Re: Cannot connect XRDP when migrate from 1.5.4 to 1.5.5

2024-04-26 Thread Santiago Garcia Mantinan
Hi! > yesterday I've upgraded my both Docker containers guacd and guacamole from > 1.5.4 to 1.5.5 Like Alessio says in his mail "RDP issues in Guacamole 1.5.5" from the 10th of April, it is related to audio, if you disable mic on the connection it will work. This happens not only on containers b

Re: How to get client IP address ?

2024-04-26 Thread Molina de la Iglesia, Manuel
Hello, After following the provided documentation, I cannot find a solution to get the real client IP. I have my application (PHP) on the same Guacamole Server, this application gets the user token: [image: image.png] The Tomcat log (after use the following pattern on the server.xml valve) I us

Re: RDP issues in Guacamole 1.5.5

2024-04-26 Thread Santiago Garcia Mantinan
Hi! I can confirm this behaviour also on our setup (connecting against a Debian xrdp 0.9.21.1). > We started fiddling with the connection settings in Guacamole of one of our > machines and noticed that if the "Enable audio input (microphone)" > (Parameters -> Device Redirection) option was flag

Re: How to get client IP address ?

2024-04-26 Thread Nick Couchman
On Fri, Apr 26, 2024 at 6:47 AM Molina de la Iglesia, Manuel wrote: > Hello, > > After following the provided documentation, I cannot find a solution to > get the real client IP. > > I have my application (PHP) on the same Guacamole Server, this application > gets the user token: > > [image: imag

Re: RDP issues in Guacamole 1.5.5

2024-04-26 Thread Nick Couchman
On Fri, Apr 26, 2024 at 6:50 AM Santiago Garcia Mantinan wrote: > Hi! > > I can confirm this behaviour also on our setup (connecting against a Debian > xrdp 0.9.21.1). > > > We started fiddling with the connection settings in Guacamole of one of > our machines and noticed that if the "Enable audi

Re: How to get client IP address ?

2024-04-26 Thread Sean Hulbert
This is easy, 1. Use a SIEM on the NGINX or Apache log files set your trigger to look for the api token. 2. Parse the log file directly using bash awk sed if fi else then pull the IP address 3. Create a new table in the Guacamole database then add a variable to the connection info page, ta

RE: Issue with VNC on new 1.5.4 installation

2024-04-26 Thread Devine, Harry (FAA)
Update: after some playing around and digging around, it appears as though the VNC connections work when we disable FIPS on the RHEL 8 Guacamole server. However, it is a security requirement set by our organization to have FIPS enabled, so how can we make this work with FIPS enabled? Thanks,

Re: How to get client IP address ?

2024-04-26 Thread Stephan von Krawczynski
You are aware that the talk is about a piece of information (IP) the basic service (indeed apache) has naturally. Your explanation alone shows how broken by design the thing is. You need a logfile, a database, a script and a layer 7 firewall for obtaining an IP? And then you call it easy. Gimme a b

Re: How to get client IP address ?

2024-04-26 Thread Sean Hulbert
Its easy when you know how! Guacamole is very well thought out Mike and team have done an exceptional job, however we customize guacamole to do what we want it to do, strip out the code not used, then harden it with FIPS140-2, I merely gave examples of what you could do, beside you should be u