What password are you using to login?
Default password I think is "guacadmin" but the MD5 hash you have there
does not belong to "guacadmin"
should be
5cbd438413e8e3ca0e14e200fde621a9
(I guess, based on https://md5decrypt.net/en/)
Kind regards,
El 2021-12-02 17:21, Vincent Sprague escribió:
I started by spinning up an entirely new vm running Ubuntu Server
20.04.03 to test with. I used the latest Ubuntu 20.04.03 ISO and after
a quick Google I found the following guide and used it to install
Guacamole 1.3.0. I also ran an apt-get update/install before and after
installing guac and there's nothing outstanding currently. For right
now I am just using the user-mapping.xml file with a md5 hashed
password for authentication.
Guacamole on Ubuntu 20.04 - Somik's Home [1]
The only thing I added during the Ubuntu install was OpenSSH. Other
than that it was a bare install.
I have since found a few other older guides that mention potential
issues with the freerdp2 package that comes in the official Ubuntu
20.04 repo. I don't think that's my particular issue but I'll probably
give it a try and replace the freerdp2 package with the remmina
repository version and then remake the Guac install.
Failing that I found another guide here: Install and Use Guacamole
Remote Desktop on Ubuntu 20.04 | ComputingForGeeks [2] so I'll try that
one next as it is a bit more in-depth.
Regarding rsyslog, what I read said omfile shouldn't need to be loaded
since it's built-in. But here is a copy of my rsyslog.conf file:
# /etc/rsyslog.conf configuration file for rsyslog
#
# For more information install rsyslog-doc and see
# /usr/share/doc/rsyslog-doc/html/configuration/index.html
#
# Default logging rules can be found in /etc/rsyslog.d/50-default.conf
#################
#### MODULES ####
#################
module(load="imuxsock") # provides support for local system logging
#module(load="immark") # provides --MARK-- message capability
# provides UDP syslog reception
#module(load="imudp")
#input(type="imudp" port="514")
# provides TCP syslog reception
#module(load="imtcp")
#input(type="imtcp" port="514")
# provides kernel logging support and enable non-kernel klog messages
module(load="imklog" permitnonkernelfacility="on")
###########################
#### GLOBAL DIRECTIVES ####
###########################
#
# Use traditional timestamp format.
# To enable high precision timestamps, comment out the following line.
#
$ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat
# Filter duplicated messages
$RepeatedMsgReduction on
#
# Set the default permissions for all log files.
#
$FileOwner syslog
$FileGroup adm
$FileCreateMode 0640
$DirCreateMode 0755
$Umask 0022
$PrivDropToUser syslog
$PrivDropToGroup syslog
#
# Where to place spool and state files
#
$WorkDirectory /var/spool/rsyslog
#
# Include all config files in /etc/rsyslog.d/
#
$IncludeConfig /etc/rsyslog.d/*.conf
Also, for reference here is the user-mapping.xml file I am using.
<user-mapping>
<!-- Per-user authentication and config information -->
<!-- A user using md5 to hash the password
guacadmin user and its md5 hashed password below is used to
login to Guacamole Web UI-->
<authorize
username="guacadmin"
password="1094b670a163ecae02f82317f51f5abc"
encoding="md5">
<!-- First authorized Remote connection -->
<connection name="Ubuntu Desktop">
<protocol>ssh</protocol>
<param name="hostname">10.0.0.20</param>
<param name="port">22</param>
</connection>
<!-- Second authorized remote connection -->
<connection name="Windows 10">
<protocol>rdp</protocol>
<param name="hostname">windows10</param>
<param name="port">3389</param>
<param name="username">user</param>
<param name="ignore-cert">true</param>
</connection>
</authorize>
</user-mapping>
Also, here is the output of the Catalina log:
02-Dec-2021 18:53:50.726 INFO [main]
org.apache.catalina.core.StandardService.startInternal Starting service
[Catalina]
02-Dec-2021 18:53:50.732 INFO [main]
org.apache.catalina.core.StandardEngine.startInternal Starting Servlet
engine: [Apache Tomcat/9.0.31 (Ubuntu)]
02-Dec-2021 18:53:50.752 INFO [main]
org.apache.catalina.startup.HostConfig.deployDescriptor Deploying
deployment descriptor
[/etc/tomcat9/Catalina/localhost/host-manager.xml]
02-Dec-2021 18:53:50.787 WARNING [main]
org.apache.catalina.startup.HostConfig.deployDescriptor The path
attribute with value [/host-manager] in deployment descriptor
[/etc/tomcat9/Catalina/localhost/host-manager.xml] has been ignored
02-Dec-2021 18:53:53.381 INFO [main]
org.apache.jasper.servlet.TldScanner.scanJars At least one JAR was
scanned for TLDs yet contained no TLDs. Enable debug logging for this
logger for a complete list of JARs that were scanned but no TLDs were
found in them. Skipping unneeded JARs during scanning can improve
startup time and JSP compilation time.
02-Dec-2021 18:53:53.490 INFO [main]
org.apache.catalina.startup.HostConfig.deployDescriptor Deployment of
deployment descriptor
[/etc/tomcat9/Catalina/localhost/host-manager.xml] has finished in
[2,738] ms
02-Dec-2021 18:53:53.495 INFO [main]
org.apache.catalina.startup.HostConfig.deployDescriptor Deploying
deployment descriptor [/etc/tomcat9/Catalina/localhost/manager.xml]
02-Dec-2021 18:53:53.497 WARNING [main]
org.apache.catalina.startup.HostConfig.deployDescriptor The path
attribute with value [/manager] in deployment descriptor
[/etc/tomcat9/Catalina/localhost/manager.xml] has been ignored
02-Dec-2021 18:53:54.904 INFO [main]
org.apache.jasper.servlet.TldScanner.scanJars At least one JAR was
scanned for TLDs yet contained no TLDs. Enable debug logging for this
logger for a complete list of JARs that were scanned but no TLDs were
found in them. Skipping unneeded JARs during scanning can improve
startup time and JSP compilation time.
02-Dec-2021 18:53:54.912 INFO [main]
org.apache.catalina.startup.HostConfig.deployDescriptor Deployment of
deployment descriptor [/etc/tomcat9/Catalina/localhost/manager.xml] has
finished in [1,416] ms
02-Dec-2021 18:53:54.914 INFO [main]
org.apache.catalina.startup.HostConfig.deployWAR Deploying web
application archive [/var/lib/tomcat9/webapps/guacamole.war]
02-Dec-2021 18:53:57.752 INFO [main]
org.apache.jasper.servlet.TldScanner.scanJars At least one JAR was
scanned for TLDs yet contained no TLDs. Enable debug logging for this
logger for a complete list of JARs that were scanned but no TLDs were
found in them. Skipping unneeded JARs during scanning can improve
startup time and JSP compilation time.
02-Dec-2021 18:53:59.982 INFO [main]
com.sun.jersey.guice.spi.container.GuiceComponentProviderFactory.register
Registering org.apache.guacamole.rest.RESTExceptionMapper as a provider
class
02-Dec-2021 18:53:59.992 INFO [main]
com.sun.jersey.guice.spi.container.GuiceComponentProviderFactory.register
Registering org.apache.guacamole.rest.extension.ExtensionRESTService as
a root resource class
02-Dec-2021 18:53:59.992 INFO [main]
com.sun.jersey.guice.spi.container.GuiceComponentProviderFactory.register
Registering org.apache.guacamole.rest.language.LanguageRESTService as a
root resource class
02-Dec-2021 18:53:59.993 INFO [main]
com.sun.jersey.guice.spi.container.GuiceComponentProviderFactory.register
Registering org.apache.guacamole.rest.patch.PatchRESTService as a root
resource class
02-Dec-2021 18:53:59.993 INFO [main]
com.sun.jersey.guice.spi.container.GuiceComponentProviderFactory.register
Registering org.apache.guacamole.rest.auth.TokenRESTService as a root
resource class
02-Dec-2021 18:53:59.994 INFO [main]
com.sun.jersey.guice.spi.container.GuiceComponentProviderFactory.register
Registering org.apache.guacamole.rest.session.SessionRESTService as a
root resource class
02-Dec-2021 18:53:59.994 INFO [main]
com.sun.jersey.guice.spi.container.GuiceComponentProviderFactory.register
Registering org.codehaus.jackson.jaxrs.JacksonJsonProvider as a
provider class
02-Dec-2021 18:53:59.997 INFO [main]
com.sun.jersey.server.impl.application.WebApplicationImpl._initiate
Initiating Jersey application, version 'Jersey: 1.17.1 02/28/2013 12:47
PM'
02-Dec-2021 18:54:00.174 INFO [main]
com.sun.jersey.guice.spi.container.GuiceComponentProviderFactory.getComponentProvider
Binding org.apache.guacamole.rest.RESTExceptionMapper to
GuiceManagedComponentProvider with the scope "Singleton"
02-Dec-2021 18:54:00.183 INFO [main]
com.sun.jersey.guice.spi.container.GuiceComponentProviderFactory.getComponentProvider
Binding org.codehaus.jackson.jaxrs.JacksonJsonProvider to
GuiceManagedComponentProvider with the scope "Singleton"
02-Dec-2021 18:54:01.138 INFO [main]
com.sun.jersey.guice.spi.container.GuiceComponentProviderFactory.getComponentProvider
Binding org.apache.guacamole.rest.extension.ExtensionRESTService to
GuiceManagedComponentProvider with the scope "PerRequest"
02-Dec-2021 18:54:01.145 INFO [main]
com.sun.jersey.guice.spi.container.GuiceComponentProviderFactory.getComponentProvider
Binding org.apache.guacamole.rest.language.LanguageRESTService to
GuiceManagedComponentProvider with the scope "PerRequest"
02-Dec-2021 18:54:01.147 INFO [main]
com.sun.jersey.guice.spi.container.GuiceComponentProviderFactory.getComponentProvider
Binding org.apache.guacamole.rest.patch.PatchRESTService to
GuiceManagedComponentProvider with the scope "PerRequest"
02-Dec-2021 18:54:01.159 INFO [main]
com.sun.jersey.guice.spi.container.GuiceComponentProviderFactory.getComponentProvider
Binding org.apache.guacamole.rest.auth.TokenRESTService to
GuiceManagedComponentProvider with the scope "PerRequest"
02-Dec-2021 18:54:01.162 INFO [main]
com.sun.jersey.guice.spi.container.GuiceComponentProviderFactory.getComponentProvider
Binding org.apache.guacamole.rest.session.SessionRESTService to
GuiceManagedComponentProvider with the scope "PerRequest"
02-Dec-2021 18:54:01.188 INFO [main]
org.webjars.servlet.WebjarsServlet.init WebjarsServlet initialization
completed
02-Dec-2021 18:54:01.209 INFO [main]
org.apache.catalina.startup.HostConfig.deployWAR Deployment of web
application archive [/var/lib/tomcat9/webapps/guacamole.war] has
finished in [6,295] ms
02-Dec-2021 18:54:01.210 INFO [main]
org.apache.catalina.startup.HostConfig.deployDirectory Deploying web
application directory [/var/lib/tomcat9/webapps/ROOT]
02-Dec-2021 18:54:02.351 INFO [main]
org.apache.jasper.servlet.TldScanner.scanJars At least one JAR was
scanned for TLDs yet contained no TLDs. Enable debug logging for this
logger for a complete list of JARs that were scanned but no TLDs were
found in them. Skipping unneeded JARs during scanning can improve
startup time and JSP compilation time.
02-Dec-2021 18:54:02.354 INFO [main]
org.apache.catalina.startup.HostConfig.deployDirectory Deployment of
web application directory [/var/lib/tomcat9/webapps/ROOT] has finished
in [1,144] ms
02-Dec-2021 18:54:02.368 INFO [main]
org.apache.coyote.AbstractProtocol.start Starting ProtocolHandler
["http-nio-8080"]
02-Dec-2021 18:54:02.403 INFO [main]
org.apache.catalina.startup.Catalina.start Server startup in [11,846]
milliseconds
Nothing jumped out to me in any of the logs other than the rsyslog
errors I posted earlier.
From: Ivanmarcus
Sent: Thursday, December 2, 2021 2:36 PM
To: user@guacamole.apache.org
Subject: Re: Invalid Login
Vincent,
We'll probably need more information than this to be able to assist
you.
For instance:
The version of Guacamole you've installed.
The authentication method you chose (are you using database auth?)
How you installed it (the steps you used, did you use someone's
script?)
Also, it looks as if you might want to address the rsyslog issue.
Strange it's coming up from a fresh Ubuntu install, but perhaps try
update/upgrade first. If that doesn't work you may need to look at
rsyslog.conf and compare it against
https://www.rsyslog.com/doc/v8-stable/configuration/modules/omfile.html
Finally, when fault-finding I try to look for common causes to an
issue.
In your case it raises a question as to why you're experiencing logging
issues as well as the Guacamole auth problem. You mentioned this was a
fresh install - I wonder what that means? Was this a completely new
HDD,
new install of 20.04, or perhaps did you install/upgrade over an
existing version of Ubuntu?
On 2/12/21 3:30 pm, Vincent Sprague wrote:
rsyslogd: action 'action-8-builtin:omfile' suspended (module
'builtin:omfile'), retry 0. There should be messages before this one
giving the reason for suspension. [v8.2001.0 try
https://www.rsyslog.com/e/2007 ]
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org
Links:
------
[1] https://somik.org/guacamole-on-ubuntu-20-04/
[2] https://computingforgeeks.com/install-and-use-guacamole-on-ubuntu/
