You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@guacamole.apache.org by Johnnie W Adams <jx...@ualr.edu> on 2023/02/20 19:47:46 UTC

Guacamole white-screening behind F5 SSL off-loading

Hi, folks,

     We've got our instance of guacamole 1.4.0 behind an F5 i2600, which
does our SSL work for us. We don't have any interest in running SSL on the
application instance itself. We are occasionally getting the White Screen
of Delay as described under "No graphics appear" in the
Troubleshooting section of the friendly manual.

     Has anyone else seen this happen? If so, did you adjust your iApp on
the F5? If so, how?

Thanks,

     John A

-- 
John Adams
Senior Linux/Middleware Administrator  | Information Technology Services
+1-501-916-3010 | jxadams@ualr.edu | http://ualr.edu/itservices
*UA Little Rock*

Reminder:  IT Services will never ask for your password over the phone or
in an email. Always be suspicious of requests for personal information that
come via email, even from known contacts.  For more information or to
report suspicious email, visit IT Security
<http://ualr.edu/itservices/security/>.

Re: Guacamole white-screening behind F5 SSL off-loading

Posted by Johnnie W Adams <jx...@ualr.edu>.
Hi, Mike and all,

     I finally got a screenshot of the "white screen", which turns out to
contain an error message. I've attached it, but in case it doesn't come
through, here's the text:

ERROR (with the little triangle exclamation point icon)
An error has occurred and this action cannot be completed. If the problem
persists, please notify your system administrator or check your system logs.

Thanks,

     John A

On Mon, Feb 20, 2023 at 2:11 PM Michael Jumper <mj...@apache.org> wrote:

> In all cases, first step would be to check your browser's error console.
> An entirely white screen indicates that the browser is failing to load at
> least part of the app (enough that it can't operate at all), and the
> console should show what's happening.
>
> - Mike
>
> On Mon, Feb 20, 2023, 12:07 PM Johnnie W Adams <jx...@ualr.edu> wrote:
>
>> Hi, Mike,
>>
>>      If I can catch it doing this--it's an intermittent issue and it
>> hasn't caught me--I'll do so. I'm pretty sure our SSL termination isn't
>> injecting CSP rules. What else might I check?
>>
>> Thanks,
>>
>>      John A
>>
>> On Mon, Feb 20, 2023 at 1:54 PM Michael Jumper <mj...@apache.org>
>> wrote:
>>
>>> On Mon, Feb 20, 2023, 11:48 AM Johnnie W Adams <jx...@ualr.edu> wrote:
>>>
>>>> Hi, folks,
>>>>
>>>>      We've got our instance of guacamole 1.4.0 behind an F5 i2600,
>>>> which does our SSL work for us. We don't have any interest in running SSL
>>>> on the application instance itself. We are occasionally getting the White
>>>> Screen of Delay as described under "No graphics appear" in the
>>>> Troubleshooting section of the friendly manual.
>>>>
>>>>      Has anyone else seen this happen? If so, did you adjust your iApp
>>>> on the F5? If so, how?
>>>>
>>>
>>> White screen wouldn't be the lack of graphics referred to in the manual.
>>> This sounds like the JS or other low-level resources for the application
>>> isn't loading, possibly blocked by your browser due to CSP rules injected
>>> by your SSL termination.
>>>
>>> Check the error console of your browser to see if it's refusing to load
>>> things.
>>>
>>> - Mike
>>>
>>>
>>
>> --
>> John Adams
>> Senior Linux/Middleware Administrator  | Information Technology Services
>> +1-501-916-3010 | jxadams@ualr.edu | http://ualr.edu/itservices
>> *UA Little Rock*
>>
>> Reminder:  IT Services will never ask for your password over the phone or
>> in an email. Always be suspicious of requests for personal information that
>> come via email, even from known contacts.  For more information or to
>> report suspicious email, visit IT Security
>> <http://ualr.edu/itservices/security/>.
>>
>

-- 
John Adams
Senior Linux/Middleware Administrator  | Information Technology Services
+1-501-916-3010 | jxadams@ualr.edu | http://ualr.edu/itservices
*UA Little Rock*

Reminder:  IT Services will never ask for your password over the phone or
in an email. Always be suspicious of requests for personal information that
come via email, even from known contacts.  For more information or to
report suspicious email, visit IT Security
<http://ualr.edu/itservices/security/>.

Re: Guacamole white-screening behind F5 SSL off-loading

Posted by Michael Jumper <mj...@apache.org>.
In all cases, first step would be to check your browser's error console. An
entirely white screen indicates that the browser is failing to load at
least part of the app (enough that it can't operate at all), and the
console should show what's happening.

- Mike

On Mon, Feb 20, 2023, 12:07 PM Johnnie W Adams <jx...@ualr.edu> wrote:

> Hi, Mike,
>
>      If I can catch it doing this--it's an intermittent issue and it
> hasn't caught me--I'll do so. I'm pretty sure our SSL termination isn't
> injecting CSP rules. What else might I check?
>
> Thanks,
>
>      John A
>
> On Mon, Feb 20, 2023 at 1:54 PM Michael Jumper <mj...@apache.org> wrote:
>
>> On Mon, Feb 20, 2023, 11:48 AM Johnnie W Adams <jx...@ualr.edu> wrote:
>>
>>> Hi, folks,
>>>
>>>      We've got our instance of guacamole 1.4.0 behind an F5 i2600, which
>>> does our SSL work for us. We don't have any interest in running SSL on the
>>> application instance itself. We are occasionally getting the White Screen
>>> of Delay as described under "No graphics appear" in the
>>> Troubleshooting section of the friendly manual.
>>>
>>>      Has anyone else seen this happen? If so, did you adjust your iApp
>>> on the F5? If so, how?
>>>
>>
>> White screen wouldn't be the lack of graphics referred to in the manual.
>> This sounds like the JS or other low-level resources for the application
>> isn't loading, possibly blocked by your browser due to CSP rules injected
>> by your SSL termination.
>>
>> Check the error console of your browser to see if it's refusing to load
>> things.
>>
>> - Mike
>>
>>
>
> --
> John Adams
> Senior Linux/Middleware Administrator  | Information Technology Services
> +1-501-916-3010 | jxadams@ualr.edu | http://ualr.edu/itservices
> *UA Little Rock*
>
> Reminder:  IT Services will never ask for your password over the phone or
> in an email. Always be suspicious of requests for personal information that
> come via email, even from known contacts.  For more information or to
> report suspicious email, visit IT Security
> <http://ualr.edu/itservices/security/>.
>

Re: Guacamole white-screening behind F5 SSL off-loading

Posted by Johnnie W Adams <jx...@ualr.edu>.
Hi, Mike,

     If I can catch it doing this--it's an intermittent issue and it hasn't
caught me--I'll do so. I'm pretty sure our SSL termination isn't injecting
CSP rules. What else might I check?

Thanks,

     John A

On Mon, Feb 20, 2023 at 1:54 PM Michael Jumper <mj...@apache.org> wrote:

> On Mon, Feb 20, 2023, 11:48 AM Johnnie W Adams <jx...@ualr.edu> wrote:
>
>> Hi, folks,
>>
>>      We've got our instance of guacamole 1.4.0 behind an F5 i2600, which
>> does our SSL work for us. We don't have any interest in running SSL on the
>> application instance itself. We are occasionally getting the White Screen
>> of Delay as described under "No graphics appear" in the
>> Troubleshooting section of the friendly manual.
>>
>>      Has anyone else seen this happen? If so, did you adjust your iApp on
>> the F5? If so, how?
>>
>
> White screen wouldn't be the lack of graphics referred to in the manual.
> This sounds like the JS or other low-level resources for the application
> isn't loading, possibly blocked by your browser due to CSP rules injected
> by your SSL termination.
>
> Check the error console of your browser to see if it's refusing to load
> things.
>
> - Mike
>
>

-- 
John Adams
Senior Linux/Middleware Administrator  | Information Technology Services
+1-501-916-3010 | jxadams@ualr.edu | http://ualr.edu/itservices
*UA Little Rock*

Reminder:  IT Services will never ask for your password over the phone or
in an email. Always be suspicious of requests for personal information that
come via email, even from known contacts.  For more information or to
report suspicious email, visit IT Security
<http://ualr.edu/itservices/security/>.

Re: Guacamole white-screening behind F5 SSL off-loading

Posted by Michael Jumper <mj...@apache.org>.
On Mon, Feb 20, 2023, 11:48 AM Johnnie W Adams <jx...@ualr.edu> wrote:

> Hi, folks,
>
>      We've got our instance of guacamole 1.4.0 behind an F5 i2600, which
> does our SSL work for us. We don't have any interest in running SSL on the
> application instance itself. We are occasionally getting the White Screen
> of Delay as described under "No graphics appear" in the
> Troubleshooting section of the friendly manual.
>
>      Has anyone else seen this happen? If so, did you adjust your iApp on
> the F5? If so, how?
>

White screen wouldn't be the lack of graphics referred to in the manual.
This sounds like the JS or other low-level resources for the application
isn't loading, possibly blocked by your browser due to CSP rules injected
by your SSL termination.

Check the error console of your browser to see if it's refusing to load
things.

- Mike