Cannot connect using VNC

["Devine, Harry (FAA)" <ha...@faa.gov.INVALID>]

We have Guacamole 1.2.0 installed.  We configured a RHEL 7 server using tigervnc server 1.8.0 and have it running/listening on port 5901.  We configured the software firewall to allow 5901 through, but when we configure and run the connection within Guacamole, it fails and we see the following in /var/log/messages:

Oct 21 12:53:23 access guacd[44123]: Creating new client for protocol "vnc"
Oct 21 12:53:23 access guacd[44123]: Connection ID is "$0d798978-8f96-4367-911d-00180ac68359"
Oct 21 12:53:23 access guacd[21557]: Cursor rendering: local
Oct 21 12:53:23 access guacd[21557]: User "@2fb9cc66-a878-4592-8318-0f52eb913139" joined connection "$0d798978-8f96-4367-911d-00180ac68359" (1 users now present)
Oct 21 12:53:23 access server: 12:53:23.394 [http-bio-8080-exec-727] INFO  o.a.g.tunnel.TunnelRequestService - User "harry.devine" connected to connection "814".
Oct 21 12:53:23 access server: 12:53:23.396 [http-bio-8080-exec-727] INFO  o.a.g.t.h.RestrictedGuacamoleHTTPTunnelServlet - Using HTTP tunnel (not WebSocket). Performance may be sub-optimal.
Oct 21 12:53:23 access guacd[21557]: VNC server supports protocol version 3.8 (viewer 3.8)
Oct 21 12:53:23 access guacd[21557]: We have 2 security types to read
Oct 21 12:53:23 access guacd[21557]: 0) Received security type 19
Oct 21 12:53:23 access guacd[21557]: Selecting security type 19 (0/2 in the list)
Oct 21 12:53:23 access guacd[21557]: 1) Received security type 2
Oct 21 12:53:23 access guacd[21557]: Selected Security Scheme 19
Oct 21 12:53:23 access guacd[21557]: Failed to initialized GnuTLS: Error in public key generation..
Oct 21 12:53:23 access guacd[21557]: Unable to connect to VNC server.
Oct 21 12:53:23 access guacd[21557]: User "@2fb9cc66-a878-4592-8318-0f52eb913139" disconnected (0 users remain)
Oct 21 12:53:23 access guacd[21557]: Last user of connection "$0d798978-8f96-4367-911d-00180ac68359" disconnected
Oct 21 12:53:28 access guacd[44123]: Connection "$0d798978-8f96-4367-911d-00180ac68359" removed.
Oct 21 12:53:38 access server: 12:53:38.562 [http-bio-8080-exec-727] INFO  o.a.g.tunnel.TunnelRequestService - User "harry.devine" disconnected from connection "814". Duration: 15166 milliseconds
Oct 21 12:53:38 access server: 12:53:38.653 [http-bio-8080-exec-727] ERROR o.a.g.s.GuacamoleHTTPTunnelServlet - HTTP tunnel request failed: Connection to guacd timed out.
Oct 21 12:53:38 access server: 12:53:38.654 [http-bio-8080-exec-738] INFO  o.a.g.tunnel.TunnelRequestService - User "harry.devine" disconnected from connection "814". Duration: 15258 milliseconds

There are other VNC connections on this Guacamole installation connecting to some Solaris servers and those work fine.  Any ideas on how to fix this?  We have some users that really need to get in via VNC and this is holding them up.

Thanks,
Harry

Harry Devine
DOT/FAA/AJM-2431
Secure-OSE Administrator
Red Hat Certified System Administrator (RHCSA)
harry.devine@faa.gov
(609)485-4218
Building 300, 3rd floor, Column L20 (3L20)