I have an entry that allows any host for testing. Also I confirmed that the Client server can get to the database server over 3306. I saw another thread in the mailing list about SELINUX possibly needing to be disabled. I am going to try that.
Other than that, I’m wondering if I need to use an older version of the mysql java connector. I’m on CentOS 7 and mariadb 5.5.65 From: Neumen - Juan Prigoshin <jprigos...@autoneumen.com> Sent: Wednesday, June 3, 2020 10:24 AM To: user@guacamole.apache.org Subject: [EXTERNAL] [Suspected SPAM] Re: Guacamole Installation with separate servers for DMZ and Internal Setup Importance: Low WARNING: This email originated outside the Hostos campus. Do not click links or open attachments unless you recognize the sender and know the content is safe. Never provide login credentials, financial or sensitive details in response to an email or by clicking on a link. Report suspicious emails to: reports...@hostos.cuny.edu<mailto:reports...@hostos.cuny.edu> Both jar files and guacamole.properties, are they in the Server with Guacamole Client? The client it’s the one connecting to database. I think MariaDB it’s only necesary for Client not guacd server. A imaginary installation : * Server 1 : guacd service * Server 2 : Tomcat + Guacamole client WAR + guacamole.properties + MariaDB You installation is : * Server 1 : guacd service + MariaDB * Server 2 : Tomcat + Guacamole client WAR + guacamole.properties ? If you cannot connect from de Guacamole client server with mysql –user=guacamole_user –-password guacamole_db –h <ip Guacamole DB> Maybe then MariaDB don’t allow connections from outside localhost?? De: MARTINEZ, ARIEL [mailto:amarti...@hostos.cuny.edu] Enviado el: miércoles, 03 de junio de 2020 11:13 a.m. Para: user@guacamole.apache.org<mailto:user@guacamole.apache.org> Asunto: RE: [Suspected SPAM] RE: [EXTERNAL] Re: Guacamole Installation with separate servers for DMZ and Internal Setup I have both .jar files in their respective locations in the extensions and lib directories. My DB is mariadb and I have added the authentication settings to guacamole.properties. I’m able to connect to the Guacamole database running the command mysql –user=guacamole_user –-password guacamole_db –h localhost on the database server, but not from the Guacamole Client server. Since the database is on another server, other than firewall rules to allow communication over port 3306, is anything else required on the Guacamole Client server to connect to the remote database? From: Neumen - Juan Prigoshin <jprigos...@autoneumen.com<mailto:jprigos...@autoneumen.com>> Sent: Tuesday, June 2, 2020 8:06 PM To: user@guacamole.apache.org<mailto:user@guacamole.apache.org> Subject: [Suspected SPAM] RE: [EXTERNAL] Re: Guacamole Installation with separate servers for DMZ and Internal Setup Importance: Low Have you copy guacamole-auth-jdbc-mysql-1.1.0.jar to extensions directory? And mysql-connector-java-8.0.20.jar to lib directory? In the guacamole.properties you add the auth for the database?? # MySQL properties mysql-hostname: localhost mysql-port: 3306 mysql-database: guacamole_db mysql-username: guacamole_user mysql-password: <password> In the terminal, using this parameters, work the conection? mysql –user=guacamole_user –-password guacamole_db –h localhost Sorry if my questions are simple, sometimes happines it’s in simple things Juan De: MARTINEZ, ARIEL [mailto:amarti...@hostos.cuny.edu] Enviado el: martes, 02 de junio de 2020 08:46 p.m. Para: user@guacamole.apache.org<mailto:user@guacamole.apache.org> Asunto: RE: [EXTERNAL] Re: Guacamole Installation with separate servers for DMZ and Internal Setup In configuring the database authentication after going through all the steps I am now getting an error in the guacamole login page. Disabling the database connection info in the guacamole.properties file removes the error, so I know it is a db issue. I tried looking at the catalina.out file to see what the issue is but nothing is being logged. Is logging enabled by default or do I need to add something somewhere to get the debug logging? Thanks again. From: Nick Couchman <vn...@apache.org<mailto:vn...@apache.org>> Sent: Tuesday, June 2, 2020 4:54 PM To: user@guacamole.apache.org<mailto:user@guacamole.apache.org> Subject: Re: [EXTERNAL] Re: Guacamole Installation with separate servers for DMZ and Internal Setup On Tue, Jun 2, 2020 at 4:26 PM MARTINEZ, ARIEL <amarti...@hostos.cuny.edu<mailto:amarti...@hostos.cuny.edu>> wrote: Thanks. I am making progress and have moved on to the database authentication extension. I want to be sure I am configuring things in the right place. The instructions outlined in Chapter 6 of the instructions, all of this is happening on the server with tomcat or is it happening on the server with guacd? The authentication is done by the Guacamole Client piece, which runs in Tomcat or a comparable Java container. So, all of the configuration related to database and authentication will be done on the server running Guacamole Client (Tomcat). -nick