You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@guacamole.apache.org by Anthony Moon <an...@moving-picture.com> on 2017/10/26 16:20:05 UTC
Disable SFTP from web interface
Hi everyone,
Does anyone know if there is a way of disabling the option to enable SFTP from the client web server?
Anthony Moon, Senior System Administrator
MPC Film
T +1 604 689 1081 | C +1 604 329 0174
London - Vancouver - LA - Bangalore - Montréal
moving-picture.com/film<http://moving-picture.com/film>
Re: Disable SFTP from web interface
Posted by Mike Jumper <mi...@guac-dev.org>.
On Fri, Oct 27, 2017 at 10:43 AM, Nick Couchman <vn...@apache.org> wrote:
> On Thu, Oct 26, 2017 at 5:40 PM, Anthony Moon <
> anthony-m@moving-picture.com> wrote:
>
>> We’d like to eliminate the potential for administrators to have access to
>> this feature (if at all possible).
>>
>
> I do not know of a way to do this at the Guacamole level at this point.
> On the server-side you could disable it in the SSH server config
> (sshd_config) if you have control over those servers and don't want it
> available at all, or disable it for certain groups of users, etc. But I
> don't know of a way in the Guacamole configuration to prevent it.
>
>
There really isn't a way to disable this access via configuration alone. It
would be possible to write an extension which does not use the
corresponding connection parameters, but if the use case here is
specialized enough, it may be better to look into leveraging the Guacamole
API to build a webapp specific to that case, rather than stripping out
parts of the mainline webapp.
- Mike
Re: Disable SFTP from web interface
Posted by Nick Couchman <vn...@apache.org>.
On Thu, Oct 26, 2017 at 5:40 PM, Anthony Moon <an...@moving-picture.com>
wrote:
> We’d like to eliminate the potential for administrators to have access to
> this feature (if at all possible).
>
I do not know of a way to do this at the Guacamole level at this point. On
the server-side you could disable it in the SSH server config (sshd_config)
if you have control over those servers and don't want it available at all,
or disable it for certain groups of users, etc. But I don't know of a way
in the Guacamole configuration to prevent it.
-Nick
RE: Disable SFTP from web interface
Posted by Anthony Moon <an...@moving-picture.com>.
We’d like to eliminate the potential for administrators to have access to this feature (if at all possible).
Is there some source code I can comment out before building the WAR file?
From: Nick Couchman [mailto:vnick@apache.org]
Sent: Thursday, October 26, 2017 9:29 AM
To: user@guacamole.incubator.apache.org
Subject: Re: Disable SFTP from web interface
** WARNING: This mail is from an external source **
On Thu, Oct 26, 2017 at 12:20 PM, Anthony Moon <an...@moving-picture.com>> wrote:
Hi everyone,
Does anyone know if there is a way of disabling the option to enable SFTP from the client web server?
No...could you explain why you'd want to do this instead of just disabling it for the connection and then not allowing people to modify that connection?
-Nick
Re: Disable SFTP from web interface
Posted by Nick Couchman <vn...@apache.org>.
On Thu, Oct 26, 2017 at 12:20 PM, Anthony Moon <anthony-m@moving-picture.com
> wrote:
> Hi everyone,
>
>
>
> Does anyone know if there is a way of disabling the option to enable SFTP
> from the client web server?
>
>
>
No...could you explain why you'd want to do this instead of just disabling
it for the connection and then not allowing people to modify that
connection?
-Nick