You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@guacamole.apache.org by "Devine, Harry (FAA)" <ha...@faa.gov.INVALID> on 2024/04/24 19:11:47 UTC
Issue with VNC on new 1.5.4 installation
We are trying to upgrade all of our servers to at least RHEL 8 since RHEL 7 will no longer be supported after June 30. One of our Guacamole servers on RHEL 7 is running 1.1.0, and the VNC connections work well. On the new server we created on RHEL 8, with Guacamole 1.5.4, VNC immediately fails. The /var/log/messages shows:
Apr 24 15:08:26 tfdm-access server[1705]: 15:08:26.232 [http-nio-8080-exec-4] INFO o.a.g.r.auth.AuthenticationService - User "guacadmin" successfully authenticated from [172.26.46.176, 127.0.0.1].
Apr 24 15:08:36 tfdm-access guacd[15105]: Creating new client for protocol "vnc"
Apr 24 15:08:36 tfdm-access guacd[15105]: Connection ID is "$6ae02db1-b8b3-4c4d-84ac-4978896156b3"
Apr 24 15:08:36 tfdm-access guacd[310149]: Cursor rendering: local
Apr 24 15:08:36 tfdm-access guacd[310149]: User "@be3d0de5-cbdc-420e-9e8f-c2554fdd21c6" joined connection "$6ae02db1-b8b3-4c4d-84ac-4978896156b3" (1 users now present)
Apr 24 15:08:36 tfdm-access server[1705]: 15:08:36.844 [http-nio-8080-exec-8] INFO o.a.g.tunnel.TunnelRequestService - User "guacadmin" connected to connection "237".
Apr 24 15:08:36 tfdm-access server[1705]: 15:08:36.844 [http-nio-8080-exec-8] INFO o.a.g.t.h.RestrictedGuacamoleHTTPTunnelServlet - Using HTTP tunnel (not WebSocket). Performance may be sub-optimal.
Apr 24 15:08:36 tfdm-access guacd[310149]: VNC server supports protocol version 3.8 (viewer 3.8)
Apr 24 15:08:36 tfdm-access guacd[310149]: We have 2 security types to read
Apr 24 15:08:36 tfdm-access guacd[310149]: 0) Received security type 19
Apr 24 15:08:36 tfdm-access guacd[310149]: Selecting security type 19 (0/2 in the list)
Apr 24 15:08:36 tfdm-access guacd[310149]: 1) Received security type 2
Apr 24 15:08:36 tfdm-access guacd[310149]: Selected Security Scheme 19
Apr 24 15:08:36 tfdm-access guacd[310149]: Failed to initialized GnuTLS: Error in public key generation..
Apr 24 15:08:36 tfdm-access guacd[310149]: Unable to connect to VNC server.
Apr 24 15:08:37 tfdm-access guacd[310149]: User "@be3d0de5-cbdc-420e-9e8f-c2554fdd21c6" disconnected (0 users remain)
Apr 24 15:08:37 tfdm-access guacd[310149]: Last user of connection "$6ae02db1-b8b3-4c4d-84ac-4978896156b3" disconnected
Apr 24 15:08:37 tfdm-access guacd[15105]: Connection "$6ae02db1-b8b3-4c4d-84ac-4978896156b3" removed.
Apr 24 15:08:37 tfdm-access server[1705]: 15:08:37.359 [http-nio-8080-exec-10] INFO o.a.g.tunnel.TunnelRequestService - User "guacadmin" disconnected from connection "237". Duration: 515 milliseconds
Apr 24 15:08:37 tfdm-access server[1705]: 15:08:37.362 [http-nio-8080-exec-2] INFO o.a.g.tunnel.TunnelRequestService - User "guacadmin" disconnected from connection "237". Duration: 518 milliseconds
Apr 24 15:08:41 tfdm-access server[1705]: 15:08:41.621 [http-nio-8080-exec-4] WARN o.a.g.s.GuacamoleHTTPTunnelServlet - HTTP tunnel request rejected: No such tunnel.
Where could I start looking for a way to debug this? Could it have something to do with the VNC libraries on 1.5.4?
Thanks,
Harry
[cid:image001.png@01DA9659.B9080FE0]
Harry Devine
Secure-OSE System Administrator
Red Hat Certified System Administrator (RHCSA)
Office: (609) 485-4218
Personal Cell: (609) 276-0555
FAA Cell: (609) 612-7274
Home Office/Telework: (609) 547-3579
Email : harry.devine@faa.gov
William J Hughes Technical Center
Building 300 3rd Floor Column L20
Atlantic City, NJ 08405
RE: Issue with VNC on new 1.5.4 installation
Posted by "Devine, Harry (FAA)" <ha...@faa.gov.INVALID>.
Update: after some playing around and digging around, it appears as though the VNC connections work when we disable FIPS on the RHEL 8 Guacamole server. However, it is a security requirement set by our organization to have FIPS enabled, so how can we make this work with FIPS enabled?
Thanks,
Harry
-----Original Message-----
From: Devine, Harry (FAA) <ha...@faa.gov.INVALID>
Sent: Thursday, April 25, 2024 9:55 AM
To: user@guacamole.apache.org
Subject: RE: Issue with VNC on new 1.5.4 installation
CAUTION: This email originated from outside of the Federal Aviation Administration (FAA). Do not click on links or open attachments unless you recognize the sender and know the content is safe.
I am now running guacd in Debug mode via "/usr/local/sbin/guacd -f -L debug", and here's what I see when I try to connect to a VNC connection:
guacd[4319]: INFO: Creating new client for protocol "vnc"
guacd[4319]: INFO: Connection ID is "$b2d849e6-b5e5-4b56-94e6-839c29da92c6"
guacd[4369]: DEBUG: Processing instruction: size
guacd[4369]: DEBUG: Processing instruction: audio
guacd[4369]: DEBUG: Processing instruction: video
guacd[4369]: DEBUG: Processing instruction: image
guacd[4369]: DEBUG: Processing instruction: timezone
guacd[4369]: DEBUG: Processing instruction: name
guacd[4369]: INFO: Cursor rendering: local
guacd[4369]: DEBUG: Parameter "swap-red-blue" omitted. Using default value of 0.
guacd[4369]: DEBUG: Parameter "color-depth" omitted. Using default value of 0.
guacd[4369]: DEBUG: Parameter "force-lossless" omitted. Using default value of 0.
guacd[4369]: DEBUG: Parameter "dest-port" omitted. Using default value of 0.
guacd[4369]: DEBUG: Parameter "encodings" omitted. Using default value of "zrle ultra copyrect hextile zlib corre rre raw".
guacd[4369]: DEBUG: Parameter "autoretry" omitted. Using default value of 0.
guacd[4369]: DEBUG: Parameter "reverse-connect" omitted. Using default value of 0.
guacd[4369]: DEBUG: Parameter "listen-timeout" omitted. Using default value of 5000.
guacd[4369]: DEBUG: Parameter "enable-audio" omitted. Using default value of 0.
guacd[4369]: DEBUG: Parameter "enable-sftp" omitted. Using default value of 0.
guacd[4369]: DEBUG: Parameter "sftp-hostname" omitted. Using default value of "xxx.xxx.xxx.xxx".
guacd[4369]: DEBUG: Parameter "sftp-port" omitted. Using default value of "22".
guacd[4369]: DEBUG: Parameter "sftp-username" omitted. Using default value of "".
guacd[4369]: DEBUG: Parameter "sftp-password" omitted. Using default value of "".
guacd[4369]: DEBUG: Parameter "sftp-passphrase" omitted. Using default value of "".
guacd[4369]: DEBUG: Parameter "sftp-root-directory" omitted. Using default value of "/".
guacd[4369]: DEBUG: Parameter "sftp-server-alive-interval" omitted. Using default value of 0.
guacd[4369]: DEBUG: Parameter "sftp-disable-download" omitted. Using default value of 0.
guacd[4369]: DEBUG: Parameter "sftp-disable-upload" omitted. Using default value of 0.
guacd[4369]: DEBUG: Parameter "recording-name" omitted. Using default value of "recording".
guacd[4369]: DEBUG: Parameter "recording-exclude-output" omitted. Using default value of 0.
guacd[4369]: DEBUG: Parameter "recording-exclude-mouse" omitted. Using default value of 0.
guacd[4369]: DEBUG: Parameter "recording-include-keys" omitted. Using default value of 0.
guacd[4369]: DEBUG: Parameter "create-recording-path" omitted. Using default value of 0.
guacd[4369]: DEBUG: Parameter "disable-copy" omitted. Using default value of 0.
guacd[4369]: DEBUG: Parameter "disable-paste" omitted. Using default value of 0.
guacd[4369]: DEBUG: Parameter "wol-send-packet" omitted. Using default value of 0.
guacd[4369]: INFO: User "@8f157edc-f209-45de-808e-734861dd5816" joined connection "$b2d849e6-b5e5-4b56-94e6-839c29da92c6" (1 users now present)
guacd[4369]: DEBUG: Client is using protocol version "VERSION_1_5_0"
guacd[4369]: DEBUG: GCrypt initialization started.
guacd[4369]: DEBUG: GCrypt initialization completed.
guacd[4369]: ERROR: Unable to connect to VNC server.
guacd[4369]: INFO: User "@8f157edc-f209-45de-808e-734861dd5816" disconnected (0 users remain)
guacd[4369]: INFO: Last user of connection "$b2d849e6-b5e5-4b56-94e6-839c29da92c6" disconnected
guacd[4369]: DEBUG: Requesting termination of client...
guacd[4369]: DEBUG: Client terminated successfully.
guacd[4319]: INFO: Connection "$b2d849e6-b5e5-4b56-94e6-839c29da92c6" removed.
guacd[4319]: DEBUG: Unable to request termination of client process: No such process
guacd[4319]: DEBUG: All child processes for connection "$b2d849e6-b5e5-4b56-94e6-839c29da92c6" have been terminated.
Thanks,
Harry
-----Original Message-----
From: Devine, Harry (FAA) <ha...@faa.gov.INVALID>
Sent: Thursday, April 25, 2024 9:33 AM
To: user@guacamole.apache.org
Subject: RE: Issue with VNC on new 1.5.4 installation
CAUTION: This email originated from outside of the Federal Aviation Administration (FAA). Do not click on links or open attachments unless you recognize the sender and know the content is safe.
I upgraded the installation to 1.5.5, and the issue still occurs:
Apr 25 09:31:38 tfdm-access guacd[2297]: Creating new client for protocol "vnc"
Apr 25 09:31:38 tfdm-access guacd[2297]: Connection ID is "$9d945aa9-e0b1-4a68-8eb7-7cc94946c966"
Apr 25 09:31:38 tfdm-access guacd[3870]: Cursor rendering: local Apr 25 09:31:38 tfdm-access guacd[3870]: User "@d9be5151-dfa2-42fe-b873-4ccd2dacdf97" joined connection "$9d945aa9-e0b1-4a68-8eb7-7cc94946c966" (1 users now present) Apr 25 09:31:38 tfdm-access server[1662]: 09:31:38.289 [http-nio-8080-exec-8] INFO o.a.g.tunnel.TunnelRequestService - User "guacadmin" connected to connection "79".
Apr 25 09:31:38 tfdm-access guacd[3870]: VNC server supports protocol version 3.8 (viewer 3.8) Apr 25 09:31:38 tfdm-access guacd[3870]: We have 2 security types to read Apr 25 09:31:38 tfdm-access guacd[3870]: 0) Received security type 19 Apr 25 09:31:38 tfdm-access guacd[3870]: Selecting security type 19 (0/2 in the list) Apr 25 09:31:38 tfdm-access guacd[3870]: 1) Received security type 2 Apr 25 09:31:38 tfdm-access guacd[3870]: Selected Security Scheme 19 Apr 25 09:31:38 tfdm-access guacd[3870]: Failed to initialized GnuTLS: Error in public key generation..
Apr 25 09:31:38 tfdm-access guacd[3870]: Unable to connect to VNC server.
Apr 25 09:31:38 tfdm-access server[1662]: 09:31:38.292 [http-nio-8080-exec-8] INFO o.a.g.t.h.RestrictedGuacamoleHTTPTunnelServlet - Using HTTP tunnel (not WebSocket). Performance may be sub-optimal.
Apr 25 09:31:38 tfdm-access guacd[3870]: User "@d9be5151-dfa2-42fe-b873-4ccd2dacdf97" disconnected (0 users remain) Apr 25 09:31:38 tfdm-access guacd[3870]: Last user of connection "$9d945aa9-e0b1-4a68-8eb7-7cc94946c966" disconnected Apr 25 09:31:38 tfdm-access guacd[2297]: Connection "$9d945aa9-e0b1-4a68-8eb7-7cc94946c966" removed.
Apr 25 09:31:38 tfdm-access server[1662]: 09:31:38.861 [http-nio-8080-exec-9] INFO o.a.g.tunnel.TunnelRequestService - User "guacadmin" disconnected from connection "79". Duration: 568 milliseconds Apr 25 09:31:38 tfdm-access server[1662]: 09:31:38.866 [http-nio-8080-exec-10] INFO o.a.g.tunnel.TunnelRequestService - User "guacadmin" disconnected from connection "79". Duration: 574 milliseconds Apr 25 09:31:42 tfdm-access server[1662]: 09:31:42.954 [http-nio-8080-exec-7] WARN o.a.g.s.GuacamoleHTTPTunnelServlet - HTTP tunnel request rejected: No such tunnel.
Thanks,
Harry
-----Original Message-----
From: Devine, Harry (FAA) <ha...@faa.gov.INVALID>
Sent: Thursday, April 25, 2024 8:32 AM
To: user@guacamole.apache.org
Subject: RE: Issue with VNC on new 1.5.4 installation
CAUTION: This email originated from outside of the Federal Aviation Administration (FAA). Do not click on links or open attachments unless you recognize the sender and know the content is safe.
I have an Ansible Role that we use to install Guacamole. If I changed the version in that role to 1.5.5 and re-run it to re-install Guacamole, do you think that would be good to try and test if that fix worked for us?
Thanks,
Harry
-----Original Message-----
From: Ivanmarcus <iv...@yahoo.com.INVALID>
Sent: Wednesday, April 24, 2024 4:33 PM
To: user@guacamole.apache.org
Subject: Re: Issue with VNC on new 1.5.4 installation
CAUTION: This email originated from outside of the Federal Aviation Administration (FAA). Do not click on links or open attachments unless you recognize the sender and know the content is safe.
Harry,
I'd start debugging here:
Failed to initialized GnuTLS: Error in public key generation
Now, without knowing more about your setup I wonder if the issue could be related to this?:
https://issues.apache.org/jira/browse/GUACAMOLE-1921
It's been a while since I used VNC with Guacamole, and I'm not au fait with the detail around this bug, but as it's dealt with in Guacamole
1.5.5 you might want to trial that and see if the error persists.
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org B KKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKCB [ X ܚX KK[XZ[ \ \ ][ X ܚX P XX [[ K \X K ܙ B ܈Y][ۘ[ [X[ K[XZ[ \ \ Z[ XX [[ K \X K ܙ B B KKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKCB [ X ܚX KK[XZ[
\ \ ][ X ܚX P XX [[ K \X K ܙ B ܈Y][ۘ[ [X[ K[XZ[
\ \ Z[ XX [[ K \X K ܙ B
RE: Issue with VNC on new 1.5.4 installation
Posted by "Devine, Harry (FAA)" <ha...@faa.gov.INVALID>.
I am now running guacd in Debug mode via "/usr/local/sbin/guacd -f -L debug", and here's what I see when I try to connect to a VNC connection:
guacd[4319]: INFO: Creating new client for protocol "vnc"
guacd[4319]: INFO: Connection ID is "$b2d849e6-b5e5-4b56-94e6-839c29da92c6"
guacd[4369]: DEBUG: Processing instruction: size
guacd[4369]: DEBUG: Processing instruction: audio
guacd[4369]: DEBUG: Processing instruction: video
guacd[4369]: DEBUG: Processing instruction: image
guacd[4369]: DEBUG: Processing instruction: timezone
guacd[4369]: DEBUG: Processing instruction: name
guacd[4369]: INFO: Cursor rendering: local
guacd[4369]: DEBUG: Parameter "swap-red-blue" omitted. Using default value of 0.
guacd[4369]: DEBUG: Parameter "color-depth" omitted. Using default value of 0.
guacd[4369]: DEBUG: Parameter "force-lossless" omitted. Using default value of 0.
guacd[4369]: DEBUG: Parameter "dest-port" omitted. Using default value of 0.
guacd[4369]: DEBUG: Parameter "encodings" omitted. Using default value of "zrle ultra copyrect hextile zlib corre rre raw".
guacd[4369]: DEBUG: Parameter "autoretry" omitted. Using default value of 0.
guacd[4369]: DEBUG: Parameter "reverse-connect" omitted. Using default value of 0.
guacd[4369]: DEBUG: Parameter "listen-timeout" omitted. Using default value of 5000.
guacd[4369]: DEBUG: Parameter "enable-audio" omitted. Using default value of 0.
guacd[4369]: DEBUG: Parameter "enable-sftp" omitted. Using default value of 0.
guacd[4369]: DEBUG: Parameter "sftp-hostname" omitted. Using default value of "172.25.123.152".
guacd[4369]: DEBUG: Parameter "sftp-port" omitted. Using default value of "22".
guacd[4369]: DEBUG: Parameter "sftp-username" omitted. Using default value of "".
guacd[4369]: DEBUG: Parameter "sftp-password" omitted. Using default value of "".
guacd[4369]: DEBUG: Parameter "sftp-passphrase" omitted. Using default value of "".
guacd[4369]: DEBUG: Parameter "sftp-root-directory" omitted. Using default value of "/".
guacd[4369]: DEBUG: Parameter "sftp-server-alive-interval" omitted. Using default value of 0.
guacd[4369]: DEBUG: Parameter "sftp-disable-download" omitted. Using default value of 0.
guacd[4369]: DEBUG: Parameter "sftp-disable-upload" omitted. Using default value of 0.
guacd[4369]: DEBUG: Parameter "recording-name" omitted. Using default value of "recording".
guacd[4369]: DEBUG: Parameter "recording-exclude-output" omitted. Using default value of 0.
guacd[4369]: DEBUG: Parameter "recording-exclude-mouse" omitted. Using default value of 0.
guacd[4369]: DEBUG: Parameter "recording-include-keys" omitted. Using default value of 0.
guacd[4369]: DEBUG: Parameter "create-recording-path" omitted. Using default value of 0.
guacd[4369]: DEBUG: Parameter "disable-copy" omitted. Using default value of 0.
guacd[4369]: DEBUG: Parameter "disable-paste" omitted. Using default value of 0.
guacd[4369]: DEBUG: Parameter "wol-send-packet" omitted. Using default value of 0.
guacd[4369]: INFO: User "@8f157edc-f209-45de-808e-734861dd5816" joined connection "$b2d849e6-b5e5-4b56-94e6-839c29da92c6" (1 users now present)
guacd[4369]: DEBUG: Client is using protocol version "VERSION_1_5_0"
guacd[4369]: DEBUG: GCrypt initialization started.
guacd[4369]: DEBUG: GCrypt initialization completed.
guacd[4369]: ERROR: Unable to connect to VNC server.
guacd[4369]: INFO: User "@8f157edc-f209-45de-808e-734861dd5816" disconnected (0 users remain)
guacd[4369]: INFO: Last user of connection "$b2d849e6-b5e5-4b56-94e6-839c29da92c6" disconnected
guacd[4369]: DEBUG: Requesting termination of client...
guacd[4369]: DEBUG: Client terminated successfully.
guacd[4319]: INFO: Connection "$b2d849e6-b5e5-4b56-94e6-839c29da92c6" removed.
guacd[4319]: DEBUG: Unable to request termination of client process: No such process
guacd[4319]: DEBUG: All child processes for connection "$b2d849e6-b5e5-4b56-94e6-839c29da92c6" have been terminated.
Thanks,
Harry
-----Original Message-----
From: Devine, Harry (FAA) <ha...@faa.gov.INVALID>
Sent: Thursday, April 25, 2024 9:33 AM
To: user@guacamole.apache.org
Subject: RE: Issue with VNC on new 1.5.4 installation
CAUTION: This email originated from outside of the Federal Aviation Administration (FAA). Do not click on links or open attachments unless you recognize the sender and know the content is safe.
I upgraded the installation to 1.5.5, and the issue still occurs:
Apr 25 09:31:38 tfdm-access guacd[2297]: Creating new client for protocol "vnc"
Apr 25 09:31:38 tfdm-access guacd[2297]: Connection ID is "$9d945aa9-e0b1-4a68-8eb7-7cc94946c966"
Apr 25 09:31:38 tfdm-access guacd[3870]: Cursor rendering: local Apr 25 09:31:38 tfdm-access guacd[3870]: User "@d9be5151-dfa2-42fe-b873-4ccd2dacdf97" joined connection "$9d945aa9-e0b1-4a68-8eb7-7cc94946c966" (1 users now present) Apr 25 09:31:38 tfdm-access server[1662]: 09:31:38.289 [http-nio-8080-exec-8] INFO o.a.g.tunnel.TunnelRequestService - User "guacadmin" connected to connection "79".
Apr 25 09:31:38 tfdm-access guacd[3870]: VNC server supports protocol version 3.8 (viewer 3.8) Apr 25 09:31:38 tfdm-access guacd[3870]: We have 2 security types to read Apr 25 09:31:38 tfdm-access guacd[3870]: 0) Received security type 19 Apr 25 09:31:38 tfdm-access guacd[3870]: Selecting security type 19 (0/2 in the list) Apr 25 09:31:38 tfdm-access guacd[3870]: 1) Received security type 2 Apr 25 09:31:38 tfdm-access guacd[3870]: Selected Security Scheme 19 Apr 25 09:31:38 tfdm-access guacd[3870]: Failed to initialized GnuTLS: Error in public key generation..
Apr 25 09:31:38 tfdm-access guacd[3870]: Unable to connect to VNC server.
Apr 25 09:31:38 tfdm-access server[1662]: 09:31:38.292 [http-nio-8080-exec-8] INFO o.a.g.t.h.RestrictedGuacamoleHTTPTunnelServlet - Using HTTP tunnel (not WebSocket). Performance may be sub-optimal.
Apr 25 09:31:38 tfdm-access guacd[3870]: User "@d9be5151-dfa2-42fe-b873-4ccd2dacdf97" disconnected (0 users remain) Apr 25 09:31:38 tfdm-access guacd[3870]: Last user of connection "$9d945aa9-e0b1-4a68-8eb7-7cc94946c966" disconnected Apr 25 09:31:38 tfdm-access guacd[2297]: Connection "$9d945aa9-e0b1-4a68-8eb7-7cc94946c966" removed.
Apr 25 09:31:38 tfdm-access server[1662]: 09:31:38.861 [http-nio-8080-exec-9] INFO o.a.g.tunnel.TunnelRequestService - User "guacadmin" disconnected from connection "79". Duration: 568 milliseconds Apr 25 09:31:38 tfdm-access server[1662]: 09:31:38.866 [http-nio-8080-exec-10] INFO o.a.g.tunnel.TunnelRequestService - User "guacadmin" disconnected from connection "79". Duration: 574 milliseconds Apr 25 09:31:42 tfdm-access server[1662]: 09:31:42.954 [http-nio-8080-exec-7] WARN o.a.g.s.GuacamoleHTTPTunnelServlet - HTTP tunnel request rejected: No such tunnel.
Thanks,
Harry
-----Original Message-----
From: Devine, Harry (FAA) <ha...@faa.gov.INVALID>
Sent: Thursday, April 25, 2024 8:32 AM
To: user@guacamole.apache.org
Subject: RE: Issue with VNC on new 1.5.4 installation
CAUTION: This email originated from outside of the Federal Aviation Administration (FAA). Do not click on links or open attachments unless you recognize the sender and know the content is safe.
I have an Ansible Role that we use to install Guacamole. If I changed the version in that role to 1.5.5 and re-run it to re-install Guacamole, do you think that would be good to try and test if that fix worked for us?
Thanks,
Harry
-----Original Message-----
From: Ivanmarcus <iv...@yahoo.com.INVALID>
Sent: Wednesday, April 24, 2024 4:33 PM
To: user@guacamole.apache.org
Subject: Re: Issue with VNC on new 1.5.4 installation
CAUTION: This email originated from outside of the Federal Aviation Administration (FAA). Do not click on links or open attachments unless you recognize the sender and know the content is safe.
Harry,
I'd start debugging here:
Failed to initialized GnuTLS: Error in public key generation
Now, without knowing more about your setup I wonder if the issue could be related to this?:
https://issues.apache.org/jira/browse/GUACAMOLE-1921
It's been a while since I used VNC with Guacamole, and I'm not au fait with the detail around this bug, but as it's dealt with in Guacamole
1.5.5 you might want to trial that and see if the error persists.
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org B KKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKCB [ X ܚX KK[XZ[
\ \ ][ X ܚX P XX [[ K \X K ܙ B ܈Y][ۘ[ [X[ K[XZ[
\ \ Z[ XX [[ K \X K ܙ B
RE: Issue with VNC on new 1.5.4 installation
Posted by "Devine, Harry (FAA)" <ha...@faa.gov.INVALID>.
I upgraded the installation to 1.5.5, and the issue still occurs:
Apr 25 09:31:38 tfdm-access guacd[2297]: Creating new client for protocol "vnc"
Apr 25 09:31:38 tfdm-access guacd[2297]: Connection ID is "$9d945aa9-e0b1-4a68-8eb7-7cc94946c966"
Apr 25 09:31:38 tfdm-access guacd[3870]: Cursor rendering: local
Apr 25 09:31:38 tfdm-access guacd[3870]: User "@d9be5151-dfa2-42fe-b873-4ccd2dacdf97" joined connection "$9d945aa9-e0b1-4a68-8eb7-7cc94946c966" (1 users now present)
Apr 25 09:31:38 tfdm-access server[1662]: 09:31:38.289 [http-nio-8080-exec-8] INFO o.a.g.tunnel.TunnelRequestService - User "guacadmin" connected to connection "79".
Apr 25 09:31:38 tfdm-access guacd[3870]: VNC server supports protocol version 3.8 (viewer 3.8)
Apr 25 09:31:38 tfdm-access guacd[3870]: We have 2 security types to read
Apr 25 09:31:38 tfdm-access guacd[3870]: 0) Received security type 19
Apr 25 09:31:38 tfdm-access guacd[3870]: Selecting security type 19 (0/2 in the list)
Apr 25 09:31:38 tfdm-access guacd[3870]: 1) Received security type 2
Apr 25 09:31:38 tfdm-access guacd[3870]: Selected Security Scheme 19
Apr 25 09:31:38 tfdm-access guacd[3870]: Failed to initialized GnuTLS: Error in public key generation..
Apr 25 09:31:38 tfdm-access guacd[3870]: Unable to connect to VNC server.
Apr 25 09:31:38 tfdm-access server[1662]: 09:31:38.292 [http-nio-8080-exec-8] INFO o.a.g.t.h.RestrictedGuacamoleHTTPTunnelServlet - Using HTTP tunnel (not WebSocket). Performance may be sub-optimal.
Apr 25 09:31:38 tfdm-access guacd[3870]: User "@d9be5151-dfa2-42fe-b873-4ccd2dacdf97" disconnected (0 users remain)
Apr 25 09:31:38 tfdm-access guacd[3870]: Last user of connection "$9d945aa9-e0b1-4a68-8eb7-7cc94946c966" disconnected
Apr 25 09:31:38 tfdm-access guacd[2297]: Connection "$9d945aa9-e0b1-4a68-8eb7-7cc94946c966" removed.
Apr 25 09:31:38 tfdm-access server[1662]: 09:31:38.861 [http-nio-8080-exec-9] INFO o.a.g.tunnel.TunnelRequestService - User "guacadmin" disconnected from connection "79". Duration: 568 milliseconds
Apr 25 09:31:38 tfdm-access server[1662]: 09:31:38.866 [http-nio-8080-exec-10] INFO o.a.g.tunnel.TunnelRequestService - User "guacadmin" disconnected from connection "79". Duration: 574 milliseconds
Apr 25 09:31:42 tfdm-access server[1662]: 09:31:42.954 [http-nio-8080-exec-7] WARN o.a.g.s.GuacamoleHTTPTunnelServlet - HTTP tunnel request rejected: No such tunnel.
Thanks,
Harry
-----Original Message-----
From: Devine, Harry (FAA) <ha...@faa.gov.INVALID>
Sent: Thursday, April 25, 2024 8:32 AM
To: user@guacamole.apache.org
Subject: RE: Issue with VNC on new 1.5.4 installation
CAUTION: This email originated from outside of the Federal Aviation Administration (FAA). Do not click on links or open attachments unless you recognize the sender and know the content is safe.
I have an Ansible Role that we use to install Guacamole. If I changed the version in that role to 1.5.5 and re-run it to re-install Guacamole, do you think that would be good to try and test if that fix worked for us?
Thanks,
Harry
-----Original Message-----
From: Ivanmarcus <iv...@yahoo.com.INVALID>
Sent: Wednesday, April 24, 2024 4:33 PM
To: user@guacamole.apache.org
Subject: Re: Issue with VNC on new 1.5.4 installation
CAUTION: This email originated from outside of the Federal Aviation Administration (FAA). Do not click on links or open attachments unless you recognize the sender and know the content is safe.
Harry,
I'd start debugging here:
Failed to initialized GnuTLS: Error in public key generation
Now, without knowing more about your setup I wonder if the issue could be related to this?:
https://issues.apache.org/jira/browse/GUACAMOLE-1921
It's been a while since I used VNC with Guacamole, and I'm not au fait with the detail around this bug, but as it's dealt with in Guacamole
1.5.5 you might want to trial that and see if the error persists.
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org
RE: Issue with VNC on new 1.5.4 installation
Posted by "Devine, Harry (FAA)" <ha...@faa.gov.INVALID>.
I have an Ansible Role that we use to install Guacamole. If I changed the version in that role to 1.5.5 and re-run it to re-install Guacamole, do you think that would be good to try and test if that fix worked for us?
Thanks,
Harry
-----Original Message-----
From: Ivanmarcus <iv...@yahoo.com.INVALID>
Sent: Wednesday, April 24, 2024 4:33 PM
To: user@guacamole.apache.org
Subject: Re: Issue with VNC on new 1.5.4 installation
CAUTION: This email originated from outside of the Federal Aviation Administration (FAA). Do not click on links or open attachments unless you recognize the sender and know the content is safe.
Harry,
I'd start debugging here:
Failed to initialized GnuTLS: Error in public key generation
Now, without knowing more about your setup I wonder if the issue could be related to this?:
https://issues.apache.org/jira/browse/GUACAMOLE-1921
It's been a while since I used VNC with Guacamole, and I'm not au fait with the detail around this bug, but as it's dealt with in Guacamole
1.5.5 you might want to trial that and see if the error persists.
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org
Re: Issue with VNC on new 1.5.4 installation
Posted by Ivanmarcus <iv...@yahoo.com.INVALID>.
Harry,
I'd start debugging here:
Failed to initialized GnuTLS: Error in public key generation
Now, without knowing more about your setup I wonder if the issue could
be related to this?:
https://issues.apache.org/jira/browse/GUACAMOLE-1921
It's been a while since I used VNC with Guacamole, and I'm not au fait
with the detail around this bug, but as it's dealt with in Guacamole
1.5.5 you might want to trial that and see if the error persists.
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org