Re: Debug rendering mode for 1.6.0?

2025-07-11 Thread Michael Jumper
On 7/8/25 11:51 AM, Nicholas Cook wrote: Hi everyone, Is there a way to enable the blue/red highlighting that was used to show the updated rendering performance in 1.6.0? As displayed here: https:// guacamole.apache.org/releases/1.6.0/ Would l

Re: Audit permission results in db error

2025-07-07 Thread Michael Jumper
On July 7, 2025 12:51:30 AM PDT, newslet...@tobiasmeier.dev.INVALID wrote: >Hi > >While troubleshooting I found out, that assigning a group the "Audit" >permissions results in an application error and an empty permission entry in >the db: > >As soon as I assign the Audit permission, guacamole cra

[SECURITY] CVE-2024-35164: Apache Guacamole: Improper input validation of console codes

2025-07-01 Thread Michael Jumper
Severity: moderate Base CVSS Score: 6.8 (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N) Affected versions: - Apache Guacamole 0.8.0 through 1.5.5 Description: The terminal emulator of Apache Guacamole 1.5.5 and older does not properly validate console codes received from servers via text-based

[oss-security] CVE-2024-35164: Apache Guacamole: Improper input validation of console codes

2025-07-01 Thread Michael Jumper
Severity: moderate Base CVSS Score: 6.8 (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N) Affected versions: - Apache Guacamole 0.8.0 through 1.5.5 Description: The terminal emulator of Apache Guacamole 1.5.5 and older does not properly validate console codes received from servers via text-based

[SECURITY] CVE-2024-35164: Apache Guacamole: Improper input validation of console codes

2025-07-01 Thread Michael Jumper
Severity: moderate Base CVSS Score: 6.8 (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N) Affected versions: - Apache Guacamole 0.8.0 through 1.5.5 Description: The terminal emulator of Apache Guacamole 1.5.5 and older does not properly validate console codes received from servers via text-based

[SECURITY] CVE-2024-35164: Apache Guacamole: Improper input validation of console codes

2025-07-01 Thread Michael Jumper
Severity: moderate Base CVSS Score: 6.8 (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N) Affected versions: - Apache Guacamole 0.8.0 through 1.5.5 Description: The terminal emulator of Apache Guacamole 1.5.5 and older does not properly validate console codes received from servers via text-based

[SECURITY] CVE-2024-35164: Apache Guacamole: Improper input validation of console codes

2025-07-01 Thread Michael Jumper
Severity: moderate Base CVSS Score: 6.8 (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N) Affected versions: - Apache Guacamole 0.8.0 through 1.5.5 Description: The terminal emulator of Apache Guacamole 1.5.5 and older does not properly validate console codes received from servers via text-based

Re: OpenSSL 1.0.2 compatibility: 1.4.0 vs 1.6.0

2025-06-25 Thread Michael Jumper
On June 25, 2025 12:12:26 PM PDT, Saravanan Muthu wrote: >Hi Guacamole community, > >I have a question about OpenSSL compatibility between Guacamole versions. > >BACKGROUND: >We successfully compiled guacamole-server-1.4.0 on SLES 12 SP3 with >OpenSSL-FIPS-1.0.2j. This worked because 1.4.0 include

[ANNOUNCE] Apache Guacamole 1.6.0 released

2025-06-25 Thread Michael Jumper
The Apache Guacamole community is proud to announce the release of Apache Guacamole 1.6.0. Apache Guacamole is a clientless remote desktop gateway which supports standard protocols like VNC, RDP, and SSH. We call it "clientless" because no plugins or client software are required; once Guacamol

Re: 1.6.0 VNC issue with ultravnc server

2025-06-25 Thread Michael Jumper
On June 25, 2025 4:06:07 AM PDT, "Matyas, Tibor" wrote: >Dear all, > >recently updated from 1.5.5 to 1.6.0 - Issue observed: >after upgrading to version 1.6.0, VNC sessions with remote UltraVNC versions >newer than 1.3.x are no longer functioning correctly. >Tested and confirmed: >UltraVNC

Re: Multiple guacd, single record location

2025-06-25 Thread Michael Jumper
On June 25, 2025 12:38:21 AM PDT, t...@htil.net wrote: >Hello all, > >If I have multiple guacd instances running, can I mount a single shared >recording volume to them all to consolidate recordings for the front end to >view? I’m guessing as the recording name is the uuid there won’t be any >co

Re: Guacamole Crash 1.6.0 multi-connect and SSO

2025-06-24 Thread Michael Jumper
On June 24, 2025 5:35:51 AM PDT, newslet...@tobiasmeier.dev.INVALID wrote: >Hi > >I did an upgrade, and yes I fully replaced and rebuild the guacamole server >and also ensured the client is rebuilt. > >Awesome, yes the problem with the loop in multi connect is solved by hard >refresh, thanks! > >

[ANNOUNCE] Apache Guacamole 1.6.0 released

2025-06-24 Thread Michael Jumper
The Apache Guacamole community is proud to announce the release of Apache Guacamole 1.6.0. Apache Guacamole is a clientless remote desktop gateway which supports standard protocols like VNC, RDP, and SSH. We call it "clientless" because no plugins or client software are required; once Guacamol

[ANNOUNCE] Apache Guacamole 1.6.0 released

2025-06-23 Thread Michael Jumper
The Apache Guacamole community is proud to announce the release of Apache Guacamole 1.6.0. Apache Guacamole is a clientless remote desktop gateway which supports standard protocols like VNC, RDP, and SSH. We call it "clientless" because no plugins or client software are required; once Guacamol

[ANNOUNCE] Apache Guacamole 1.6.0 released

2025-06-23 Thread Michael Jumper
The Apache Guacamole community is proud to announce the release of Apache Guacamole 1.6.0. Apache Guacamole is a clientless remote desktop gateway which supports standard protocols like VNC, RDP, and SSH. We call it "clientless" because no plugins or client software are required; once Guacamol

[RESULT] [VOTE] Release Apache Guacamole 1.6.0 (RC3)

2025-06-22 Thread Michael Jumper
On 6/19/25 3:05 PM, Michael Jumper wrote: Hello all, The proverbially charming third release candidate for Apache Guacamole 1.6.0 has been uploaded and is ready for VOTE. The draft release notes (along with links to artifacts, signatures/checksums, and updated documentation) can be found

Re: Issue found while testing Guacamole 1.6.0-RC2

2025-06-19 Thread Michael Jumper
This should now be resolved in RC3. - Mike On 6/17/25 11:42 AM, Corentin SORIANO wrote: According to my tests, we can reproduce with freerdp 2 and 3 from this change: https://github.com/apache/guacamole-server/pull/584/files Best re

[VOTE] Release Apache Guacamole 1.6.0 (RC3)

2025-06-19 Thread Michael Jumper
Hello all, The proverbially charming third release candidate for Apache Guacamole 1.6.0 has been uploaded and is ready for VOTE. The draft release notes (along with links to artifacts, signatures/checksums, and updated documentation) can be found here: http://guacamole.apache.org/releases/1.

Re: AW: AW: Now up for final testing: 1.6.0-RC1

2025-06-19 Thread Michael Jumper
er? Regards, Joachim -Ursprüngliche Nachricht- Von: Michael Jumper Gesendet: Mittwoch, 28. Mai 2025 00:31 An: user@guacamole.apache.org Betreff: Re: AW: Now up for final testing: 1.6.0-RC1 I just looked into this and can confirm that the Docker entrypoint for the "guacamole/guacamole:1.6.0-RC1&qu

Re: Issue found while testing Guacamole 1.6.0-RC2 - and voting for RC2

2025-06-19 Thread Michael Jumper
Sure, let's try to fix. I think I have a working theory: The current implementation of guac_display relies on the worker threads to send the final frame "sync" instruction (the last thread to send anything also sends the final "sync"), but since the worker threads are only used for image encod

Re: [CANCEL] [VOTE] Release Apache Guacamole 1.6.0 (RC2)

2025-06-19 Thread Michael Jumper
On 6/19/25 2:08 AM, Michael Jumper wrote: On 6/16/25 8:30 PM, Michael Jumper wrote: Hello all, The second release candidate for Apache Guacamole 1.6.0 has been uploaded and is ready for VOTE. The draft release notes (along with links to artifacts, signatures/checksums, and updated

[CANCEL] [VOTE] Release Apache Guacamole 1.6.0 (RC2)

2025-06-19 Thread Michael Jumper
On 6/16/25 8:30 PM, Michael Jumper wrote: Hello all, The second release candidate for Apache Guacamole 1.6.0 has been uploaded and is ready for VOTE. The draft release notes (along with links to artifacts, signatures/checksums, and updated documentation) can be found here: http

Re: [VOTE] Release Apache Guacamole 1.6.0 (RC2)

2025-06-17 Thread Michael Jumper
On 6/17/25 7:28 AM, W. Michael Petullo wrote: [x] +1 Approve the release [ ] -1 Don't approve the release (please provide specific comments) I am not sure if I am entitled to vote, but I wanted to provide some positive feedback. I am running 1.6.0-RC2 on Fedora 42. I found that this version of

[VOTE] Release Apache Guacamole 1.6.0 (RC2)

2025-06-16 Thread Michael Jumper
Hello all, The second release candidate for Apache Guacamole 1.6.0 has been uploaded and is ready for VOTE. The draft release notes (along with links to artifacts, signatures/checksums, and updated documentation) can be found here: http://guacamole.apache.org/releases/1.6.0/ The git tag for

Re: Wrong Listener Class?

2025-06-04 Thread Michael Jumper
On June 3, 2025 2:17:59 PM PDT, viktor_krumm wrote: >I am attempting to write an event listener using the documentation. I have >successfully compiled a basic jar with Maven with no errors. When I load it >into guacamole, I get "Extension guac-listener.jar could not be loaded: >Listener class

Re: AW: Now up for final testing: 1.6.0-RC1

2025-05-27 Thread Michael Jumper
I just looked into this and can confirm that the Docker entrypoint for the "guacamole/guacamole:1.6.0-RC1" image is missing existence checks for GUACAMOLE_HOME/lib, producing an error when the GUACAMOLE_HOME template functionality is used (the mechanism for including custom extensions). This

Re: RDP timesync not working on staging/1.6.0 branch

2025-05-27 Thread Michael Jumper
On 5/1/25 2:00 PM, Nick Couchman wrote: On Thu, May 1, 2025 at 4:17 PM sri sudha kambhampati mailto:sudhatrendmi...@gmail.com>> wrote: Thanks Nick for the response. I am using Windows Server 2022 with RDSH installed. I can check in FreeRDP discussions for any similar issues. S

Re: Guacamole 1.5.5 SAML logout

2025-05-23 Thread Michael Jumper
On 5/23/25 10:38 AM, kirikou2...@free.fr wrote: Hello everyone, I have a problem that has already been discussed but for which I can't find a clear answer. I'm using Guacamole 1.5.5 with a SAML SSO solution with Keycloak. I'm having logout problems because the user's session isn't stopped when

Re: Compatibility Question: Guacamole Client 1.5.3 with Guacamole Server 1.6.0

2025-05-22 Thread Michael Jumper
On 5/22/25 1:26 PM, Michael Jumper wrote: On 5/22/25 10:22 AM, Nick Couchman wrote: On Thu, May 22, 2025 at 2:36 AM Dilip Modi wrote:     Thanks Jon.     We are using *https://github.com/glyptodon/glyptodon-enterprise-     player <https://github.com/glyptodon/glyptodon-enterprise-pla

Re: Compatibility Question: Guacamole Client 1.5.3 with Guacamole Server 1.6.0

2025-05-22 Thread Michael Jumper
On 5/22/25 10:22 AM, Nick Couchman wrote: On Thu, May 22, 2025 at 2:36 AM Dilip Modi wrote: Thanks Jon. We are using *https://github.com/glyptodon/glyptodon-enterprise- player * for playing guacamole recording file. As

Re: TOTP extension in 1.6.0RC is broken

2025-05-07 Thread Michael Jumper
On 5/7/25 12:21 PM, Michael Jumper wrote: On 5/7/25 8:56 AM, Raymond Yip wrote: Test System: I am using the Guacamole Docker container for 1.6.0 RC on Docker Hub. Brand new Postgres database. Also using the guacamole-auth-jdbc-postgresql-1.6.0.jar plugin with both schema's ap

Re: TOTP extension in 1.6.0RC is broken

2025-05-07 Thread Michael Jumper
On 5/7/25 8:56 AM, Raymond Yip wrote: Test System: I am using the Guacamole Docker container for 1.6.0 RC on Docker Hub. Brand new Postgres database. Also using the guacamole-auth-jdbc-postgresql-1.6.0.jar plugin with both schema's applied, specifically 001-create-schema.sql and 002-create- ad

[CANCEL] [VOTE] Release Apache Guacamole 1.6.0 (RC1)

2025-05-05 Thread Michael Jumper
On 5/3/25 10:51 AM, Michael Jumper wrote: Hello all, First, ** PLEASE NOTE THAT THIS IS A VERY LARGE RELEASE **. It contains a full rewrite of the rendering system. Anyone with the capacity to test should please test this thoroughly - I'll be doing the same. If there are any further i

Re: Now up for final testing: 1.6.0-RC1

2025-05-04 Thread Michael Jumper
limitation. Well, limitation wrt to this particular facet at least, there are many more I have :) Otherwise this has been a mega job, well done to you all. Regards, Luke. On 4/05/25 11:22, Michael Jumper wrote: Hello all, The first release candidate for 1.6.0 is now under vote: https://

Now up for final testing: 1.6.0-RC1

2025-05-03 Thread Michael Jumper
Hello all, The first release candidate for 1.6.0 is now under vote: https://lists.apache.org/thread/n3zq9v0t638p4hy06kghq1j3lhwdlwds Given the size of this release, if anyone feels like testing RC1, please do! As mentioned in the above thread, this release contains a rewrite of the rendering

[VOTE] Release Apache Guacamole 1.6.0 (RC1)

2025-05-03 Thread Michael Jumper
Hello all, First, ** PLEASE NOTE THAT THIS IS A VERY LARGE RELEASE **. It contains a full rewrite of the rendering system. Anyone with the capacity to test should please test this thoroughly - I'll be doing the same. If there are any further issues that mean that another RC is needed, let's fi

Re: Dirty Rectangles - By FreeRDP or Guacamole

2025-04-19 Thread Michael Jumper
On 4/19/25 2:10 AM, Palaash Jain wrote: Hi, I've recently been exploring the images stored in Guacamole's recording files, particularly those sent to the client as base64. By slightly modifying the guacenc source code, I was able to save all the images to disk and analyze the screen changes t

Re: Current status of 1.6.0 development

2025-04-19 Thread Michael Jumper
Sure. - Mike On 4/19/25 7:21 AM, Steven Barnhart wrote: Could you please check out Guacamole-2051. In my testing of the staging branch I can’t get LDAP user attributes to work. –Steve On Apr 19, 2025, at 4:29 AM, Michael Jumper wrote: OK - the outstanding tasks for 1.6.0 are dwindling

Current status of 1.6.0 development

2025-04-19 Thread Michael Jumper
OK - the outstanding tasks for 1.6.0 are dwindling. Most of the JIRA issues that remain outstanding are just waiting on a few PRs: GUACAMOLE-1374 (Docker support for ARM) - https://github.com/apache/guacamole-server/pull/575 (Cleanup to allow the images to be rebuilt more quickly and make LOG_

Re: Mitigation Plan - Apache Guacamole - Protocol Agnostic Vulnerability.

2025-04-18 Thread Michael Jumper
On 4/18/25 9:13 AM, Jyotirmoy Sikdar wrote: Dear Team, We come across from the forum that Apache Guacamole using Protocol Agnostic which is Security Weakened Protocol that allows vulnerabilities. Looking for detailed mitigation plan for have highly secured solution from your end to have our e

Re: Issue with Guac

2025-04-16 Thread Michael Jumper
On 4/16/25 4:40 PM, Justin Castleman wrote: Hello, I have built my Guac server and have it configured to work with MySQL for managing credentials, connections, etc. I can bring my server up, login via the web interface, and navigate around as expected. I can create new users, new groups, chan

Re: Pending users don't get login failed error

2025-04-15 Thread Michael Jumper
On 4/14/25 5:27 AM, Efraim Vagner wrote: Hi, No sure if this is a bug in guacd or the intended behavior and I just don't use it correctly. I use guacamole-common-js and the guacd docker image in my system. As part of the system, in my own js code, I check if login was successful. However, sinc

Re: Does every connection uses HTTPTunnel?

2025-04-15 Thread Michael Jumper
On 4/15/25 7:32 AM, Cedric Biedermann wrote: Does every websocket-tunnel for connection also creates a normal HTTPTunnel automatically? I tried to understand how CLIENT_ERRORS (e.g.: "ERROR_CLIENT_301"     : "Log in failed. Please reconnect and try again."), are displayed at the angular part an

Re: admin logs

2025-04-10 Thread Michael Jumper
On 4/8/25 8:16 AM, Raphaël CAUDRON wrote: Hello everyone, I'm currently testing several bastions, and Guacamole is one of them. However, I haven’t been able to find a way to log administrative actions, like renaming a connection or adding a user/group, together with the user who performed the

Re: staging/1.6.0 compile errors [warnings] while building container image for guacamole-server

2025-04-08 Thread Michael Jumper
This is a known issue with building against recent releases of FreeRDP 3.x under GCC: https://github.com/FreeRDP/FreeRDP/issues/11412 I expect they will address this in an upcoming release. - Mike On 4/8/25 8:55 AM, Barnhart, Steven wrote: I had reported that earlier, but adding that allowed

Re: Guacamole connection is very slow

2025-03-26 Thread Michael Jumper
On 3/25/25 12:14 AM, Viji Shankar wrote: Hi Team, We have deployed Apache Guacamole in a Kubernetes pod and are currently experiencing slowness in the connection. Despite increasing the pod's CPU and memory, the issue persists. Additionally, we have observed multiple devices showing the conn

Re: Fwd: Printing is slow

2025-03-12 Thread Michael Jumper
Dear Guacamole Team, I am currently experiencing a performance issue with the RDP printer functionality in Apache Guacamole. When printing PDF documents through the virtual printer, the generated files are unexpectedly large and slow to download. For example, when I send a PDF file for print

Re: Weird paste behaviour

2025-03-11 Thread Michael Jumper
On 3/11/25 11:56 AM, newslet...@tobiasmeier.dev.INVALID wrote: Hi Sometimes when pasting bigger things, it appears that guacamole has big problems with this: See error attatchment. When pasting the exact same into for example Proxmox Web-Shell which runs off xterm.js it works just fine: S

Re: Does Guacamole Server Support Certificate-Based SSH Authentication?

2025-02-27 Thread Michael Jumper
On 2/27/25 10:14 PM, Dilip Modi wrote: Hello, I am using *Apache Guacamole Server (version 1.5.3)* and currently, it supports *username/password* authentication and *private key-based authentication* for SSH connections. I would like to know if *Guacamole supports certificate-based authenti

Re: Guacamole server 1.6.0 release date

2025-02-27 Thread Michael Jumper
ch is not the master version. Also note you will have to generate the Makefile and use it! I have not seen any performance regressions but then I am not all users so do your due dilligence and test relentlessly and have a backout plan. Cheers Jon On Thu, 2025-02-20 at 10:40 -0800, Michae

Re: Test staging/1.6.0 : ghost traces on desktop and performance improvements with VNC

2025-02-25 Thread Michael Jumper
On 2/22/25 3:14 AM, Yves Auffret wrote: Dear team, I am currently testing the server+client version staging/1.6.0 with Debian 12+TigerVNC. I notice that when there is a background image on the desktop and I move a window, ghost traces of the window’s outline appear on the background. This

Re: Subject: Inquiry Regarding Sending Token in HTTP Headers for Guacamole Integration

2025-02-21 Thread Michael Jumper
On 2/21/25 4:18 AM, pavithra vijayakumar wrote: Hi, I'm using the following JavaScript code in my Blazor app (https:// localhost:724 8),but I'm encountering a CORS error when I try to connect with guacamole. ... *Cors error: * Access to fetch at 'http://localhost:8

Re: Guacamole server 1.6.0 release date

2025-02-20 Thread Michael Jumper
On 2/20/25 5:49 AM, Nick Couchman wrote: On Thu, Feb 20, 2025 at 2:12 AM Dilip Modi wrote: Hello, Whats the tentative timeline to release guacamole-server 1.6.0 ? There is no tentative release date at the moment - there is some ongoing work to address performance regressions associ

Re: Subject: Inquiry Regarding Sending Token in HTTP Headers for Guacamole Integration

2025-02-20 Thread Michael Jumper
On 2/20/25 10:06 AM, Nick Couchman wrote: On Thu, Feb 20, 2025 at 12:10 PM pavithra vijayakumar mailto:pavithraav...@gmail.com>> wrote: Hi Team, I hope this message finds you well. I am currently working on the Guacamole project and am seeking your guidance regarding the securi

Re: Replace a template using guacamole extensions

2025-02-17 Thread Michael Jumper
On February 17, 2025 3:17:31 PM PST, Salatiel Filho wrote: >Hello, is there a way to replace the content of an guacamole client >template ( this file for example: >guacamole-client/guacamole/src/main/frontend/src/app/client/templates/connection.html >) using guacamole extensions ? >Reading the gu

Re: RDP connection shortcuts stop working

2025-02-17 Thread Michael Jumper
On 2/17/25 5:27 AM, Kowalka, Maciej wrote: The shortcuts associated with clipboard access If the "Ctrl" key otherwise works as expected within the RDP session, it could be that the clipboard service of your RDP server has crashed. - Mike

Re: 1.6.0: RDP server closed/refused connection: Manually logged off

2025-02-17 Thread Michael Jumper
On 2/17/25 7:46 AM, Gihan Rajapaksha wrote: Hi Mike, Yes I just rebuilt another VM to try it out. I can launch RDP apps published on the session host. Do I need different dependencies to build with freerdp3-dev ? Thanks for getting back to me. No, there's no difference in dependency require

Re: Allowing user to access a certain remote desktop without signing in

2025-02-17 Thread Michael Jumper
On 2/17/25 4:57 AM, Mahmoud J wrote: Hi, I have an HTML/Javascript frontend (Plain Javascript not nodejs), and I would like the user to access a certain VM directly without coming across the Login form or type any credentials. What is the best way to achieve this? Is there some sort of a met

Re: Adding Right-CTRL Support for Canadian Multilingual Standard Layout

2025-02-16 Thread Michael Jumper
On 2/13/25 10:04 AM, kandula tejaswi wrote: Hello Guacamole community, I've recently created a PR to add support for the Canadian Multilingual Standard (CMS) keyboard layout in Guacamole: https://github.com/apache/guacamole-server/pull/558 I had a question regarding Right-CTRL support and wante

Re: Update on status of performance improvements

2025-02-16 Thread Michael Jumper
local" only missing in the Dockerfile? guacamole@guacamole:/opt$ ls guacamole  java Thanks, Tobias Am 15.02.2025 um 17:41 schrieb Michael Jumper: Can you send your full docker-compose.yml (redacted as necessary)? The only issue I see with what you've shown below is that the copy of g

Re: 1.6.0: RDP server closed/refused connection: Manually logged off

2025-02-15 Thread Michael Jumper
On 2/13/25 7:44 AM, Gihan Rajapaksha wrote: yes trying to figure out why, same host works for 1.5.5. could this be related to the freerdp version I'm using on the 1.6.0 ? The problematic one is using freerdp3-dev, 1.5.5 is built with freerdp2-dev. It's possible. Have you tried building again

Re: Update on status of performance improvements

2025-02-15 Thread Michael Jumper
ng in the Dockerfile? Thanks. Best regards, Tobias Am 15.02.2025 um 08:51 schrieb Michael Jumper: Well, I'm no longer able to reproduce the issues I was encountering before. Performance of all protocols seems to be excellent when using a build with: * Current "staging/1.6.0"

Re: Update on status of performance improvements

2025-02-14 Thread Michael Jumper
Well, I'm no longer able to reproduce the issues I was encountering before. Performance of all protocols seems to be excellent when using a build with: * Current "staging/1.6.0" for guacamole-client * The proposed fixes for guacamole-server: https://github.com/apache/guacamole-server/pull/573

Re:

2025-02-14 Thread Michael Jumper
On February 14, 2025 12:08:20 AM PST, "Skyrpan, Roman" wrote: >Hello everyone, >I encountered an unexpected issue. >Apache Guacamole 1.5.5 is installed. >Authentication is done via LDAP, followed by two-factor authentication using >TOTP. >The problem occurs at the two-factor authentication stage

Re: Guacamole RDP disconnections

2025-02-06 Thread Michael Jumper
On 2/6/25 1:38 AM, Kowalka, Maciej wrote: Hello, I’m using Guacamole and guacd in docker setup, and I’m seeing issue when connection between target windows machine and guacd is lost or disrupted for a second it fully closes the session with message “the remote server is currently unavailable”

Update on status of performance improvements

2025-02-02 Thread Michael Jumper
Hey all, I think I'm in the home stretch with finalizing the performance improvements surrounding GUACAMOLE-377. With the following pair of PRs, things have massively improved both in terms of rendering rate and latency: * https://github.com/apache/guacamole-server/pull/573 * https://github.c

Re: Latency with Guacamole/guacd

2025-01-24 Thread Michael Jumper
On 1/22/25 3:22 AM, Yang Yang wrote: Hi Nick, I further captured on port 5900 for VNC messages, and found most the time was on VNC server. The time on guacd is only 10ms! Is the 10ms reasonable with what guacd does for VNC? Yes, this aligns with my experience. The processing and optimizati

Re: Technical Support Request - Smart Card Integration with Guacamole 1.5.4

2025-01-24 Thread Michael Jumper
On 1/24/25 12:42 AM, Bhupender wrote: Thank you Mike for clarifying about Guacamole's smart card support limitations. Based on your response, I understand: 1. Guacamole doesn't currently support direct smart card redirection 2. The properties I tried in guacamole.properties are invalid 3. Smart

Re: Technical Support Request - Smart Card Integration with Guacamole 1.5.4

2025-01-23 Thread Michael Jumper
On 1/22/25 11:51 PM, Bhupender wrote: Dear Support Team, I hope this email finds you well. I am encountering issues with smart card integration in our Guacamole deployment and would appreciate your assistance. ... *Current Implementation:* 1. *Guacamole Properties:* properties Co

Re: Support

2025-01-20 Thread Michael Jumper
Our mailing lists aren't really intended as marketplaces to request private, paid support. They're places for individuals to assist each other publicly for the benefit of the entire community. This includes not only those directly involved in each conversation, but also those that might read th

Re: 1.6 Release Date

2025-01-16 Thread Michael Jumper
On 1/15/25 3:33 PM, Nick Couchman wrote: On Wed, Jan 15, 2025 at 4:48 PM Sean Hulbert wrote: __ Hello Nick, Will 1.6.0 have GPU support? No. FWIW, the upcoming 1.6.0 release *does* contain fairly significant performance improvements; it just doesn't use the GPU for this. Th

Re: Adjusting Telnet Options Outside of Compilation

2025-01-14 Thread Michael Jumper
On 1/14/25 8:06 AM, viktor_krumm wrote: I would have suggested this in Jira as a feature request, but I do not seem to have access. When using Guacamole Telnet client to access a remote host, it was duplicating echo. This was a simple fix in src/protocols/telnet/client.c line 78. I changed ec

Re: Historic usage

2025-01-13 Thread Michael Jumper
On 1/13/25 5:13 PM, Ali Zamani wrote: Hi, * I can see guacamole history tab in admin dashboard shows max 40 pages of 25 rows per page i.e. 1000 records. However, this is different in the actual database. Is this due to limitation applied in frontend design? No, it's a decision th

Re: Guacamole GUAC_AUTH Token

2025-01-10 Thread Michael Jumper
On 1/10/25 6:50 AM, Bernhard Schroll wrote: Hello, In the scope of a security audit, a possibility was found to take over the Guacamole session of a user by copying the Windows profile. The cause is the GUAC_AUTH token, which is located in the local storage of the browser, which is also obtain

Re: Guacamole behind Entra ID Application Proxy

2025-01-01 Thread Michael Jumper
On 12/30/24 1:27 PM, Jeff Johnson (IT) wrote: Has anyone had any success with putting Guacamole behind Entra ID (Azure) Application Proxy with Pre-Authentication?  I can not find anything on internet other than 1 X post claiming success but with no explanation of what was done. I installed Gu

Re: Update domain controller certificate in guacamole

2024-12-27 Thread Michael Jumper
On 12/27/24 4:21 PM, Yumi chan wrote: I updated the domain controller certificate and now ldap stops working on guacamole. How do I update the domain controller certificate in guacamole? It will depend on your Linux distribution and how things were installed, but ultimately: you will need to

Re: Question about callback URL with SAML configuration

2024-12-20 Thread Michael Jumper
On 12/18/24 8:21 AM, Devine, Harry (FAA) wrote: So my Tomcat server.xml, near the bottom, has:      reloadable="true" />     So long as your reverse proxy is always connecting from 127.0.0.1 (and never any other address, such as an IPv6 address), this looks fine.

Re: Question about callback URL with SAML configuration

2024-12-20 Thread Michael Jumper
On 12/18/24 12:20 PM, Devine, Harry (FAA) wrote: OK, our Okta team had to make some changes on their end to send the data back properly.  So now I can get in using our smart card authentication.  But this leads to 2 questions/issues that I still need help with: 1. How can I by-pass the SAML

Re: Misleading deprecation warning for POSTGRES env variables

2024-12-05 Thread Michael Jumper
On 12/2/24 6:05 AM, Borkowski, Dominik wrote: Hello, In one of our testbed environments we use guacamole with PostgreSQL authentication backend, on arm64 containers. Since we can’t cleanly build 1.5.5 anymore, due to alpine changes, I attempted to get the current/1.6.0 release going. Using e

Re: Building 1.6.0

2024-11-27 Thread Michael Jumper
On 11/27/24 7:06 AM, David Lomas wrote: Hi, I tried grabbing the staging/1.6.0 repo and building it, but after following the instructions in the README, supplemented by the notes from Vincent (I didn't see a reply to his question about adding this to the README): $ libtoolize --force $ aclo

Re: Connection groups load balancing error

2024-11-06 Thread Michael Jumper
On 11/6/24 10:39 AM, Nick Couchman wrote: On Wed, Nov 6, 2024 at 1:30 PM Steven Barnhart wrote: This has been our experience at least lately as well. The connection groups aren’t balancing. To say "the connection groups aren't balancing" is not accurate - they do balance, but there is cu

Re: Continued spam from "HostPapa"

2024-10-30 Thread Michael Jumper
o the ticket they sent me asking for info on how it got there but I won’t hold my breath. –Steve On Oct 30, 2024, at 1:52 PM, Michael Jumper wrote: Hello all, I've reached out to the ASF's Infra to try to chase down and eliminate the spam that's coming to dev@ subscribers from &q

Continued spam from "HostPapa"

2024-10-30 Thread Michael Jumper
Hello all, I've reached out to the ASF's Infra to try to chase down and eliminate the spam that's coming to dev@ subscribers from "HostPapa". My best guess for the moment is that either "HostPapa" is scraping our archives or an email address on the list is automatically forwarding received e

Re: [#11339581] Kerberos support in guacamole for SSO

2024-10-25 Thread Michael Jumper
tpapa? I did get the email back directly with my exact subject after emailing the dev list the Kerberos question. –Steve On Oct 25, 2024, at 1:26 PM, Michael Jumper wrote: There are no subscribers from the "hostpapasupport.com" domain on the dev@ list. Can you see from the raw conten

Re: Fwd: [#11339581] Kerberos support in guacamole for SSO

2024-10-25 Thread Michael Jumper
There are no subscribers from the "hostpapasupport.com" domain on the dev@ list. Can you see from the raw contents of the email whether they are emailing you directly without using the dev@ list? - Mike On 10/25/24 7:34 AM, Michael Jumper wrote: I have moderator privileges on this l

Re: Fwd: [#11339581] Kerberos support in guacamole for SSO

2024-10-25 Thread Michael Jumper
I have moderator privileges on this list - I'll take to see if I can find where these are coming from and remove the subscriber. - Mike On 10/25/24 7:14 AM, Steven Barnhart wrote: "Hostpapa" I received this automated e-mail after e-mailing the guacamole dev list. Please stop this soliciting.

Re: Possible Bug With Deprecated Environment Variables

2024-10-11 Thread Michael Jumper
I was able to reproduce the failure, and the problem was simply that "POSTGRESQL_USER" is not a deprecated variable. It's actually never been a variable that was ever accepted by a released version of the "guacamole/guacamole" image. The variables are: 1. "POSTGRES_USER" (deprecated, replaced

Re: SSH when a user needs to accept a login banner fails

2024-10-11 Thread Michael Jumper
On 10/8/24 3:25 PM, Paul Burrett wrote: Hi Ver 1.5.5 All setup and working, can SSH, RDP and VNC via html. But I have an issue when attempting to SSH to a system that requires you to *_accept_* the login banner. Session Opens I enter the username details, then the password Then the connec

Re: Unable to enable Apache Guacamole extensions through Docker Compose

2024-10-11 Thread Michael Jumper
On 10/10/24 7:37 AM, Sidney Ramos Neto wrote: Dear all, Unable to enable 'branding.jar' extension to customize/brand Guacamole login screen. When trying to deploy Guacamole through the compose file, the error */"cp: ‘/opt/guacamole/./extensions’: Operation not supported"/* is returned in th

Re: Download file from VM

2024-10-04 Thread Michael Jumper
On 10/4/24 7:45 AM, Nikolay Ganchev wrote: We have a custom client, but we use most of the features from the guacamole java client and we fully reuse the guacd server. We already have a file upload, from the user to the VM in the session, this is simple, however I could not find if there is a w

Please join us in testing "staging/1.6.0"

2024-10-03 Thread Michael Jumper
Hello fellow Guacamole enthusiasts, We recently merged a massive rewrite of the way guacamole-server handles rendering that *should* improve responsiveness, framerate, and bandwidth usage in several cases. The change specifically affects the VNC and RDP protocol support. If anyone is interes

Re: Printing PDF's

2024-09-20 Thread Michael Jumper
On 9/17/24 5:05 AM, Joseph Hargis wrote: It doesn’t look like I’m able to print PDF’s, when every I try it takes a really long time and most of the time it never completes.  Would it be because its trying to convert a PDF into a PDF to download? No, but it is trying to convert PostScript to

Re: Guacamole java.io.EOFException: null

2024-09-16 Thread Michael Jumper
On 9/16/24 8:31 AM, Nikolay Ganchev wrote: Hello, I am getting the following error: 2024-09-10T07:48:08.483Z ERROR 1 --- [remote-connection-gateway] [nio-8080-exec-8] s.r.g.c.GuacamoleWebSocketTunnelEndpoint : Error on session with id: 0 This error is coming from a third-party web applicat

Re: I want to know how to use Guacamole API to login with the new MFA OTP no.

2024-09-11 Thread Michael Jumper
The parameter for the TOTP code is "guac-totp", not "totp". You can actually see this in the REST responses from Guacamole. Responses to authentication attempts include a machine-readable list of the parameters expected under the circumstances. This is how Guacamole knows what fields to presen

Re: Keyboard mapping file - Danish layout

2024-09-11 Thread Michael Jumper
On 9/10/24 2:21 AM, Jacob Buus wrote: Hi guys, We're looking to add a few keyboard language mappings to the Guacamole -> RDP mappings (sent via the server-layout parameter) - starting with the Danish (da-dk) layout. The Danish keyboard layout for RDP was added in 1.1.0: https://guacamole.apa

Re: Issue with logging into a new test Guac server

2024-09-03 Thread Michael Jumper
On 9/3/24 11:29 AM, Devine, Harry (FAA) wrote: OK, I think I got it. I removed the symbolic link from /usr/share/tomcat/.guacamole/guacamole.properties, and copied that file to /usr/share/tomcat/.guacamole. I then put a symbolic link to that under /etc/guacamole, and made sure that everythin

Re: Issue with logging into a new test Guac server

2024-09-03 Thread Michael Jumper
On 9/3/24 11:21 AM, Devine, Harry (FAA) wrote: In between my initial message and your reply, I looked at a working system and it looked like some config files under /usr/share/tomcat/.guacamole weren't right, so I fixed that/cleaned that up. Now Guac starts better (has my custom branding, etc

Re: Issue with logging into a new test Guac server

2024-09-03 Thread Michael Jumper
On 9/3/24 10:46 AM, Devine, Harry (FAA) wrote: We have setup a test server on our development system to use for security testing and upgrades.  I have imported the MySQL database from a working system, so I know that the guacadmin password is correct and set, but I cannot login to this new syst

Re: RaspberryPI WayVNC

2024-09-02 Thread Michael Jumper
On 9/2/24 2:50 PM, Tobias Meier wrote: Hi I just  reinstalled my RaspberryPi with the latest bookworm Debian(raspbian) they now ship with wayland and also with wayvnc instead of realvnc. After setting it up like described here: https://www.raspberrypi.com/documentation/computers/remote-acce

Re: Ubuntu 24.04 RDP

2024-08-30 Thread Michael Jumper
On 8/30/24 1:10 PM, Nick Couchman wrote: On Fri, Aug 30, 2024 at 3:26 PM Randxm wrote: Workstation logs: Aug 30 15:20:23 warehouse-inventory gnome-remote-de[1507]: [RDP.CLIPRDR] Relieving CLIPRDR filename restriction Aug 30 15:20:23 warehouse-inventory gnome-remote

  1   2   3   4   5   6   7   8   9   10   >