Goncalo, Please make sure that you start a new thread for a new topic, and don't just reply to an existing message.
On Fri, Jul 19, 2024 at 6:14 AM Goncalo Rosa <goncalo.r...@v2s.us.invalid> wrote: > BTW: ignore_cert=true already set on the connection > > > > > I'm doubtful about this - the message clearly indicates that the connection is being rejected because the certificate is unknown or self-signed. Please verify that this is actually set for the connection that you're attempting to open. Also, the actual connection parameter within Guacamole Client should be "ignore-cert" (- vs. _). > > > *GONÇALO COELHO ROSA * > > *V2S Corporation* > > Delaware, US > > +351 919 937 124 <https://wa.me/+351919937124> > > goncalo.r...@v2s.us > > www.v2s.us |*F* <https://www.facebook.com/v2scorporation>|*in* > <https://www.linkedin.com/company/v2s-corporation/>| > > <https://www.v2s.us/> <https://www.linkedin.com/company/v2s-corporation/> > <https://www.facebook.com/v2scorporation> > > > > > > *From:* Goncalo Rosa <goncalo.r...@v2s.us.INVALID> > *Sent:* Friday, July 19, 2024 11:11 > *To:* user@guacamole.apache.org > *Subject:* Guacamole 1.5.5 RDP connection refused > > > > Hello, > > > > We have been using Guacamole 0.8 and works very well for years now. > > We decided to deploy our environment on last version 1.5.5 ad move into > it, since upgrade from 0.8 on a centos 7 to 1.5.5 it seemed crasy. > > > Wow, that's quite a leap :-). > We deployed a guacamole 1.5.5 on Debian 12 with Database mariadb and > active directory integration, using tomcat apache 9. > > > > When I am testing the recreated RDP connections I get the following on > daemon.log (this connection is against an old windows 2008 R2 Terminal > server that I can access pretty fine from guacamole 0.8): > > > > Jul 19 10:56:44 srvv2shqpgua02 guacd[2417]: Security mode: Negotiate (ANY) > > Jul 19 10:56:44 srvv2shqpgua02 guacd[2417]: Resize method: none > > Jul 19 10:56:44 srvv2shqpgua02 guacd[2417]: No clipboard line-ending > normalization specified. Defaulting to preserving the format of all line > endings. > > Jul 19 10:56:44 srvv2shqpgua02 guacd[2417]: User > "@943afc59-77be-4057-955e-5f7a39ae62ef" joined connection > "$a9b353b7-fcd3-4896-a810-15b506ccdc58" (1 users now present) > > Jul 19 10:56:44 srvv2shqpgua02 guacd[2417]: Loading keymap "base" > > Jul 19 10:56:44 srvv2shqpgua02 guacd[2417]: Loading keymap "en-us-qwerty" > > Jul 19 10:56:44 srvv2shqpgua02 guacd[2417]: RDP server closed/refused > connection: SSL/TLS connection failed (untrusted/self-signed certificate?) > > Jul 19 10:56:44 srvv2shqpgua02 guacd[2417]: User > "@943afc59-77be-4057-955e-5f7a39ae62ef" disconnected (0 users remain) > > Jul 19 10:56:44 srvv2shqpgua02 guacd[2417]: Last user of connection > "$a9b353b7-fcd3-4896-a810-15b506ccdc58" disconnected > > > This indicates the certificate is not trusted and Guacamole is closing the connection due to that, so double-check issues related to that - correct connection parameters, home directory configuration, etc. Also, you can try switching the security mode to "NLA" or "TLS" and see if that helps. -Nick >