On 4/8/25 8:16 AM, Raphaël CAUDRON wrote:
Hello everyone,
I'm currently testing several bastions, and Guacamole is one of them.
However, I haven’t been able to find a way to log administrative
actions, like renaming a connection or adding a user/group, together
with the user who performed the action. I attempted a few workarounds,
such as setting up a reverse proxy to log REST calls or adding SQL
triggers, but none of these methods were able to associate an action
with a user due to the lack of contextual information. I searched on
Reddit, https://issues.apache.org/ <https://issues.apache.org/>, and
even in the core APIs, but couldn’t locate any information on this. Does
anyone know if this is possible?
Automatic logging of these sorts of events is implemented on the
"staging/1.6.0" branch. Here's the relevant completed issue in JIRA:
https://issues.apache.org/jira/browse/GUACAMOLE-1224
This produces log messages of admin actions like:
'User "guacadmin" (authenticated by "postgresql") successfully created
connection "17" within "postgresql" (currently named "Fedora 40 (XRDP)"'
and:
'User "guacadmin" (authenticated by "postgresql") successfully created
user "mjumper" within "postgresql", setting their password'
etc.
- Mike
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org
