Re: Connecting to SSH with MFA from Guacamole

2025-07-20 Thread Jon Gerdes
On Sun, 2025-07-20 at 21:38 +, Gilmar Brasil Junior wrote: Hello everyone! I have Guacamole 1.5.5 with some SSH connections set up. I have used libpam-google-authenticator in order to have MFA for SSHing into my Linux Servers. When I try to connect to them I'm disconnect right after typing my

Re: Upgrading 1.5.5 to 1.6.0 - JDBC SQL error

2025-07-09 Thread Jon Gerdes
&imprintMessageId=fd556f12-666e-4795-a972-c74a896e9824> | tim.sch...@cityofls.net<mailto:tim.sch...@cityofls.net> [https://cityofls.net/Portals/0/Images/email-logos/SignatureLogo.png] From: Jon Gerdes mailto:gerd...@blueloop.net>> Sent: Tuesday, July 8, 2025 7:05 PM To: user

Re: Upgrading 1.5.5 to 1.6.0 - JDBC SQL error

2025-07-08 Thread Jon Gerdes
Tim When you say native install, do you mean compiled from source code? Those errors do look like like failed schema updates. Are you sure you updated the schema properly? I use MariaDB and Postgres so I cannot help with MS SQL too much. Are you absolutely sure that the schema is correct? C

Re: [ANNOUNCE] Apache Guacamole 1.6.0 released

2025-06-25 Thread Jon Gerdes
e monitors > > Thank you > > Jay / ServerMatter > > > Sent from my iPhone > > > On Jun 24, 2025, at 4:12 PM, Jon Gerdes > > wrote: > > > > All > > > > Where the hell are my manners! > > > > Thank you very much for t

Re: [ANNOUNCE] Apache Guacamole 1.6.0 released

2025-06-24 Thread Jon Gerdes
All Where the hell are my manners! Thank you very much for this release.   Your approach to software quality is second to none. Please keep it like that. It means that I can reasonably and confidently run pre- release and patch in things like the multi screen stuff and expect it to work. I re

Re: RDP Connectivity over IPv6 in Apache Guacamole

2025-06-19 Thread Jon Gerdes
Yes, you need a quad A record in DNS for IPv6. From your Guacamole box you should be able to do: $ dig @ip.of.my.dns.server name.of.my.rds.box ... and get an answer. Substitute the IP address of your DNS server or its name and the name of your RDS box. I have no idea if Guac actually su

Re: Can't establish RDP NLA connections

2025-06-11 Thread Jon Gerdes
On a Windows box with mstsc, when you connect to a non domain joined machine you routinely set the domain to .\ which means "my local machine name". Try setting domain to the remote box's name. There is always a domain, or strictly speaking, a realm. If the remote name fails, try the local box

Re: Web interface connection

2025-05-28 Thread Jon Gerdes
On Wed, 2025-05-28 at 06:40 +0200, Philip Hoflack wrote: then what's the next best, most guacamole like solution Philip The most Guacamole solution I can think of: Create a "super" reverse proxy. I am getting rather good results with Apache and mod_proxy, rewrite, headers etc Map each websit

Re: Compatibility Question: Guacamole Client 1.5.3 with Guacamole Server 1.6.0

2025-05-21 Thread Jon Gerdes
Dilip I recommend that you at least advance your Guac Client to 1.5.5 - that is the currently supported (as far as the word support can be applied here) version. You can run the Guac client 1.5.5 against a 1.6 pre release server but unless you have a burning need to do so then don't. If you

Re: Now up for final testing: 1.6.0-RC1

2025-05-07 Thread Jon Gerdes
On Tue, 2025-05-06 at 22:07 -0400, Nick Couchman wrote: On Tue, May 6, 2025 at 9:34 PM Jon Gerdes mailto:gerd...@blueloop.net>> wrote: On Sun, 2025-05-04 at 06:43 -0400, Nick Couchman wrote: On Sun, May 4, 2025 at 1:55 AM Jay Lepore mailto:j...@compumatter.com>> wrote: Mult

Re: Now up for final testing: 1.6.0-RC1

2025-05-06 Thread Jon Gerdes
On Sun, 2025-05-04 at 06:43 -0400, Nick Couchman wrote: On Sun, May 4, 2025 at 1:55 AM Jay Lepore mailto:j...@compumatter.com>> wrote: Multiple monitor capability yet ? Sent from my iPhone No, multiple monitor support is not part of release 1.6.0. That said, some interesting work has been done

Re: Extending the functionality of Guacamole client web front end.

2025-04-17 Thread Jon Gerdes
Hello Would you mind supplying some more details, starting with the documentation for your client devices (whatever they are). Cheers Jon On Thu, 2025-04-17 at 12:03 +1000, Mackie Gippets wrote: Hi, We are currently running our application through RDP via guacamole. Upon loading, this appli

Re: Guacamole server 1.6.0 release date

2025-02-21 Thread Jon Gerdes
All I'm already deploying guacd 1.6.0 in favour of 1.5.5 but keeping the 1.5.5 client for now. I get a fix for an audio issue that 1.55 introduced and Ubuntu RDP sessions work (web sockets or something) I have locally 10 users and well there is an international shipping company with 10,000 od

Re: Problems with LDAPS authentication

2025-02-21 Thread Jon Gerdes
Krzysztof The fundamental error you seem to have is "PROTOCOL_ERROR" which is not very helpful! I note that your ldapsearch command includes the CA certificate at the end instead of relying on the system trust store. ldapsearch and Java use separate trust stores but I think that Ubuntu sorts

Re: Latency with Guacamole/guacd

2025-01-21 Thread Jon Gerdes
The best tests of latency are audio and streaming video. Consider clicking on a web page or turning a physical book page - you put up with and mostly don't notice the latency. Its part of the "experience" (within reason). Now consider latency heavy conversations on a phone call or a "buffering

Re:

2025-01-02 Thread Jon Gerdes
Roman What are you trying to do? What have you tried, so far? Cheers Jon On Thu, 2025-01-02 at 09:57 +, Skyrpan, Roman wrote: Hello, Has anyone dealt with the interaction between Apache Guacamole and YubiKey? Specifically, how to properly configure their interaction so that it works. Apac

Re: Question about callback URL with SAML configuration

2024-12-18 Thread Jon Gerdes
a difference. But what do I need to change for the Apache ProxyPass lines in forward.conf? I also see some references to the WebSocket Tunnel, which I don’t have in Apache at the moment. Do I need that part also? Thanks, Harry From: Jon Gerdes Sent: Wednesday, December 18, 2024 10:46

Re: Question about callback URL with SAML configuration

2024-12-18 Thread Jon Gerdes
Harry I had a similar issue recently. I "fixed" that by making the Guacamole WAR the root of the Tomcat server. Add a Context section similar to this: inside the Tomcat server.xml and restart it. You will also need to change the ProxyPass lines in Apache. Cheers Jon On Wed,

Re: Please join us in testing "staging/1.6.0"

2024-10-18 Thread Jon Gerdes
On Fri, 2024-10-18 at 09:48 -0400, Nick Couchman wrote: On Fri, Oct 18, 2024 at 9:40 AM Brad Turnbough mailto:bturnbo...@backlundinvestment.com>> wrote: Tomcat 9 isnt supported on 24.04 any longer, so you'll have to either install from source, or install from the 22.x repos. Tomcat 10 isn't sup

Re: Please join us in testing "staging/1.6.0"

2024-10-18 Thread Jon Gerdes
On Thu, 2024-10-03 at 10:27 -0700, Michael Jumper wrote: > Hello fellow Guacamole enthusiasts, > > If anyone is interested in testing, please do. The branch containing > these changes is "staging/1.6.0": > > https://github.com/apache/guacamole-server/tree/staging/1.6.0 > Is there a list of hea

Re: Viewing users who have access when using LDAP user account

2024-10-09 Thread Jon Gerdes
On Wed, 2024-10-09 at 23:01 +, Jon Gerdes wrote: On Wed, 2024-10-09 at 21:12 +, Paul Burrett wrote: Hi Have enabled ldap integration and it works great – what I want to know is: If you login with an admin user who has been provisioned via LDAP - Is there a way to see who has been

Re: Viewing users who have access when using LDAP user account

2024-10-09 Thread Jon Gerdes
On Wed, 2024-10-09 at 21:12 +, Paul Burrett wrote: Hi Have enabled ldap integration and it works great – what I want to know is: If you login with an admin user who has been provisioned via LDAP - Is there a way to see who has been provisioned / has access? If you sort the Users by Last act

Re: Vulnerabilities in Tomcat contained guacamole/guacamole:1.5.5 Docker image

2024-09-17 Thread Jon Gerdes
xy. You'll notice I have published "private information" ie a username and password, on the internet - doesn't matter - they are in HIBP already ( https://haveibeenpwned.com/Passwords ) ... and incorrect. Cheers Jon Gerdes PS Download the .pdf rather than use the Github view

Re: Ubuntu 24.04 RDP

2024-08-29 Thread Jon Gerdes
hed is the debug log. I hope there is nothing in the logs that will doxx me. I appreciate the help on this. I have a few people that rely on this Guac server I've set up. On Wednesday, August 28th, 2024 at 5:34 AM, Jon Gerdes wrote: On Tue, 2024-08-27 at 21:31 +, Randxm wrote: Hello

Re: Ubuntu 24.04 RDP

2024-08-28 Thread Jon Gerdes
On Tue, 2024-08-27 at 21:31 +, Randxm wrote: Hello, I'm having a very hard time figuring out how to get Guac to allow me to remote to an Ubuntu 24.04 desktop. I just installed 24.04 on a workstation and enabled desktop sharing and remote control. I see the username and password. I set all o

Re: Resetting admins TOTP

2024-07-15 Thread Jon Gerdes
On Sun, 2024-07-14 at 17:42 +, mic...@gawronskikot.com.INVALID wrote: Hi. As i decided to include a 3rd yubikey, im looking into a way of resetting my existing admin's TOTP (its not lost, not compromised, i still have access to the admin account) in Apache Guacamole. Unfortunately, while its

Re: Page Title

2024-06-06 Thread Jon Gerdes
Dirk This extension: https://github.com/Zer0CoolX/guacamole-customize-loginscreen-extension shows how to customise the login screen. The .jar file is just a ZIP file with .zip -> .jar on the end. Cheers Jon On Thu, 2024-06-06 at 06:02 +, Dirk Laurenz (Fujitsu) wrote: Hi, i want to know

RADIUS - is it still relevant?

2024-05-29 Thread Jon Gerdes
Dear all Within a recent thread hereabouts: "RADIUS and LDAP", Nick C explained to me that RADIUS support is likely to die out gradually within Guacamole because the library in use - jradius - is seemingly frozen in time.  A quick poke around: https://github.com/coova/jradius/ shows it is seemi

Re: RADIUS and LDAP

2024-05-28 Thread Jon Gerdes
On Tue, 2024-05-28 at 08:22 -0400, Nick Couchman wrote: On Tue, May 28, 2024 at 5:11 AM Jon Gerdes mailto:gerd...@blueloop.net>> wrote: Dear all I am trying out various authentication mechanisms on a test box. TOTP was a doddle to set up with LDAP to an Active Directory LDAP source. I then

RADIUS and LDAP

2024-05-28 Thread Jon Gerdes
Dear all I am trying out various authentication mechanisms on a test box. TOTP was a doddle to set up with LDAP to an Active Directory LDAP source. I then moved on to RADIUS as a second factor. I am using PrivacyIDEA to drive a FreeRADIUS with which I can use radclient to authenticate successfull

Re: Help with Guacamole Install

2024-04-15 Thread Jon Gerdes
I agree - follow the official docs. They are quite detailed and will get you a running system eventually 8) That guide you links to seems to confuse using init and systemd - Debian and Ubuntu are mostly systemd based. Find my fairly recent post in this list entitled "Re: Why did I not install

Re: Why did I not install guacd as systemd

2024-04-12 Thread Jon Gerdes
Example installation on a systemd based box, eg Debian/Ubuntu: # ./configure --with-systemd-dir=/etc/systemd/system --prefix=/opt/guacamole-server # make # make install After installation: # systemctrl edit guacd Then you can update the stock unit file. Here I have fixed the path to the e

Re: Issue with Windows 10 RDP

2024-04-04 Thread Jon Gerdes
Dear all Whatever that random internet link says, I have quite literally set up a Guacamole connection to a Windows 2022 server ... today. Please don't fiddle with your registry unless you now what you are doing - you will probably end up less secure and without a solution. If I had to guess,

Guacamole docker image and CA certificates

2024-04-04 Thread Jon Gerdes
Dear list I have a containerised Guacamole instance using docker compose.  I like the docker approach for its relative simplicity and reproducibility. I want to use LDAPS or STARTTLS for authentication against an LDAP directory (AD in this case).  This means that I must inject Certificate Autho