RE : ssh problem

[hugues blakime]

Hi Nick, thank you for your answer. Let me explain better: I set up a connection and I allowed a user to access this connection only. In my tests, I tried from this connection to make another connection to another server on the network and it worked. It is for this reason that I ask if there is a way with guacamole to prevent users from accessing other servers like this. Thanks again Nick. Hugues     Envoyé à partir de Courrier pour Windows   De : Nick Couchman Envoyé le :jeudi 8 août 2024 11:55 À : user@guacamole.apache.org Objet :Re: ssh problem   On Thu, Aug 8, 2024 at 7:48 AM hugues blakime <huguesblak...@gmail.com> wrote:   Hello, please I have a small problem would it be possible to prevent a user from making an SSH connection to another connection to which he should not see access via guacamole? Envoyé à partir de Courrier pour Windows     I'm not sure I fully understand, and you may need to explain a bit more what you mean by this, as your question isn't clear.   Depending on how you configure Guacamole, and what privileges you give to users, Guacamole allows you to control access to the connections and limit what connections users can access. However, if your question is, if a user connects to system via SSH from Guacamole, and then uses that SSH connection to then make another SSH connection to a different system, and you're trying to prevent that second connection from happening, the answer is, no, Guacamole cannot help you secure the remote systems to which users are connecting - you will need to apply that security on those systems. In the situation that I think you're asking about, you'd need to do one or both of the following: * Disable the SSH client on the systems to which Guacamole is connecting, to prevent further SSH connections. * Use the host-level firewall on the systems to either a) prevent inbound SSH connections from anywhere except the Guacamole host, or b) prevent outbound SSH connections from those hosts.   -Nick   --------------------------------------------------------------------- To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org For additional commands, e-mail: user-h...@guacamole.apache.org