You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@guacamole.apache.org by Joseph Szabo <js...@oit.rutgers.edu> on 2020/04/14 18:18:10 UTC
force complete logout every time
Hi. How can I keep guacamole users from leaving disconnected sessions on Windows computers?
icm b001 { quser } -cr $c
USERNAME SESSIONNAME ID STATE IDLE TIME LOGON TIME
j151 4 Disc 1:32 4/14/2020 11:18 AM
p415 5 Disc 56 4/14/2020 12:47 PM
Joseph Szabo
CSS Lab Technical Services
NBCS Lab Team
System Administrator
Rutgers University
Re: force complete logout every time
Posted by Joseph Szabo <js...@oit.rutgers.edu>.
It's not virtual, but real computers over windows remote desktop.
Joseph Szabo
CSS Lab Technical Services
NBCS Lab Team
System Administrator
Rutgers University
________________________________
From: sciUser <sh...@securitycentric.net>
Sent: Tuesday, April 14, 2020 3:54 PM
To: user@guacamole.apache.org <us...@guacamole.apache.org>
Subject: Re: force complete logout every time
The solution from the profile settings link provided in the this thread above
is your best bet.
We do an On-demand (students leave, session reset state zero) and ILT
(Instructor Led Training, students can return to their existing desktop),
this is all controlled through out provisioning system which controls
guacamole.
But since you do not have a provisioning platform; setting profiles to
logout after 5/10 minutes of inactivity is industry standards, at least I
have been using for the past 20 years when designing these environments.
The issue you will have is not knowing if the session is logged out, you
could write some detection code and run it on the VM desktop to know when a
connection is active or not. Then this runs in to an issue of network
overhead.
There are a lot of ways to skin the cat, its why I programmed a Provisioning
platform to handle all these known issues/caveats and simplified the LTI
process.
What is your Virtual environment?
-----
A Cybersecurity Enablement Company
We don't just run you through the motions, Our labs teach you how to think!
Known good Guacamole installations
--
Sent from: https://nam02.safelinks.protection.outlook.com/?url=http%3A%2F%2Fapache-guacamole-general-user-mailing-list.2363388.n4.nabble.com%2F&data=02%7C01%7Cjszabo%40oit.rutgers.edu%7C82702d154935431b473008d7e0ad9e57%7Cb92d2b234d35447093ff69aca6632ffe%7C1%7C1%7C637224908599533754&sdata=SZh0gfQRrx3k0AWkVw52byQJrxhvSaIyru7q9G%2FqQnE%3D&reserved=0
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org
Re: force complete logout every time
Posted by sciUser <sh...@securitycentric.net>.
The solution from the profile settings link provided in the this thread above
is your best bet.
We do an On-demand (students leave, session reset state zero) and ILT
(Instructor Led Training, students can return to their existing desktop),
this is all controlled through out provisioning system which controls
guacamole.
But since you do not have a provisioning platform; setting profiles to
logout after 5/10 minutes of inactivity is industry standards, at least I
have been using for the past 20 years when designing these environments.
The issue you will have is not knowing if the session is logged out, you
could write some detection code and run it on the VM desktop to know when a
connection is active or not. Then this runs in to an issue of network
overhead.
There are a lot of ways to skin the cat, its why I programmed a Provisioning
platform to handle all these known issues/caveats and simplified the LTI
process.
What is your Virtual environment?
-----
A Cybersecurity Enablement Company
We don't just run you through the motions, Our labs teach you how to think!
Known good Guacamole installations
--
Sent from: http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org
Re: force complete logout every time
Posted by Erik Berndt <er...@superiorpaving.net.INVALID>.
[image: image.png]
These are the group policy settings for our RDP server and they work quite
well at cleaning up disconnected (but not logged off) sessions.
Erik Berndt / Systems Administrator
On Tue, Apr 14, 2020 at 3:33 PM Joseph Szabo <js...@oit.rutgers.edu> wrote:
> Logout. No disconnected sessions.
>
> Joseph Szabo
> CSS Lab Technical Services
> NBCS Lab Team
> System Administrator
> Rutgers University
>
>
> ------------------------------
> *From:* sciUser <sh...@securitycentric.net>
> *Sent:* Tuesday, April 14, 2020 3:31 PM
> *To:* user@guacamole.apache.org <us...@guacamole.apache.org>
> *Subject:* Re: force complete logout every time
>
> Do you want LOGOUT or do you want fresh new session?
>
>
>
>
> -----
> A Cybersecurity Enablement Company
> We don't just run you through the motions, Our labs teach you how to
> think!
> Known good Guacamole installations
>
> --
> Sent from:
> https://nam02.safelinks.protection.outlook.com/?url=http%3A%2F%2Fapache-guacamole-general-user-mailing-list.2363388.n4.nabble.com%2F&data=02%7C01%7Cjszabo%40oit.rutgers.edu%7C48c5b8281cf6436d841008d7e0aa7885%7Cb92d2b234d35447093ff69aca6632ffe%7C1%7C1%7C637224895082761815&sdata=1okxtLdRrQHWOpoV1s7kJJpxCv3JA8CHibn53ps5VJM%3D&reserved=0
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
> For additional commands, e-mail: user-help@guacamole.apache.org
>
>
--
This
e-mail and any files transmitted with it are confidential and are
intended solely for the use of the individual or entity to whom they are
addressed. If you are not the intended recipient or the person
responsible for delivering the e-mail to the intended recipient, be
advised that you have received this e-mail in error and that any use,
dissemination, forwarding, printing or copying of this e-mail is
strictly
prohibited. If you have received this e-mail in error, please
immediately
notify Superior Paving Corp. by telephone at (703)
631-0004. You will be
reimbursed for reasonable costs incurred in
notifying us.
Re: force complete logout every time
Posted by Joseph Szabo <js...@oit.rutgers.edu>.
Logout. No disconnected sessions.
Joseph Szabo
CSS Lab Technical Services
NBCS Lab Team
System Administrator
Rutgers University
________________________________
From: sciUser <sh...@securitycentric.net>
Sent: Tuesday, April 14, 2020 3:31 PM
To: user@guacamole.apache.org <us...@guacamole.apache.org>
Subject: Re: force complete logout every time
Do you want LOGOUT or do you want fresh new session?
-----
A Cybersecurity Enablement Company
We don't just run you through the motions, Our labs teach you how to think!
Known good Guacamole installations
--
Sent from: https://nam02.safelinks.protection.outlook.com/?url=http%3A%2F%2Fapache-guacamole-general-user-mailing-list.2363388.n4.nabble.com%2F&data=02%7C01%7Cjszabo%40oit.rutgers.edu%7C48c5b8281cf6436d841008d7e0aa7885%7Cb92d2b234d35447093ff69aca6632ffe%7C1%7C1%7C637224895082761815&sdata=1okxtLdRrQHWOpoV1s7kJJpxCv3JA8CHibn53ps5VJM%3D&reserved=0
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org
Re: force complete logout every time
Posted by sciUser <sh...@securitycentric.net>.
Do you want LOGOUT or do you want fresh new session?
-----
A Cybersecurity Enablement Company
We don't just run you through the motions, Our labs teach you how to think!
Known good Guacamole installations
--
Sent from: http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org