Ok, thanks for the information.

I do wonder if the problem may lay with your password. It's been quite some time since I used the user-mapping approach, and when I did I'm fairly sure it was a plain-text pass. Perhaps you could try that?

Otherwise, if you're prepared to try other methods, this is a brief 'howto' I wrote for 20.04 18 months ago. It may need a little updating with regard to package versions etc, but you could perhaps follow it through to see if that addresses things for you?

Also, at the end I've commented on your syslog messages...

---- Post from May 2020:

In case anyone's interested here's what I did to get Guacamole 1.1.0 running with Tomcat9 on a fresh Ubuntu 20.04 VM.

Essentially this is the same as my previous list of instructions for Ubuntu 18.04, however it turns out there is (presently) no libmysql-java in the repositories for 20.04. Fortunately there is a package for 20.04 on the MySQL site; this requires download and manual install with appropriate link to /etc/guacamole/lib/.

I've given it a brief try with RDP and it seemed to work fine, albeit with some odd messages in syslog at disconnect (which I've not pursued) - YMMV.

----

su
apt-get install build-essential libcairo2-dev libjpeg-turbo8-dev libpng-dev libtool-bin libossp-uuid-dev libavcodec-dev libavutil-dev libswscale-dev freerdp2-dev libpango1.0-dev libssh2-1-dev libtelnet-dev libvncserver-dev libwebsockets-dev libpulse-dev libssl-dev libvorbis-dev libwebp-dev ghostscript
apt-get install tomcat9 tomcat9-admin tomcat9-common tomcat9-user
cd /tmp
wget https://www.apache.org/dist/guacamole/1.1.0/source/guacamole-server-1.1.0.tar.gz
tar -zxvf guacamole-server-1.1.0.tar.gz
cd guacamole-server-1.1.0
./configure --with-init-dir=/etc/init.d
make
make install
ldconfig
wget https://www.apache.org/dist/guacamole/1.1.0/binary/guacamole-1.1.0.war
mkdir /etc/guacamole
cp guacamole-1.1.0.war /etc/guacamole/guacamole.war
ln -s /etc/guacamole/guacamole.war /var/lib/tomcat9/webapps/
systemctl restart tomcat9
systemctl enable guacd
systemctl start guacd

# Above this line should work in standard auth mode, below is detail for MySQL auth

su
cd /tmp
apt-get install mysql-server
wget https://dev.mysql.com/get/Downloads/Connector-J/mysql-connector-java_8.0.20-1ubuntu20.04_all.deb
dpkg -i mysql-connector-java_8.0.20-1ubuntu20.04_all.deb
wget https://www.apache.org/dist/guacamole/1.1.0/binary/guacamole-auth-jdbc-1.1.0.tar.gz
tar -zxvf guacamole-auth-jdbc-1.1.0.tar.gz
mkdir /etc/guacamole/extensions
mkdir /etc/guacamole/lib
cp guacamole-auth-jdbc-1.1.0/mysql/guacamole-auth-jdbc-mysql-1.1.0.jar /etc/guacamole/extensions/
nano /etc/guacamole/guacamole.properties

mysql-hostname: localhost
mysql-port: 3306
mysql-database: guacamole_db
mysql-username: guacamole_user
mysql-password:
(ctrl-x then y)

mysql -u root -p

create database guacamole_db;
create user 'guacamole_user'@'localhost' identified by '';
grant select,insert,update,delete on guacamole_db.* to 'guacamole_user'@'localhost';
flush privileges;
quit

cat guacamole-auth-jdbc-1.1.0/mysql/schema/*.sql | mysql -u root -p guacamole_db ln -s /usr/share/java/mysql-connector-java-8.0.20.jar /etc/guacamole/lib/mysql-connector-java.jar
systemctl restart guacd
systemctl restart tomcat9.service

Go to http://<ip-address>:8080/guacamole
Default login guacadmin:guacadmin

---

Finally, wrt the syslog issue, I don't want to go too far down that track on this forum but how about you try removing (or commenting) the following lines:

$FileOwner syslog

$FileGroup adm

$FileCreateMode 0640

$DirCreateMode 0755

$Umask 0022

$PrivDropToUser syslog

$PrivDropToGroup syslog


On 3/12/21 1:21 pm, Vincent Sprague wrote:
I started by spinning up an entirely new vm running Ubuntu Server 20.04.03 to test with. I used the latest Ubuntu 20.04.03 ISO and after a quick Google I found the following guide and used it to install Guacamole 1.3.0. I also ran an apt-get update/install before and after installing guac and there�s nothing outstanding currently. For right now I am just using the user-mapping.xml file with a md5 hashed password for authentication.

Guacamole on Ubuntu 20.04 � Somik's Home <https://somik.org/guacamole-on-ubuntu-20-04/>


The only thing I added during the Ubuntu install was OpenSSH. Other than that it was a bare install.


I have since found a few other older guides that mention potential issues with the freerdp2 package that comes in the official Ubuntu 20.04 repo. I don�t think that�s my particular issue but I�ll probably give it a try and replace the freerdp2 package with the remmina repository version and then remake the Guac install.

Failing that I found another guide here: Install and Use Guacamole Remote Desktop on Ubuntu 20.04 | ComputingForGeeks <https://computingforgeeks.com/install-and-use-guacamole-on-ubuntu/> so I�ll try that one next as it is a bit more in-depth.

Regarding rsyslog, what I read said omfile shouldn�t need to be loaded since it�s built-in. But here is a copy of my rsyslog.conf file:

# /etc/rsyslog.conf configuration file for rsyslog

#

# For more information install rsyslog-doc and see

# /usr/share/doc/rsyslog-doc/html/configuration/index.html

#

# Default logging rules can be found in /etc/rsyslog.d/50-default.conf

#################

#### MODULES ####

#################

module(load="imuxsock") # provides support for local system logging

#module(load="immark")� # provides --MARK-- message capability

# provides UDP syslog reception

#module(load="imudp")

#input(type="imudp" port="514")

# provides TCP syslog reception

#module(load="imtcp")

#input(type="imtcp" port="514")

# provides kernel logging support and enable non-kernel klog messages

module(load="imklog" permitnonkernelfacility="on")

###########################

#### GLOBAL DIRECTIVES ####

###########################

#

# Use traditional timestamp format.

# To enable high precision timestamps, comment out the following line.

#

$ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat

# Filter duplicated messages

$RepeatedMsgReduction on

#

# Set the default permissions for all log files.

#

$FileOwner syslog

$FileGroup adm

$FileCreateMode 0640

$DirCreateMode 0755

$Umask 0022

$PrivDropToUser syslog

$PrivDropToGroup syslog

#

# Where to place spool and state files

#

$WorkDirectory /var/spool/rsyslog

#

# Include all config files in /etc/rsyslog.d/

#

$IncludeConfig /etc/rsyslog.d/*.conf


*Also, for reference here is the user-mapping.xml file I am using.
*
<user-mapping>

 ����<!-- Per-user authentication and config information -->

 ��� <!-- A user using md5 to hash the password

 �������� guacadmin user and its md5 hashed password below is 
used to

 �������������login to Guacamole Web UI-->

 ��� <authorize

 ������������username="guacadmin"

 ����������� password="1094b670a163ecae02f82317f51f5abc"

 ����������� encoding="md5">

 ������� <!-- First authorized Remote connection -->

 ������� <connection name="Ubuntu Desktop">

 ����������� <protocol>ssh</protocol>

 ����� ������<param name="hostname">10.0.0.20</param>

 ����������� <param name="port">22</param>

 ������� </connection>

 ������� <!-- Second authorized remote connection -->

 ������� <connection name="Windows 10">

 ����������� <protocol>rdp</protocol>

 ����������� <param name="hostname">windows10</param>

 ����������� <param name="port">3389</param>

 ����������� <param name="username">user</param>

 ����������� <param name="ignore-cert">true</param>

 ������� </connection>

 ��� </authorize>

</user-mapping>



*Also, here is the output of the Catalina log:
*
02-Dec-2021 18:53:50.726 INFO [main] org.apache.catalina.core.StandardService.startInternal Starting service [Catalina]

02-Dec-2021 18:53:50.732 INFO [main] org.apache.catalina.core.StandardEngine.startInternal Starting Servlet engine: [Apache Tomcat/9.0.31 (Ubuntu)]

02-Dec-2021 18:53:50.752 INFO [main] org.apache.catalina.startup.HostConfig.deployDescriptor Deploying deployment descriptor [/etc/tomcat9/Catalina/localhost/host-manager.xml]

02-Dec-2021 18:53:50.787 WARNING [main] org.apache.catalina.startup.HostConfig.deployDescriptor The path attribute with value [/host-manager] in deployment descriptor [/etc/tomcat9/Catalina/localhost/host-manager.xml] has been ignored

02-Dec-2021 18:53:53.381 INFO [main] org.apache.jasper.servlet.TldScanner.scanJars At least one JAR was scanned for TLDs yet contained no TLDs. Enable debug logging for this logger for a complete list of JARs that were scanned but no TLDs were found in them. Skipping unneeded JARs during scanning can improve startup time and JSP compilation time.

02-Dec-2021 18:53:53.490 INFO [main] org.apache.catalina.startup.HostConfig.deployDescriptor Deployment of deployment descriptor [/etc/tomcat9/Catalina/localhost/host-manager.xml] has finished in [2,738] ms

02-Dec-2021 18:53:53.495 INFO [main] org.apache.catalina.startup.HostConfig.deployDescriptor Deploying deployment descriptor [/etc/tomcat9/Catalina/localhost/manager.xml]

02-Dec-2021 18:53:53.497 WARNING [main] org.apache.catalina.startup.HostConfig.deployDescriptor The path attribute with value [/manager] in deployment descriptor [/etc/tomcat9/Catalina/localhost/manager.xml] has been ignored

02-Dec-2021 18:53:54.904 INFO [main] org.apache.jasper.servlet.TldScanner.scanJars At least one JAR was scanned for TLDs yet contained no TLDs. Enable debug logging for this logger for a complete list of JARs that were scanned but no TLDs were found in them. Skipping unneeded JARs during scanning can improve startup time and JSP compilation time.

02-Dec-2021 18:53:54.912 INFO [main] org.apache.catalina.startup.HostConfig.deployDescriptor Deployment of deployment descriptor [/etc/tomcat9/Catalina/localhost/manager.xml] has finished in [1,416] ms

02-Dec-2021 18:53:54.914 INFO [main] org.apache.catalina.startup.HostConfig.deployWAR Deploying web application archive [/var/lib/tomcat9/webapps/guacamole.war]

02-Dec-2021 18:53:57.752 INFO [main] org.apache.jasper.servlet.TldScanner.scanJars At least one JAR was scanned for TLDs yet contained no TLDs. Enable debug logging for this logger for a complete list of JARs that were scanned but no TLDs were found in them. Skipping unneeded JARs during scanning can improve startup time and JSP compilation time.

02-Dec-2021 18:53:59.982 INFO [main] com.sun.jersey.guice.spi.container.GuiceComponentProviderFactory.register Registering org.apache.guacamole.rest.RESTExceptionMapper as a provider class

02-Dec-2021 18:53:59.992 INFO [main] com.sun.jersey.guice.spi.container.GuiceComponentProviderFactory.register Registering org.apache.guacamole.rest.extension.ExtensionRESTService as a root resource class

02-Dec-2021 18:53:59.992 INFO [main] com.sun.jersey.guice.spi.container.GuiceComponentProviderFactory.register Registering org.apache.guacamole.rest.language.LanguageRESTService as a root resource class

02-Dec-2021 18:53:59.993 INFO [main] com.sun.jersey.guice.spi.container.GuiceComponentProviderFactory.register Registering org.apache.guacamole.rest.patch.PatchRESTService as a root resource class

02-Dec-2021 18:53:59.993 INFO [main] com.sun.jersey.guice.spi.container.GuiceComponentProviderFactory.register Registering org.apache.guacamole.rest.auth.TokenRESTService as a root resource class

02-Dec-2021 18:53:59.994 INFO [main] com.sun.jersey.guice.spi.container.GuiceComponentProviderFactory.register Registering org.apache.guacamole.rest.session.SessionRESTService as a root resource class

02-Dec-2021 18:53:59.994 INFO [main] com.sun.jersey.guice.spi.container.GuiceComponentProviderFactory.register Registering org.codehaus.jackson.jaxrs.JacksonJsonProvider as a provider class

02-Dec-2021 18:53:59.997 INFO [main] com.sun.jersey.server.impl.application.WebApplicationImpl._initiate Initiating Jersey application, version 'Jersey: 1.17.1 02/28/2013 12:47 PM'

02-Dec-2021 18:54:00.174 INFO [main] com.sun.jersey.guice.spi.container.GuiceComponentProviderFactory.getComponentProvider Binding org.apache.guacamole.rest.RESTExceptionMapper to GuiceManagedComponentProvider with the scope "Singleton"

02-Dec-2021 18:54:00.183 INFO [main] com.sun.jersey.guice.spi.container.GuiceComponentProviderFactory.getComponentProvider Binding org.codehaus.jackson.jaxrs.JacksonJsonProvider to GuiceManagedComponentProvider with the scope "Singleton"

02-Dec-2021 18:54:01.138 INFO [main] com.sun.jersey.guice.spi.container.GuiceComponentProviderFactory.getComponentProvider Binding org.apache.guacamole.rest.extension.ExtensionRESTService to GuiceManagedComponentProvider with the scope "PerRequest"

02-Dec-2021 18:54:01.145 INFO [main] com.sun.jersey.guice.spi.container.GuiceComponentProviderFactory.getComponentProvider Binding org.apache.guacamole.rest.language.LanguageRESTService to GuiceManagedComponentProvider with the scope "PerRequest"

02-Dec-2021 18:54:01.147 INFO [main] com.sun.jersey.guice.spi.container.GuiceComponentProviderFactory.getComponentProvider Binding org.apache.guacamole.rest.patch.PatchRESTService to GuiceManagedComponentProvider with the scope "PerRequest"

02-Dec-2021 18:54:01.159 INFO [main] com.sun.jersey.guice.spi.container.GuiceComponentProviderFactory.getComponentProvider Binding org.apache.guacamole.rest.auth.TokenRESTService to GuiceManagedComponentProvider with the scope "PerRequest"

02-Dec-2021 18:54:01.162 INFO [main] com.sun.jersey.guice.spi.container.GuiceComponentProviderFactory.getComponentProvider Binding org.apache.guacamole.rest.session.SessionRESTService to GuiceManagedComponentProvider with the scope "PerRequest"

02-Dec-2021 18:54:01.188 INFO [main] org.webjars.servlet.WebjarsServlet.init WebjarsServlet initialization completed

02-Dec-2021 18:54:01.209 INFO [main] org.apache.catalina.startup.HostConfig.deployWAR Deployment of web application archive [/var/lib/tomcat9/webapps/guacamole.war] has finished in [6,295] ms

02-Dec-2021 18:54:01.210 INFO [main] org.apache.catalina.startup.HostConfig.deployDirectory Deploying web application directory [/var/lib/tomcat9/webapps/ROOT]

02-Dec-2021 18:54:02.351 INFO [main] org.apache.jasper.servlet.TldScanner.scanJars At least one JAR was scanned for TLDs yet contained no TLDs. Enable debug logging for this logger for a complete list of JARs that were scanned but no TLDs were found in them. Skipping unneeded JARs during scanning can improve startup time and JSP compilation time.

02-Dec-2021 18:54:02.354 INFO [main] org.apache.catalina.startup.HostConfig.deployDirectory Deployment of web application directory [/var/lib/tomcat9/webapps/ROOT] has finished in [1,144] ms

02-Dec-2021 18:54:02.368 INFO [main] org.apache.coyote.AbstractProtocol.start Starting ProtocolHandler ["http-nio-8080"]

02-Dec-2021 18:54:02.403 INFO [main] org.apache.catalina.startup.Catalina.start Server startup in [11,846] milliseconds


Nothing jumped out to me in any of the logs other than the rsyslog errors I posted earlier.

*From: *Ivanmarcus <mailto:ivanmar...@yahoo.com.INVALID>
*Sent: *Thursday, December 2, 2021 2:36 PM
*To: *user@guacamole.apache.org <mailto:user@guacamole.apache.org>
*Subject: *Re: Invalid Login

Vincent,

We'll probably need more information than this to be able to assist you.

For instance:

The version of Guacamole you've installed.
The authentication method you chose (are you using database auth?)
How you installed it (the steps you used, did you use someone's script?)

Also, it looks as if you might want to address the rsyslog issue.
Strange it's coming up from a fresh Ubuntu install, but perhaps try
update/upgrade first. If that doesn't work you may need to look at
rsyslog.conf and compare it against
https://www.rsyslog.com/doc/v8-stable/configuration/modules/omfile.html <https://www.rsyslog.com/doc/v8-stable/configuration/modules/omfile.html>

Finally, when fault-finding I try to look for common causes to an issue.
In your case it raises a question as to why you're experiencing logging
issues as well as the Guacamole auth problem. You mentioned this was a
fresh install - I wonder what that means? Was this a completely new HDD,
new install of 20.04, or perhaps did you install/upgrade over an
existing version of Ubuntu?

On 2/12/21 3:30 pm, Vincent Sprague wrote:
 > rsyslogd: action 'action-8-builtin:omfile' suspended (module
 > 'builtin:omfile'), retry 0. There should be messages before this one
 > giving the reason for suspension. [v8.2001.0 try
 > https://www.rsyslog.com/e/2007 <https://www.rsyslog.com/e/2007> ]

---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

Reply via email to