Adrian,For RDP, you can disable this functionality on the server-side, through
GPO, I believe.
For SSH, I'm not sure I have a good answer there at the moment - I can't
remember how Guacmaole actually handles the copy/paste functionality in SSH,
and if there's a SSH server way to block this.
However, be aware that just disabling the user menu won't necessarily disable
the ability to use the clipboard, particularly in SSH. Users can still load a
browser extension and use the clipboard transparently to copy text between the
guest and the server, without actually having access to this menu. Obviously
if you can control what extensions the user loads in their browser you can, at
least partially, mitigate this risk - but I don't know that I would consider
just hiding the user menu a fool-proof way to disable clipboard access.
-Nick
On Wednesday, August 2, 2017, 10:19:29 AM EDT, Adrian Owen
<adrian.o...@eesm.com> wrote:
#yiv4861024719 #yiv4861024719 -- _filtered #yiv4861024719
{font-family:Helvetica;panose-1:2 11 6 4 2 2 2 2 2 4;} _filtered #yiv4861024719
{panose-1:2 4 5 3 5 4 6 3 2 4;} _filtered #yiv4861024719
{font-family:Calibri;panose-1:2 15 5 2 2 2 4 3 2 4;}#yiv4861024719
#yiv4861024719 p.yiv4861024719MsoNormal, #yiv4861024719
li.yiv4861024719MsoNormal, #yiv4861024719 div.yiv4861024719MsoNormal
{margin:0cm;margin-bottom:.0001pt;font-size:12.0pt;}#yiv4861024719 a:link,
#yiv4861024719 span.yiv4861024719MsoHyperlink
{color:blue;text-decoration:underline;}#yiv4861024719 a:visited, #yiv4861024719
span.yiv4861024719MsoHyperlinkFollowed
{color:purple;text-decoration:underline;}#yiv4861024719
p.yiv4861024719msonormal, #yiv4861024719 li.yiv4861024719msonormal,
#yiv4861024719 div.yiv4861024719msonormal
{margin-right:0cm;margin-left:0cm;font-size:12.0pt;}#yiv4861024719
p.yiv4861024719msochpdefault, #yiv4861024719 li.yiv4861024719msochpdefault,
#yiv4861024719 div.yiv4861024719msochpdefault
{margin-right:0cm;margin-left:0cm;font-size:12.0pt;}#yiv4861024719
span.yiv4861024719msohyperlink {}#yiv4861024719
span.yiv4861024719msohyperlinkfollowed {}#yiv4861024719
span.yiv4861024719emailstyle17 {}#yiv4861024719 p.yiv4861024719msonormal1,
#yiv4861024719 li.yiv4861024719msonormal1, #yiv4861024719
div.yiv4861024719msonormal1
{margin:0cm;margin-bottom:.0001pt;font-size:12.0pt;}#yiv4861024719
span.yiv4861024719msohyperlink1
{color:#0563C1;text-decoration:underline;}#yiv4861024719
span.yiv4861024719msohyperlinkfollowed1
{color:#954F72;text-decoration:underline;}#yiv4861024719
span.yiv4861024719emailstyle171 {color:#1F497D;}#yiv4861024719
p.yiv4861024719msochpdefault1, #yiv4861024719 li.yiv4861024719msochpdefault1,
#yiv4861024719 div.yiv4861024719msochpdefault1
{margin-right:0cm;margin-left:0cm;font-size:10.0pt;}#yiv4861024719
span.yiv4861024719EmailStyle27 {color:#1F497D;}#yiv4861024719
.yiv4861024719MsoChpDefault {font-size:10.0pt;} _filtered #yiv4861024719
{margin:72.0pt 72.0pt 72.0pt 72.0pt;}#yiv4861024719
div.yiv4861024719WordSection1 {}#yiv4861024719
RDP to Windows and SSH to Linux all thru Guacamole.
From: Nick Couchman [mailto:nick.couch...@yahoo.com]
Sent: 02 August 2017 15:17
To: user@guacamole.incubator.apache.org
Subject: Re: RE: Disable Hidden Menu
What type of systems are you connecting to on the remote side?
On Wednesday, August 2, 2017, 10:15:19 AM EDT, Adrian Owen
<adrian.o...@eesm.com> wrote:
Hi Nick,
Thanks for you explanation.
The reason is: Users are not allowed Clipboard access to remote computers.
Disabling Guacamole hidden menu, and ‘Browser Clipboard access’ meets the
requirement.
Thanks, Adrian
From: Nick Couchman [mailto:nick.couch...@yahoo.com]
Sent: 02 August 2017 15:03
To: user@guacamole.incubator.apache.org
Subject: Re: Disable Hidden Menu
Adrian,
A couple of issues, here:
- Moving files out of the way in Tomcat like that isn't a very reliable way to
make changes, since Tomcat will likely, at some point, re-deploy the web
application and wipe out your changes. It looks like moving that file and
restarting doesn't necessarily trigger the redeploy of the original file, but
it's still not a very reliable method for doing that.
- The client.html file is not the file responsible for the appearance of the
hidden menu. That code is buried in the app.js file that contains all of the
other JavaScript code for Guacamole. So, I would not expect moving this file
out of the way to actually disable this menu, or at least not only disable the
menu - it will probably cause other problems. The fact that you're not seeing
any changes after moving it probably has to do with caching on client, server,
or both.
- I do not believe there is currently a way to disable the hidden menu. Maybe
you can add some detail about why you want to hide it, and you can also open a
JIRA issue to request that as an enhancement, if you like, but it would
probably be good to discuss a little further, here, and see what you're trying
to accomplish and why.
Regards,
Nick
On Wednesday, August 2, 2017, 9:21:30 AM EDT, Adrian Owen
<adrian.o...@eesm.com> wrote:
I renamed
/var/lib/tomcat8/webapps/guacamole/app/client/templates/client.html
To
/var/lib/tomcat8/webapps/guacamole/app/client/templates/client.html.old
And restarted tomcat8
But hidden menu still appears?
How to disable it?
Many thanks, Adrian
