You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@guacamole.apache.org by Goncalo Rosa <go...@v2s.us.INVALID> on 2024/07/19 10:10:33 UTC
Guacamole 1.5.5 RDP connection refused
Hello,
We have been using Guacamole 0.8 and works very well for years now.
We decided to deploy our environment on last version 1.5.5 ad move into it, since upgrade from 0.8 on a centos 7 to 1.5.5 it seemed crasy.
We deployed a guacamole 1.5.5 on Debian 12 with Database mariadb and active directory integration, using tomcat apache 9.
When I am testing the recreated RDP connections I get the following on daemon.log (this connection is against an old windows 2008 R2 Terminal server that I can access pretty fine from guacamole 0.8):
Jul 19 10:56:44 srvv2shqpgua02 guacd[2417]: Security mode: Negotiate (ANY)
Jul 19 10:56:44 srvv2shqpgua02 guacd[2417]: Resize method: none
Jul 19 10:56:44 srvv2shqpgua02 guacd[2417]: No clipboard line-ending normalization specified. Defaulting to preserving the format of all line endings.
Jul 19 10:56:44 srvv2shqpgua02 guacd[2417]: User "@943afc59-77be-4057-955e-5f7a39ae62ef" joined connection "$a9b353b7-fcd3-4896-a810-15b506ccdc58" (1 users now present)
Jul 19 10:56:44 srvv2shqpgua02 guacd[2417]: Loading keymap "base"
Jul 19 10:56:44 srvv2shqpgua02 guacd[2417]: Loading keymap "en-us-qwerty"
Jul 19 10:56:44 srvv2shqpgua02 guacd[2417]: RDP server closed/refused connection: SSL/TLS connection failed (untrusted/self-signed certificate?)
Jul 19 10:56:44 srvv2shqpgua02 guacd[2417]: User "@943afc59-77be-4057-955e-5f7a39ae62ef" disconnected (0 users remain)
Jul 19 10:56:44 srvv2shqpgua02 guacd[2417]: Last user of connection "$a9b353b7-fcd3-4896-a810-15b506ccdc58" disconnected
The screen shows:
[cid:image006.png@01DAD9CC.222BC2E0]
I also have linux machines with RDP access using XRDP and to those doesn't show anything on the daemon.log at all.
Note: I already passed the RDP permisstions change the daemon user by guacd and creating a proper guacg home dir.
Any help please?
GONÇALO COELHO ROSA
[cid:image001.jpg@01DAD9BF.7501BCC0]
V2S Corporation
[cid:image002.png@01DAD9BF.7501BCC0] Delaware, US
[cid:image003.png@01DAD9BF.7501BCC0] +351 919 937 124<https://wa.me/+351919937124>
goncalo.rosa@v2s.us<ma...@v2s.us>
[cid:image005.png@01DAD9BF.7501BCC0] www.v2s.us<http://www.v2s.us> |F<https://www.facebook.com/v2scorporation>|in<https://www.linkedin.com/company/v2s-corporation/>|
[cid:image008.png@01DAD9CC.5081CA90]<https://www.v2s.us/>[cid:image008.png@01DAD9CC.5081CA90]<https://www.linkedin.com/company/v2s-corporation/>[cid:image008.png@01DAD9CC.5081CA90]<https://www.facebook.com/v2scorporation>[cid:image007.jpg@01DAD9BF.7501BCC0]
Re: Guacamole 1.5.5 RDP connection refused
Posted by Nick Couchman <vn...@apache.org>.
On Fri, Jul 19, 2024 at 8:58 AM Nick Couchman <vn...@apache.org> wrote:
> Goncalo,
> Please make sure that you start a new thread for a new topic, and don't
> just reply to an existing message.
>
>
I am sorry - this was a new thread. This was my confusion, and nothing that
you did wrong.
-Nick
>
Re: Guacamole 1.5.5 RDP connection refused
Posted by PROVOTS Cédric <ce...@sdis61.fr>.
Hello,
We have the same issue for RDP 2008R2 After migrate 1.5.3 to 1.5.5. I don't where is the problem. No problem for 2012r2 and more.
________________________________
De : Goncalo Rosa <go...@v2s.us.INVALID>
Envoyé : vendredi, juillet 19, 2024 6:33:54 PM
À : user@guacamole.apache.org <us...@guacamole.apache.org>
Objet : RE: Guacamole 1.5.5 RDP connection refused
ATTENTION: Cet e-mail provient d'une messagerie externe au SDIS de L'Orne. Ne cliquez pas sur les liens ou n'ouvrez pas les pièces jointes si vous ne connaissez pas l'expéditeur et que vous n'êtes pas sûr du contenu.
Nothing worked ☹
Neither TLS nor NLA
The ignore_cert=true is set on the connection
Now not even provide errors on daemon.log…
The strange is that my version 0.8 works like a charm… Why not the 1.5.5?
Are there any log files that I could send you?
GONÇALO COELHO ROSA
[cid:image001.jpg@01DADA01.CA86B820]
V2S Corporation
[cid:image002.png@01DADA01.CA86B820] Delaware, US
[cid:image003.png@01DADA01.CA86B820] +351 919 937 124<https://mibc-fr-01.mailinblack.com/securelink/?url=https://wa.me&key=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>
goncalo.rosa@v2s.us<ma...@v2s.us>
[cid:image005.png@01DADA01.CA86B820] www.v2s.us<https://mibc-fr-01.mailinblack.com/securelink/?url=http://www.v2s.us&key=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> |F<https://mibc-fr-01.mailinblack.com/securelink/?url=https://www.facebook.com&key=eyJsYW5nIjoiRlIiLCJ1cmwiOiJodHRwczovL3d3dy5mYWNlYm9vay5jb20vdjJzY29ycG9yYXRpb24iLCJ0b2tlbiI6ImdBQUFBQUJtbXBWdW1LdDJlZEdKWTJMUFVHVnhTME54MkpJakh4d3lVLUE0X0RBcHQxU0dMN3FkQ3lvandyUTdPXzJHSk95SHRJMEJ3dGhLYzNVMEh2Tkc5YTNXTXpZLVJhUk5Ydm16alNoenNGYnNjZTZvaUVFRWVkdmlZZHNJeFlUcUtvQWVlYmJoaXIzc01IM1czNzFDVl9mb19lUGlnRTlzVERQMk1iZVU5VVg1ZFd4UDJKN2ktVEltR19oeDVPeGpfcnVfQmVTLVFDaGNQOHJMTWllOFNaSDhETmtiWUR1ejZWd19KSHRTQ1B6bWtJeC1tMUNaMVdmTUZwMmp2eHlhNXliRnNON1pfWW9fUGlBZDAtbndxSS0zWFVUWk5VSW5YbUZoQUVkaS1zNnBGYW5HVmtWR19MRUJhSm1OWV9HMkxibVBnUTlJIn0=>|in<https://mibc-fr-01.mailinblack.com/securelink/?url=https://www.linkedin.com&key=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>|
[cid:image009.png@01DADA01.CA8E5940]<https://mibc-fr-01.mailinblack.com/securelink/?url=https://www.v2s.us&key=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>[cid:image009.png@01DADA01.CA8E5940]<https://mibc-fr-01.mailinblack.com/securelink/?url=https://www.linkedin.com&key=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>[cid:image009.png@01DADA01.CA8E5940]<https://mibc-fr-01.mailinblack.com/securelink/?url=https://www.facebook.com&key=eyJsYW5nIjoiRlIiLCJ1cmwiOiJodHRwczovL3d3dy5mYWNlYm9vay5jb20vdjJzY29ycG9yYXRpb24iLCJ0b2tlbiI6ImdBQUFBQUJtbXBWdVA2TE92ZldrSkJaWHVMNmdNRE1uVVI3NEVSanBjWWhRal9xQ0VQcVRNRWZJV05VX29uREZBeWdLcE1SX0ZMM0tnWkFocm5aUmRocEpST3VEMVlHUGZDaGVCUmwyQ2VYSVIzNjVwS0o4YUlocEZqbW5PVFhjalRsYXd5ZVhIQmpsc0pvVHVBX09UWWtTcHFpTTFqNjRCRjRXUXJ6cXlCRlJMR2RoWEdUZkt2NFhPczk2OUM2c2ZsZmhjQWlzOW9KUC14VWpLTWdwb1ZneVhDU1NFRlFmWlBPZ2JKNWFSQWJRejhSVFJ0TXNFNW5XdXZBendhZE1WNzBySTViNHZTYnFiUW14c3E5OWtZQUIyeG52NzBNcTJVNjFnbGJxb1pITHRwdXNha2hfVTdobVB0LXc5RkUxc1NEaEs4VFZOY29qIn0=>[cid:image007.jpg@01DADA01.CA86B820]
From: Nick Couchman <vn...@apache.org>
Sent: Friday, July 19, 2024 13:59
To: user@guacamole.apache.org
Subject: Re: Guacamole 1.5.5 RDP connection refused
Goncalo,
Please make sure that you start a new thread for a new topic, and don't just reply to an existing message.
On Fri, Jul 19, 2024 at 6:14 AM Goncalo Rosa <go...@v2s.us.invalid>> wrote:
BTW: ignore_cert=true already set on the connection
I'm doubtful about this - the message clearly indicates that the connection is being rejected because the certificate is unknown or self-signed. Please verify that this is actually set for the connection that you're attempting to open. Also, the actual connection parameter within Guacamole Client should be "ignore-cert" (- vs. _).
GONÇALO COELHO ROSA
[cid:image001.jpg@01DADA01.CA86B820]
V2S Corporation
[cid:image002.png@01DADA01.CA86B820] Delaware, US
[cid:image003.png@01DADA01.CA86B820] +351 919 937 124<https://mibc-fr-01.mailinblack.com/securelink/?url=https://wa.me&key=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>
goncalo.rosa@v2s.us<ma...@v2s.us>
[cid:image005.png@01DADA01.CA86B820] www.v2s.us<https://mibc-fr-01.mailinblack.com/securelink/?url=http://www.v2s.us&key=eyJsYW5nIjoiRlIiLCJ1cmwiOiJodHRwOi8vd3d3LnYycy51cyIsInRva2VuIjoiZ0FBQUFBQm1tcFZ1cmhrZnZ2ZGFqTk9yREYxdlBNZ2pIU0Fnblk1XzNnajhITlNQcEtYcTRWTUlEZEdkWHg1eXA4bjZzVGZGRS1NaWhGQ2l3aEhFRjB0OUwyWlc2RGh6MmdRYjZUMEQ0Qy16QkxkWVdyT0ZRanhrajBuVUxteEdMUlgzR19BMFR3aVdRa2dFTE9sRXk5aXpyV0l4MFRmS25MVVpGV0tfQmw1bGloN1NGaUhlZG9qTEhpRG9jZ2NQZFcwSWZ6bHlUZmZUZ29Oc1hHYWthV182dGRjdnhxQ2h6cjM0c1VnUFkyOU85UVBCYllPcFk4RVYtOWlNYm1wYUJ1VU12SURQWDd4YlFUTGJQQ1lMS0pEYUlneEoxbDJobV9VWjhTTF8wOGwybjRDb0hKTkY4Y2ZmMGVrYVVROVJHcEk5NUh1OUwyblAifQ==> |F<https://mibc-fr-01.mailinblack.com/securelink/?url=https://www.facebook.com&key=eyJsYW5nIjoiRlIiLCJ1cmwiOiJodHRwczovL3d3dy5mYWNlYm9vay5jb20vdjJzY29ycG9yYXRpb24iLCJ0b2tlbiI6ImdBQUFBQUJtbXBWdUNSTXhFVHFUN19icmRBM1BhbWlteTlyc2tnbEwtNkFMRHkyWVhmSEltRHdnaUZna29obFRlUEk3MlVidk5KdWYwV0pZZjRrZDF4Q0w3TUc0RlZHQ25DZmpoWmJob1RXYS1ZN0RCa3c0QmttOGpJLW1qVFlhMU5GbnRBMFg3N3NOM3VTM1VhTEU5NFNRZGU5aXRVVkU2cXVFWUZIblZuN3FZbjhTclZSUEd2VTR3a3pyVjkzeUFhczZqbUotOERlcHFoTUpkODZYZWtnQW5jb1B0NmdoeURkcWhDMkdNRUtCaDhWYTRpUzFKNmhjVlNzNFgzby1nWWpWb0hYbXM2bnR1MFJzd3R0dk1HMHRmbWRHa2J5eEpZQkE1ckdDNnJxT1EzUUlnOFgxYUJ0M3dzQTJFWVExMDJZQkRRZmtZTkpOIn0=>|in<https://mibc-fr-01.mailinblack.com/securelink/?url=https://www.linkedin.com&key=eyJsYW5nIjoiRlIiLCJ1cmwiOiJodHRwczovL3d3dy5saW5rZWRpbi5jb20vY29tcGFueS92MnMtY29ycG9yYXRpb24vIiwidG9rZW4iOiJnQUFBQUFCbW1wVnVYYXlMRGdEeUFfUHRrMkstSWpObU0tVXVsN1dNcVVlcWUyaE1oYVNZVnNYbTBVbzJOb1JCT0NsdFZrOUxWQ05kc0FLYXRXZUJSWmVnS1Fka2h3ZmZPSUhYZmx5cFJDUFJDSGluUzRmcmFzWkZFcm92SlBjSWw3WmhIQlZ4R29WSGtZOUp4dXktaWRhaUFoYWxlLXhLRWdiTGhuSGk5aWRhNXpralR6aTRvZ05rRms0SVVCZW5Ja0dVV29hX2lhekpjb09fNC1uZ2hJVGlWTEYzckVTeU5yRUFoUmJZOVNfeUdvdl9iN2w5ZDZycGhEVDdNZzVhcExvYmxBcHRDcHR6VnU3elExLUZTRUdVNk40Z0ZVS2RfY2w2b2pRY1ZZd19raDhKU0ZiZTc4WDIyTnpqYlBvR0dMM0FpRGlwZV9jZSJ9>|
[cid:image008.png@01DADA01.CA86B820]<https://mibc-fr-01.mailinblack.com/securelink/?url=https://www.v2s.us&key=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>[cid:image008.png@01DADA01.CA86B820]<https://mibc-fr-01.mailinblack.com/securelink/?url=https://www.linkedin.com&key=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>[cid:image008.png@01DADA01.CA86B820]<https://mibc-fr-01.mailinblack.com/securelink/?url=https://www.facebook.com&key=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>[cid:image007.jpg@01DADA01.CA86B820]
From: Goncalo Rosa <go...@v2s.us.INVALID>>
Sent: Friday, July 19, 2024 11:11
To: user@guacamole.apache.org<ma...@guacamole.apache.org>
Subject: Guacamole 1.5.5 RDP connection refused
Hello,
We have been using Guacamole 0.8 and works very well for years now.
We decided to deploy our environment on last version 1.5.5 ad move into it, since upgrade from 0.8 on a centos 7 to 1.5.5 it seemed crasy.
Wow, that's quite a leap :-).
We deployed a guacamole 1.5.5 on Debian 12 with Database mariadb and active directory integration, using tomcat apache 9.
When I am testing the recreated RDP connections I get the following on daemon.log (this connection is against an old windows 2008 R2 Terminal server that I can access pretty fine from guacamole 0.8):
Jul 19 10:56:44 srvv2shqpgua02 guacd[2417]: Security mode: Negotiate (ANY)
Jul 19 10:56:44 srvv2shqpgua02 guacd[2417]: Resize method: none
Jul 19 10:56:44 srvv2shqpgua02 guacd[2417]: No clipboard line-ending normalization specified. Defaulting to preserving the format of all line endings.
Jul 19 10:56:44 srvv2shqpgua02 guacd[2417]: User "@943afc59-77be-4057-955e-5f7a39ae62ef" joined connection "$a9b353b7-fcd3-4896-a810-15b506ccdc58" (1 users now present)
Jul 19 10:56:44 srvv2shqpgua02 guacd[2417]: Loading keymap "base"
Jul 19 10:56:44 srvv2shqpgua02 guacd[2417]: Loading keymap "en-us-qwerty"
Jul 19 10:56:44 srvv2shqpgua02 guacd[2417]: RDP server closed/refused connection: SSL/TLS connection failed (untrusted/self-signed certificate?)
Jul 19 10:56:44 srvv2shqpgua02 guacd[2417]: User "@943afc59-77be-4057-955e-5f7a39ae62ef" disconnected (0 users remain)
Jul 19 10:56:44 srvv2shqpgua02 guacd[2417]: Last user of connection "$a9b353b7-fcd3-4896-a810-15b506ccdc58" disconnected
This indicates the certificate is not trusted and Guacamole is closing the connection due to that, so double-check issues related to that - correct connection parameters, home directory configuration, etc. Also, you can try switching the security mode to "NLA" or "TLS" and see if that helps.
-Nick
Re: Guacamole 1.5.5 RDP connection refused
Posted by Nick Couchman <vn...@apache.org>.
On Fri, Jul 19, 2024 at 12:34 PM Goncalo Rosa <go...@v2s.us.invalid>
wrote:
> Nothing worked ☹
>
>
>
> Neither TLS nor NLA
>
> The ignore_cert=true is set on the connection
>
>
But, did you see my previous note? "ignore_cert" is not the name of the
connection parameter - it should be "ignore-cert" - with a dash (-), not an
underscore (_).
>
>
> Now not even provide errors on daemon.log…
>
>
>
> The strange is that my version 0.8 works like a charm… Why not the 1.5.5?
>
>
>
That's very hard to say - 0.8 is a very, very old version, and there are
many potential differences.
> Are there any log files that I could send you?
>
You can put guacd into debug mode, and run it in the foreground, and see if
that gives you any more information:
/path/to/guacd -L debug -f
If that doesn't give any further hints, then try "trace" instead of debug -
it'll give you a lot of output, but may clue you in as to why it is
rejecting it.
-Nick
>
RE: Guacamole 1.5.5 RDP connection refused
Posted by Goncalo Rosa <go...@v2s.us.INVALID>.
Nothing worked ☹
Neither TLS nor NLA
The ignore_cert=true is set on the connection
Now not even provide errors on daemon.log…
The strange is that my version 0.8 works like a charm… Why not the 1.5.5?
Are there any log files that I could send you?
GONÇALO COELHO ROSA
[cid:image001.jpg@01DADA01.CA86B820]
V2S Corporation
[cid:image002.png@01DADA01.CA86B820] Delaware, US
[cid:image003.png@01DADA01.CA86B820] +351 919 937 124<https://wa.me/+351919937124>
goncalo.rosa@v2s.us<ma...@v2s.us>
[cid:image005.png@01DADA01.CA86B820] www.v2s.us<http://www.v2s.us> |F<https://www.facebook.com/v2scorporation>|in<https://www.linkedin.com/company/v2s-corporation/>|
[cid:image009.png@01DADA01.CA8E5940]<https://www.v2s.us/>[cid:image009.png@01DADA01.CA8E5940]<https://www.linkedin.com/company/v2s-corporation/>[cid:image009.png@01DADA01.CA8E5940]<https://www.facebook.com/v2scorporation>[cid:image007.jpg@01DADA01.CA86B820]
From: Nick Couchman <vn...@apache.org>
Sent: Friday, July 19, 2024 13:59
To: user@guacamole.apache.org
Subject: Re: Guacamole 1.5.5 RDP connection refused
Goncalo,
Please make sure that you start a new thread for a new topic, and don't just reply to an existing message.
On Fri, Jul 19, 2024 at 6:14 AM Goncalo Rosa <go...@v2s.us.invalid>> wrote:
BTW: ignore_cert=true already set on the connection
I'm doubtful about this - the message clearly indicates that the connection is being rejected because the certificate is unknown or self-signed. Please verify that this is actually set for the connection that you're attempting to open. Also, the actual connection parameter within Guacamole Client should be "ignore-cert" (- vs. _).
GONÇALO COELHO ROSA
[cid:image001.jpg@01DADA01.CA86B820]
V2S Corporation
[cid:image002.png@01DADA01.CA86B820] Delaware, US
[cid:image003.png@01DADA01.CA86B820] +351 919 937 124<https://wa.me/+351919937124>
goncalo.rosa@v2s.us<ma...@v2s.us>
[cid:image005.png@01DADA01.CA86B820] www.v2s.us<http://www.v2s.us> |F<https://www.facebook.com/v2scorporation>|in<https://www.linkedin.com/company/v2s-corporation/>|
[cid:image008.png@01DADA01.CA86B820]<https://www.v2s.us/>[cid:image008.png@01DADA01.CA86B820]<https://www.linkedin.com/company/v2s-corporation/>[cid:image008.png@01DADA01.CA86B820]<https://www.facebook.com/v2scorporation>[cid:image007.jpg@01DADA01.CA86B820]
From: Goncalo Rosa <go...@v2s.us.INVALID>>
Sent: Friday, July 19, 2024 11:11
To: user@guacamole.apache.org<ma...@guacamole.apache.org>
Subject: Guacamole 1.5.5 RDP connection refused
Hello,
We have been using Guacamole 0.8 and works very well for years now.
We decided to deploy our environment on last version 1.5.5 ad move into it, since upgrade from 0.8 on a centos 7 to 1.5.5 it seemed crasy.
Wow, that's quite a leap :-).
We deployed a guacamole 1.5.5 on Debian 12 with Database mariadb and active directory integration, using tomcat apache 9.
When I am testing the recreated RDP connections I get the following on daemon.log (this connection is against an old windows 2008 R2 Terminal server that I can access pretty fine from guacamole 0.8):
Jul 19 10:56:44 srvv2shqpgua02 guacd[2417]: Security mode: Negotiate (ANY)
Jul 19 10:56:44 srvv2shqpgua02 guacd[2417]: Resize method: none
Jul 19 10:56:44 srvv2shqpgua02 guacd[2417]: No clipboard line-ending normalization specified. Defaulting to preserving the format of all line endings.
Jul 19 10:56:44 srvv2shqpgua02 guacd[2417]: User "@943afc59-77be-4057-955e-5f7a39ae62ef" joined connection "$a9b353b7-fcd3-4896-a810-15b506ccdc58" (1 users now present)
Jul 19 10:56:44 srvv2shqpgua02 guacd[2417]: Loading keymap "base"
Jul 19 10:56:44 srvv2shqpgua02 guacd[2417]: Loading keymap "en-us-qwerty"
Jul 19 10:56:44 srvv2shqpgua02 guacd[2417]: RDP server closed/refused connection: SSL/TLS connection failed (untrusted/self-signed certificate?)
Jul 19 10:56:44 srvv2shqpgua02 guacd[2417]: User "@943afc59-77be-4057-955e-5f7a39ae62ef" disconnected (0 users remain)
Jul 19 10:56:44 srvv2shqpgua02 guacd[2417]: Last user of connection "$a9b353b7-fcd3-4896-a810-15b506ccdc58" disconnected
This indicates the certificate is not trusted and Guacamole is closing the connection due to that, so double-check issues related to that - correct connection parameters, home directory configuration, etc. Also, you can try switching the security mode to "NLA" or "TLS" and see if that helps.
-Nick
Re: Guacamole 1.5.5 RDP connection refused
Posted by Nick Couchman <vn...@apache.org>.
Goncalo,
Please make sure that you start a new thread for a new topic, and don't
just reply to an existing message.
On Fri, Jul 19, 2024 at 6:14 AM Goncalo Rosa <go...@v2s.us.invalid>
wrote:
> BTW: ignore_cert=true already set on the connection
>
>
>
>
>
I'm doubtful about this - the message clearly indicates that the connection
is being rejected because the certificate is unknown or self-signed. Please
verify that this is actually set for the connection that you're attempting
to open. Also, the actual connection parameter within Guacamole Client
should be "ignore-cert" (- vs. _).
>
>
> *GONÇALO COELHO ROSA *
>
> *V2S Corporation*
>
> Delaware, US
>
> +351 919 937 124 <https://wa.me/+351919937124>
>
> goncalo.rosa@v2s.us
>
> www.v2s.us |*F* <https://www.facebook.com/v2scorporation>|*in*
> <https://www.linkedin.com/company/v2s-corporation/>|
>
> <https://www.v2s.us/> <https://www.linkedin.com/company/v2s-corporation/>
> <https://www.facebook.com/v2scorporation>
>
>
>
>
>
> *From:* Goncalo Rosa <go...@v2s.us.INVALID>
> *Sent:* Friday, July 19, 2024 11:11
> *To:* user@guacamole.apache.org
> *Subject:* Guacamole 1.5.5 RDP connection refused
>
>
>
> Hello,
>
>
>
> We have been using Guacamole 0.8 and works very well for years now.
>
> We decided to deploy our environment on last version 1.5.5 ad move into
> it, since upgrade from 0.8 on a centos 7 to 1.5.5 it seemed crasy.
>
>
>
Wow, that's quite a leap :-).
> We deployed a guacamole 1.5.5 on Debian 12 with Database mariadb and
> active directory integration, using tomcat apache 9.
>
>
>
> When I am testing the recreated RDP connections I get the following on
> daemon.log (this connection is against an old windows 2008 R2 Terminal
> server that I can access pretty fine from guacamole 0.8):
>
>
>
> Jul 19 10:56:44 srvv2shqpgua02 guacd[2417]: Security mode: Negotiate (ANY)
>
> Jul 19 10:56:44 srvv2shqpgua02 guacd[2417]: Resize method: none
>
> Jul 19 10:56:44 srvv2shqpgua02 guacd[2417]: No clipboard line-ending
> normalization specified. Defaulting to preserving the format of all line
> endings.
>
> Jul 19 10:56:44 srvv2shqpgua02 guacd[2417]: User
> "@943afc59-77be-4057-955e-5f7a39ae62ef" joined connection
> "$a9b353b7-fcd3-4896-a810-15b506ccdc58" (1 users now present)
>
> Jul 19 10:56:44 srvv2shqpgua02 guacd[2417]: Loading keymap "base"
>
> Jul 19 10:56:44 srvv2shqpgua02 guacd[2417]: Loading keymap "en-us-qwerty"
>
> Jul 19 10:56:44 srvv2shqpgua02 guacd[2417]: RDP server closed/refused
> connection: SSL/TLS connection failed (untrusted/self-signed certificate?)
>
> Jul 19 10:56:44 srvv2shqpgua02 guacd[2417]: User
> "@943afc59-77be-4057-955e-5f7a39ae62ef" disconnected (0 users remain)
>
> Jul 19 10:56:44 srvv2shqpgua02 guacd[2417]: Last user of connection
> "$a9b353b7-fcd3-4896-a810-15b506ccdc58" disconnected
>
>
>
This indicates the certificate is not trusted and Guacamole is closing the
connection due to that, so double-check issues related to that - correct
connection parameters, home directory configuration, etc. Also, you can try
switching the security mode to "NLA" or "TLS" and see if that helps.
-Nick
>
RE: Guacamole 1.5.5 RDP connection refused
Posted by Goncalo Rosa <go...@v2s.us.INVALID>.
BTW: ignore_cert=true already set on the connection
GONÇALO COELHO ROSA
[cid:image001.jpg@01DAD9CC.C0A00800]
V2S Corporation
[cid:image002.png@01DAD9CC.C0A00800] Delaware, US
[cid:image003.png@01DAD9CC.C0A00800] +351 919 937 124<https://wa.me/+351919937124>
goncalo.rosa@v2s.us<ma...@v2s.us>
[cid:image005.png@01DAD9CC.C0A00800] www.v2s.us<http://www.v2s.us> |F<https://www.facebook.com/v2scorporation>|in<https://www.linkedin.com/company/v2s-corporation/>|
[cid:image006.png@01DAD9CC.C0A6E5D0]<https://www.v2s.us/>[cid:image006.png@01DAD9CC.C0A6E5D0]<https://www.linkedin.com/company/v2s-corporation/>[cid:image006.png@01DAD9CC.C0A6E5D0]<https://www.facebook.com/v2scorporation>[cid:image010.jpg@01DAD9CC.C0A00800]
From: Goncalo Rosa <go...@v2s.us.INVALID>
Sent: Friday, July 19, 2024 11:11
To: user@guacamole.apache.org
Subject: Guacamole 1.5.5 RDP connection refused
Hello,
We have been using Guacamole 0.8 and works very well for years now.
We decided to deploy our environment on last version 1.5.5 ad move into it, since upgrade from 0.8 on a centos 7 to 1.5.5 it seemed crasy.
We deployed a guacamole 1.5.5 on Debian 12 with Database mariadb and active directory integration, using tomcat apache 9.
When I am testing the recreated RDP connections I get the following on daemon.log (this connection is against an old windows 2008 R2 Terminal server that I can access pretty fine from guacamole 0.8):
Jul 19 10:56:44 srvv2shqpgua02 guacd[2417]: Security mode: Negotiate (ANY)
Jul 19 10:56:44 srvv2shqpgua02 guacd[2417]: Resize method: none
Jul 19 10:56:44 srvv2shqpgua02 guacd[2417]: No clipboard line-ending normalization specified. Defaulting to preserving the format of all line endings.
Jul 19 10:56:44 srvv2shqpgua02 guacd[2417]: User "@943afc59-77be-4057-955e-5f7a39ae62ef" joined connection "$a9b353b7-fcd3-4896-a810-15b506ccdc58" (1 users now present)
Jul 19 10:56:44 srvv2shqpgua02 guacd[2417]: Loading keymap "base"
Jul 19 10:56:44 srvv2shqpgua02 guacd[2417]: Loading keymap "en-us-qwerty"
Jul 19 10:56:44 srvv2shqpgua02 guacd[2417]: RDP server closed/refused connection: SSL/TLS connection failed (untrusted/self-signed certificate?)
Jul 19 10:56:44 srvv2shqpgua02 guacd[2417]: User "@943afc59-77be-4057-955e-5f7a39ae62ef" disconnected (0 users remain)
Jul 19 10:56:44 srvv2shqpgua02 guacd[2417]: Last user of connection "$a9b353b7-fcd3-4896-a810-15b506ccdc58" disconnected
The screen shows:
[cid:image011.png@01DAD9CC.C0A00800]
I also have linux machines with RDP access using XRDP and to those doesn't show anything on the daemon.log at all.
Note: I already passed the RDP permisstions change the daemon user by guacd and creating a proper guacg home dir.
Any help please?
GONÇALO COELHO ROSA
[cid:image001.jpg@01DAD9CC.C0A00800]
V2S Corporation
[cid:image002.png@01DAD9CC.C0A00800] Delaware, US
[cid:image003.png@01DAD9CC.C0A00800] +351 919 937 124<https://wa.me/+351919937124>
goncalo.rosa@v2s.us<ma...@v2s.us>
[cid:image005.png@01DAD9CC.C0A00800] www.v2s.us<http://www.v2s.us> |F<https://www.facebook.com/v2scorporation>|in<https://www.linkedin.com/company/v2s-corporation/>|
[cid:image006.png@01DAD9CC.C0A6E5D0]<https://www.v2s.us/>[cid:image006.png@01DAD9CC.C0A6E5D0]<https://www.linkedin.com/company/v2s-corporation/>[cid:image006.png@01DAD9CC.C0A6E5D0]<https://www.facebook.com/v2scorporation>[cid:image010.jpg@01DAD9CC.C0A00800]