On Wed, Mar 26, 2025 at 11:36 AM Luca Marsella <marslu...@gmail.com> wrote:
> I am seeking assistance in configuring Apache Guacamole so that a specific > connection is automatically accessible to all users, both current and > future, without requiring any manual configuration when new users are added. > > Could you please advise on one of the following approaches? > > 1. *Public Connection Access:* Configuring the connection through the > graphical interface so that it is visible and accessible to every user, > irrespective of their group membership. > 2. *Default Group Assignment:* Setting up a default group for all > users (both existing and new), and configuring the connection so that it is > available to every member of that group. > > Your guidance on how to achieve this configuration would be greatly > appreciated. Thank you very much for your time and assistance. > While neither of these options are directly or immediately possible in Guacamole, there are a couple of options you could try to get effectively what you're going for: * If you're using an external authentication provider, like AD or one of the SSO modules, make sure that 1) the authentication module is passing through group membership information, and 2) assign permissions to one of the groups that all the users are a part of. As an example, in an environment backed by Active Directory, all users are part of the "Domain Users" group, so if you create this group in Guacamole and assign the permissions for a particular connection to that group, users will essentially "automatically" have access. * If you're using authentication within Guacamole, it isn't really automatic, but you can do much the same thing - create a group and make sure every user is a member of that group, and assign permissions to that group. That said, what you're looking for has already been proposed in at least one feature request, just not yet implemented: https://issues.apache.org/jira/browse/GUACAMOLE-1487 -Nick
