FreeRDP 2.0.0 support in Guacamole

[rtvnoord]

Our VDI / RDP Farm is running on Windows 2016 Servers and is provided with
NVIDIA Grid Cards. 
To get the best out of our VDI / RDP farm, we are forced to use a RDP client
v10. 
A RDP client lower dan v10 will not use the H.264/AVC 444 codec, which is
absolutely necessary for this enviroment. 

Until now Guacamole only supports FreeRDP version 1.0.x which is using RDP
v8.1. 
Therefore we have tried to compile Guacamole with the FreeRDP 2.0.0-rc1
client (this FreeRDP rc1 client supports RDP v10 -> tested it succesfully on
Ubuntu), but this unfortunately fails. Guacamole only seems to work with the
FreeRDP 1.0.x client 

The main question I have: 
1) Is there somehow a possibility / trick to compile Guacamole with the
FreeRDP 2.0.0-rc1 client? 
2) When will Guacamole support the FreeRDP 2.0.0-rc1 client? Is there a
roadmap for Guacamole? 
And yes, I know it is a only a first RC1, but support for this would already
be great. 

Any input / help would be great. 

Regards, Pascal



--
Sent from: 
http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

Copying the database is giving me an error (Amazon Aurora)

[Zach Bonjour]

We are currently running Guac 0.9.10 and I am wanting to upgrade to the
latest version.  However, when I try and copy the database (to then upgrade
the copy), I am getting an error to seems to indicate an issue with the
database.  I don't SQL that well, so I'm hoping someone can point me in the
right direction.  Is this an "Amazon Aurora is not really MYSQL" issue
maybe?



ubuntu@ip-172-31-11-33:~$ mysqldbcopy
--source='guacamole':'**'@.
us-east-1.rds.amazonaws.com
--destination='guacamole':'***'@**.
us-east-1.rds.amazonaws.com '`guacamole_db`':'`guacamole_0.9.13`'
--drop-first
WARNING: Using a password on the command line interface can be insecure.
# Source on ***.us-east-1.rds.amazonaws.com: ... connected.
# Destination on *.us-east-1.rds.amazonaws.com: ... connected.
# Copying database guacamole_db renamed as guacamole_0.9.13
# Copying TABLE guacamole_db.guacamole_connection
# Copying TABLE guacamole_db.guacamole_connection_group
# Copying TABLE guacamole_db.guacamole_connection_group_permission
# Copying TABLE guacamole_db.guacamole_connection_history
# Copying TABLE guacamole_db.guacamole_connection_parameter
# Copying TABLE guacamole_db.guacamole_connection_permission
# Copying TABLE guacamole_db.guacamole_sharing_profile
# Copying TABLE guacamole_db.guacamole_sharing_profile_parameter
# Copying TABLE guacamole_db.guacamole_sharing_profile_permission
# Copying TABLE guacamole_db.guacamole_system_permission
# Copying TABLE guacamole_db.guacamole_user
# Copying TABLE guacamole_db.guacamole_user_permission
# Copying GRANTS from guacamole_db
ERROR: Unable to execute constraint query
ALTER TABLE guacamole_0.9.13.guacamole_user_permission add CONSTRAINT
`guacamole_user_permission_ibfk_2`
FOREIGN KEY (`user_id`)
REFERENCES `guacamole_0.9.13`.`guacamole_user`
(`user_id`)
ON UPDATE RESTRICT
ON DELETE CASCADE
. Error: Query failed. 1064 (42000): You have an error in your SQL syntax;
check the manual that corresponds to your MySQL server version for the
right syntax to use near '.13.guacamole_user_permission add CONSTRAINT
`guacamole_user_permission_ibfk_2`
' at line 1
ubuntu@ip-172-31-11-33:~$



-- 
NOTICE: This electronic mail message and any files transmitted with it are 
intended exclusively for the individual or entity to which it is addressed. 
The message, together with any attachment, may contain confidential and/or 
privileged information. Any unauthorized review, use, printing, saving, 
copying, disclosure or distribution is strictly prohibited. If you have 
received this message in error, please immediately advise the sender by 
reply email and delete all copies.

High Availability in Guacamole Client

[Thiago dos Santos Nunes]

I really need help with High Availability for the Guacamole client.

How could I implement this? Mainly regarding the maintenance of the session of 
the users independent of the server that it connects and also the maintenance 
of the number of concurrent users that a connection can receive.

Let me give you an example:

I have 3 frontend servers (client guacamole). And my users can connect in a 
certain connection only 3 at the same time (or 5 or whatever). But as each time 
a user connects in a frontend it falls on a different frontend these 3 
connections can reach up to 9 (3 connections x number of frontend). Think about 
20 diferent types of connections in one server

Today for me to control the use of resources of the servers and the licensing 
is VERY DIFFICULT.

I do not know much about programming and in our environment we can not deploy a 
solution like hazelcast (because of cost, very expensive).

Today we use Tomcat 8.5 (we can change it if necessary) and pfsense with 
HAProxy enabled balancing between them (but no session persistence in case of a 
crash or simultaneous access control).

Please if you could help me I would be VERY, VERY THANKFUL.

Stay with GOD!
Aude et Effice!
[Assinatura E-mail]

Re: Disable Automatic Reconnect

[Jonathan Hankins]

Nick, can you link the bug report for the RDP reconnect bug in
0.9.13-incubating? I originally reported an issue at
http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/Need-guidance-with-suspected-auto-reconnect-bug-td2118.html
and
then found that Frode Langelo
's
patch at
http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/Error-message-when-disconnecting-a-Windows-Server-2012-tp1835p2129.html
fixed
the issue I was having.

I am curious if this is the bug you referenced and if Frode's patch was the
fix incorporated into the codebase.

Thanks,

-Jonathan Hankins

On Sun, Jan 7, 2018 at 1:31 PM Nick Couchman  wrote:

> On Sat, Jan 6, 2018 at 8:51 PM, Valeriu  wrote:
>
>> The workaround that I found to work was to add two lines of code in the
>> client source code, then compile and update the guacamole war file in the
>> tomcat directory.
>>
>> Follow the steps for building the guacamole client from source code as
>> stated here
>>
>> http://guacamole.apache.org/doc/gug/installing-guacamole.html#building-guacamole-client
>> but before running the "mvn package" command edit the file
>> guacamole/src/main/webapp/app/client/controllers/clientController.js in a
>> basic text editor.
>>
>> In the text file, search for the line containing "// Determine whether the
>> reconnect countdown applies" and change the next line to be "var
>> countdown =
>> null;" to disable the auto-reconnect feature.
>>
>
> I don't recommend doing this, as there are probably situations where it
> would be better if the auto-reconnect does actually happen.  Completely
> disabling this behavior, across the entire Guacamole install, for all
> connections, seems ever so slightly excessive.
>
> With regard to the original post for this issue, there are a couple of
> things worth noting:
> - If you're using release 0.9.13-incubating or older, there is a bug for
> RDP connections that does not correct take into account why the RDP session
> ended.  In certain situations this can cause an automatic reconnect when it
> would not normally happen, which may be contributing to the perception that
> this feature is not desirable.  I suggest trying either the version in the
> current git master release, or waiting until 0.9.14 comes out see if that
> makes the issue any less bothersome.
> - There is also a JIRA issue (
> https://issues.apache.org/jira/browse/GUACAMOLE-360) that deals with how
> Guacamole deals with a single user trying to start the same session from
> multiple locations.  This may be of interest, depending on the scenario
> being discussed.
>
> -Nick
>

-- 
This e-mail is intended only for the recipient and may contain confidential 
or proprietary information. If you are not the intended recipient, the 
review, distribution, duplication or retention of this message and its 
attachments is prohibited. Please notify the sender of this error 
immediately by reply e-mail, and permanently delete this message and its 
attachments in any form in which they may have been preserved.

Re: FreeRDP 2.0.0 support in Guacamole

[Mike Jumper]

TL;DR - the FreeRDP API is a constantly-moving and undocumented
target. There is an effort underway to add support for the 2.0 API,
but it is difficult to convey just how enormous that task is. There is
no simple solution. It will be done eventually.

On Tue, Jan 9, 2018 at 12:40 AM, rtvnoord  wrote:
> ...
> Therefore we have tried to compile Guacamole with the FreeRDP 2.0.0-rc1
> client (this FreeRDP rc1 client supports RDP v10 -> tested it succesfully on
> Ubuntu), but this unfortunately fails. Guacamole only seems to work with the
> FreeRDP 1.0.x client
>

Guacamole currently supports 1.0.x, 1.1.x, and 1.2.x. With the
exception of 2.0.x, it should build against any tagged FreeRDP release
and any stable branch with version at or after 1.0.

> The main question I have:
> 1) Is there somehow a possibility / trick to compile Guacamole with the
> FreeRDP 2.0.0-rc1 client?

No. The issue here is that there is essentially zero API compatibility
between FreeRDP releases. With the number of API-breaking changes in
2.0.x, it's become clear that it is no longer possible to directly
depend on FreeRDP without producing unmaintainably-conditional code.
We need to implement an abstraction layer between Guacamole's RDP
support and FreeRDP to isolate our codebase from this.

The issue tracking this 2.0.x support effort is:

https://issues.apache.org/jira/browse/GUACAMOLE-249

> 2) When will Guacamole support the FreeRDP 2.0.0-rc1 client? Is there a
> roadmap for Guacamole?

The best I can say is "eventually".

Maintaining compatibility with different versions of FreeRDP is
non-trivial. Things tend to change from some_arbitrary_function() to
SomeArbitraryFunction() to someThing->ArbitraryFunction(), or
someThing->staticArray to
someThing->neverMindItsDynamicallyAllocatedNow, etc. At this point,
though our configure.ac is tasked with inspecting the presence/state
of about a dozen libraries, half of its code is actually dedicated
purely to detecting the various API changes of FreeRDP:

https://github.com/apache/guacamole-server/blob/master/configure.ac#L503-L1017

This, combined with the lack of API documentation, makes adding
support for 2.0.x extremely difficult.

- Mike

Re: Copying the database is giving me an error (Amazon Aurora)

[Mike Jumper]

On Tue, Jan 9, 2018 at 10:19 AM, Zach Bonjour <
zbonj...@vibrantcreditunion.org> wrote:

> ...
> ERROR: Unable to execute constraint query
> ALTER TABLE guacamole_0.9.13.guacamole_user_permission add CONSTRAINT
> `guacamole_user_permission_ibfk_2`
> FOREIGN KEY (`user_id`)
> REFERENCES `guacamole_0.9.13`.`guacamole_user`
> (`user_id`)
> ON UPDATE RESTRICT
> ON DELETE CASCADE
> . Error: Query failed. 1064 (42000): You have an error in your SQL syntax;
> check the manual that corresponds to your MySQL server version for the
> right syntax to use near '.13.guacamole_user_permission add CONSTRAINT
> `guacamole_user_permission_ibfk_2`
> ' at line 1
> ubuntu@ip-172-31-11-33:~$
>
>
Perhaps the guacamole_0.9.13 in your ALTER TABLE needs to be quoted because
of the periods in the name? ie:

ALTER TABLE `guacamole_0.9.13`.guacamole_user_permission ...

If you didn't write this statement yourself, it looks like mysqldbcopy is
generating invalid SQL. I'm not sure if there's any difference in what
happens behind the scenes between mysqldbcopy and mysqldump, but you might
try just using mysqldump to dump the contents of the original database, and
then run that script against the new database. That's how I've always
handled backing up or copying MySQL databases in the past.

You could also try using a database name that doesn't need to be quoted,
like guacamole_0_9_13 or similar.

- Mike

Re: Copying the database is giving me an error (Amazon Aurora)

[Zach Bonjour]

"You could also try using a database name that doesn't need to be quoted,
like guacamole_0_9_13 or similar."

Winner winner!  Thanks!

On Tue, Jan 9, 2018 at 1:05 PM, Mike Jumper 
wrote:

> On Tue, Jan 9, 2018 at 10:19 AM, Zach Bonjour <
> zbonj...@vibrantcreditunion.org> wrote:
>
>> ...
>> ERROR: Unable to execute constraint query
>> ALTER TABLE guacamole_0.9.13.guacamole_user_permission add CONSTRAINT
>> `guacamole_user_permission_ibfk_2`
>> FOREIGN KEY (`user_id`)
>> REFERENCES `guacamole_0.9.13`.`guacamole_user`
>> (`user_id`)
>> ON UPDATE RESTRICT
>> ON DELETE CASCADE
>> . Error: Query failed. 1064 (42000): You have an error in your SQL
>> syntax; check the manual that corresponds to your MySQL server version for
>> the right syntax to use near '.13.guacamole_user_permission add CONSTRAINT
>> `guacamole_user_permission_ibfk_2`
>> ' at line 1
>> ubuntu@ip-172-31-11-33:~$
>>
>>
> Perhaps the guacamole_0.9.13 in your ALTER TABLE needs to be quoted
> because of the periods in the name? ie:
>
> ALTER TABLE `guacamole_0.9.13`.guacamole_user_permission ...
>
> If you didn't write this statement yourself, it looks like mysqldbcopy is
> generating invalid SQL. I'm not sure if there's any difference in what
> happens behind the scenes between mysqldbcopy and mysqldump, but you might
> try just using mysqldump to dump the contents of the original database, and
> then run that script against the new database. That's how I've always
> handled backing up or copying MySQL databases in the past.
>
> You could also try using a database name that doesn't need to be quoted,
> like guacamole_0_9_13 or similar.
>
> - Mike
>
>


-- 


*Zach Bonjour*
DevOps Engineer
800-323-5109 x2000 | *vibrantcreditunion.org
*


-- 
NOTICE: This electronic mail message and any files transmitted with it are 
intended exclusively for the individual or entity to which it is addressed. 
The message, together with any attachment, may contain confidential and/or 
privileged information. Any unauthorized review, use, printing, saving, 
copying, disclosure or distribution is strictly prohibited. If you have 
received this message in error, please immediately advise the sender by 
reply email and delete all copies.

Re: High Availability in Guacamole Client

[Jonathan Hankins]

What are your users connecting to on the back end? I have a haproxy sitting
between guacamole and our RDP servers (not using connection broker) and am
using a combination of group policy session limits and mstshash cookie to
create session "stickiness" for our users (i.e., always reconnect to your
existing session, with failover.)

-Jonathan Hankins

On Tue, Jan 9, 2018, 12:28 PM Thiago dos Santos Nunes <
thi...@digitalinformatica.com.br> wrote:

> I really need help with High Availability for the Guacamole client.
>
>
>
> How could I implement this? Mainly regarding the maintenance of the
> session of the users independent of the server that it connects and also
> the maintenance of the number of concurrent users that a connection can
> receive.
>
>
>
> Let me give you an example:
>
>
>
> I have 3 frontend servers (client guacamole). And my users can connect in
> a certain connection only 3 at the same time (or 5 or whatever). But as
> each time a user connects in a frontend it falls on a different frontend
> these 3 connections can reach up to 9 (3 connections x number of frontend).
> Think about 20 diferent types of connections in one server
>
>
>
> Today for me to control the use of resources of the servers and the
> licensing is VERY DIFFICULT.
>
>
>
> I do not know much about programming and in our environment we can not
> deploy a solution like hazelcast (because of cost, very expensive).
>
>
>
> Today we use Tomcat 8.5 (we can change it if necessary) and pfsense with
> HAProxy enabled balancing between them (but no session persistence in case
> of a crash or simultaneous access control).
>
>
>
> Please if you could help me I would be VERY, VERY THANKFUL.
>
>
>
> Stay with GOD!
>
>
> *Aude et Effice! *[image: Assinatura E-mail]
>
>
>

-- 
This e-mail is intended only for the recipient and may contain confidential 
or proprietary information. If you are not the intended recipient, the 
review, distribution, duplication or retention of this message and its 
attachments is prohibited. Please notify the sender of this error 
immediately by reply e-mail, and permanently delete this message and its 
attachments in any form in which they may have been preserved.

ssh connect always faild

[Oliver . Zhan]

When I remote connect a centos by ssh, connection always faild

Guacamole log is:
Jan 10 13:50:05 ubuntu guacd[7992]: SSH connection successful.
Jan 10 13:50:05 ubuntu guacd[8076]: Connection 
"$8651e7ab-d3bc-4a1e-bf85-f355833866b4" removed.

>From the log we can see that the connection can be removed 
>automatically
> by guacamole

What is wrong?


CONFIDENTIALITY NOTICE:

This electronic message is intended to be viewed only by the individual or 
entity to whom it is addressed. It may contain information that is privileged, 
confidential and exempt from disclosure under applicable law. Any 
dissemination, distribution or copying of this communication is strictly 
prohibited without our prior permission. If the reader of this message is not 
the intended recipient, or the employee or agent responsible for delivering the 
message to the intended recipient, or if you have received this communication 
in error, please notify us immediately by return e-mail and delete the original 
message and any copies of it from your computer system. For further information 
about Hikvision company. please see our website at 
www.hikvision.com

Re: ssh connect always faild

[Mike Jumper]

On Jan 9, 2018 22:00, "Oliver.Zhan"  wrote:

When I remote connect a centos by ssh, connection always faild



Guacamole log is:

Jan 10 13:50:05 ubuntu guacd[7992]: SSH connection successful.

Jan 10 13:50:05 ubuntu guacd[8076]: Connection
"$8651e7ab-d3bc-4a1e-bf85-f355833866b4"
removed.


What version of guacamole-server?

- Mike

答复: ssh connect always faild

[Oliver . Zhan]

The version is 0.9.13

发件人: Mike Jumper [mailto:mike.jum...@guac-dev.org]
发送时间: 2018年1月10日 15:27
收件人: user@guacamole.apache.org
主题: Re: ssh connect always faild

On Jan 9, 2018 22:00, "Oliver.Zhan" 
mailto:zhangjianp...@hikvision.com>> wrote:
When I remote connect a centos by ssh, connection always faild

Guacamole log is:
Jan 10 13:50:05 ubuntu guacd[7992]: SSH connection successful.
Jan 10 13:50:05 ubuntu guacd[8076]: Connection 
"$8651e7ab-d3bc-4a1e-bf85-f355833866b4" removed.

What version of guacamole-server?

- Mike



CONFIDENTIALITY NOTICE:

This electronic message is intended to be viewed only by the individual or 
entity to whom it is addressed. It may contain information that is privileged, 
confidential and exempt from disclosure under applicable law. Any 
dissemination, distribution or copying of this communication is strictly 
prohibited without our prior permission. If the reader of this message is not 
the intended recipient, or the employee or agent responsible for delivering the 
message to the intended recipient, or if you have received this communication 
in error, please notify us immediately by return e-mail and delete the original 
message and any copies of it from your computer system. For further information 
about Hikvision company. please see our website at 
www.hikvision.com