You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@guacamole.apache.org by Subbareddy Alamuru <su...@sycamoreinformatics.com> on 2025/03/18 13:40:40 UTC
New guacamole setup issues - Logging into guacamole UI
Hi Nick,
We are trying a setup as per the architecture diagram attached below.
[image: image.png]
We have built and configured all the things but when trying to login to
guacamole UI using "guacadmin" user, we are seeing this generic error and
no further logs are available in guacamole containers.
[image: image.png]
[image: image.png]
Steps followed:
1. Created RDS cluster and postgres DB instance
2. Created Database and inserted the 001,002,003,004 sql files.
3. Created Ec2 instances and ran guacamole using the docker-compose file
attached with the necessary config files as attached.
4. Used ALB to login to Guacamole UI but got into the above error.
We could not identify the issue where it went wrong. Could you please help
us?
Thanks
Subba
Re: New guacamole setup issues - Logging into guacamole UI
Posted by Tobias Feller <tf...@opc.de>.
Hi, as far as i know there are no sessiondata stored in DB. All in memory / guacd. So changing the Destination tomcat server will result in an invalid session.
Also by Design, because Guacamole didn't need a db for the base function. But of course the remote connection also need a static server.
Best regards,
Tobias
18.03.2025 19:45:41 Anakien Skywalker <nj...@gmail.com>:
> Hello,
>
> Tobias, do I understand correctly? The issue is that Subbareddy has logged in one guac client instance, but random requests (like /effectivePermissions) are going to another guac client instance which does not store session data?
> This would explain 403 Forbidden. Very impressive.
>
> вт, 18 мар. 2025 г. в 18:08, Tobias Feller | OPC <tf...@opc.de>:
>>
>> Hi Subba,
>>
>> Am 18.03.2025 um 16:49 schrieb Anakien Skywalker:
>>> 4. Used ALB to login to Guacamole UI but got into the above error.
>>
>> One Hint about this setup:
>>
>> It is important that you once you have logged in always get to the same server via an sticky cookie created by the loadbalancer.
>>
>>
>>
>> I have setup an very similar environment. I have changed the guacamole-styleshet so that i see on which server i am.
>>
>> My setup: Traefik vs. Nginx, Tembo vs. Aurona, and Hetzner LB vs. ALB - but it is working for many users. Also i set the cookie sticky cookie livetime to ~ 24h - so that the user will stay for a day on "his" server.
>>
>> You can also monitor the guacd-logs on both docker-hosts to see if the servers are "switching".
>>
>> Best regards,
>>
>> Tobias
>>
>>
>>
Re: New guacamole setup issues - Logging into guacamole UI
Posted by Anakien Skywalker <nj...@gmail.com>.
Hello,
Tobias, do I understand correctly? The issue is that Subbareddy has logged
in one guac client instance, but random requests (like
/effectivePermissions) are going to another guac client instance which does
not store session data?
This would explain 403 Forbidden. Very impressive.
вт, 18 мар. 2025 г. в 18:08, Tobias Feller | OPC <tf...@opc.de>:
> Hi Subba,
> Am 18.03.2025 um 16:49 schrieb Anakien Skywalker:
>
> 4. Used ALB to login to Guacamole UI but got into the above error.
>
> One Hint about this setup:
>
> It is important that you once you have logged in always get to the same
> server via an sticky cookie created by the loadbalancer.
>
> I have setup an very similar environment. I have changed the
> guacamole-styleshet so that i see on which server i am.
>
> My setup: Traefik vs. Nginx, Tembo vs. Aurona, and Hetzner LB vs. ALB -
> but it is working for many users. Also i set the cookie sticky cookie
> livetime to ~ 24h - so that the user will stay for a day on "his" server.
>
> You can also monitor the guacd-logs on both docker-hosts to see if the
> servers are "switching".
>
> Best regards,
>
> Tobias
>
>
>
>
Re: New guacamole setup issues - Logging into guacamole UI
Posted by Subbareddy Alamuru <su...@sycamoreinformatics.com>.
Hi Anakien / Tobias,
It seems the issue was due to LB cookie stickiness not enabled. Now I have
enabled it and I am able to login. Or atleast I suspect that is the issue
as we haven't changed any configuration.
Thanks for all your inputs.
Cheers
Subba
On Tue, Mar 18, 2025 at 9:38 PM Tobias Feller | OPC <tf...@opc.de> wrote:
> Hi Subba,
> Am 18.03.2025 um 16:49 schrieb Anakien Skywalker:
>
> 4. Used ALB to login to Guacamole UI but got into the above error.
>
> One Hint about this setup:
>
> It is important that you once you have logged in always get to the same
> server via an sticky cookie created by the loadbalancer.
>
> I have setup an very similar environment. I have changed the
> guacamole-styleshet so that i see on which server i am.
>
> My setup: Traefik vs. Nginx, Tembo vs. Aurona, and Hetzner LB vs. ALB -
> but it is working for many users. Also i set the cookie sticky cookie
> livetime to ~ 24h - so that the user will stay for a day on "his" server.
>
> You can also monitor the guacd-logs on both docker-hosts to see if the
> servers are "switching".
>
> Best regards,
>
> Tobias
>
>
>
>
Re: New guacamole setup issues - Logging into guacamole UI
Posted by Tobias Feller | OPC <tf...@opc.de>.
Hi Subba,
Am 18.03.2025 um 16:49 schrieb Anakien Skywalker:
> 4. Used ALB to login to Guacamole UI but got into the above error.
One Hint about this setup:
It is important that you once you have logged in always get to the same
server via an sticky cookie created by the loadbalancer.
I have setup an very similar environment. I have changed the
guacamole-styleshet so that i see on which server i am.
My setup: Traefik vs. Nginx, Tembo vs. Aurona, and Hetzner LB vs. ALB -
but it is working for many users. Also i set the cookie sticky cookie
livetime to ~ 24h - so that the user will stay for a day on "his" server.
You can also monitor the guacd-logs on both docker-hosts to see if the
servers are "switching".
Best regards,
Tobias
Re: New guacamole setup issues - Logging into guacamole UI
Posted by Subbareddy Alamuru <su...@sycamoreinformatics.com>.
Hi Anakien,
I have enabled guac debug logs and also verified RDS postgres logs but
could not find any error related to this. There were few warning but they
are not related to this issue but a few common RDS related ones.
I see these errors in browser dev tools --> network
[image: image.png]
Is this a similar issue you have ever faced ?
Thanks
Subba
On Tue, Mar 18, 2025 at 9:19 PM Anakien Skywalker <nj...@gmail.com>
wrote:
> We do have similar issue, when we are inserting several entities manually
> in db.
> To bypass the error, we have to login into guacamole something around 3-4
> times. This is related to some entity_id counter in guacamole which does
> not update after manual changes. We did not investigate the root cause of
> the issue yet.
> At the same time, we see some issue traces in logs, which is not your
> case.
> You can try to turn on guac debug logging, maybe this will give some
> insight.
> Also, you can check your db logs for some errors.
>
> Not sure we have the same issue, but there is a chance.
>
> вт, 18 мар. 2025 г. в 15:41, Subbareddy Alamuru <
> subbareddy.alamuru@sycamoreinformatics.com>:
>
>> Hi Nick,
>>
>> We are trying a setup as per the architecture diagram attached below.
>> [image: image.png]
>>
>> We have built and configured all the things but when trying to login to
>> guacamole UI using "guacadmin" user, we are seeing this generic error and
>> no further logs are available in guacamole containers.
>> [image: image.png]
>>
>> [image: image.png]
>>
>>
>> Steps followed:
>> 1. Created RDS cluster and postgres DB instance
>> 2. Created Database and inserted the 001,002,003,004 sql files.
>> 3. Created Ec2 instances and ran guacamole using the docker-compose file
>> attached with the necessary config files as attached.
>> 4. Used ALB to login to Guacamole UI but got into the above error.
>>
>> We could not identify the issue where it went wrong. Could you please
>> help us?
>>
>> Thanks
>> Subba
>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
>> For additional commands, e-mail: user-help@guacamole.apache.org
>
>
Re: New guacamole setup issues - Logging into guacamole UI
Posted by Anakien Skywalker <nj...@gmail.com>.
We do have similar issue, when we are inserting several entities manually
in db.
To bypass the error, we have to login into guacamole something around 3-4
times. This is related to some entity_id counter in guacamole which does
not update after manual changes. We did not investigate the root cause of
the issue yet.
At the same time, we see some issue traces in logs, which is not your case.
You can try to turn on guac debug logging, maybe this will give some
insight.
Also, you can check your db logs for some errors.
Not sure we have the same issue, but there is a chance.
вт, 18 мар. 2025 г. в 15:41, Subbareddy Alamuru <
subbareddy.alamuru@sycamoreinformatics.com>:
> Hi Nick,
>
> We are trying a setup as per the architecture diagram attached below.
> [image: image.png]
>
> We have built and configured all the things but when trying to login to
> guacamole UI using "guacadmin" user, we are seeing this generic error and
> no further logs are available in guacamole containers.
> [image: image.png]
>
> [image: image.png]
>
>
> Steps followed:
> 1. Created RDS cluster and postgres DB instance
> 2. Created Database and inserted the 001,002,003,004 sql files.
> 3. Created Ec2 instances and ran guacamole using the docker-compose file
> attached with the necessary config files as attached.
> 4. Used ALB to login to Guacamole UI but got into the above error.
>
> We could not identify the issue where it went wrong. Could you please help
> us?
>
> Thanks
> Subba
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
> For additional commands, e-mail: user-help@guacamole.apache.org
Re: New guacamole setup issues - Logging into guacamole UI
Posted by Anakien Skywalker <nj...@gmail.com>.
Hello,
I can suggest checking what is failing in the dev console (CTRL+SHIFT+I ->
Network), what is the response code and payload. Maybe something useful can
be found.
вт, 18 мар. 2025 г. в 15:41, Subbareddy Alamuru <
subbareddy.alamuru@sycamoreinformatics.com>:
> Hi Nick,
>
> We are trying a setup as per the architecture diagram attached below.
> [image: image.png]
>
> We have built and configured all the things but when trying to login to
> guacamole UI using "guacadmin" user, we are seeing this generic error and
> no further logs are available in guacamole containers.
> [image: image.png]
>
> [image: image.png]
>
>
> Steps followed:
> 1. Created RDS cluster and postgres DB instance
> 2. Created Database and inserted the 001,002,003,004 sql files.
> 3. Created Ec2 instances and ran guacamole using the docker-compose file
> attached with the necessary config files as attached.
> 4. Used ALB to login to Guacamole UI but got into the above error.
>
> We could not identify the issue where it went wrong. Could you please help
> us?
>
> Thanks
> Subba
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
> For additional commands, e-mail: user-help@guacamole.apache.org