You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@guacamole.apache.org by Brendan <ba...@fastmail.com.au> on 2023/02/07 11:24:00 UTC
Error with only some servers
Hello
I am having a problem whereby a couple of my servers won't connect in guac. It says in the web client "An error has occurred with the guacamole server". I ran docker logs guacamole and this is the error i get:
11:20:29.290 [http-nio-8080-exec-6] ERROR o.a.g.w.GuacamoleWebSocketTunnelEndpoint - Creation of WebSocket tunnel to guacd failed: java.net.ConnectException: Connection refused (Connection refused)
11:20:29.307 [http-nio-8080-exec-8] ERROR o.a.g.s.GuacamoleHTTPTunnelServlet - HTTP tunnel request failed: java.net.ConnectException: Connection refused (Connection refused)
I should note, that i have other servers working perfectly fine. I also tried with key authentication, which also did not work.
Any ideas?
TIA.
Re: Error with only some servers
Posted by Brendan <ba...@fastmail.com.au>.
I should note, i can ssh to this server from the same machine hosting my Guac perfectly fine. so I dunno
Regards
Brendan.
On Wed, 8 Feb 2023, at 10:20, Brendan wrote:
> OpenSSH_8.9p1 Ubuntu-3ubuntu0.1, OpenSSL 3.0.2 15 Mar 2022
>
>
> On Wed, 8 Feb 2023, at 10:18, Michael Jumper wrote:
>> What version of OpenSSH is on the destination machine?
>>
>> On Tue, Feb 7, 2023, 4:18 PM Brendan <ba...@fastmail.com.au> wrote:
>>> __
>>> I'm not sure, how do i find out?
>>>
>>> Also, i removed the key, and it still doesn't work. I just recreated the server, and it still doesn't work
>>>
>>> Regards
>>> Brendan.
>>>
>>> On Wed, 8 Feb 2023, at 10:14, Michael Jumper wrote:
>>>> What kind of private key is this?
>>>>
>>>> On Tue, Feb 7, 2023, 3:59 PM Brendan <ba...@fastmail.com.au> wrote:
>>>>> __
>>>>> Hi
>>>>>
>>>>> I've got one last problem. One of my servers still isn't connecting, despite checking that i had the parameters set, not the proxy details.
>>>>>
>>>>> When I try to connect, i get the following:
>>>>>
>>>>> guacd[251]: INFO: Creating new client for protocol "ssh"
>>>>> guacd[251]: INFO: Connection ID is "$b8f61fb7-71a4-4ab2-80f1-b69fd11beda2"
>>>>> 01:55:32.223 [http-nio-8080-exec-3] INFO o.a.g.tunnel.TunnelRequestService - User "brendan" connected to connection "5".
>>>>> guacd[2115]: INFO: User "@36ada82c-1c68-4f1b-8a4d-55512697534f" joined connection "$b8f61fb7-71a4-4ab2-80f1-b69fd11beda2" (1 users now present)
>>>>> guacd[2115]: INFO: Auth key successfully imported.
>>>>> guacd[2115]: ERROR: SSH handshake failed.
>>>>> 01:55:32.282 [http-nio-8080-exec-10] INFO o.a.g.tunnel.TunnelRequestService - User "brendan" disconnected from connection "5". Duration: 55 milliseconds
>>>>> guacd[2115]: INFO: User "@36ada82c-1c68-4f1b-8a4d-55512697534f" disconnected (0 users remain)
>>>>> guacd[2115]: INFO: Last user of connection "$b8f61fb7-71a4-4ab2-80f1-b69fd11beda2" disconnected
>>>>> Exception in thread "Thread-14" java.lang.IllegalStateException: Message will not be sent because the WebSocket session has been closed
>>>>> at org.apache.tomcat.websocket.WsRemoteEndpointImplBase.writeMessagePart(WsRemoteEndpointImplBase.java:425)
>>>>> at org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendMessageBlock(WsRemoteEndpointImplBase.java:309)
>>>>> at org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendMessageBlock(WsRemoteEndpointImplBase.java:250)
>>>>> at org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendString(WsRemoteEndpointImplBase.java:191)
>>>>> at org.apache.tomcat.websocket.WsRemoteEndpointBasic.sendText(WsRemoteEndpointBasic.java:37)
>>>>> at org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint.sendInstruction(GuacamoleWebSocketTunnelEndpoint.java:152)
>>>>> at org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint.access$200(GuacamoleWebSocketTunnelEndpoint.java:53)
>>>>> at org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint$2.run(GuacamoleWebSocketTunnelEndpoint.java:253)
>>>>> guacd[251]: INFO: Connection "$b8f61fb7-71a4-4ab2-80f1-b69fd11beda2" removed.
>>>>>
>>>>>
>>>>> On Wed, 8 Feb 2023, at 09:47, Brendan wrote:
>>>>>> aha. Yes, i filled in the proxy details, not the proper part.
>>>>>>
>>>>>> Thanks for your help
>>>>>>
>>>>>> regards
>>>>>> Brendan.
>>>>>>
>>>>>> On Wed, 8 Feb 2023, at 09:43, Michael Jumper wrote:
>>>>>>> The error in question is specifically regarding the webapp being unable to connect over TCP to the guacd service, so something must be interfering with that...
>>>>>>>
>>>>>>> Did you perchance accidentally fill in the hostname/address for the destination machine in the "Guacamole proxy parameters (guacd)" section and not the "Parameters" section?
>>>>>>>
>>>>>>> - Mike
>>>>>>>
>>>>>>> On Tue, Feb 7, 2023, 3:40 PM Brendan <ba...@fastmail.com.au> wrote:
>>>>>>>> __
>>>>>>>> Hi
>>>>>>>>
>>>>>>>> I just removed the IPv6 from the /etc/hosts, and it didn't resolve anything. I don't think it's because guacd isn't running, because other servers work fine.
>>>>>>>>
>>>>>>>> Regards
>>>>>>>> Brendan.
>>>>>>>>
>>>>>>>> On Wed, 8 Feb 2023, at 02:48, Michael Jumper wrote:
>>>>>>>>> On Tue, Feb 7, 2023, 1:24 AM Brendan <ba...@fastmail.com.au> wrote:
>>>>>>>>>> __
>>>>>>>>>> Hello
>>>>>>>>>>
>>>>>>>>>> I am having a problem whereby a couple of my servers won't connect in guac. It says in the web client "An error has occurred with the guacamole server". I ran docker logs guacamole and this is the error i get:
>>>>>>>>>>
>>>>>>>>>> 11:20:29.290 [http-nio-8080-exec-6] ERROR o.a.g.w.GuacamoleWebSocketTunnelEndpoint - Creation of WebSocket tunnel to guacd failed: java.net.ConnectException: Connection refused (Connection refused)
>>>>>>>>>> 11:20:29.307 [http-nio-8080-exec-8] ERROR o.a.g.s.GuacamoleHTTPTunnelServlet - HTTP tunnel request failed: java.net.ConnectException: Connection refused (Connection refused)
>>>>>>>>>
>>>>>>>>> This sounds like guacd isn't running, or something is blocking the connection from the webapp to guacd.
>>>>>>>>>
>>>>>>>>>> I should note, that i have other servers working perfectly fine. I also tried with key authentication, which also did not work.
>>>>>>>>>>
>>>>>>>>>> Any ideas?
>>>>>>>>>
>>>>>>>>> Does your system have both IPv4 and IPv6 addresses associated with "localhost" in /etc/hosts? The guacd service will be listening on one specific address, but if "localhost" is associated with multiple, then the OS will round-robin between those addresses and mysteriously fail to connect whenever the address that guacd *isn't* listening on happens to be used.
>>>>>>>>>
>>>>>>>>> - Mike
>>>>>>>>>
>>>>>>>>>
>>>>>>>>
>>>>>>
>>>>>
>>>
>
Re: Error with only some servers
Posted by Brendan <ba...@fastmail.com.au>.
That didn't help :(
Thanks though.
Brendan.
On Wed, 8 Feb 2023, at 16:59, Adrian Owen wrote:
> Workaround for Ubuntu 2204 target:
>
> echo HostKeyAlgorithms +ssh-rsa >> /etc/ssh/sshd_config
> systemctl restart sshd
>
>
> Hope it helps. Adrian
>
> From: Brendan <ba...@fastmail.com.au>
> Sent: 08 February 2023 3:13 AM
> To: user@guacamole.apache.org <us...@guacamole.apache.org>
> Subject: Re: Error with only some servers
>
> Ah. Thanks heaps for your help :)
>
> Regards
> Brendan.
>
> On Wed, 8 Feb 2023, at 11:07, Michael Jumper wrote:
> You are encountering:
>
> https://github.com/libssh2/libssh2/issues/634
>
> which should be fixed by:
>
> https://github.com/libssh2/libssh2/pull/626
>
> but has not yet made it into a libssh2 release. You can build libssh2 from git, or reconfigure OpenSSH on the Ubuntu server to work around things.
>
> - Mike
>
> On Tue, Feb 7, 2023, 4:21 PM Brendan <ba...@fastmail.com.au> wrote:
>
> OpenSSH_8.9p1 Ubuntu-3ubuntu0.1, OpenSSL 3.0.2 15 Mar 2022
>
>
> On Wed, 8 Feb 2023, at 10:18, Michael Jumper wrote:
> What version of OpenSSH is on the destination machine?
>
> On Tue, Feb 7, 2023, 4:18 PM Brendan <ba...@fastmail.com.au> wrote:
>
> I'm not sure, how do i find out?
>
> Also, i removed the key, and it still doesn't work. I just recreated the server, and it still doesn't work
>
> Regards
> Brendan.
>
> On Wed, 8 Feb 2023, at 10:14, Michael Jumper wrote:
> What kind of private key is this?
>
> On Tue, Feb 7, 2023, 3:59 PM Brendan <ba...@fastmail.com.au> wrote:
>
> Hi
>
> I've got one last problem. One of my servers still isn't connecting, despite checking that i had the parameters set, not the proxy details.
>
> When I try to connect, i get the following:
>
> guacd[251]: INFO: Creating new client for protocol "ssh"
> guacd[251]: INFO: Connection ID is "$b8f61fb7-71a4-4ab2-80f1-b69fd11beda2"
> 01:55:32.223 [http-nio-8080-exec-3] INFO o.a.g.tunnel.TunnelRequestService - User "brendan" connected to connection "5".
> guacd[2115]: INFO: User "@36ada82c-1c68-4f1b-8a4d-55512697534f" joined connection "$b8f61fb7-71a4-4ab2-80f1-b69fd11beda2" (1 users now present)
> guacd[2115]: INFO: Auth key successfully imported.
> guacd[2115]: ERROR: SSH handshake failed.
> 01:55:32.282 [http-nio-8080-exec-10] INFO o.a.g.tunnel.TunnelRequestService - User "brendan" disconnected from connection "5". Duration: 55 milliseconds
> guacd[2115]: INFO: User "@36ada82c-1c68-4f1b-8a4d-55512697534f" disconnected (0 users remain)
> guacd[2115]: INFO: Last user of connection "$b8f61fb7-71a4-4ab2-80f1-b69fd11beda2" disconnected
> Exception in thread "Thread-14" java.lang.IllegalStateException: Message will not be sent because the WebSocket session has been closed
> at org.apache.tomcat.websocket.WsRemoteEndpointImplBase.writeMessagePart(WsRemoteEndpointImplBase.java:425)
> at org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendMessageBlock(WsRemoteEndpointImplBase.java:309)
> at org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendMessageBlock(WsRemoteEndpointImplBase.java:250)
> at org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendString(WsRemoteEndpointImplBase.java:191)
> at org.apache.tomcat.websocket.WsRemoteEndpointBasic.sendText(WsRemoteEndpointBasic.java:37)
> at org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint.sendInstruction(GuacamoleWebSocketTunnelEndpoint.java:152)
> at org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint.access$200(GuacamoleWebSocketTunnelEndpoint.java:53)
> at org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint$2.run(GuacamoleWebSocketTunnelEndpoint.java:253)
> guacd[251]: INFO: Connection "$b8f61fb7-71a4-4ab2-80f1-b69fd11beda2" removed.
>
>
> On Wed, 8 Feb 2023, at 09:47, Brendan wrote:
> aha. Yes, i filled in the proxy details, not the proper part.
>
> Thanks for your help
>
> regards
> Brendan.
>
> On Wed, 8 Feb 2023, at 09:43, Michael Jumper wrote:
> The error in question is specifically regarding the webapp being unable to connect over TCP to the guacd service, so something must be interfering with that...
>
> Did you perchance accidentally fill in the hostname/address for the destination machine in the "Guacamole proxy parameters (guacd)" section and not the "Parameters" section?
>
> - Mike
>
> On Tue, Feb 7, 2023, 3:40 PM Brendan <ba...@fastmail.com.au> wrote:
>
> Hi
>
> I just removed the IPv6 from the /etc/hosts, and it didn't resolve anything. I don't think it's because guacd isn't running, because other servers work fine.
>
> Regards
> Brendan.
>
> On Wed, 8 Feb 2023, at 02:48, Michael Jumper wrote:
> On Tue, Feb 7, 2023, 1:24 AM Brendan <ba...@fastmail.com.au> wrote:
>
> Hello
>
> I am having a problem whereby a couple of my servers won't connect in guac. It says in the web client "An error has occurred with the guacamole server". I ran docker logs guacamole and this is the error i get:
>
> 11:20:29.290 [http-nio-8080-exec-6] ERROR o.a.g.w.GuacamoleWebSocketTunnelEndpoint - Creation of WebSocket tunnel to guacd failed: java.net.ConnectException: Connection refused (Connection refused)
> 11:20:29.307 [http-nio-8080-exec-8] ERROR o.a.g.s.GuacamoleHTTPTunnelServlet - HTTP tunnel request failed: java.net.ConnectException: Connection refused (Connection refused)
>
> This sounds like guacd isn't running, or something is blocking the connection from the webapp to guacd.
>
> I should note, that i have other servers working perfectly fine. I also tried with key authentication, which also did not work.
>
> Any ideas?
>
> Does your system have both IPv4 and IPv6 addresses associated with "localhost" in /etc/hosts? The guacd service will be listening on one specific address, but if "localhost" is associated with multiple, then the OS will round-robin between those addresses and mysteriously fail to connect whenever the address that guacd *isn't* listening on happens to be used.
>
> - Mike
>
>
>
>
>
>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
> For additional commands, e-mail: user-help@guacamole.apache.org
>
>
Re: Error with only some servers
Posted by Adrian Owen <ad...@eesm.com>.
Workaround for Ubuntu 2204 target:
echo HostKeyAlgorithms +ssh-rsa >> /etc/ssh/sshd_config
systemctl restart sshd
Hope it helps. Adrian
From: Brendan <ba...@fastmail.com.au>
Sent: 08 February 2023 3:13 AM
To: user@guacamole.apache.org <us...@guacamole.apache.org>
Subject: Re: Error with only some servers
Ah. Thanks heaps for your help :)
Regards
Brendan.
On Wed, 8 Feb 2023, at 11:07, Michael Jumper wrote:
You are encountering:
https://github.com/libssh2/libssh2/issues/634
which should be fixed by:
https://github.com/libssh2/libssh2/pull/626
but has not yet made it into a libssh2 release. You can build libssh2 from git, or reconfigure OpenSSH on the Ubuntu server to work around things.
- Mike
On Tue, Feb 7, 2023, 4:21 PM Brendan <ba...@fastmail.com.au> wrote:
OpenSSH_8.9p1 Ubuntu-3ubuntu0.1, OpenSSL 3.0.2 15 Mar 2022
On Wed, 8 Feb 2023, at 10:18, Michael Jumper wrote:
What version of OpenSSH is on the destination machine?
On Tue, Feb 7, 2023, 4:18 PM Brendan <ba...@fastmail.com.au> wrote:
I'm not sure, how do i find out?
Also, i removed the key, and it still doesn't work. I just recreated the server, and it still doesn't work
Regards
Brendan.
On Wed, 8 Feb 2023, at 10:14, Michael Jumper wrote:
What kind of private key is this?
On Tue, Feb 7, 2023, 3:59 PM Brendan <ba...@fastmail.com.au> wrote:
Hi
I've got one last problem. One of my servers still isn't connecting, despite checking that i had the parameters set, not the proxy details.
When I try to connect, i get the following:
guacd[251]: INFO: Creating new client for protocol "ssh"
guacd[251]: INFO: Connection ID is "$b8f61fb7-71a4-4ab2-80f1-b69fd11beda2"
01:55:32.223 [http-nio-8080-exec-3] INFO o.a.g.tunnel.TunnelRequestService - User "brendan" connected to connection "5".
guacd[2115]: INFO: User "@36ada82c-1c68-4f1b-8a4d-55512697534f" joined connection "$b8f61fb7-71a4-4ab2-80f1-b69fd11beda2" (1 users now present)
guacd[2115]: INFO: Auth key successfully imported.
guacd[2115]: ERROR: SSH handshake failed.
01:55:32.282 [http-nio-8080-exec-10] INFO o.a.g.tunnel.TunnelRequestService - User "brendan" disconnected from connection "5". Duration: 55 milliseconds
guacd[2115]: INFO: User "@36ada82c-1c68-4f1b-8a4d-55512697534f" disconnected (0 users remain)
guacd[2115]: INFO: Last user of connection "$b8f61fb7-71a4-4ab2-80f1-b69fd11beda2" disconnected
Exception in thread "Thread-14" java.lang.IllegalStateException: Message will not be sent because the WebSocket session has been closed
at org.apache.tomcat.websocket.WsRemoteEndpointImplBase.writeMessagePart(WsRemoteEndpointImplBase.java:425)
at org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendMessageBlock(WsRemoteEndpointImplBase.java:309)
at org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendMessageBlock(WsRemoteEndpointImplBase.java:250)
at org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendString(WsRemoteEndpointImplBase.java:191)
at org.apache.tomcat.websocket.WsRemoteEndpointBasic.sendText(WsRemoteEndpointBasic.java:37)
at org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint.sendInstruction(GuacamoleWebSocketTunnelEndpoint.java:152)
at org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint.access$200(GuacamoleWebSocketTunnelEndpoint.java:53)
at org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint$2.run(GuacamoleWebSocketTunnelEndpoint.java:253)
guacd[251]: INFO: Connection "$b8f61fb7-71a4-4ab2-80f1-b69fd11beda2" removed.
On Wed, 8 Feb 2023, at 09:47, Brendan wrote:
aha. Yes, i filled in the proxy details, not the proper part.
Thanks for your help
regards
Brendan.
On Wed, 8 Feb 2023, at 09:43, Michael Jumper wrote:
The error in question is specifically regarding the webapp being unable to connect over TCP to the guacd service, so something must be interfering with that...
Did you perchance accidentally fill in the hostname/address for the destination machine in the "Guacamole proxy parameters (guacd)" section and not the "Parameters" section?
- Mike
On Tue, Feb 7, 2023, 3:40 PM Brendan <ba...@fastmail.com.au> wrote:
Hi
I just removed the IPv6 from the /etc/hosts, and it didn't resolve anything. I don't think it's because guacd isn't running, because other servers work fine.
Regards
Brendan.
On Wed, 8 Feb 2023, at 02:48, Michael Jumper wrote:
On Tue, Feb 7, 2023, 1:24 AM Brendan <ba...@fastmail.com.au> wrote:
Hello
I am having a problem whereby a couple of my servers won't connect in guac. It says in the web client "An error has occurred with the guacamole server". I ran docker logs guacamole and this is the error i get:
11:20:29.290 [http-nio-8080-exec-6] ERROR o.a.g.w.GuacamoleWebSocketTunnelEndpoint - Creation of WebSocket tunnel to guacd failed: java.net.ConnectException: Connection refused (Connection refused)
11:20:29.307 [http-nio-8080-exec-8] ERROR o.a.g.s.GuacamoleHTTPTunnelServlet - HTTP tunnel request failed: java.net.ConnectException: Connection refused (Connection refused)
This sounds like guacd isn't running, or something is blocking the connection from the webapp to guacd.
I should note, that i have other servers working perfectly fine. I also tried with key authentication, which also did not work.
Any ideas?
Does your system have both IPv4 and IPv6 addresses associated with "localhost" in /etc/hosts? The guacd service will be listening on one specific address, but if "localhost" is associated with multiple, then the OS will round-robin between those addresses and mysteriously fail to connect whenever the address that guacd *isn't* listening on happens to be used.
- Mike
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org
Re: Error with only some servers
Posted by Brendan <ba...@fastmail.com.au>.
Ah. Thanks heaps for your help :)
Regards
Brendan.
On Wed, 8 Feb 2023, at 11:07, Michael Jumper wrote:
> You are encountering:
>
> https://github.com/libssh2/libssh2/issues/634
>
> which should be fixed by:
>
> https://github.com/libssh2/libssh2/pull/626
>
> but has not yet made it into a libssh2 release. You can build libssh2 from git, or reconfigure OpenSSH on the Ubuntu server to work around things.
>
> - Mike
>
> On Tue, Feb 7, 2023, 4:21 PM Brendan <ba...@fastmail.com.au> wrote:
>> __
>> OpenSSH_8.9p1 Ubuntu-3ubuntu0.1, OpenSSL 3.0.2 15 Mar 2022
>>
>>
>> On Wed, 8 Feb 2023, at 10:18, Michael Jumper wrote:
>>> What version of OpenSSH is on the destination machine?
>>>
>>> On Tue, Feb 7, 2023, 4:18 PM Brendan <ba...@fastmail.com.au> wrote:
>>>> __
>>>> I'm not sure, how do i find out?
>>>>
>>>> Also, i removed the key, and it still doesn't work. I just recreated the server, and it still doesn't work
>>>>
>>>> Regards
>>>> Brendan.
>>>>
>>>> On Wed, 8 Feb 2023, at 10:14, Michael Jumper wrote:
>>>>> What kind of private key is this?
>>>>>
>>>>> On Tue, Feb 7, 2023, 3:59 PM Brendan <ba...@fastmail.com.au> wrote:
>>>>>> __
>>>>>> Hi
>>>>>>
>>>>>> I've got one last problem. One of my servers still isn't connecting, despite checking that i had the parameters set, not the proxy details.
>>>>>>
>>>>>> When I try to connect, i get the following:
>>>>>>
>>>>>> guacd[251]: INFO: Creating new client for protocol "ssh"
>>>>>> guacd[251]: INFO: Connection ID is "$b8f61fb7-71a4-4ab2-80f1-b69fd11beda2"
>>>>>> 01:55:32.223 [http-nio-8080-exec-3] INFO o.a.g.tunnel.TunnelRequestService - User "brendan" connected to connection "5".
>>>>>> guacd[2115]: INFO: User "@36ada82c-1c68-4f1b-8a4d-55512697534f" joined connection "$b8f61fb7-71a4-4ab2-80f1-b69fd11beda2" (1 users now present)
>>>>>> guacd[2115]: INFO: Auth key successfully imported.
>>>>>> guacd[2115]: ERROR: SSH handshake failed.
>>>>>> 01:55:32.282 [http-nio-8080-exec-10] INFO o.a.g.tunnel.TunnelRequestService - User "brendan" disconnected from connection "5". Duration: 55 milliseconds
>>>>>> guacd[2115]: INFO: User "@36ada82c-1c68-4f1b-8a4d-55512697534f" disconnected (0 users remain)
>>>>>> guacd[2115]: INFO: Last user of connection "$b8f61fb7-71a4-4ab2-80f1-b69fd11beda2" disconnected
>>>>>> Exception in thread "Thread-14" java.lang.IllegalStateException: Message will not be sent because the WebSocket session has been closed
>>>>>> at org.apache.tomcat.websocket.WsRemoteEndpointImplBase.writeMessagePart(WsRemoteEndpointImplBase.java:425)
>>>>>> at org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendMessageBlock(WsRemoteEndpointImplBase.java:309)
>>>>>> at org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendMessageBlock(WsRemoteEndpointImplBase.java:250)
>>>>>> at org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendString(WsRemoteEndpointImplBase.java:191)
>>>>>> at org.apache.tomcat.websocket.WsRemoteEndpointBasic.sendText(WsRemoteEndpointBasic.java:37)
>>>>>> at org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint.sendInstruction(GuacamoleWebSocketTunnelEndpoint.java:152)
>>>>>> at org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint.access$200(GuacamoleWebSocketTunnelEndpoint.java:53)
>>>>>> at org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint$2.run(GuacamoleWebSocketTunnelEndpoint.java:253)
>>>>>> guacd[251]: INFO: Connection "$b8f61fb7-71a4-4ab2-80f1-b69fd11beda2" removed.
>>>>>>
>>>>>>
>>>>>> On Wed, 8 Feb 2023, at 09:47, Brendan wrote:
>>>>>>> aha. Yes, i filled in the proxy details, not the proper part.
>>>>>>>
>>>>>>> Thanks for your help
>>>>>>>
>>>>>>> regards
>>>>>>> Brendan.
>>>>>>>
>>>>>>> On Wed, 8 Feb 2023, at 09:43, Michael Jumper wrote:
>>>>>>>> The error in question is specifically regarding the webapp being unable to connect over TCP to the guacd service, so something must be interfering with that...
>>>>>>>>
>>>>>>>> Did you perchance accidentally fill in the hostname/address for the destination machine in the "Guacamole proxy parameters (guacd)" section and not the "Parameters" section?
>>>>>>>>
>>>>>>>> - Mike
>>>>>>>>
>>>>>>>> On Tue, Feb 7, 2023, 3:40 PM Brendan <ba...@fastmail.com.au> wrote:
>>>>>>>>> __
>>>>>>>>> Hi
>>>>>>>>>
>>>>>>>>> I just removed the IPv6 from the /etc/hosts, and it didn't resolve anything. I don't think it's because guacd isn't running, because other servers work fine.
>>>>>>>>>
>>>>>>>>> Regards
>>>>>>>>> Brendan.
>>>>>>>>>
>>>>>>>>> On Wed, 8 Feb 2023, at 02:48, Michael Jumper wrote:
>>>>>>>>>> On Tue, Feb 7, 2023, 1:24 AM Brendan <ba...@fastmail.com.au> wrote:
>>>>>>>>>>> __
>>>>>>>>>>> Hello
>>>>>>>>>>>
>>>>>>>>>>> I am having a problem whereby a couple of my servers won't connect in guac. It says in the web client "An error has occurred with the guacamole server". I ran docker logs guacamole and this is the error i get:
>>>>>>>>>>>
>>>>>>>>>>> 11:20:29.290 [http-nio-8080-exec-6] ERROR o.a.g.w.GuacamoleWebSocketTunnelEndpoint - Creation of WebSocket tunnel to guacd failed: java.net.ConnectException: Connection refused (Connection refused)
>>>>>>>>>>> 11:20:29.307 [http-nio-8080-exec-8] ERROR o.a.g.s.GuacamoleHTTPTunnelServlet - HTTP tunnel request failed: java.net.ConnectException: Connection refused (Connection refused)
>>>>>>>>>>
>>>>>>>>>> This sounds like guacd isn't running, or something is blocking the connection from the webapp to guacd.
>>>>>>>>>>
>>>>>>>>>>> I should note, that i have other servers working perfectly fine. I also tried with key authentication, which also did not work.
>>>>>>>>>>>
>>>>>>>>>>> Any ideas?
>>>>>>>>>>
>>>>>>>>>> Does your system have both IPv4 and IPv6 addresses associated with "localhost" in /etc/hosts? The guacd service will be listening on one specific address, but if "localhost" is associated with multiple, then the OS will round-robin between those addresses and mysteriously fail to connect whenever the address that guacd *isn't* listening on happens to be used.
>>>>>>>>>>
>>>>>>>>>> - Mike
>>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>
>>>>>>>
>>>>>>
>>>>
>>
RE: How to activate guac log
Posted by Gabriel Huerta Araujo <hu...@globalhitss.com.INVALID>.
Ok, thanks a lot for your soon answer, Nick.
- Gabriel
-----Mensaje original-----
De: Nick Couchman <vn...@apache.org>
Enviado el: lunes, 5 de junio de 2023 01:22 p. m.
Para: user@guacamole.apache.org
Asunto: Re: How to activate guac log
On Mon, Jun 5, 2023 at 3:16 PM Gabriel Huerta Araujo <hu...@globalhitss.com.invalid> wrote:
>
> Hi everyone
>
>
>
> I tried to know where guac log is located but I did not find it. Is there any configuration I have to do in order to generate it? Some link talking about this, it will be fully grateful.
>
Can you clarify what you mean by "guac log"? guacd output is usually logged to Syslog, so it will be available in your normal syslog location (/var/log/messages, journalctl, etc.). If you need to adjust the logging level you can do this either in the gaucd.conf file or using command-line switches.
For the web application (Guacamole Client), this information will be logged wherever Tomcat (or your web application server) logs its data.
This varies based on the web application server and how its configured, so you'll need to figure out where that information is logged. If you install Tomcat from the tar.gz or zip file on the website, the logs can be see in the log/catalina.out folder within the Tomcat installation folder. The verbosity of logging is configured with the logback.xml file, as noted in the manual.
https://guacamole.apache.org/doc/gug/configuring-guacamole.html#logging-within-the-web-application
-Nick
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org
RE: guacd error segfault in libguac-client-rdp.so.0.0.0
Posted by Gabriel Huerta Araujo <hu...@globalhitss.com.INVALID>.
>> It may be easier just for you to start guacd directly with gdb and get the information that way. Basically, you'll need to:
>> * Make sure gdb is installed, using your package manager for whatever distribution you're running.
>> * Launch guacd via gdb, as follows: gdb --args /path/to/guacd -L debug -f
>> * You'll get a gdb> prompt, and you can type "run"
>> * Attempt the connection, reproducing the segmentation fault.
>> * Once the segfault occurs, gdb will drop to the gdb> prompt, again, and you can then type "bt full" to get the full backtrace.
>> * Make sure to remove any sensitive data - for example, when I was debugging a segfault with 1.5.2, it would print out my connection parameters, including username/password for the server I was logging into.
If I am allowed to do so, how do I run the gdb command without affecting production users using the web application?
According to https://access.redhat.com/documentation/es-es/red_hat_enterprise_linux/7/html/developer_guide/debugging-running-application
Would I run gdb using: "Attach GDB to an already running process", which is in 20.2.2 section as I have indicated?
Once I'm at the gdb prompt, what should I run?
bt full?
-Gabriel
RE: guacd error segfault in libguac-client-rdp.so.0.0.0
Posted by Gabriel Huerta Araujo <hu...@globalhitss.com.INVALID>.
>> It may be easier just for you to start guacd directly with gdb and get the information that way. Basically, you'll need to:
>> * Make sure gdb is installed, using your package manager for whatever distribution you're running.
>> * Launch guacd via gdb, as follows: gdb --args /path/to/guacd -L debug -f
>> * You'll get a gdb> prompt, and you can type "run"
>> * Attempt the connection, reproducing the segmentation fault.
>> * Once the segfault occurs, gdb will drop to the gdb> prompt, again, and you can then type "bt full" to get the full backtrace.
>> * Make sure to remove any sensitive data - for example, when I was debugging a segfault with 1.5.2, it would print out my connection parameters, including username/password for the server I was logging into.
I will try, but it seems this error occurs only in production environment. /var/log/messages in development environment does not show error found in production environment. I am not allowed to do this kind of operation in that environmet.
-Gabriel
-----Mensaje original-----
De: Nick Couchman <vn...@apache.org>
Enviado el: miércoles, 7 de junio de 2023 12:13 p. m.
Para: user@guacamole.apache.org
Asunto: Re: guacd error segfault in libguac-client-rdp.so.0.0.0
On Wed, Jun 7, 2023 at 1:44 PM Gabriel Huerta Araujo <hu...@globalhitss.com.invalid> wrote:
>
> > Usually they're "core.<PID>", so you may want to search for "-name core.\*".
>
>
> I did not find anything:
It may be easier just for you to start guacd directly with gdb and get the information that way. Basically, you'll need to:
* Make sure gdb is installed, using your package manager for whatever distribution you're running.
* Launch guacd via gdb, as follows: gdb --args /path/to/guacd -L debug -f
* You'll get a gdb> prompt, and you can type "run"
* Attempt the connection, reproducing the segmentation fault.
* Once the segfault occurs, gdb will drop to the gdb> prompt, again, and you can then type "bt full" to get the full backtrace.
* Make sure to remove any sensitive data - for example, when I was debugging a segfault with 1.5.2, it would print out my connection parameters, including username/password for the server I was logging into.
-Nick
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org
Re: guacd error segfault in libguac-client-rdp.so.0.0.0
Posted by Nick Couchman <vn...@apache.org>.
On Wed, Jun 7, 2023 at 1:44 PM Gabriel Huerta Araujo
<hu...@globalhitss.com.invalid> wrote:
>
> > Usually they're "core.<PID>", so you may want to search for "-name core.\*".
>
>
> I did not find anything:
It may be easier just for you to start guacd directly with gdb and get
the information that way. Basically, you'll need to:
* Make sure gdb is installed, using your package manager for whatever
distribution you're running.
* Launch guacd via gdb, as follows: gdb --args /path/to/guacd -L debug -f
* You'll get a gdb> prompt, and you can type "run"
* Attempt the connection, reproducing the segmentation fault.
* Once the segfault occurs, gdb will drop to the gdb> prompt, again,
and you can then type "bt full" to get the full backtrace.
* Make sure to remove any sensitive data - for example, when I was
debugging a segfault with 1.5.2, it would print out my connection
parameters, including username/password for the server I was logging
into.
-Nick
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org
RE: guacd error segfault in libguac-client-rdp.so.0.0.0
Posted by Gabriel Huerta Araujo <hu...@globalhitss.com.INVALID>.
> Usually they're "core.<PID>", so you may want to search for "-name core.\*".
I did not find anything:
# for i in `find / -name "core.*" -print 2>/dev/null`
do
file $i | grep "core file" >/dev/null
if [ $? -eq 0 ]; then
file $i
fi
done
#
-Gabriel
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org
Re: guacd error segfault in libguac-client-rdp.so.0.0.0
Posted by Nick Couchman <vn...@apache.org>.
On Wed, Jun 7, 2023 at 12:51 PM Gabriel Huerta Araujo
<hu...@globalhitss.com.invalid> wrote:
>
> > If you can find the coredump file and do the backtrace on that file, that would be helpful, so we can see where the segfault is actually happening.
>
> > These files which are their file extensión?
>
>
> I tried to identify segfault (core files) and I did not find them
>
> for i in `find / -name core -print 2>/dev/null`
> do
> file $i | grep "core file" >/dev/null
> if [ $? -eq 0 ]; then
> file $i
> fi
Usually they're "core.<PID>", so you may want to search for "-name core.\*".
-Nick
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org
Re: guacd error segfault in libguac-client-rdp.so.0.0.0
Posted by Nick Couchman <vn...@apache.org>.
On Mon, Jun 12, 2023 at 4:58 AM Jürgen Kuri
<ju...@ionos.com.invalid> wrote:
>
> Hello Gabriel, hello Nick & Mike,
>
> I'm also one the users which had problems with disconnects in an earlier release (guacd 1.4.0). There were also core dumps with earlier releases (1.2.0) in a different connection which I can't remember anymore (as far as I recall for that I also created a ticket). At that time I opened a detailed ticket and provided core dumps and backtraces.
Hopefully these issues have been taken care of in later releases - if
not, let us know on those mailing list threads and/or Jira issues and
we'll have another look.
>
> I don't know if got this already but for generating core dumps you have to prepare your system. Normally, per default, writing core dumps to disk is disabled (RLIMIT_CORE). Before you start a process, here guacd, you have to enable it. So type ulimit -a (for all limits or -c, just seeing the core dump limit) in your shell:
This depends to some extent on the distribution you're running. For
example, RHEL (/CentOS/Rocky) has the "abrt" daemon which, when
installed and active, can handle core dumps and collect those and
other information into a central location to aide in bug reporting.
Some distributions, like you point out, disable core dumps by default
and they have to be explicitly enabled.
>
> I'm really keen on hearing if the core dump problems are solved somewhen since I experienced core dumps of guacd in different connections not only what is discussed here. There were also some on weak connections with small bandwidth in connection with audio (microphone).
I'd just suggest you track those on the existing conversations and/or
bug reports, and update appropriately. In the cases where we cannot
reproduce them ourselves we're relying on the information provided to
determine if they are in Guacamole or some other system component.
>
> Also intresting to hear to rebuild the FreeRDP library - did it help?
>
At this point, the only time we're providing this as an alternative is
with the issue with _aligned_recalloc(), and it isn't just rebuilding
the library, it's building a newer version that does not contain the
bug that causes the segfault.
-Nick
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org
Re: guacd error segfault in libguac-client-rdp.so.0.0.0
Posted by Jürgen Kuri <ju...@ionos.com.INVALID>.
Hello Gabriel, hello Nick & Mike,
I'm also one the users which had problems with disconnects in an earlier
release (guacd 1.4.0). There were also core dumps with earlier releases
(1.2.0) in a different connection which I can't remember anymore (as far
as I recall for that I also created a ticket). At that time I opened a
detailed ticket and provided core dumps and backtraces.
I don't know if got this already but for generating core dumps you have
to prepare your system. Normally, per default, writing core dumps to
disk is disabled (RLIMIT_CORE). Before you start a process, here guacd,
you have to enable it. So type ulimit -a (for all limits or -c, just
seeing the core dump limit) in your shell:
$ ulimit -a
real-time non-blocking time (microseconds, -R) unlimited
core file size (blocks, -c) 0
data seg size (kbytes, -d) unlimited
scheduling priority (-e) 0
file size (blocks, -f) unlimited
pending signals (-i) 126355
max locked memory (kbytes, -l) 4070536
max memory size (kbytes, -m) unlimited
open files (-n) 1024
pipe size (512 bytes, -p) 8
POSIX message queues (bytes, -q) 819200
real-time priority (-r) 0
stack size (kbytes, -s) 8192
cpu time (seconds, -t) unlimited
max user processes (-u) 126355
virtual memory (kbytes, -v) unlimited
file locks (-x) unlimited
As you can see "0" meaning max. allowed core file size is 0 bytes. Type:
$ ulimit -c unlimited
for unlimited core file size. Start here in this updated environment guacd.
You can also, before you start guacd, define - globally - the path where
the dumps are written to and with macros the specification of the file
name. Type
$ man core
for details.
I'm really keen on hearing if the core dump problems are solved somewhen
since I experienced core dumps of guacd in different connections not
only what is discussed here. There were also some on weak connections
with small bandwidth in connection with audio (microphone).
Also intresting to hear to rebuild the FreeRDP library - did it help?
I hope, I could help you a little bit.
Hasta la próxima.
Jorge
On 07.06.23 19:25, Gabriel Huerta Araujo wrote:
> I found this log information (syslog)
>
> Jun 7 11:14:50 tmxqrocnsG5 guacd[156163]: RDP server closed/refused connection: Manually logged off.
> Jun 7 11:14:50 tmxqrocnsG5 guacd[156163]: guacd[156163]:INFO:#011RDP server closed/refused connection: Manually logged off.
> Jun 7 11:14:50 tmxqrocnsG5 guacd[156163]: Internal RDP client disconnected
> Jun 7 11:14:50 tmxqrocnsG5 guacd[156163]: guacd[156163]:INFO:#011Internal RDP client disconnected
> Jun 7 11:14:50 tmxqrocnsG5 kernel: [205223.091624] guacd[156169]: segfault at 10 ip 00007fa1fc3e3622 sp 00007f9f92573c80 error 4 in libguac-client-rdp.so.0.0.0[7fa1fc3d1000+1a000]
> Jun 7 11:14:50 tmxqrocnsG5 kernel: [205223.091653] Code: 00 be 03 00 00 00 48 89 ef e8 8a e9 fe ff b8 01 00 00 00 e9 7a ff ff ff 53 48 8b 07 48 89 fb 48 89 de 48 8b 40 10 48 8b 40 20 <48> 8b 78 10 e8 25 e9 fe ff 8b 43 18 85 c0 74 0e 31 c0 5b c3 66 2e
> Jun 7 11:14:50 tmxqrocnsG5 guacd[568]: Connection "$fcf2766d-53e1-40da-9874-8fb9cd08e2e1" removed.
> Jun 7 11:14:50 tmxqrocnsG5 guacd[568]: guacd[568]:INFO:#011Connection "$fcf2766d-53e1-40da-9874-8fb9cd08e2e1" removed.
> Jun 7 11:15:00 tmxqrocnsG5 guacd[568]: Creating new client for protocol "rdp"
> Jun 7 11:15:00 tmxqrocnsG5 guacd[568]: guacd[568]:INFO:#011Creating new client for protocol "rdp"
> Jun 7 11:15:00 tmxqrocnsG5 guacd[568]: Connection ID is "$205fff34-792b-43b1-9d4c-c5a53af7edc3"
> Jun 7 11:15:00 tmxqrocnsG5 guacd[568]: guacd[568]:INFO:#011Connection ID is "$205fff34-792b-43b1-9d4c-c5a53af7edc3"
> Jun 7 11:15:00 tmxqrocnsG5 guacd[157660]: FreeRDP initialization may fail: The current user's home directory ("/usr/sbin") is not writable, but FreeRDP generally requires a writable home directory for storage of configuration files and certificates.
> Jun 7 11:15:00 tmxqrocnsG5 guacd[157660]: guacd[157660]: WARNING:#011FreeRDP initialization may fail: The current user's home directory ("/usr/sbin") is not writable, but FreeRDP generally requires a writable home directory for storage of configuration files and certificates.
> Jun 7 11:15:00 tmxqrocnsG5 guacd[157660]: guacd[157660]:INFO:#011No security mode specified. Defaulting to security mode negotiation with server.
> Jun 7 11:15:00 tmxqrocnsG5 guacd[157660]: guacd[157660]:INFO:#011Resize method: none
> Jun 7 11:15:00 tmxqrocnsG5 guacd[157660]: guacd[157660]:INFO:#011No clipboard line-ending normalization specified. Defaulting to preserving the format of all line endings.
> Jun 7 11:15:00 tmxqrocnsG5 guacd[157660]: guacd[157660]:INFO:#011User "@36c63a3c-96eb-452d-bef9-c8490c5cb12f" joined connection "$205fff34-792b-43b1-9d4c-c5a53af7edc3" (1 users now present)
> Jun 7 11:15:00 tmxqrocnsG5 guacd[157660]: No security mode specified. Defaulting to security mode negotiation with server.
> Jun 7 11:15:00 tmxqrocnsG5 guacd[157660]: Resize method: none
> Jun 7 11:15:00 tmxqrocnsG5 guacd[157660]: No clipboard line-ending normalization specified. Defaulting to preserving the format of all line endings.
> Jun 7 11:15:00 tmxqrocnsG5 guacd[157660]: User "@36c63a3c-96eb-452d-bef9-c8490c5cb12f" joined connection "$205fff34-792b-43b1-9d4c-c5a53af7edc3" (1 users now present)
> Jun 7 11:15:00 tmxqrocnsG5 guacd[157660]: Loading keymap "base"
> Jun 7 11:15:00 tmxqrocnsG5 guacd[157660]: Loading keymap "en-us-qwerty"
> Jun 7 11:15:00 tmxqrocnsG5 guacd[157660]: guacd[157660]:INFO:#011Loading keymap "base"
> Jun 7 11:15:00 tmxqrocnsG5 guacd[157660]: guacd[157660]:INFO:#011Loading keymap "en-us-qwerty"
> Jun 7 11:15:02 tmxqrocnsG5 guacd[157660]: Connected to RDPDR 1.12 as client 0x0009
>
> -Gabriel
>
> -----Mensaje original-----
> De: Gabriel Huerta Araujo
> Enviado el: miércoles, 7 de junio de 2023 10:51 a. m.
> Para:user@guacamole.apache.org
> Asunto: RE: guacd error segfault in libguac-client-rdp.so.0.0.0
>
>> If you can find the coredump file and do the backtrace on that file, that would be helpful, so we can see where the segfault is actually happening.
>> These files which are their file extensión?
>
> I tried to identify segfault (core files) and I did not find them
>
> for i in `find / -name core -print 2>/dev/null` do
> file $i | grep "core file" >/dev/null
> if [ $? -eq 0 ]; then
> file $i
> fi
> done
> /root/core: ELF 64-bit LSB core file, x86-64, version 1 (SYSV), SVR4-style, from '/usr/lib/vmware-tools/sbin64/vmtoolsd -n vmusr', real uid: 0, effective uid: 0, real gid: 0, effective gid: 0, execfn: '/usr/lib/vmware-tools/sbin64/vmtoolsd', platform: 'x86_64'
>
> Is there any another way to identify these segfaults which are mentioned in /var/log/message file? To check which is their problema cause.
>
> Jun 7 10:33:30 tmxqrocnsG5 kernel: [202742.808204] guacd[146842]: segfault at 10 ip 00007fa1fc3e3622 sp 00007fa00f66dc80 error 4 in libguac-client-rdp.so.0.0.0[7fa1fc3d1000+1a000]
> Jun 7 10:33:30 tmxqrocnsG5 kernel: [202742.808310] Code: 00 be 03 00 00 00 48 89 ef e8 8a e9 fe ff b8 01 00 00 00 e9 7a ff ff ff 53 48 8b 07 48 89 fb 48 89 de 48 8b 40 10 48 8b 40 20 <48> 8b 78 10 e8 25 e9 fe ff 8b 43 18 85 c0 74 0e 31 c0 5b c3 66 2e
>
> -Gabriel
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail:user-unsubscribe@guacamole.apache.org
> For additional commands, e-mail:user-help@guacamole.apache.org
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail:user-unsubscribe@guacamole.apache.org
> For additional commands, e-mail:user-help@guacamole.apache.org
RE: guacd error segfault in libguac-client-rdp.so.0.0.0
Posted by Gabriel Huerta Araujo <hu...@globalhitss.com.INVALID>.
I found this log information (syslog)
Jun 7 11:14:50 tmxqrocnsG5 guacd[156163]: RDP server closed/refused connection: Manually logged off.
Jun 7 11:14:50 tmxqrocnsG5 guacd[156163]: guacd[156163]: INFO:#011RDP server closed/refused connection: Manually logged off.
Jun 7 11:14:50 tmxqrocnsG5 guacd[156163]: Internal RDP client disconnected
Jun 7 11:14:50 tmxqrocnsG5 guacd[156163]: guacd[156163]: INFO:#011Internal RDP client disconnected
Jun 7 11:14:50 tmxqrocnsG5 kernel: [205223.091624] guacd[156169]: segfault at 10 ip 00007fa1fc3e3622 sp 00007f9f92573c80 error 4 in libguac-client-rdp.so.0.0.0[7fa1fc3d1000+1a000]
Jun 7 11:14:50 tmxqrocnsG5 kernel: [205223.091653] Code: 00 be 03 00 00 00 48 89 ef e8 8a e9 fe ff b8 01 00 00 00 e9 7a ff ff ff 53 48 8b 07 48 89 fb 48 89 de 48 8b 40 10 48 8b 40 20 <48> 8b 78 10 e8 25 e9 fe ff 8b 43 18 85 c0 74 0e 31 c0 5b c3 66 2e
Jun 7 11:14:50 tmxqrocnsG5 guacd[568]: Connection "$fcf2766d-53e1-40da-9874-8fb9cd08e2e1" removed.
Jun 7 11:14:50 tmxqrocnsG5 guacd[568]: guacd[568]: INFO:#011Connection "$fcf2766d-53e1-40da-9874-8fb9cd08e2e1" removed.
Jun 7 11:15:00 tmxqrocnsG5 guacd[568]: Creating new client for protocol "rdp"
Jun 7 11:15:00 tmxqrocnsG5 guacd[568]: guacd[568]: INFO:#011Creating new client for protocol "rdp"
Jun 7 11:15:00 tmxqrocnsG5 guacd[568]: Connection ID is "$205fff34-792b-43b1-9d4c-c5a53af7edc3"
Jun 7 11:15:00 tmxqrocnsG5 guacd[568]: guacd[568]: INFO:#011Connection ID is "$205fff34-792b-43b1-9d4c-c5a53af7edc3"
Jun 7 11:15:00 tmxqrocnsG5 guacd[157660]: FreeRDP initialization may fail: The current user's home directory ("/usr/sbin") is not writable, but FreeRDP generally requires a writable home directory for storage of configuration files and certificates.
Jun 7 11:15:00 tmxqrocnsG5 guacd[157660]: guacd[157660]: WARNING:#011FreeRDP initialization may fail: The current user's home directory ("/usr/sbin") is not writable, but FreeRDP generally requires a writable home directory for storage of configuration files and certificates.
Jun 7 11:15:00 tmxqrocnsG5 guacd[157660]: guacd[157660]: INFO:#011No security mode specified. Defaulting to security mode negotiation with server.
Jun 7 11:15:00 tmxqrocnsG5 guacd[157660]: guacd[157660]: INFO:#011Resize method: none
Jun 7 11:15:00 tmxqrocnsG5 guacd[157660]: guacd[157660]: INFO:#011No clipboard line-ending normalization specified. Defaulting to preserving the format of all line endings.
Jun 7 11:15:00 tmxqrocnsG5 guacd[157660]: guacd[157660]: INFO:#011User "@36c63a3c-96eb-452d-bef9-c8490c5cb12f" joined connection "$205fff34-792b-43b1-9d4c-c5a53af7edc3" (1 users now present)
Jun 7 11:15:00 tmxqrocnsG5 guacd[157660]: No security mode specified. Defaulting to security mode negotiation with server.
Jun 7 11:15:00 tmxqrocnsG5 guacd[157660]: Resize method: none
Jun 7 11:15:00 tmxqrocnsG5 guacd[157660]: No clipboard line-ending normalization specified. Defaulting to preserving the format of all line endings.
Jun 7 11:15:00 tmxqrocnsG5 guacd[157660]: User "@36c63a3c-96eb-452d-bef9-c8490c5cb12f" joined connection "$205fff34-792b-43b1-9d4c-c5a53af7edc3" (1 users now present)
Jun 7 11:15:00 tmxqrocnsG5 guacd[157660]: Loading keymap "base"
Jun 7 11:15:00 tmxqrocnsG5 guacd[157660]: Loading keymap "en-us-qwerty"
Jun 7 11:15:00 tmxqrocnsG5 guacd[157660]: guacd[157660]: INFO:#011Loading keymap "base"
Jun 7 11:15:00 tmxqrocnsG5 guacd[157660]: guacd[157660]: INFO:#011Loading keymap "en-us-qwerty"
Jun 7 11:15:02 tmxqrocnsG5 guacd[157660]: Connected to RDPDR 1.12 as client 0x0009
-Gabriel
-----Mensaje original-----
De: Gabriel Huerta Araujo
Enviado el: miércoles, 7 de junio de 2023 10:51 a. m.
Para: user@guacamole.apache.org
Asunto: RE: guacd error segfault in libguac-client-rdp.so.0.0.0
> If you can find the coredump file and do the backtrace on that file, that would be helpful, so we can see where the segfault is actually happening.
> These files which are their file extensión?
I tried to identify segfault (core files) and I did not find them
for i in `find / -name core -print 2>/dev/null` do
file $i | grep "core file" >/dev/null
if [ $? -eq 0 ]; then
file $i
fi
done
/root/core: ELF 64-bit LSB core file, x86-64, version 1 (SYSV), SVR4-style, from '/usr/lib/vmware-tools/sbin64/vmtoolsd -n vmusr', real uid: 0, effective uid: 0, real gid: 0, effective gid: 0, execfn: '/usr/lib/vmware-tools/sbin64/vmtoolsd', platform: 'x86_64'
Is there any another way to identify these segfaults which are mentioned in /var/log/message file? To check which is their problema cause.
Jun 7 10:33:30 tmxqrocnsG5 kernel: [202742.808204] guacd[146842]: segfault at 10 ip 00007fa1fc3e3622 sp 00007fa00f66dc80 error 4 in libguac-client-rdp.so.0.0.0[7fa1fc3d1000+1a000]
Jun 7 10:33:30 tmxqrocnsG5 kernel: [202742.808310] Code: 00 be 03 00 00 00 48 89 ef e8 8a e9 fe ff b8 01 00 00 00 e9 7a ff ff ff 53 48 8b 07 48 89 fb 48 89 de 48 8b 40 10 48 8b 40 20 <48> 8b 78 10 e8 25 e9 fe ff 8b 43 18 85 c0 74 0e 31 c0 5b c3 66 2e
-Gabriel
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org
RE: guacd error segfault in libguac-client-rdp.so.0.0.0
Posted by Gabriel Huerta Araujo <hu...@globalhitss.com.INVALID>.
> If you can find the coredump file and do the backtrace on that file, that would be helpful, so we can see where the segfault is actually happening.
> These files which are their file extensión?
I tried to identify segfault (core files) and I did not find them
for i in `find / -name core -print 2>/dev/null`
do
file $i | grep "core file" >/dev/null
if [ $? -eq 0 ]; then
file $i
fi
done
/root/core: ELF 64-bit LSB core file, x86-64, version 1 (SYSV), SVR4-style, from '/usr/lib/vmware-tools/sbin64/vmtoolsd -n vmusr', real uid: 0, effective uid: 0, real gid: 0, effective gid: 0, execfn: '/usr/lib/vmware-tools/sbin64/vmtoolsd', platform: 'x86_64'
Is there any another way to identify these segfaults which are mentioned in /var/log/message file? To check which is their problema cause.
Jun 7 10:33:30 tmxqrocnsG5 kernel: [202742.808204] guacd[146842]: segfault at 10 ip 00007fa1fc3e3622 sp 00007fa00f66dc80 error 4 in libguac-client-rdp.so.0.0.0[7fa1fc3d1000+1a000]
Jun 7 10:33:30 tmxqrocnsG5 kernel: [202742.808310] Code: 00 be 03 00 00 00 48 89 ef e8 8a e9 fe ff b8 01 00 00 00 e9 7a ff ff ff 53 48 8b 07 48 89 fb 48 89 de 48 8b 40 10 48 8b 40 20 <48> 8b 78 10 e8 25 e9 fe ff 8b 43 18 85 c0 74 0e 31 c0 5b c3 66 2e
-Gabriel
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org
RE: guacd error segfault in libguac-client-rdp.so.0.0.0
Posted by Gabriel Huerta Araujo <hu...@globalhitss.com.INVALID>.
Thanks a lot Nick for your soon answer.
> If you can find the coredump file and do the backtrace on that file, that would be helpful, so we can see where the segfault is actually happening.
These files which are their file extensión?
> Those libraries are used by all recent versions of Guacamole/guacd, but I'm not sure that the segfault you're seeing is going to be resolved by installing the libraries. The backtrace will help determine that. > Also, you could try updating to the latest release, 1.5.2, and see if that resolves the issue - there have been several bug fixes since 1.4.0, and that may resolve the segfaults you are seeing.
Ok Nick, I will take it on account.
-Gabriel
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org
RE: guacd error segfault in libguac-client-rdp.so.0.0.0
Posted by Gabriel Huerta Araujo <hu...@globalhitss.com.INVALID>.
>> I'll get an RC going today.
>> For any users encountering this while looking to upgrade, interim solutions would include any of the following:
>> * Build and install guacamole-server from the "staging/1.5.3" branch on git.
>> * Leverage the "guacamole/guacd" Docker image for guacd.
>> * Build and install a newer FreeRDP from source, instead of the older package from CentOS / Rocky.
If I wanted to do last option
* Build and install a newer FreeRDP from source, instead of the older package from CentOS / Rocky.
Why would I need to do?
Do I need to follow these steps (According to this article: https://github.com/FreeRDP/FreeRDP/wiki/Compilation)?
sudo apt build-dep freerdp-x11 or sudo apt build-dep freerdp2-x11
ln -s packaging/deb/freerdp-nightly debian
dpkg-buildpackage
Install the suggested base dependencies:
debian based
sudo apt-get install ninja-build build-essential git-core debhelper cdbs dpkg-dev autotools-dev cmake pkg-config xmlto libssl-dev docbook-xsl xsltproc libxkbfile-dev libx11-dev libwayland-dev libxrandr-dev libxi-dev libxrender-dev libxext-dev libxinerama-dev libxfixes-dev libxcursor-dev libxv-dev libxdamage-dev libxtst-dev libcups2-dev libpcsclite-dev libasound2-dev libpulse-dev libjpeg-dev libgsm1-dev libusb-1.0-0-dev libudev-dev libdbus-glib-1-dev uuid-dev libxml2-dev libgstreamer1.0-dev libgstreamer0.10-dev libgstreamer-plugins-base1.0-dev libgstreamer-plugins-base0.10-dev libfaad-dev libfaac-dev
Building 1.0.1 or master requires:
sudo apt-get install libavutil-dev libavcodec-dev libavresample-dev
rhel based
sudo yum install gcc cmake ninja-build openssl-devel libX11-devel libXext-devel libXinerama-devel libXcursor-devel \
libXi-devel libXdamage-devel libXv-devel libxkbfile-devel alsa-lib-devel cups-devel ffmpeg-devel glib2-devel libusb-devel \
faad2-devel pulseaudio-libs-devel gsm-devel faac-devel
Which is it recommended?
Debian or RHEL based?
- Gabriel
Re: guacd error segfault in libguac-client-rdp.so.0.0.0
Posted by Michael Jumper <mj...@apache.org>.
On 6/9/23 07:00, Nick Couchman wrote:
>>
>> I upgraded to 1.5.2 this morning, and had the same problem with
>> disconnection from all hosts. Base OS is Rocky Enterprise Linux 8.7. I
>> had to revert back to the previous Guac version. This is serious enough
>> that a 1.5.3 will likely need to be released when this is fixed.
>>
>
> Yes, a fix has already been committed to the staging/1.5.3 branch. We
> haven't had a discussion about the scope of the 1.5.3 release, but I
> agree that it is serious enough that we would likely release 1.5.3
> relatively quickly, especially given the security issues that were
> addressed in 1.5.2.
>
> https://issues.apache.org/jira/projects/GUACAMOLE/issues/GUACAMOLE-1802
> https://github.com/apache/guacamole-server/pull/445
>
I'll get an RC going today.
For any users encountering this while looking to upgrade, interim
solutions would include any of the following:
* Build and install guacamole-server from the "staging/1.5.3" branch on git.
* Leverage the "guacamole/guacd" Docker image for guacd.
* Build and install a newer FreeRDP from source, instead of the older
package from CentOS / Rocky.
- Mike
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org
Re: guacd error segfault in libguac-client-rdp.so.0.0.0
Posted by Nick Couchman <vn...@apache.org>.
>
> I upgraded to 1.5.2 this morning, and had the same problem with
> disconnection from all hosts. Base OS is Rocky Enterprise Linux 8.7. I
> had to revert back to the previous Guac version. This is serious enough
> that a 1.5.3 will likely need to be released when this is fixed.
>
Yes, a fix has already been committed to the staging/1.5.3 branch. We
haven't had a discussion about the scope of the 1.5.3 release, but I
agree that it is serious enough that we would likely release 1.5.3
relatively quickly, especially given the security issues that were
addressed in 1.5.2.
https://issues.apache.org/jira/projects/GUACAMOLE/issues/GUACAMOLE-1802
https://github.com/apache/guacamole-server/pull/445
-Nick
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org
Re: guacd error segfault in libguac-client-rdp.so.0.0.0
Posted by Jason Keltz <ja...@yorku.ca>.
On 6/6/23 21:21, Nick Couchman wrote:
> On Tue, Jun 6, 2023 at 7:20 PM Grant Byers <Gr...@aarnet.edu.au> wrote:
>> FYI,
>>
>> We've experienced segfaults in libguac-client-rdp.so.0.0.0 this morning
>> too. Our systems auto-updated guacd & libguac components to 1.5.2 early
>> this morning. Have downgraded to 1.5.1 until we can spin up a dev
>> environment and test further. However, i think it's likely related to us
>> still running the 1.4.0 client. Depending on other commitments, i'll try
>> and get a dev up with the 1.5.2 client & confirm.
>>
> I encountered an issue today with 1.5.2, and I don't think it has
> anything to do with the client version. I actually posted about it
> over on the dev@ mailing list, and I think I've tracked down what's
> causing it, though I'm not sure why. You can read the thread, here:
>
> https://lists.apache.org/thread/ws7xykpm2cmnz2w42y9qy8kkn6hdpr0x
>
> That said, I don't think it's the same issue as Gabriel was seeing, as
> the 1.5.2 segfault was definitely introduced by a change in 1.5.2, and
> Gabriel mentioned running version 1.4.0.
>
> -Nick
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
> For additional commands, e-mail: user-help@guacamole.apache.org
>
Hi Nick,
I upgraded to 1.5.2 this morning, and had the same problem with
disconnection from all hosts. Base OS is Rocky Enterprise Linux 8.7. I
had to revert back to the previous Guac version. This is serious enough
that a 1.5.3 will likely need to be released when this is fixed.
Jason.
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org
Re: guacd error segfault in libguac-client-rdp.so.0.0.0
Posted by Nick Couchman <vn...@apache.org>.
On Tue, Jun 6, 2023 at 7:20 PM Grant Byers <Gr...@aarnet.edu.au> wrote:
>
> FYI,
>
> We've experienced segfaults in libguac-client-rdp.so.0.0.0 this morning
> too. Our systems auto-updated guacd & libguac components to 1.5.2 early
> this morning. Have downgraded to 1.5.1 until we can spin up a dev
> environment and test further. However, i think it's likely related to us
> still running the 1.4.0 client. Depending on other commitments, i'll try
> and get a dev up with the 1.5.2 client & confirm.
>
I encountered an issue today with 1.5.2, and I don't think it has
anything to do with the client version. I actually posted about it
over on the dev@ mailing list, and I think I've tracked down what's
causing it, though I'm not sure why. You can read the thread, here:
https://lists.apache.org/thread/ws7xykpm2cmnz2w42y9qy8kkn6hdpr0x
That said, I don't think it's the same issue as Gabriel was seeing, as
the 1.5.2 segfault was definitely introduced by a change in 1.5.2, and
Gabriel mentioned running version 1.4.0.
-Nick
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org
Re: guacd error segfault in libguac-client-rdp.so.0.0.0
Posted by Grant Byers <Gr...@aarnet.edu.au>.
FYI,
We've experienced segfaults in libguac-client-rdp.so.0.0.0 this morning
too. Our systems auto-updated guacd & libguac components to 1.5.2 early
this morning. Have downgraded to 1.5.1 until we can spin up a dev
environment and test further. However, i think it's likely related to us
still running the 1.4.0 client. Depending on other commitments, i'll try
and get a dev up with the 1.5.2 client & confirm.
Regards,
Grant
On 6/7/23 03:12, Nick Couchman wrote:
> [External Mail]
>
>
> On Tue, Jun 6, 2023 at 11:47 AM Gabriel Huerta Araujo
> <hu...@globalhitss.com.invalid> wrote:
>> Hi everyone
>>
>> Our guacamole aplication generates this kind of messages.
>>
>> Jun 4 02:00:17 tmxqrocnsG5 kernel: [10453754.826401] Code: 00 be 03 00 00 00 48 89 ef e8 8a e9 fe ff b8 01 00 00 00 e9 7a ff ff ff 53 48 8b 07 48 89 fb 48 89 de 48 8b 40 10 48 8b 40 20 <48> 8b 78 10 e8 25 e9 fe ff 8b 43 18 85 c0 74 0e 31 c0 5b c3 66 2e
>> Jun 4 02:00:17 tmxqrocnsG5 kernel: [10453755.209724] guacd[3337136]: segfault at 10 ip 00007f79a06a7622 sp 00007f77f5ef2c80 error 4 in libguac-client-rdp.so.0.0.0[7f79a0695000+1a000]
> If you can find the coredump file and do the backtrace on that file,
> that would be helpful, so we can see where the segfault is actually
> happening.
>
>> Is this solve with this recommendation?
>>
>> Install these libraries:
>> freerdp2-dev freerdp2-x11 libwebsockets-dev
>>
>> According to this link: https://stackoverflow.com/questions/54754785/guacamole-closing-socket-to-guacd-when-i-connect
>>
>>
>> Our application also is running in a Debian.
>>
>> It mentions is aplicable for version 1.3.0. Our application is 1.4.0. Can I use them?
> Those libraries are used by all recent versions of Guacamole/guacd,
> but I'm not sure that the segfault you're seeing is going to be
> resolved by installing the libraries. The backtrace will help
> determine that. Also, you could try updating to the latest release,
> 1.5.2, and see if that resolves the issue - there have been several
> bug fixes since 1.4.0, and that may resolve the segfaults you are
> seeing.
>
> -Nick
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
> For additional commands, e-mail: user-help@guacamole.apache.org
>
Re: guacd error segfault in libguac-client-rdp.so.0.0.0
Posted by Nick Couchman <vn...@apache.org>.
On Tue, Jun 6, 2023 at 11:47 AM Gabriel Huerta Araujo
<hu...@globalhitss.com.invalid> wrote:
>
> Hi everyone
>
> Our guacamole aplication generates this kind of messages.
>
> Jun 4 02:00:17 tmxqrocnsG5 kernel: [10453754.826401] Code: 00 be 03 00 00 00 48 89 ef e8 8a e9 fe ff b8 01 00 00 00 e9 7a ff ff ff 53 48 8b 07 48 89 fb 48 89 de 48 8b 40 10 48 8b 40 20 <48> 8b 78 10 e8 25 e9 fe ff 8b 43 18 85 c0 74 0e 31 c0 5b c3 66 2e
> Jun 4 02:00:17 tmxqrocnsG5 kernel: [10453755.209724] guacd[3337136]: segfault at 10 ip 00007f79a06a7622 sp 00007f77f5ef2c80 error 4 in libguac-client-rdp.so.0.0.0[7f79a0695000+1a000]
If you can find the coredump file and do the backtrace on that file,
that would be helpful, so we can see where the segfault is actually
happening.
>
> Is this solve with this recommendation?
>
> Install these libraries:
> freerdp2-dev freerdp2-x11 libwebsockets-dev
>
> According to this link: https://stackoverflow.com/questions/54754785/guacamole-closing-socket-to-guacd-when-i-connect
>
>
> Our application also is running in a Debian.
>
> It mentions is aplicable for version 1.3.0. Our application is 1.4.0. Can I use them?
Those libraries are used by all recent versions of Guacamole/guacd,
but I'm not sure that the segfault you're seeing is going to be
resolved by installing the libraries. The backtrace will help
determine that. Also, you could try updating to the latest release,
1.5.2, and see if that resolves the issue - there have been several
bug fixes since 1.4.0, and that may resolve the segfaults you are
seeing.
-Nick
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org
guacd error segfault in libguac-client-rdp.so.0.0.0
Posted by Gabriel Huerta Araujo <hu...@globalhitss.com.INVALID>.
Hi everyone
Our guacamole aplication generates this kind of messages.
Jun 4 02:00:17 tmxqrocnsG5 kernel: [10453754.826401] Code: 00 be 03 00 00 00 48 89 ef e8 8a e9 fe ff b8 01 00 00 00 e9 7a ff ff ff 53 48 8b 07 48 89 fb 48 89 de 48 8b 40 10 48 8b 40 20 <48> 8b 78 10 e8 25 e9 fe ff 8b 43 18 85 c0 74 0e 31 c0 5b c3 66 2e
Jun 4 02:00:17 tmxqrocnsG5 kernel: [10453755.209724] guacd[3337136]: segfault at 10 ip 00007f79a06a7622 sp 00007f77f5ef2c80 error 4 in libguac-client-rdp.so.0.0.0[7f79a0695000+1a000]
Is this solve with this recommendation?
Install these libraries:
freerdp2-dev freerdp2-x11 libwebsockets-dev
According to this link: https://stackoverflow.com/questions/54754785/guacamole-closing-socket-to-guacd-when-i-connect
Our application also is running in a Debian.
It mentions is aplicable for version 1.3.0. Our application is 1.4.0. Can I use them?
-Gabriel
Re: How to activate guac log
Posted by Nick Couchman <vn...@apache.org>.
On Mon, Jun 5, 2023 at 3:16 PM Gabriel Huerta Araujo
<hu...@globalhitss.com.invalid> wrote:
>
> Hi everyone
>
>
>
> I tried to know where guac log is located but I did not find it. Is there any configuration I have to do in order to generate it? Some link talking about this, it will be fully grateful.
>
Can you clarify what you mean by "guac log"? guacd output is usually
logged to Syslog, so it will be available in your normal syslog
location (/var/log/messages, journalctl, etc.). If you need to adjust
the logging level you can do this either in the gaucd.conf file or
using command-line switches.
For the web application (Guacamole Client), this information will be
logged wherever Tomcat (or your web application server) logs its data.
This varies based on the web application server and how its
configured, so you'll need to figure out where that information is
logged. If you install Tomcat from the tar.gz or zip file on the
website, the logs can be see in the log/catalina.out folder within the
Tomcat installation folder. The verbosity of logging is configured
with the logback.xml file, as noted in the manual.
https://guacamole.apache.org/doc/gug/configuring-guacamole.html#logging-within-the-web-application
-Nick
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org
How to activate guac log
Posted by Gabriel Huerta Araujo <hu...@globalhitss.com.INVALID>.
Hi everyone
I tried to know where guac log is located but I did not find it. Is there any configuration I have to do in order to generate it? Some link talking about this, it will be fully grateful.
-Gabriel
Re: Error with only some servers
Posted by Michael Jumper <mj...@apache.org>.
You are encountering:
https://github.com/libssh2/libssh2/issues/634
which should be fixed by:
https://github.com/libssh2/libssh2/pull/626
but has not yet made it into a libssh2 release. You can build libssh2 from
git, or reconfigure OpenSSH on the Ubuntu server to work around things.
- Mike
On Tue, Feb 7, 2023, 4:21 PM Brendan <ba...@fastmail.com.au> wrote:
> OpenSSH_8.9p1 Ubuntu-3ubuntu0.1, OpenSSL 3.0.2 15 Mar 2022
>
>
> On Wed, 8 Feb 2023, at 10:18, Michael Jumper wrote:
>
> What version of OpenSSH is on the destination machine?
>
> On Tue, Feb 7, 2023, 4:18 PM Brendan <ba...@fastmail.com.au> wrote:
>
>
> I'm not sure, how do i find out?
>
> Also, i removed the key, and it still doesn't work. I just recreated the
> server, and it still doesn't work
>
> Regards
> Brendan.
>
> On Wed, 8 Feb 2023, at 10:14, Michael Jumper wrote:
>
> What kind of private key is this?
>
> On Tue, Feb 7, 2023, 3:59 PM Brendan <ba...@fastmail.com.au> wrote:
>
>
> Hi
>
> I've got one last problem. One of my servers still isn't connecting,
> despite checking that i had the parameters set, not the proxy details.
>
> When I try to connect, i get the following:
>
> guacd[251]: INFO: Creating new client for protocol "ssh"
> guacd[251]: INFO: Connection ID is "$b8f61fb7-71a4-4ab2-80f1-b69fd11beda2"
> 01:55:32.223 [http-nio-8080-exec-3] INFO
> o.a.g.tunnel.TunnelRequestService - User "brendan" connected to connection
> "5".
> guacd[2115]: INFO: User "@36ada82c-1c68-4f1b-8a4d-55512697534f" joined
> connection "$b8f61fb7-71a4-4ab2-80f1-b69fd11beda2" (1 users now present)
> guacd[2115]: INFO: Auth key successfully imported.
> guacd[2115]: ERROR: SSH handshake failed.
> 01:55:32.282 [http-nio-8080-exec-10] INFO
> o.a.g.tunnel.TunnelRequestService - User "brendan" disconnected from
> connection "5". Duration: 55 milliseconds
> guacd[2115]: INFO: User "@36ada82c-1c68-4f1b-8a4d-55512697534f"
> disconnected (0 users remain)
> guacd[2115]: INFO: Last user of connection
> "$b8f61fb7-71a4-4ab2-80f1-b69fd11beda2" disconnected
> Exception in thread "Thread-14" java.lang.IllegalStateException: Message
> will not be sent because the WebSocket session has been closed
> at
> org.apache.tomcat.websocket.WsRemoteEndpointImplBase.writeMessagePart(WsRemoteEndpointImplBase.java:425)
> at
> org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendMessageBlock(WsRemoteEndpointImplBase.java:309)
> at
> org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendMessageBlock(WsRemoteEndpointImplBase.java:250)
> at
> org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendString(WsRemoteEndpointImplBase.java:191)
> at
> org.apache.tomcat.websocket.WsRemoteEndpointBasic.sendText(WsRemoteEndpointBasic.java:37)
> at
> org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint.sendInstruction(GuacamoleWebSocketTunnelEndpoint.java:152)
> at
> org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint.access$200(GuacamoleWebSocketTunnelEndpoint.java:53)
> at
> org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint$2.run(GuacamoleWebSocketTunnelEndpoint.java:253)
> guacd[251]: INFO: Connection "$b8f61fb7-71a4-4ab2-80f1-b69fd11beda2"
> removed.
>
>
> On Wed, 8 Feb 2023, at 09:47, Brendan wrote:
>
> aha. Yes, i filled in the proxy details, not the proper part.
>
> Thanks for your help
>
> regards
> Brendan.
>
> On Wed, 8 Feb 2023, at 09:43, Michael Jumper wrote:
>
> The error in question is specifically regarding the webapp being unable to
> connect over TCP to the guacd service, so something must be interfering
> with that...
>
> Did you perchance accidentally fill in the hostname/address for the
> destination machine in the "Guacamole proxy parameters (guacd)" section and
> not the "Parameters" section?
>
> - Mike
>
> On Tue, Feb 7, 2023, 3:40 PM Brendan <ba...@fastmail.com.au> wrote:
>
>
> Hi
>
> I just removed the IPv6 from the /etc/hosts, and it didn't resolve
> anything. I don't think it's because guacd isn't running, because other
> servers work fine.
>
> Regards
> Brendan.
>
> On Wed, 8 Feb 2023, at 02:48, Michael Jumper wrote:
>
> On Tue, Feb 7, 2023, 1:24 AM Brendan <ba...@fastmail.com.au> wrote:
>
>
> Hello
>
> I am having a problem whereby a couple of my servers won't connect in
> guac. It says in the web client "An error has occurred with the guacamole
> server". I ran docker logs guacamole and this is the error i get:
>
> 11:20:29.290 [http-nio-8080-exec-6] ERROR
> o.a.g.w.GuacamoleWebSocketTunnelEndpoint - Creation of WebSocket tunnel to
> guacd failed: java.net.ConnectException: Connection refused (Connection
> refused)
> 11:20:29.307 [http-nio-8080-exec-8] ERROR
> o.a.g.s.GuacamoleHTTPTunnelServlet - HTTP tunnel request failed:
> java.net.ConnectException: Connection refused (Connection refused)
>
>
> This sounds like guacd isn't running, or something is blocking the
> connection from the webapp to guacd.
>
> I should note, that i have other servers working perfectly fine. I also
> tried with key authentication, which also did not work.
>
> Any ideas?
>
>
> Does your system have both IPv4 and IPv6 addresses associated with
> "localhost" in /etc/hosts? The guacd service will be listening on one
> specific address, but if "localhost" is associated with multiple, then the
> OS will round-robin between those addresses and mysteriously fail to
> connect whenever the address that guacd *isn't* listening on happens to be
> used.
>
> - Mike
>
>
>
>
>
>
>
>
Re: Error with only some servers
Posted by Brendan <ba...@fastmail.com.au>.
OpenSSH_8.9p1 Ubuntu-3ubuntu0.1, OpenSSL 3.0.2 15 Mar 2022
On Wed, 8 Feb 2023, at 10:18, Michael Jumper wrote:
> What version of OpenSSH is on the destination machine?
>
> On Tue, Feb 7, 2023, 4:18 PM Brendan <ba...@fastmail.com.au> wrote:
>> __
>> I'm not sure, how do i find out?
>>
>> Also, i removed the key, and it still doesn't work. I just recreated the server, and it still doesn't work
>>
>> Regards
>> Brendan.
>>
>> On Wed, 8 Feb 2023, at 10:14, Michael Jumper wrote:
>>> What kind of private key is this?
>>>
>>> On Tue, Feb 7, 2023, 3:59 PM Brendan <ba...@fastmail.com.au> wrote:
>>>> __
>>>> Hi
>>>>
>>>> I've got one last problem. One of my servers still isn't connecting, despite checking that i had the parameters set, not the proxy details.
>>>>
>>>> When I try to connect, i get the following:
>>>>
>>>> guacd[251]: INFO: Creating new client for protocol "ssh"
>>>> guacd[251]: INFO: Connection ID is "$b8f61fb7-71a4-4ab2-80f1-b69fd11beda2"
>>>> 01:55:32.223 [http-nio-8080-exec-3] INFO o.a.g.tunnel.TunnelRequestService - User "brendan" connected to connection "5".
>>>> guacd[2115]: INFO: User "@36ada82c-1c68-4f1b-8a4d-55512697534f" joined connection "$b8f61fb7-71a4-4ab2-80f1-b69fd11beda2" (1 users now present)
>>>> guacd[2115]: INFO: Auth key successfully imported.
>>>> guacd[2115]: ERROR: SSH handshake failed.
>>>> 01:55:32.282 [http-nio-8080-exec-10] INFO o.a.g.tunnel.TunnelRequestService - User "brendan" disconnected from connection "5". Duration: 55 milliseconds
>>>> guacd[2115]: INFO: User "@36ada82c-1c68-4f1b-8a4d-55512697534f" disconnected (0 users remain)
>>>> guacd[2115]: INFO: Last user of connection "$b8f61fb7-71a4-4ab2-80f1-b69fd11beda2" disconnected
>>>> Exception in thread "Thread-14" java.lang.IllegalStateException: Message will not be sent because the WebSocket session has been closed
>>>> at org.apache.tomcat.websocket.WsRemoteEndpointImplBase.writeMessagePart(WsRemoteEndpointImplBase.java:425)
>>>> at org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendMessageBlock(WsRemoteEndpointImplBase.java:309)
>>>> at org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendMessageBlock(WsRemoteEndpointImplBase.java:250)
>>>> at org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendString(WsRemoteEndpointImplBase.java:191)
>>>> at org.apache.tomcat.websocket.WsRemoteEndpointBasic.sendText(WsRemoteEndpointBasic.java:37)
>>>> at org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint.sendInstruction(GuacamoleWebSocketTunnelEndpoint.java:152)
>>>> at org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint.access$200(GuacamoleWebSocketTunnelEndpoint.java:53)
>>>> at org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint$2.run(GuacamoleWebSocketTunnelEndpoint.java:253)
>>>> guacd[251]: INFO: Connection "$b8f61fb7-71a4-4ab2-80f1-b69fd11beda2" removed.
>>>>
>>>>
>>>> On Wed, 8 Feb 2023, at 09:47, Brendan wrote:
>>>>> aha. Yes, i filled in the proxy details, not the proper part.
>>>>>
>>>>> Thanks for your help
>>>>>
>>>>> regards
>>>>> Brendan.
>>>>>
>>>>> On Wed, 8 Feb 2023, at 09:43, Michael Jumper wrote:
>>>>>> The error in question is specifically regarding the webapp being unable to connect over TCP to the guacd service, so something must be interfering with that...
>>>>>>
>>>>>> Did you perchance accidentally fill in the hostname/address for the destination machine in the "Guacamole proxy parameters (guacd)" section and not the "Parameters" section?
>>>>>>
>>>>>> - Mike
>>>>>>
>>>>>> On Tue, Feb 7, 2023, 3:40 PM Brendan <ba...@fastmail.com.au> wrote:
>>>>>>> __
>>>>>>> Hi
>>>>>>>
>>>>>>> I just removed the IPv6 from the /etc/hosts, and it didn't resolve anything. I don't think it's because guacd isn't running, because other servers work fine.
>>>>>>>
>>>>>>> Regards
>>>>>>> Brendan.
>>>>>>>
>>>>>>> On Wed, 8 Feb 2023, at 02:48, Michael Jumper wrote:
>>>>>>>> On Tue, Feb 7, 2023, 1:24 AM Brendan <ba...@fastmail.com.au> wrote:
>>>>>>>>> __
>>>>>>>>> Hello
>>>>>>>>>
>>>>>>>>> I am having a problem whereby a couple of my servers won't connect in guac. It says in the web client "An error has occurred with the guacamole server". I ran docker logs guacamole and this is the error i get:
>>>>>>>>>
>>>>>>>>> 11:20:29.290 [http-nio-8080-exec-6] ERROR o.a.g.w.GuacamoleWebSocketTunnelEndpoint - Creation of WebSocket tunnel to guacd failed: java.net.ConnectException: Connection refused (Connection refused)
>>>>>>>>> 11:20:29.307 [http-nio-8080-exec-8] ERROR o.a.g.s.GuacamoleHTTPTunnelServlet - HTTP tunnel request failed: java.net.ConnectException: Connection refused (Connection refused)
>>>>>>>>
>>>>>>>> This sounds like guacd isn't running, or something is blocking the connection from the webapp to guacd.
>>>>>>>>
>>>>>>>>> I should note, that i have other servers working perfectly fine. I also tried with key authentication, which also did not work.
>>>>>>>>>
>>>>>>>>> Any ideas?
>>>>>>>>
>>>>>>>> Does your system have both IPv4 and IPv6 addresses associated with "localhost" in /etc/hosts? The guacd service will be listening on one specific address, but if "localhost" is associated with multiple, then the OS will round-robin between those addresses and mysteriously fail to connect whenever the address that guacd *isn't* listening on happens to be used.
>>>>>>>>
>>>>>>>> - Mike
>>>>>>>>
>>>>>>>>
>>>>>>>
>>>>>
>>>>
>>
Re: Error with only some servers
Posted by Michael Jumper <mj...@apache.org>.
What version of OpenSSH is on the destination machine?
On Tue, Feb 7, 2023, 4:18 PM Brendan <ba...@fastmail.com.au> wrote:
> I'm not sure, how do i find out?
>
> Also, i removed the key, and it still doesn't work. I just recreated the
> server, and it still doesn't work
>
> Regards
> Brendan.
>
> On Wed, 8 Feb 2023, at 10:14, Michael Jumper wrote:
>
> What kind of private key is this?
>
> On Tue, Feb 7, 2023, 3:59 PM Brendan <ba...@fastmail.com.au> wrote:
>
>
> Hi
>
> I've got one last problem. One of my servers still isn't connecting,
> despite checking that i had the parameters set, not the proxy details.
>
> When I try to connect, i get the following:
>
> guacd[251]: INFO: Creating new client for protocol "ssh"
> guacd[251]: INFO: Connection ID is "$b8f61fb7-71a4-4ab2-80f1-b69fd11beda2"
> 01:55:32.223 [http-nio-8080-exec-3] INFO
> o.a.g.tunnel.TunnelRequestService - User "brendan" connected to connection
> "5".
> guacd[2115]: INFO: User "@36ada82c-1c68-4f1b-8a4d-55512697534f" joined
> connection "$b8f61fb7-71a4-4ab2-80f1-b69fd11beda2" (1 users now present)
> guacd[2115]: INFO: Auth key successfully imported.
> guacd[2115]: ERROR: SSH handshake failed.
> 01:55:32.282 [http-nio-8080-exec-10] INFO
> o.a.g.tunnel.TunnelRequestService - User "brendan" disconnected from
> connection "5". Duration: 55 milliseconds
> guacd[2115]: INFO: User "@36ada82c-1c68-4f1b-8a4d-55512697534f"
> disconnected (0 users remain)
> guacd[2115]: INFO: Last user of connection
> "$b8f61fb7-71a4-4ab2-80f1-b69fd11beda2" disconnected
> Exception in thread "Thread-14" java.lang.IllegalStateException: Message
> will not be sent because the WebSocket session has been closed
> at
> org.apache.tomcat.websocket.WsRemoteEndpointImplBase.writeMessagePart(WsRemoteEndpointImplBase.java:425)
> at
> org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendMessageBlock(WsRemoteEndpointImplBase.java:309)
> at
> org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendMessageBlock(WsRemoteEndpointImplBase.java:250)
> at
> org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendString(WsRemoteEndpointImplBase.java:191)
> at
> org.apache.tomcat.websocket.WsRemoteEndpointBasic.sendText(WsRemoteEndpointBasic.java:37)
> at
> org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint.sendInstruction(GuacamoleWebSocketTunnelEndpoint.java:152)
> at
> org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint.access$200(GuacamoleWebSocketTunnelEndpoint.java:53)
> at
> org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint$2.run(GuacamoleWebSocketTunnelEndpoint.java:253)
> guacd[251]: INFO: Connection "$b8f61fb7-71a4-4ab2-80f1-b69fd11beda2"
> removed.
>
>
> On Wed, 8 Feb 2023, at 09:47, Brendan wrote:
>
> aha. Yes, i filled in the proxy details, not the proper part.
>
> Thanks for your help
>
> regards
> Brendan.
>
> On Wed, 8 Feb 2023, at 09:43, Michael Jumper wrote:
>
> The error in question is specifically regarding the webapp being unable to
> connect over TCP to the guacd service, so something must be interfering
> with that...
>
> Did you perchance accidentally fill in the hostname/address for the
> destination machine in the "Guacamole proxy parameters (guacd)" section and
> not the "Parameters" section?
>
> - Mike
>
> On Tue, Feb 7, 2023, 3:40 PM Brendan <ba...@fastmail.com.au> wrote:
>
>
> Hi
>
> I just removed the IPv6 from the /etc/hosts, and it didn't resolve
> anything. I don't think it's because guacd isn't running, because other
> servers work fine.
>
> Regards
> Brendan.
>
> On Wed, 8 Feb 2023, at 02:48, Michael Jumper wrote:
>
> On Tue, Feb 7, 2023, 1:24 AM Brendan <ba...@fastmail.com.au> wrote:
>
>
> Hello
>
> I am having a problem whereby a couple of my servers won't connect in
> guac. It says in the web client "An error has occurred with the guacamole
> server". I ran docker logs guacamole and this is the error i get:
>
> 11:20:29.290 [http-nio-8080-exec-6] ERROR
> o.a.g.w.GuacamoleWebSocketTunnelEndpoint - Creation of WebSocket tunnel to
> guacd failed: java.net.ConnectException: Connection refused (Connection
> refused)
> 11:20:29.307 [http-nio-8080-exec-8] ERROR
> o.a.g.s.GuacamoleHTTPTunnelServlet - HTTP tunnel request failed:
> java.net.ConnectException: Connection refused (Connection refused)
>
>
> This sounds like guacd isn't running, or something is blocking the
> connection from the webapp to guacd.
>
> I should note, that i have other servers working perfectly fine. I also
> tried with key authentication, which also did not work.
>
> Any ideas?
>
>
> Does your system have both IPv4 and IPv6 addresses associated with
> "localhost" in /etc/hosts? The guacd service will be listening on one
> specific address, but if "localhost" is associated with multiple, then the
> OS will round-robin between those addresses and mysteriously fail to
> connect whenever the address that guacd *isn't* listening on happens to be
> used.
>
> - Mike
>
>
>
>
>
>
>
Re: Error with only some servers
Posted by Brendan <ba...@fastmail.com.au>.
I'm not sure, how do i find out?
Also, i removed the key, and it still doesn't work. I just recreated the server, and it still doesn't work
Regards
Brendan.
On Wed, 8 Feb 2023, at 10:14, Michael Jumper wrote:
> What kind of private key is this?
>
> On Tue, Feb 7, 2023, 3:59 PM Brendan <ba...@fastmail.com.au> wrote:
>> __
>> Hi
>>
>> I've got one last problem. One of my servers still isn't connecting, despite checking that i had the parameters set, not the proxy details.
>>
>> When I try to connect, i get the following:
>>
>> guacd[251]: INFO: Creating new client for protocol "ssh"
>> guacd[251]: INFO: Connection ID is "$b8f61fb7-71a4-4ab2-80f1-b69fd11beda2"
>> 01:55:32.223 [http-nio-8080-exec-3] INFO o.a.g.tunnel.TunnelRequestService - User "brendan" connected to connection "5".
>> guacd[2115]: INFO: User "@36ada82c-1c68-4f1b-8a4d-55512697534f" joined connection "$b8f61fb7-71a4-4ab2-80f1-b69fd11beda2" (1 users now present)
>> guacd[2115]: INFO: Auth key successfully imported.
>> guacd[2115]: ERROR: SSH handshake failed.
>> 01:55:32.282 [http-nio-8080-exec-10] INFO o.a.g.tunnel.TunnelRequestService - User "brendan" disconnected from connection "5". Duration: 55 milliseconds
>> guacd[2115]: INFO: User "@36ada82c-1c68-4f1b-8a4d-55512697534f" disconnected (0 users remain)
>> guacd[2115]: INFO: Last user of connection "$b8f61fb7-71a4-4ab2-80f1-b69fd11beda2" disconnected
>> Exception in thread "Thread-14" java.lang.IllegalStateException: Message will not be sent because the WebSocket session has been closed
>> at org.apache.tomcat.websocket.WsRemoteEndpointImplBase.writeMessagePart(WsRemoteEndpointImplBase.java:425)
>> at org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendMessageBlock(WsRemoteEndpointImplBase.java:309)
>> at org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendMessageBlock(WsRemoteEndpointImplBase.java:250)
>> at org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendString(WsRemoteEndpointImplBase.java:191)
>> at org.apache.tomcat.websocket.WsRemoteEndpointBasic.sendText(WsRemoteEndpointBasic.java:37)
>> at org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint.sendInstruction(GuacamoleWebSocketTunnelEndpoint.java:152)
>> at org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint.access$200(GuacamoleWebSocketTunnelEndpoint.java:53)
>> at org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint$2.run(GuacamoleWebSocketTunnelEndpoint.java:253)
>> guacd[251]: INFO: Connection "$b8f61fb7-71a4-4ab2-80f1-b69fd11beda2" removed.
>>
>>
>> On Wed, 8 Feb 2023, at 09:47, Brendan wrote:
>>> aha. Yes, i filled in the proxy details, not the proper part.
>>>
>>> Thanks for your help
>>>
>>> regards
>>> Brendan.
>>>
>>> On Wed, 8 Feb 2023, at 09:43, Michael Jumper wrote:
>>>> The error in question is specifically regarding the webapp being unable to connect over TCP to the guacd service, so something must be interfering with that...
>>>>
>>>> Did you perchance accidentally fill in the hostname/address for the destination machine in the "Guacamole proxy parameters (guacd)" section and not the "Parameters" section?
>>>>
>>>> - Mike
>>>>
>>>> On Tue, Feb 7, 2023, 3:40 PM Brendan <ba...@fastmail.com.au> wrote:
>>>>> __
>>>>> Hi
>>>>>
>>>>> I just removed the IPv6 from the /etc/hosts, and it didn't resolve anything. I don't think it's because guacd isn't running, because other servers work fine.
>>>>>
>>>>> Regards
>>>>> Brendan.
>>>>>
>>>>> On Wed, 8 Feb 2023, at 02:48, Michael Jumper wrote:
>>>>>> On Tue, Feb 7, 2023, 1:24 AM Brendan <ba...@fastmail.com.au> wrote:
>>>>>>> __
>>>>>>> Hello
>>>>>>>
>>>>>>> I am having a problem whereby a couple of my servers won't connect in guac. It says in the web client "An error has occurred with the guacamole server". I ran docker logs guacamole and this is the error i get:
>>>>>>>
>>>>>>> 11:20:29.290 [http-nio-8080-exec-6] ERROR o.a.g.w.GuacamoleWebSocketTunnelEndpoint - Creation of WebSocket tunnel to guacd failed: java.net.ConnectException: Connection refused (Connection refused)
>>>>>>> 11:20:29.307 [http-nio-8080-exec-8] ERROR o.a.g.s.GuacamoleHTTPTunnelServlet - HTTP tunnel request failed: java.net.ConnectException: Connection refused (Connection refused)
>>>>>>
>>>>>> This sounds like guacd isn't running, or something is blocking the connection from the webapp to guacd.
>>>>>>
>>>>>>> I should note, that i have other servers working perfectly fine. I also tried with key authentication, which also did not work.
>>>>>>>
>>>>>>> Any ideas?
>>>>>>
>>>>>> Does your system have both IPv4 and IPv6 addresses associated with "localhost" in /etc/hosts? The guacd service will be listening on one specific address, but if "localhost" is associated with multiple, then the OS will round-robin between those addresses and mysteriously fail to connect whenever the address that guacd *isn't* listening on happens to be used.
>>>>>>
>>>>>> - Mike
>>>>>>
>>>>>>
>>>>>
>>>
>>
Re: Error with only some servers
Posted by Michael Jumper <mj...@apache.org>.
What kind of private key is this?
On Tue, Feb 7, 2023, 3:59 PM Brendan <ba...@fastmail.com.au> wrote:
> Hi
>
> I've got one last problem. One of my servers still isn't connecting,
> despite checking that i had the parameters set, not the proxy details.
>
> When I try to connect, i get the following:
>
> guacd[251]: INFO: Creating new client for protocol "ssh"
> guacd[251]: INFO: Connection ID is "$b8f61fb7-71a4-4ab2-80f1-b69fd11beda2"
> 01:55:32.223 [http-nio-8080-exec-3] INFO
> o.a.g.tunnel.TunnelRequestService - User "brendan" connected to connection
> "5".
> guacd[2115]: INFO: User "@36ada82c-1c68-4f1b-8a4d-55512697534f" joined
> connection "$b8f61fb7-71a4-4ab2-80f1-b69fd11beda2" (1 users now present)
> guacd[2115]: INFO: Auth key successfully imported.
> guacd[2115]: ERROR: SSH handshake failed.
> 01:55:32.282 [http-nio-8080-exec-10] INFO
> o.a.g.tunnel.TunnelRequestService - User "brendan" disconnected from
> connection "5". Duration: 55 milliseconds
> guacd[2115]: INFO: User "@36ada82c-1c68-4f1b-8a4d-55512697534f"
> disconnected (0 users remain)
> guacd[2115]: INFO: Last user of connection
> "$b8f61fb7-71a4-4ab2-80f1-b69fd11beda2" disconnected
> Exception in thread "Thread-14" java.lang.IllegalStateException: Message
> will not be sent because the WebSocket session has been closed
> at
> org.apache.tomcat.websocket.WsRemoteEndpointImplBase.writeMessagePart(WsRemoteEndpointImplBase.java:425)
> at
> org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendMessageBlock(WsRemoteEndpointImplBase.java:309)
> at
> org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendMessageBlock(WsRemoteEndpointImplBase.java:250)
> at
> org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendString(WsRemoteEndpointImplBase.java:191)
> at
> org.apache.tomcat.websocket.WsRemoteEndpointBasic.sendText(WsRemoteEndpointBasic.java:37)
> at
> org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint.sendInstruction(GuacamoleWebSocketTunnelEndpoint.java:152)
> at
> org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint.access$200(GuacamoleWebSocketTunnelEndpoint.java:53)
> at
> org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint$2.run(GuacamoleWebSocketTunnelEndpoint.java:253)
> guacd[251]: INFO: Connection "$b8f61fb7-71a4-4ab2-80f1-b69fd11beda2"
> removed.
>
> On Wed, 8 Feb 2023, at 09:47, Brendan wrote:
>
> aha. Yes, i filled in the proxy details, not the proper part.
>
> Thanks for your help
>
> regards
> Brendan.
>
> On Wed, 8 Feb 2023, at 09:43, Michael Jumper wrote:
>
> The error in question is specifically regarding the webapp being unable to
> connect over TCP to the guacd service, so something must be interfering
> with that...
>
> Did you perchance accidentally fill in the hostname/address for the
> destination machine in the "Guacamole proxy parameters (guacd)" section and
> not the "Parameters" section?
>
> - Mike
>
> On Tue, Feb 7, 2023, 3:40 PM Brendan <ba...@fastmail.com.au> wrote:
>
>
> Hi
>
> I just removed the IPv6 from the /etc/hosts, and it didn't resolve
> anything. I don't think it's because guacd isn't running, because other
> servers work fine.
>
> Regards
> Brendan.
>
> On Wed, 8 Feb 2023, at 02:48, Michael Jumper wrote:
>
> On Tue, Feb 7, 2023, 1:24 AM Brendan <ba...@fastmail.com.au> wrote:
>
>
> Hello
>
> I am having a problem whereby a couple of my servers won't connect in
> guac. It says in the web client "An error has occurred with the guacamole
> server". I ran docker logs guacamole and this is the error i get:
>
> 11:20:29.290 [http-nio-8080-exec-6] ERROR
> o.a.g.w.GuacamoleWebSocketTunnelEndpoint - Creation of WebSocket tunnel to
> guacd failed: java.net.ConnectException: Connection refused (Connection
> refused)
> 11:20:29.307 [http-nio-8080-exec-8] ERROR
> o.a.g.s.GuacamoleHTTPTunnelServlet - HTTP tunnel request failed:
> java.net.ConnectException: Connection refused (Connection refused)
>
>
> This sounds like guacd isn't running, or something is blocking the
> connection from the webapp to guacd.
>
> I should note, that i have other servers working perfectly fine. I also
> tried with key authentication, which also did not work.
>
> Any ideas?
>
>
> Does your system have both IPv4 and IPv6 addresses associated with
> "localhost" in /etc/hosts? The guacd service will be listening on one
> specific address, but if "localhost" is associated with multiple, then the
> OS will round-robin between those addresses and mysteriously fail to
> connect whenever the address that guacd *isn't* listening on happens to be
> used.
>
> - Mike
>
>
>
>
>
>
Re: Error with only some servers
Posted by Brendan <ba...@fastmail.com.au>.
Hi
I've got one last problem. One of my servers still isn't connecting, despite checking that i had the parameters set, not the proxy details.
When I try to connect, i get the following:
guacd[251]: INFO: Creating new client for protocol "ssh"
guacd[251]: INFO: Connection ID is "$b8f61fb7-71a4-4ab2-80f1-b69fd11beda2"
01:55:32.223 [http-nio-8080-exec-3] INFO o.a.g.tunnel.TunnelRequestService - User "brendan" connected to connection "5".
guacd[2115]: INFO: User "@36ada82c-1c68-4f1b-8a4d-55512697534f" joined connection "$b8f61fb7-71a4-4ab2-80f1-b69fd11beda2" (1 users now present)
guacd[2115]: INFO: Auth key successfully imported.
guacd[2115]: ERROR: SSH handshake failed.
01:55:32.282 [http-nio-8080-exec-10] INFO o.a.g.tunnel.TunnelRequestService - User "brendan" disconnected from connection "5". Duration: 55 milliseconds
guacd[2115]: INFO: User "@36ada82c-1c68-4f1b-8a4d-55512697534f" disconnected (0 users remain)
guacd[2115]: INFO: Last user of connection "$b8f61fb7-71a4-4ab2-80f1-b69fd11beda2" disconnected
Exception in thread "Thread-14" java.lang.IllegalStateException: Message will not be sent because the WebSocket session has been closed
at org.apache.tomcat.websocket.WsRemoteEndpointImplBase.writeMessagePart(WsRemoteEndpointImplBase.java:425)
at org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendMessageBlock(WsRemoteEndpointImplBase.java:309)
at org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendMessageBlock(WsRemoteEndpointImplBase.java:250)
at org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendString(WsRemoteEndpointImplBase.java:191)
at org.apache.tomcat.websocket.WsRemoteEndpointBasic.sendText(WsRemoteEndpointBasic.java:37)
at org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint.sendInstruction(GuacamoleWebSocketTunnelEndpoint.java:152)
at org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint.access$200(GuacamoleWebSocketTunnelEndpoint.java:53)
at org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint$2.run(GuacamoleWebSocketTunnelEndpoint.java:253)
guacd[251]: INFO: Connection "$b8f61fb7-71a4-4ab2-80f1-b69fd11beda2" removed.
On Wed, 8 Feb 2023, at 09:47, Brendan wrote:
> aha. Yes, i filled in the proxy details, not the proper part.
>
> Thanks for your help
>
> regards
> Brendan.
>
> On Wed, 8 Feb 2023, at 09:43, Michael Jumper wrote:
>> The error in question is specifically regarding the webapp being unable to connect over TCP to the guacd service, so something must be interfering with that...
>>
>> Did you perchance accidentally fill in the hostname/address for the destination machine in the "Guacamole proxy parameters (guacd)" section and not the "Parameters" section?
>>
>> - Mike
>>
>> On Tue, Feb 7, 2023, 3:40 PM Brendan <ba...@fastmail.com.au> wrote:
>>> __
>>> Hi
>>>
>>> I just removed the IPv6 from the /etc/hosts, and it didn't resolve anything. I don't think it's because guacd isn't running, because other servers work fine.
>>>
>>> Regards
>>> Brendan.
>>>
>>> On Wed, 8 Feb 2023, at 02:48, Michael Jumper wrote:
>>>> On Tue, Feb 7, 2023, 1:24 AM Brendan <ba...@fastmail.com.au> wrote:
>>>>> __
>>>>> Hello
>>>>>
>>>>> I am having a problem whereby a couple of my servers won't connect in guac. It says in the web client "An error has occurred with the guacamole server". I ran docker logs guacamole and this is the error i get:
>>>>>
>>>>> 11:20:29.290 [http-nio-8080-exec-6] ERROR o.a.g.w.GuacamoleWebSocketTunnelEndpoint - Creation of WebSocket tunnel to guacd failed: java.net.ConnectException: Connection refused (Connection refused)
>>>>> 11:20:29.307 [http-nio-8080-exec-8] ERROR o.a.g.s.GuacamoleHTTPTunnelServlet - HTTP tunnel request failed: java.net.ConnectException: Connection refused (Connection refused)
>>>>
>>>> This sounds like guacd isn't running, or something is blocking the connection from the webapp to guacd.
>>>>
>>>>> I should note, that i have other servers working perfectly fine. I also tried with key authentication, which also did not work.
>>>>>
>>>>> Any ideas?
>>>>
>>>> Does your system have both IPv4 and IPv6 addresses associated with "localhost" in /etc/hosts? The guacd service will be listening on one specific address, but if "localhost" is associated with multiple, then the OS will round-robin between those addresses and mysteriously fail to connect whenever the address that guacd *isn't* listening on happens to be used.
>>>>
>>>> - Mike
>>>>
>>>>
>>>
>
Re: Error with only some servers
Posted by Brendan <ba...@fastmail.com.au>.
aha. Yes, i filled in the proxy details, not the proper part.
Thanks for your help
regards
Brendan.
On Wed, 8 Feb 2023, at 09:43, Michael Jumper wrote:
> The error in question is specifically regarding the webapp being unable to connect over TCP to the guacd service, so something must be interfering with that...
>
> Did you perchance accidentally fill in the hostname/address for the destination machine in the "Guacamole proxy parameters (guacd)" section and not the "Parameters" section?
>
> - Mike
>
> On Tue, Feb 7, 2023, 3:40 PM Brendan <ba...@fastmail.com.au> wrote:
>> __
>> Hi
>>
>> I just removed the IPv6 from the /etc/hosts, and it didn't resolve anything. I don't think it's because guacd isn't running, because other servers work fine.
>>
>> Regards
>> Brendan.
>>
>> On Wed, 8 Feb 2023, at 02:48, Michael Jumper wrote:
>>> On Tue, Feb 7, 2023, 1:24 AM Brendan <ba...@fastmail.com.au> wrote:
>>>> __
>>>> Hello
>>>>
>>>> I am having a problem whereby a couple of my servers won't connect in guac. It says in the web client "An error has occurred with the guacamole server". I ran docker logs guacamole and this is the error i get:
>>>>
>>>> 11:20:29.290 [http-nio-8080-exec-6] ERROR o.a.g.w.GuacamoleWebSocketTunnelEndpoint - Creation of WebSocket tunnel to guacd failed: java.net.ConnectException: Connection refused (Connection refused)
>>>> 11:20:29.307 [http-nio-8080-exec-8] ERROR o.a.g.s.GuacamoleHTTPTunnelServlet - HTTP tunnel request failed: java.net.ConnectException: Connection refused (Connection refused)
>>>
>>> This sounds like guacd isn't running, or something is blocking the connection from the webapp to guacd.
>>>
>>>> I should note, that i have other servers working perfectly fine. I also tried with key authentication, which also did not work.
>>>>
>>>> Any ideas?
>>>
>>> Does your system have both IPv4 and IPv6 addresses associated with "localhost" in /etc/hosts? The guacd service will be listening on one specific address, but if "localhost" is associated with multiple, then the OS will round-robin between those addresses and mysteriously fail to connect whenever the address that guacd *isn't* listening on happens to be used.
>>>
>>> - Mike
>>>
>>>
>>
Re: Error with only some servers
Posted by Michael Jumper <mj...@apache.org>.
The error in question is specifically regarding the webapp being unable to
connect over TCP to the guacd service, so something must be interfering
with that...
Did you perchance accidentally fill in the hostname/address for the
destination machine in the "Guacamole proxy parameters (guacd)" section and
not the "Parameters" section?
- Mike
On Tue, Feb 7, 2023, 3:40 PM Brendan <ba...@fastmail.com.au> wrote:
> Hi
>
> I just removed the IPv6 from the /etc/hosts, and it didn't resolve
> anything. I don't think it's because guacd isn't running, because other
> servers work fine.
>
> Regards
> Brendan.
>
> On Wed, 8 Feb 2023, at 02:48, Michael Jumper wrote:
>
> On Tue, Feb 7, 2023, 1:24 AM Brendan <ba...@fastmail.com.au> wrote:
>
>
> Hello
>
> I am having a problem whereby a couple of my servers won't connect in
> guac. It says in the web client "An error has occurred with the guacamole
> server". I ran docker logs guacamole and this is the error i get:
>
> 11:20:29.290 [http-nio-8080-exec-6] ERROR
> o.a.g.w.GuacamoleWebSocketTunnelEndpoint - Creation of WebSocket tunnel to
> guacd failed: java.net.ConnectException: Connection refused (Connection
> refused)
> 11:20:29.307 [http-nio-8080-exec-8] ERROR
> o.a.g.s.GuacamoleHTTPTunnelServlet - HTTP tunnel request failed:
> java.net.ConnectException: Connection refused (Connection refused)
>
>
> This sounds like guacd isn't running, or something is blocking the
> connection from the webapp to guacd.
>
> I should note, that i have other servers working perfectly fine. I also
> tried with key authentication, which also did not work.
>
> Any ideas?
>
>
> Does your system have both IPv4 and IPv6 addresses associated with
> "localhost" in /etc/hosts? The guacd service will be listening on one
> specific address, but if "localhost" is associated with multiple, then the
> OS will round-robin between those addresses and mysteriously fail to
> connect whenever the address that guacd *isn't* listening on happens to be
> used.
>
> - Mike
>
>
>
>
Re: Error with only some servers
Posted by Brendan <ba...@fastmail.com.au>.
Hi
I just removed the IPv6 from the /etc/hosts, and it didn't resolve anything. I don't think it's because guacd isn't running, because other servers work fine.
Regards
Brendan.
On Wed, 8 Feb 2023, at 02:48, Michael Jumper wrote:
> On Tue, Feb 7, 2023, 1:24 AM Brendan <ba...@fastmail.com.au> wrote:
>> __
>> Hello
>>
>> I am having a problem whereby a couple of my servers won't connect in guac. It says in the web client "An error has occurred with the guacamole server". I ran docker logs guacamole and this is the error i get:
>>
>> 11:20:29.290 [http-nio-8080-exec-6] ERROR o.a.g.w.GuacamoleWebSocketTunnelEndpoint - Creation of WebSocket tunnel to guacd failed: java.net.ConnectException: Connection refused (Connection refused)
>> 11:20:29.307 [http-nio-8080-exec-8] ERROR o.a.g.s.GuacamoleHTTPTunnelServlet - HTTP tunnel request failed: java.net.ConnectException: Connection refused (Connection refused)
>
> This sounds like guacd isn't running, or something is blocking the connection from the webapp to guacd.
>
>> I should note, that i have other servers working perfectly fine. I also tried with key authentication, which also did not work.
>>
>> Any ideas?
>
> Does your system have both IPv4 and IPv6 addresses associated with "localhost" in /etc/hosts? The guacd service will be listening on one specific address, but if "localhost" is associated with multiple, then the OS will round-robin between those addresses and mysteriously fail to connect whenever the address that guacd *isn't* listening on happens to be used.
>
> - Mike
>
>
Re: Error with only some servers
Posted by Michael Jumper <mj...@apache.org>.
On Tue, Feb 7, 2023, 1:24 AM Brendan <ba...@fastmail.com.au> wrote:
> Hello
>
> I am having a problem whereby a couple of my servers won't connect in
> guac. It says in the web client "An error has occurred with the guacamole
> server". I ran docker logs guacamole and this is the error i get:
>
> 11:20:29.290 [http-nio-8080-exec-6] ERROR
> o.a.g.w.GuacamoleWebSocketTunnelEndpoint - Creation of WebSocket tunnel to
> guacd failed: java.net.ConnectException: Connection refused (Connection
> refused)
> 11:20:29.307 [http-nio-8080-exec-8] ERROR
> o.a.g.s.GuacamoleHTTPTunnelServlet - HTTP tunnel request failed:
> java.net.ConnectException: Connection refused (Connection refused)
>
This sounds like guacd isn't running, or something is blocking the
connection from the webapp to guacd.
I should note, that i have other servers working perfectly fine. I also
> tried with key authentication, which also did not work.
>
> Any ideas?
>
Does your system have both IPv4 and IPv6 addresses associated with
"localhost" in /etc/hosts? The guacd service will be listening on one
specific address, but if "localhost" is associated with multiple, then the
OS will round-robin between those addresses and mysteriously fail to
connect whenever the address that guacd *isn't* listening on happens to be
used.
- Mike