You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@guacamole.apache.org by Asbern <as...@trainocate.com> on 2018/08/31 07:50:10 UTC
Enable share Menu
Hi all,
May I know where I need to configure to enable the "share" menu as per
https://guacamole.apache.org/doc/gug/using-guacamole.html#client-share-menu?
Thanks.
Best Regards,
A. Asbern
RE: Enable share Menu
Posted by Asbern <as...@trainocate.com>.
Thanks Mike.
Best Regards,
A. Asbern
From: mike.jumper@guac-dev.org [mailto:mike.jumper@guac-dev.org] On Behalf Of Mike Jumper
Sent: Wednesday, September 05, 2018 11:17 AM
To: user@guacamole.apache.org
Subject: Re: Enable share Menu
On Tue, Sep 4, 2018 at 10:17 PM, Asbern <as...@trainocate.com> wrote:
Yes, that’s what I was trying to ask, thanks for the clarification Nick. But without providing Administer system privilege the user can’t generate share connection right? This can’t be changed?
The user does not need to be an administrator.
All the user needs is read access to both the connection and the sharing profile(s). You can grant these permissions within the admin UI by editing the user and checking the boxes for the connections and sharing profiles in question in the "Connections" section.
- Mike
Re: Enable share Menu
Posted by Mike Jumper <mi...@glyptodon.org>.
On Tue, Sep 4, 2018 at 10:17 PM, Asbern <as...@trainocate.com> wrote:
> Yes, that’s what I was trying to ask, thanks for the clarification Nick.
> But without providing Administer system privilege the user can’t generate
> share connection right? This can’t be changed?
>
The user does not need to be an administrator.
All the user needs is read access to both the connection and the sharing
profile(s). You can grant these permissions within the admin UI by editing
the user and checking the boxes for the connections and sharing profiles in
question in the "Connections" section.
- Mike
RE: Enable share Menu
Posted by Asbern <as...@trainocate.com>.
Yes, that’s what I was trying to ask, thanks for the clarification Nick. But without providing Administer system privilege the user can’t generate share connection right? This can’t be changed?
Best Regards,
A. Asbern
From: Nick Couchman [mailto:vnick@apache.org]
Sent: Tuesday, September 04, 2018 6:45 PM
To: user@guacamole.apache.org
Subject: Re: Enable share Menu
On Tue, Sep 4, 2018 at 8:37 AM Asbern <as...@trainocate.com> wrote:
Thanks Nick, is it possible to create a share connection from Admin login without login into the respective connection?
I suspect that what you're wanting to know is, is it possible, as an Administrator, to view and/or interact with existing connections in Guacamole, without having to go through the process of generating the Shared Key?
The answer is, not today. This has been requested pretty frequently on these lists and in JIRA lately, so it's definitely something on our list of things to do, but it is not possible at the moment.
-Nick
Re: Enable share Menu
Posted by Nick Couchman <vn...@apache.org>.
On Tue, Sep 4, 2018 at 15:50 Joachim Lindenberg <jo...@lindenberg.one>
wrote:
> Imho an Administrator that can monitor everything is a significant privacy
> issue. I don´t want my users to be anxious about being monitored. I´d
> prefer if this is not the standard and requires either additional
> configuration or even an additional extension.
>
I doubt you're the only one that feels this way. My feeling is that this
would be an extra configuration item that would need to be enabled and
would not be the default behavior. However, I can certainly understand
that there may be situations that require user monitoring, so I believe
having the option is a good thing - but it should be an option and should
be disabled (require user permission) by default.
Similarly, I like the idea of recordings, but only if only the user owning
> the session is the only user able to access it by default.
>
At this point that capability is really up to the administrator - you can
conceivably configure Guacamole today to record sessions, those will be
dropped wherever the connection is configured to put them, and users may
not be aware of those or even have access to the recordings.
-Nick
AW: Enable share Menu
Posted by Joachim Lindenberg <jo...@lindenberg.one>.
Imho an Administrator that can monitor everything is a significant privacy issue. I don´t want my users to be anxious about being monitored. I´d prefer if this is not the standard and requires either additional configuration or even an additional extension.
Similarly, I like the idea of recordings, but only if only the user owning the session is the only user able to access it by default.
Best Regards, Joachim
Von: Nick Couchman [mailto:vnick@apache.org]
Gesendet: Dienstag, 4. September 2018 15:15
An: user@guacamole.apache.org
Betreff: Re: Enable share Menu
On Tue, Sep 4, 2018 at 8:37 AM Asbern <asbern.a@trainocate.com <ma...@trainocate.com> > wrote:
Thanks Nick, is it possible to create a share connection from Admin login without login into the respective connection?
I suspect that what you're wanting to know is, is it possible, as an Administrator, to view and/or interact with existing connections in Guacamole, without having to go through the process of generating the Shared Key?
The answer is, not today. This has been requested pretty frequently on these lists and in JIRA lately, so it's definitely something on our list of things to do, but it is not possible at the moment.
-Nick
Re: Enable share Menu
Posted by Nick Couchman <vn...@apache.org>.
On Tue, Sep 4, 2018 at 8:37 AM Asbern <as...@trainocate.com> wrote:
> Thanks Nick, is it possible to create a share connection from Admin login
> without login into the respective connection?
>
I suspect that what you're wanting to know is, is it possible, as an
Administrator, to view and/or interact with existing connections in
Guacamole, without having to go through the process of generating the
Shared Key?
The answer is, not today. This has been requested pretty frequently on
these lists and in JIRA lately, so it's definitely something on our list of
things to do, but it is not possible at the moment.
-Nick
Re: Enable share Menu
Posted by Nick Couchman <vn...@apache.org>.
On Tue, Sep 4, 2018 at 8:37 AM Asbern <as...@trainocate.com> wrote:
> Thanks Nick, is it possible to create a share connection from Admin login
> without login into the respective connection?
>
>
>
> Best Regards,
> A. Asbern
>
>
>
> *From:* Nick Couchman [mailto:vnick@apache.org]
> *Sent:* Tuesday, September 04, 2018 4:04 PM
> *To:* user@guacamole.apache.org
> *Subject:* Re: Enable share Menu
>
>
>
> On Tue, Sep 4, 2018 at 5:48 AM Asbern <as...@trainocate.com> wrote:
>
> Hi Nick,
>
>
>
> The share connection has only “Read-Only” privilege or can change to
> “Read-Write”?
>
>
>
>
>
> If you leave the "Read-Only" box unchecked, the shared connection will
> allow others to interact with it - that is, they'll have Keyboard/Mouse
> control. If you make the connection read only they will only be able to
> view the screen.
>
>
>
> -Nick
>
RE: Enable share Menu
Posted by Asbern <as...@trainocate.com>.
Thanks Nick, is it possible to create a share connection from Admin login without login into the respective connection?
Best Regards,
A. Asbern
From: Nick Couchman [mailto:vnick@apache.org]
Sent: Tuesday, September 04, 2018 4:04 PM
To: user@guacamole.apache.org
Subject: Re: Enable share Menu
On Tue, Sep 4, 2018 at 5:48 AM Asbern <as...@trainocate.com> wrote:
Hi Nick,
The share connection has only “Read-Only” privilege or can change to “Read-Write”?
If you leave the "Read-Only" box unchecked, the shared connection will allow others to interact with it - that is, they'll have Keyboard/Mouse control. If you make the connection read only they will only be able to view the screen.
-Nick
Re: Enable share Menu
Posted by Nick Couchman <vn...@apache.org>.
On Tue, Sep 4, 2018 at 5:48 AM Asbern <as...@trainocate.com> wrote:
> Hi Nick,
>
>
>
> The share connection has only “Read-Only” privilege or can change to
> “Read-Write”?
>
>
>
If you leave the "Read-Only" box unchecked, the shared connection will
allow others to interact with it - that is, they'll have Keyboard/Mouse
control. If you make the connection read only they will only be able to
view the screen.
-Nick
RE: Enable share Menu
Posted by Asbern <as...@trainocate.com>.
Hi Nick,
The share connection has only “Read-Only” privilege or can change to “Read-Write”?
Best Regards,
A. Asbern
From: Nick Couchman [mailto:vnick@apache.org]
Sent: Saturday, September 01, 2018 5:53 PM
To: user@guacamole.apache.org
Subject: Re: Enable share Menu
On Sat, Sep 1, 2018 at 4:15 AM Joachim Lindenberg <jo...@lindenberg.one> wrote:
Hi Nick,
how can one enable this with other extensions?
Thanks, Joachim
The SharingProfile and SharedConnection (et al) classes would need to be implemented in those extensions. The JDBC extension can be used as a model, but all of the functionality for Shared Connections that exists in the JDBC module would have to be implemented in whatever other modules needed that functionality (LDAP, for example). This is certainly not a trivial exercise, though very doable.
It is worth noting that there have been some recent discussions about moving a lot of the permissions management functionality out of the JDBC module and into a shared set of code similar to the guacamole-ext part of the project. I don't know exactly what code would be included in that effort at this point, but I would think it would make sense to include the connection sharing code as part of that to allow that functionality to be easily implemented across other modules.
-Nick
Re: Enable share Menu
Posted by Nick Couchman <vn...@apache.org>.
On Sat, Sep 1, 2018 at 4:15 AM Joachim Lindenberg <jo...@lindenberg.one>
wrote:
> Hi Nick,
>
> how can one enable this with other extensions?
>
> Thanks, Joachim
>
>
>
The SharingProfile and SharedConnection (et al) classes would need to be
implemented in those extensions. The JDBC extension can be used as a
model, but all of the functionality for Shared Connections that exists in
the JDBC module would have to be implemented in whatever other modules
needed that functionality (LDAP, for example). This is certainly not a
trivial exercise, though very doable.
It is worth noting that there have been some recent discussions about
moving a lot of the permissions management functionality out of the JDBC
module and into a shared set of code similar to the guacamole-ext part of
the project. I don't know exactly what code would be included in that
effort at this point, but I would think it would make sense to include the
connection sharing code as part of that to allow that functionality to be
easily implemented across other modules.
-Nick
AW: Enable share Menu
Posted by Joachim Lindenberg <jo...@lindenberg.one>.
Hi Nick,
how can one enable this with other extensions?
Thanks, Joachim
Von: Nick Couchman [mailto:vnick@apache.org]
Gesendet: Freitag, 31. August 2018 20:38
An: user@guacamole.apache.org
Betreff: Re: Enable share Menu
On Fri, Aug 31, 2018 at 3:50 AM Asbern <asbern.a@trainocate.com <ma...@trainocate.com> > wrote:
Hi all,
May I know where I need to configure to enable the “share” menu as per https://guacamole.apache.org/doc/gug/using-guacamole.html#client-share-menu? Thanks.
In order for connection sharing to work, and, thus, the Share menu, you need to be using the JDBC authentication module, and create a share profile for the connection you'd like to share. There isn't much too it, but it does rely on the JDBC module.
-Nick
Re: Enable share Menu
Posted by Nick Couchman <vn...@apache.org>.
On Fri, Aug 31, 2018 at 3:50 AM Asbern <as...@trainocate.com> wrote:
> Hi all,
>
>
>
> May I know where I need to configure to enable the “share” menu as per
> https://guacamole.apache.org/doc/gug/using-guacamole.html#client-share-menu?
> Thanks.
>
>
>
In order for connection sharing to work, and, thus, the Share menu, you
need to be using the JDBC authentication module, and create a share profile
for the connection you'd like to share. There isn't much too it, but it
does rely on the JDBC module.
-Nick