You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@guacamole.apache.org by Shigeki Sawamura <sh...@whitestars.ne.jp> on 2023/04/13 06:26:24 UTC

1.5.0 SAML, Permission Denied.

Hello.

Currently, 1.4.0 is running with Azure + Guacamole SSO SAML.

I tried setting 1.5.0 and 1.5.1 with the same procedure and no changes on the Azure side, but the management menu is not displayed.

1.4.0 + Azure SSO SAML
    no problem

1.5.0 or 1.5.1 + Azure SSO SAML
    DEBUG o.a.g.r.auth.AuthenticationService - Login was successful for user "[USERNAME]".
    DEBUG o.a.g.rest.RESTExceptionMapper - Client request rejected: Permission Denied.
    DEBUG o.a.g.rest.RESTExceptionMapper - Client request rejected: Session not associated with authentication provider "saml".

1.5.0 + MySQL Auth
    no problem

$ ls -la /etc/guacamole/lib/
lrwxrwxrwx 1 root root 47 Apr 13 15:12 mysql-connector-java-8.0.25.jar -> /usr/share/java/mysql-connector-java-8.0.25.jar

$ ls -la /etc/guacamole/extensions/
-rw-r--r-- 1 tomcat tomcat 10813443 Apr 12 09:36 guacamole-auth-jdbc-mysql-1.5.1.jar.org
-rw-r--r-- 1 tomcat tomcat 10452113 Apr 13 14:40 guacamole-auth-sso-saml-1.5.1.jar

$ ls -la /var/lib/tomcat9/lib/
lrwxrwxrwx 1 root root 47 Apr 13 15:12 mysql-connector-java-8.0.25.jar -> /usr/share/java/mysql-connector-java-8.0.25.jar

I know that Permission Denied is the problem, but I don't know where the error is occurring.
If you put 1.4.0 as it is, it will work without problems.

Can you give me some advice?

Best Regards,

---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org


Re: 1.5.0 SAML, Permission Denied.

Posted by Shigeki Sawamura <sh...@whitestars.ne.jp>.
Hello.

Sorry, Reinstall Ubuntu 20.04.6 LTS + Guacamole 1.5.1 no probrem!
I will check the details.

Best regards,


On 2023/04/13 木 午後 03:26, Shigeki Sawamura wrote:
> Hello.
> 
> Currently, 1.4.0 is running with Azure + Guacamole SSO SAML.
> 
> I tried setting 1.5.0 and 1.5.1 with the same procedure and no changes on the Azure side, but the management menu is not displayed.
> 
> 1.4.0 + Azure SSO SAML
>     no problem
> 
> 1.5.0 or 1.5.1 + Azure SSO SAML
>     DEBUG o.a.g.r.auth.AuthenticationService - Login was successful for user "[USERNAME]".
>     DEBUG o.a.g.rest.RESTExceptionMapper - Client request rejected: Permission Denied.
>     DEBUG o.a.g.rest.RESTExceptionMapper - Client request rejected: Session not associated with authentication provider "saml".
> 
> 1.5.0 + MySQL Auth
>     no problem
> 
> $ ls -la /etc/guacamole/lib/
> lrwxrwxrwx 1 root root 47 Apr 13 15:12 mysql-connector-java-8.0.25.jar -> /usr/share/java/mysql-connector-java-8.0.25.jar
> 
> $ ls -la /etc/guacamole/extensions/
> -rw-r--r-- 1 tomcat tomcat 10813443 Apr 12 09:36 guacamole-auth-jdbc-mysql-1.5.1.jar.org
> -rw-r--r-- 1 tomcat tomcat 10452113 Apr 13 14:40 guacamole-auth-sso-saml-1.5.1.jar
> 
> $ ls -la /var/lib/tomcat9/lib/
> lrwxrwxrwx 1 root root 47 Apr 13 15:12 mysql-connector-java-8.0.25.jar -> /usr/share/java/mysql-connector-java-8.0.25.jar
> 
> I know that Permission Denied is the problem, but I don't know where the error is occurring.
> If you put 1.4.0 as it is, it will work without problems.
> 
> Can you give me some advice?
> 
> Best Regards,
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
> For additional commands, e-mail: user-help@guacamole.apache.org
> 
> 

---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org