On Tue, Nov 28, 2023 at 8:24 AM Stefan Müller <[email protected]> wrote:
> in the guacd log, i found only something like: > > …. 13:11:28.898 [http-nio-8080-exec-2] DEBUG > o.a.g.t.StreamInterceptingTunnel - Intercepting input stream #1 of tunnel > "d70b3229-5cd5-4910-8502-5b8e0dea86df". > > …. 13:11:28.915 [http-nio-8080-exec-2] DEBUG > o.a.g.t.StreamInterceptingTunnel - Intercepted input stream #1 of tunnel > "d70b3229-5cd5-4910-8502-5b8e0dea86df" ended. > > > > but the tunnel id doesn't really help and there is no info what exactly > input stream #1 means. > > i mean something like "user x (username) uploads file y (filename) to > destination z (host)". > > > You're looking in the Tomcat logs - you might also check the guacd logs, which generally log to your syslog facility (journald/journalctl, /var/log/messages, etc.). > what i meant by the 2nd question was: > > i would like to allow downloads but not uploads or vice versa, only > one-sided, not bidirectional. > > > > for example, something like: > > > > "enable-drive": "true", > > "deny-drive-uploads": "true" > > > > Or > > > > "enable-drive": "true", > > "only-allow-drive-downloads": "true" > > > Yes, that's what I said - this is already possible. In the following section, look at the "disable-upload" and "disable-download" options: https://guacamole.apache.org/doc/gug/configuring-guacamole.html#device-redirection and in this section, "sftp-disable-download" and "sftp-disable-upload": https://guacamole.apache.org/doc/gug/configuring-guacamole.html#sftp This means that you can disable either uploads, or download, or both, in either RDP drive redirection or SFTP. What you're wanting to do is absolutely possible. -Nick
