guacamole

2019-05-30 Thread Manoj Patil
Dear Mike, In my case firewall is not perform NAT. means NAT not configured in firewall. > On 31-May-2019, at 12:00 AM, Mike Jumper wrote: > > On Mon, May 27, 2019 at 11:43 PM Manoj Patil > wrote: > hi, > > i am done all the setting as per document but it shows

Re: How to get client ip address on guacamole

2019-05-30 Thread Mike Jumper
On Mon, May 27, 2019 at 11:43 PM Manoj Patil wrote: > hi, > > i am done all the setting as per document but it shows the Firewalll WAN > ip not machine local ip address > If the firewall in question is performing network address translation (NAT), then this is really all that can be expected. Th

Re: How to get client ip address on guacamole

2019-05-30 Thread Manoj Patil
gt; >>> >>> Begin forwarded message: >>> >>> *From: *Manoj Patil >>> *Subject: **Re: How to get client ip address on guacamole* >>> *Date: *28 May 2019 at 12:13:18 PM IST >>> *To: *user@guacamole.apache.org >>> >

Re: How to get client ip address on guacamole

2019-05-28 Thread Manoj Patil
Mike Jumper Manoj, please stop resending the same message every few hours. > > - Mike > > > On Tue, May 28, 2019 at 2:58 AM Manoj Patil wrote: > >> >> >> Begin forwarded message: >> >> *From: *Manoj Patil >> *Subject: **Re: How to get client ip

Re: How to get client ip address on guacamole

2019-05-28 Thread Mike Jumper
Manoj, please stop resending the same message every few hours. - Mike On Tue, May 28, 2019 at 2:58 AM Manoj Patil wrote: > > > Begin forwarded message: > > *From: *Manoj Patil > *Subject: **Re: How to get client ip address on guacamole* > *Date: *28 May 2019 at 12:13:1

Fwd: How to get client ip address on guacamole

2019-05-28 Thread Manoj Patil
> Begin forwarded message: > > From: Manoj Patil > Subject: Re: How to get client ip address on guacamole > Date: 28 May 2019 at 12:13:18 PM IST > To: user@guacamole.apache.org > > hi, > > i am done all the setting as per document but it shows the Firewalll

Re: How to get client ip address on guacamole

2019-05-28 Thread Manoj Patil
hi, i am done all the setting as per document but it shows the Firewalll WAN ip not machine local ip address my server.xml setting On 26-May-2019, at 11:24 PM, Mike Jumper wrote: On Sun, May 26, 2019, 10:14 Manoj Patil wrote: > Dear, > > I see the history tab and table but in that remot

Re: How to get client ip address on guacamole

2019-05-27 Thread Manoj Patil
hi, i am done all the setting as per document but it shows the Firewalll WAN ip not machine local ip address my server.xml setting My nginx setting is—— server { listen 80; listen [::]:80; server_name gucserver; return 301 https://$server_name$request_uri; locati

Re: How to get client ip address on guacamole

2019-05-26 Thread Mike Jumper
On Sun, May 26, 2019, 10:14 Manoj Patil wrote: > Dear, > > I see the history tab and table but in that remote host it display the > firewall ip not actual machine ip and i want actual machine ip. > > i used Guacamole(tomcat+nginix)+x!rdp(linux host). > http://guacamole.apache.org/doc/gug/proxy

Re: How to get client ip address on guacamole

2019-05-26 Thread Manoj Patil
Dear, I see the history tab and table but in that remote host it display the firewall ip not actual machine ip and i want actual machine ip. i used Guacamole(tomcat+nginix)+x!rdp(linux host). please see screen shot > On 26-May-2019, at 8:55 PM, Manoj Patil wrote: > > Yes I want to require

Re: How to get client ip address on guacamole

2019-05-26 Thread Manoj Patil
Yes I want to required to get client ip address at xrdp server My scenario is Both Guacamole and X11rdp are installed on same server and I want to get client up on that server On Sun, 26 May 2019, 16:33 Nick Couchman On Sun, May 26, 2019 at 3:03 AM Manoj Patil wrote: > >> we used linux Xrdp th

Re: How to get client ip address on guacamole

2019-05-26 Thread Nick Couchman
On Sun, May 26, 2019 at 3:03 AM Manoj Patil wrote: > we used linux Xrdp through Guacamole and the security reason we catch > client visited ip and stored in my database and after i am only allowed to > visit a specific ip. > > Guacamole already captures this information for you - if you use the

Re: How to get client ip address on guacamole

2019-05-26 Thread Manoj Patil
we used linux Xrdp through Guacamole and the security reason we catch client visited ip and stored in my database and after i am only allowed to visit a specific ip. Please give me solution. > On 26-May-2019, at 11:41 AM, Manoj Patil wrote: > > Beacaue of we have launch a application fro

Re: How to get client ip address on guacamole

2019-05-25 Thread Manoj Patil
Beacaue of we have launch a application from X11rdp and we know who is used this application and how many times this ip is visited . please help me in that and give me code to get ip address. > On 26-May-2019, at 11:38 AM, Mike Jumper wrote: > > On Sat, May 25, 2019, 22:35 Manoj Patil

Re: How to get client ip address on guacamole

2019-05-25 Thread Mike Jumper
On Sat, May 25, 2019, 22:35 Manoj Patil wrote: > Hi Everyone, > > Sorry to post a Noob question here. I was evaluating Guacamole for one of > the requirements we have to rdp into remote machine and was able to setup > client and Server and do the rdp to both Windows and Linux machines. > > Now I

How to get client ip address on guacamole

2019-05-25 Thread Manoj Patil
Hi Everyone, Sorry to post a Noob question here. I was evaluating Guacamole for one of the requirements we have to rdp into remote machine and was able to setup client and Server and do the rdp to both Windows and Linux machines. Now I am taking it to next level. I catch or get a client ip addre