You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@guacamole.apache.org by Bill Sandor <bi...@allegiance-it.com> on 2021/02/18 01:35:27 UTC

Cannot connect using RDP

Hello,

I am using a new install of Guacamole 1.3 - native install un Ubuntu 20.04.  I can connect to SSH clients, but not RDP.  I can connect to these RDP clients using Microsoft Remote Desktop from my computer using the same credentials I put in the user-mapping.xml file, so I know that credentials are correct, the user is permitted for remote access, and the the server is reachable via RDP.

Below is my user-mapping.xml file and syslog outputs - any suggestions would be appreciated.  Thank you.


<user-mapping>

    <!-- Per-user authentication and config information -->

    <!-- A user using md5 to hash the password
         guacadmin user and its md5 hashed password below is used to 
             login to Guacamole Web UI-->
    <authorize 
            username="test"
            password=“XXXXX"
            encoding="md5">

        <!-- First authorized Remote connection -->
        <connection name="Cindy Starcher old PC">
            <protocol>rdp</protocol>
            <param name="hostname">DIS-WS-29.corp.ugins.com</param>
            <param name="port">3389</param>
            <param name="username”>ugins\administrator</param>
            <param name="passworde”>XXXXX!</param>
            <param name="domain">ugins</param>
            <param name="security">rdp</param>
            <param name="ignore-cert">true</param>
        </connection>

        <!-- Second authorized remote connection -->
        <connection name="Windows Server 2019">
            <protocol>rdp</protocol>
            <param name="hostname">192.168.236.11</param>
            <param name="port">3389</param>
            <param name="username">ugins\administrator</param>
            <param name="password”>XXXX</param>
            <param name="security">any</param>
            <param name="ignore-cert">true</param>
        </connection>

        <!-- Third authorized remote connection -->
        <connection name="Ubuntu Server 20.04">
            <protocol>ssh</protocol>
            <param name="hostname">192.168.236.14</param>
            <param name="port">22</param>
            <param name="username">ladmin</param>
        </connection>

    </authorize>

</user-mapping>






Feb 18 01:14:31 dis-ububtu1 guacd[1831]: Creating new client for protocol "rdp"
Feb 18 01:14:31 dis-ububtu1 guacd[1831]: Connection ID is "$fc00077a-a8a4-489b-879a-117fe90ecc5a"
Feb 18 01:14:31 dis-ububtu1 guacd[1931]: Security mode: Negotiate (ANY)
Feb 18 01:14:31 dis-ububtu1 guacd[1931]: Resize method: none
Feb 18 01:14:31 dis-ububtu1 guacd[1931]: User "@9025d05b-bca6-4e11-b382-7572fb6312b4" joined connection "$fc00077a-a8a4-489b-879a-117fe90ecc5a" (1 users now present)
Feb 18 01:14:31 dis-ububtu1 guacd[1931]: Loading keymap "base"
Feb 18 01:14:31 dis-ububtu1 guacd[1931]: Loading keymap "en-us-qwerty"
Feb 18 01:14:47 dis-ububtu1 guacd[1931]: RDP server closed/refused connection: Connection failed (server unreachable?)
Feb 18 01:14:47 dis-ububtu1 guacd[1931]: User "@9025d05b-bca6-4e11-b382-7572fb6312b4" disconnected (0 users remain)
Feb 18 01:14:47 dis-ububtu1 guacd[1931]: Last user of connection "$fc00077a-a8a4-489b-879a-117fe90ecc5a" disconnected
Feb 18 01:14:47 dis-ububtu1 guacd[1831]: Connection "$fc00077a-a8a4-489b-879a-117fe90ecc5a" removed.
Feb 18 01:15:06 dis-ububtu1 guacd[1831]: Creating new client for protocol "rdp"
Feb 18 01:15:06 dis-ububtu1 guacd[1831]: Connection ID is "$d3c184ad-f836-4e3d-a189-fa77cc2cc94e"
Feb 18 01:15:06 dis-ububtu1 guacd[1964]: Security mode: Negotiate (ANY)
Feb 18 01:15:06 dis-ububtu1 guacd[1964]: Resize method: none
Feb 18 01:15:06 dis-ububtu1 guacd[1964]: User "@076ea52a-dd97-49eb-bb1e-302b9175637c" joined connection "$d3c184ad-f836-4e3d-a189-fa77cc2cc94e" (1 users now present)
Feb 18 01:15:06 dis-ububtu1 guacd[1964]: Loading keymap "base"
Feb 18 01:15:06 dis-ububtu1 guacd[1964]: Loading keymap "en-us-qwerty"
Feb 18 01:15:21 dis-ububtu1 guacd[1964]: RDP server closed/refused connection: Connection failed (server unreachable?)
Feb 18 01:15:21 dis-ububtu1 guacd[1964]: User "@076ea52a-dd97-49eb-bb1e-302b9175637c" disconnected (0 users remain)
Feb 18 01:15:21 dis-ububtu1 guacd[1964]: Last user of connection "$d3c184ad-f836-4e3d-a189-fa77cc2cc94e" disconnected
Feb 18 01:15:21 dis-ububtu1 guacd[1831]: Connection "$d3c184ad-f836-4e3d-a189-fa77cc2cc94e" removed.



Thank you.

---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org


Re: Cannot connect using RDP

Posted by Bill Sandor <bi...@allegiance-it.com>.
Thanks for pointing out the typos in my config file - I’ve tried all variations of passwords/not passwords, domains separate and in the username field all to the same result.  I will double-check the settings and try again to be sure.

The RDP server allows all RDP connections from the LAN, which the Guacamole server is also on.  Same with the Windows 10 Pro PC that I am also testing connection to.  Both the server and the PC are reportedly refusing the connection, but I see no evidence of the refusal on either the RDP server not the PC.


--Bill Sandor
Allegiance Technologies & Consulting LLC
http://www.allegiance-it.com
330.315.2867

> On Feb 17, 2021, at 10:00 PM, Mike Jumper <mi...@glyptodon.com> wrote:
> 
> On Wed, Feb 17, 2021 at 5:35 PM Bill Sandor <bill@allegiance-it.com <ma...@allegiance-it.com>> wrote:
> ...
>             <param name="username”>ugins\administrator</param>
> 
> I notice that you are specifying the domain here AND with the "domain" parameter. I don't know what the effect of this will be (and that may depend on Windows), but you should either specify the domain as part of the username or separately with the "domain" parameter, not both.
> 
>             <param name="passworde”>XXXXX!</param>
> 
> The name of this parameter is misspelled. It should be "password", not "passworde". 
> 
> ...
> Feb 18 01:14:47 dis-ububtu1 guacd[1931]: RDP server closed/refused connection: Connection failed (server unreachable?)
> 
> It looks like the RDP server is refusing the inbound connection outright. Are you sure that the firewall of the RDP server is configured to allow inbound RDP connections from the Guacamole server?
> 
> Michael Jumper
> CEO, Lead Developer
> Glyptodon Inc <https://enterprise.glyptodon.com/>. 
> 


RE: Cannot connect using RDP

Posted by Adrian Owen <ad...@eesm.com>.
<connection name="Cindy Starcher old PC">
            <protocol>rdp</protocol>
            <param name="hostname">DIS-WS-29.corp.ugins.com<http://dis-ws-29.corp.ugins.com/></param>
            <param name="port">3389</param>
            <param name="username">administrator</param>
            <param name="password”>XXXXXXX</param>
            <param name="domain">ugins</param>
            <param name="security">rdp</param>          <--------------------------- all   not rdp
            <param name="ignore-cert">true</param>
        </connection>

From: Stefan Bogdan Cimpeanu [mailto:bogdan@cimpeanu.org]
Sent: 18 February 2021 20:31
To: user@guacamole.apache.org
Subject: Re: Cannot connect using RDP

Have you checked the Windows Event viewer logs on your target? Do you even get connection attempts?

Bogdan


On 18 Feb 2021, at 22:28, Mike Jumper <mi...@glyptodon.com>> wrote:

On Thu, Feb 18, 2021 at 11:06 AM Bill Sandor <bi...@allegiance-it.com>> wrote:
I can ping all the RDP endpoint IPs and hostnames from the guac server.  Connecting to client via IP or hostname fails the same either way.

I have tried with and without password (thinking it would prompt for password like MS’s RDP client).  Same failure either way.

It will (as of 1.3.0), but only after authentication has been requested by the RDP server. If the low-level connection to the RDP server is being rejected, this won't happen.

What do you see within your guacd logs when debug-level logging is enabled?

- Mike



Re: Cannot connect using RDP

Posted by Stefan Bogdan Cimpeanu <bo...@cimpeanu.org>.
Have you checked the Windows Event viewer logs on your target? Do you even get connection attempts?

Bogdan

> On 18 Feb 2021, at 22:28, Mike Jumper <mi...@glyptodon.com> wrote:
> 
> On Thu, Feb 18, 2021 at 11:06 AM Bill Sandor <bill@allegiance-it.com <ma...@allegiance-it.com>> wrote:
> I can ping all the RDP endpoint IPs and hostnames from the guac server.  Connecting to client via IP or hostname fails the same either way.
> 
> I have tried with and without password (thinking it would prompt for password like MS’s RDP client).  Same failure either way.
> 
> It will (as of 1.3.0), but only after authentication has been requested by the RDP server. If the low-level connection to the RDP server is being rejected, this won't happen.
> 
> What do you see within your guacd logs when debug-level logging is enabled?
> 
> - Mike
> 


Re: Cannot connect using RDP

Posted by Mike Jumper <mi...@glyptodon.com>.
On Thu, Feb 18, 2021 at 11:06 AM Bill Sandor <bi...@allegiance-it.com> wrote:

> I can ping all the RDP endpoint IPs and hostnames from the guac server.
> Connecting to client via IP or hostname fails the same either way.
>
> I have tried with and without password (thinking it would prompt for
> password like MS’s RDP client).  Same failure either way.
>

It will (as of 1.3.0), but only after authentication has been requested by
the RDP server. If the low-level connection to the RDP server is being
rejected, this won't happen.

What do you see within your guacd logs when debug-level logging is enabled?

- Mike

Re: Cannot connect using RDP

Posted by Bill Sandor <bi...@allegiance-it.com>.
Something must have been wrong with my install even though I did not receive any errors - I setup the oznu/guacamole docker container and I can now RDP to my PCs.  Weirdly, not my Windows Server, but for now I am mainly interested in giving remote access to the PCs for my users, so I will look into that later.

Again, thanks for the help.


--Bill 

> On Feb 18, 2021, at 2:49 PM, Adrian Owen <ad...@eesm.com> wrote:
> 
> Try windows mstsc login OK? Try no username/password - new Guacamole 1.3 feature.
>  
> From: Bill Sandor [mailto:bill@allegiance-it.com <ma...@allegiance-it.com>] 
> Sent: 18 February 2021 19:06
> To: user@guacamole.apache.org <ma...@guacamole.apache.org>
> Subject: Re: Cannot connect using RDP
>  
> I can ping all the RDP endpoint IPs and hostnames from the guac server.  Connecting to client via IP or hostname fails the same either way.
>  
> I have tried with and without password (thinking it would prompt for password like MS’s RDP client).  Same failure either way.
>  
>  
> --Bill Sandor
> Allegiance Technologies & Consulting LLC
> http://www.allegiance-it.com <http://www.allegiance-it.com/>
> 330.315.2867
> 
> 
> On Feb 18, 2021, at 12:42 PM, Adrian Owen <adrian.owen@eesm.com <ma...@eesm.com>> wrote:
>  
> 1st RDP fail  Putty to guac server. Is DNS setup ping by hostname?
>  
> 2nd RDP fail. Username – no password given.
>  
> Adrian
>  
> From: Bill Sandor [mailto:bill@allegiance-it.com <ma...@allegiance-it.com>] 
> Sent: 18 February 2021 17:08
> To: user@guacamole.apache.org <ma...@guacamole.apache.org>
> Subject: Re: Cannot connect using RDP
>  
> See new config file below.  I’ve fixed the “passworde” typo on the one entry, removed the password from another.  Also, removed the domain viable (I’ve tried both ways).  I’ve also turned off the firewall on the Windows 10 PC altogether and unloaded the antivirus software for good measure, it still will not connect to it from Guacamole. 
>  
>  
> <user-mapping>
> 
>     <!-- Per-user authentication and config information -->
> 
>     <!-- A user using md5 to hash the password
>          guacadmin user and its md5 hashed password below is used to 
>              login to Guacamole Web UI-->
>     <authorize 
>             username="test"
>             password="986b20d853c2c5eb9ebf1ed96d5b6724"
>             encoding="md5">
> 
>         <!-- First authorized Remote connection -->
>         <connection name="Cindy Starcher old PC">
>             <protocol>rdp</protocol>
>             <param name="hostname">DIS-WS-29.corp.ugins.com <http://dis-ws-29.corp.ugins.com/></param>
>             <param name="port">3389</param>
>             <param name="username">administrator</param>
>             <param name="password”>XXXXXXX</param>
>             <param name="domain">ugins</param>
>             <param name="security">rdp</param>
>             <param name="ignore-cert">true</param>
>         </connection>
> 
>         <!-- Second authorized remote connection -->
>         <connection name="Windows Server 2019">
>             <protocol>rdp</protocol>
>             <param name="hostname">192.168.236.11</param>
>             <param name="port">3389</param>
>             <param name="username">ugins\administrator</param>
>             <param name="security">any</param>
>             <param name="ignore-cert">true</param>
>         </connection>
> 
>         <!-- Third authorized remote connection -->
>         <connection name="FreeNAS Server">
>             <protocol>ssh</protocol>
>             <param name="hostname">192.168.236.20</param>
>             <param name="port">22</param>
>             <param name="username">root</param>
>         </connection>
> 
>     </authorize>
> 
> </user-mapping>
>                            
>  
>  
> Feb 18 16:43:50 dis-ububtu1 guacd[25418]: Creating new client for protocol "rdp"
> Feb 18 16:43:50 dis-ububtu1 guacd[25418]: Connection ID is "$476fd94c-d906-41ac-811f-41e64b301d5f"
> Feb 18 16:43:50 dis-ububtu1 guacd[25503]: Security mode: Negotiate (ANY)
> Feb 18 16:43:50 dis-ububtu1 guacd[25503]: Resize method: none
> Feb 18 16:43:50 dis-ububtu1 guacd[25503]: User "@4ac29186-6354-496b-8d2d-c5d0a26ba805" joined connection "$476fd94c-d906-41ac-811f-41e64b301d5f" (1 users now present)
> Feb 18 16:43:50 dis-ububtu1 guacd[25503]: Loading keymap "base"
> Feb 18 16:43:50 dis-ububtu1 guacd[25503]: Loading keymap "en-us-qwerty"
> Feb 18 16:44:05 dis-ububtu1 guacd[25503]: RDP server closed/refused connection: Connection failed (server unreachable?)
> Feb 18 16:44:05 dis-ububtu1 guacd[25503]: User "@4ac29186-6354-496b-8d2d-c5d0a26ba805" disconnected (0 users remain)
> Feb 18 16:44:05 dis-ububtu1 guacd[25503]: Last user of connection "$476fd94c-d906-41ac-811f-41e64b301d5f" disconnected
> Feb 18 16:44:05 dis-ububtu1 guacd[25418]: Connection "$476fd94c-d906-41ac-811f-41e64b301d5f" removed.
> Feb 18 16:44:47 dis-ububtu1 guacd[25418]: Creating new client for protocol "rdp"
> Feb 18 16:44:47 dis-ububtu1 guacd[25418]: Connection ID is "$cf6354bf-9352-4ccb-a1c9-b7f59a8291c9"
> Feb 18 16:44:47 dis-ububtu1 guacd[25547]: Security mode: RDP
> Feb 18 16:44:47 dis-ububtu1 guacd[25547]: Resize method: none
> Feb 18 16:44:47 dis-ububtu1 guacd[25547]: User "@c3ac4deb-12c7-43ca-8731-9a4f3b3e93e2" joined connection "$cf6354bf-9352-4ccb-a1c9-b7f59a8291c9" (1 users now present)
> Feb 18 16:44:47 dis-ububtu1 guacd[25547]: Loading keymap "base"
> Feb 18 16:44:47 dis-ububtu1 guacd[25547]: Loading keymap "en-us-qwerty"
> Feb 18 16:45:02 dis-ububtu1 guacd[25547]: RDP server closed/refused connection: Connection failed (server unreachable?)
> Feb 18 16:45:02 dis-ububtu1 guacd[25547]: User "@c3ac4deb-12c7-43ca-8731-9a4f3b3e93e2" disconnected (0 users remain)
> Feb 18 16:45:02 dis-ububtu1 guacd[25547]: Last user of connection "$cf6354bf-9352-4ccb-a1c9-b7f59a8291c9" disconnected
> Feb 18 16:45:02 dis-ububtu1 guacd[25418]: Connection "$cf6354bf-9352-4ccb-a1c9-b7f59a8291c9" removed.
> Feb 18 16:46:48 dis-ububtu1 guacd[25418]: Creating new client for protocol "rdp"
> Feb 18 16:46:49 dis-ububtu1 guacd[25418]: Connection ID is "$6f8b5c57-1346-47ac-a467-3eab1a3edc93"
> Feb 18 16:46:49 dis-ububtu1 guacd[25618]: Security mode: RDP
> Feb 18 16:46:49 dis-ububtu1 guacd[25618]: Resize method: none
> Feb 18 16:46:49 dis-ububtu1 guacd[25618]: User "@9156b7ce-1700-4238-bcbc-3bef36fd92d2" joined connection "$6f8b5c57-1346-47ac-a467-3eab1a3edc93" (1 users now present)
> Feb 18 16:46:49 dis-ububtu1 guacd[25618]: Loading keymap "base"
> Feb 18 16:46:49 dis-ububtu1 guacd[25618]: Loading keymap "en-us-qwerty"
> Feb 18 16:47:04 dis-ububtu1 guacd[25618]: RDP server closed/refused connection: Connection failed (server unreachable?)
> Feb 18 16:47:04 dis-ububtu1 guacd[25618]: User "@9156b7ce-1700-4238-bcbc-3bef36fd92d2" disconnected (0 users remain)
> Feb 18 16:47:04 dis-ububtu1 guacd[25618]: Last user of connection "$6f8b5c57-1346-47ac-a467-3eab1a3edc93" disconnected
> Feb 18 16:47:04 dis-ububtu1 guacd[25418]: Connection "$6f8b5c57-1346-47ac-a467-3eab1a3edc93" removed.
> Feb 18 16:49:17 dis-ububtu1 guacd[25732]: Creating new client for protocol "rdp"
> Feb 18 16:49:17 dis-ububtu1 guacd[25732]: Connection ID is "$88c4d256-4636-498f-bfea-356b1567b81f"
> Feb 18 16:49:17 dis-ububtu1 guacd[25800]: Security mode: RDP
> Feb 18 16:49:17 dis-ububtu1 guacd[25800]: Resize method: none
> Feb 18 16:49:17 dis-ububtu1 guacd[25800]: User "@95c6f23f-4672-476f-903d-e1c4fd3790ce" joined connection "$88c4d256-4636-498f-bfea-356b1567b81f" (1 users now present)
> Feb 18 16:49:17 dis-ububtu1 guacd[25800]: Loading keymap "base"
> Feb 18 16:49:17 dis-ububtu1 guacd[25800]: Loading keymap "en-us-qwerty"
> Feb 18 16:49:32 dis-ububtu1 guacd[25800]: RDP server closed/refused connection: Connection failed (server unreachable?)
> Feb 18 16:49:32 dis-ububtu1 guacd[25800]: User "@95c6f23f-4672-476f-903d-e1c4fd3790ce" disconnected (0 users remain)
> Feb 18 16:49:32 dis-ububtu1 guacd[25800]: Last user of connection "$88c4d256-4636-498f-bfea-356b1567b81f" disconnected
> Feb 18 16:49:32 dis-ububtu1 guacd[25732]: Connection "$88c4d256-4636-498f-bfea-356b1567b81f" removed.
>  
>  
>  
>  
> I’ve also now tried installing TightVNC server on my Windows 10 PC and configuring Guacamole to connect that way.  The screen shows "Connected to Guacamole. Waiting for response…” but does not connect.  The log shows:
> Feb 18 17:04:14 dis-ububtu1 guacd[26473]: Creating new client for protocol "vnc"
> Feb 18 17:04:14 dis-ububtu1 guacd[26473]: Connection ID is "$da1e89af-259f-45f6-a610-0d9ac1700503"
> Feb 18 17:04:14 dis-ububtu1 guacd[26541]: Cursor rendering: local
> Feb 18 17:04:14 dis-ububtu1 guacd[26541]: User "@5ff26938-4da3-4059-8f6b-08704a303d05" joined connection "$da1e89af-259f-45f6-a610-0d9ac1700503" (1 users now present)
>  
> My config is:
>         <!-- First authorized Remote connection -->
>         <connection name="Cindy Starcher old PC">
>             <protocol>vnc</protocol>
>             <param name="hostname">192.168.1.93</param>
>             <param name="port">5900</param>
>             <param name="password">Forevaluation2021</param>
>             <param name="autoretry">3</param>
>         </connection>
> 
>  
> I can connect to the PC via VNC from my Mac over a VPN with no issue (again, the Guacamole server is on the same LAN as the PC).
>  
> I would suspect networking, but I can SSH into hosts on the same LAN with Guacamole no problem.
>  
>  
>  
> I might try using the docker install today if I have time just to try something else.
>  
>  
>  
> Thank you again for your help
>  
>  
>  
> --Bill
>  
>  
>  
>  
> On Feb 17, 2021, at 10:00 PM, Mike Jumper <mike.jumper@glyptodon.com <ma...@glyptodon.com>> wrote:
>  
> On Wed, Feb 17, 2021 at 5:35 PM Bill Sandor <bill@allegiance-it.com <ma...@allegiance-it.com>> wrote:
> ...
>             <param name="username”>ugins\administrator</param>
>  
> I notice that you are specifying the domain here AND with the "domain" parameter. I don't know what the effect of this will be (and that may depend on Windows), but you should either specify the domain as part of the username or separately with the "domain" parameter, not both.
>  
>             <param name="passworde”>XXXXX!</param>
>  
> The name of this parameter is misspelled. It should be "password", not "passworde". 
>  
> ...
> Feb 18 01:14:47 dis-ububtu1 guacd[1931]: RDP server closed/refused connection: Connection failed (server unreachable?)
>  
> It looks like the RDP server is refusing the inbound connection outright. Are you sure that the firewall of the RDP server is configured to allow inbound RDP connections from the Guacamole server?
>  
> Michael Jumper
> CEO, Lead Developer
> Glyptodon Inc <https://enterprise.glyptodon.com/>.


RE: Cannot connect using RDP

Posted by Adrian Owen <ad...@eesm.com>.
Try windows mstsc login OK? Try no username/password - new Guacamole 1.3 feature.

From: Bill Sandor [mailto:bill@allegiance-it.com]
Sent: 18 February 2021 19:06
To: user@guacamole.apache.org
Subject: Re: Cannot connect using RDP

I can ping all the RDP endpoint IPs and hostnames from the guac server.  Connecting to client via IP or hostname fails the same either way.

I have tried with and without password (thinking it would prompt for password like MS’s RDP client).  Same failure either way.


--Bill Sandor
Allegiance Technologies & Consulting LLC
http://www.allegiance-it.com
330.315.2867


On Feb 18, 2021, at 12:42 PM, Adrian Owen <ad...@eesm.com>> wrote:

1st RDP fail  Putty to guac server. Is DNS setup ping by hostname?

2nd RDP fail. Username – no password given.

Adrian

From: Bill Sandor [mailto:bill@allegiance-it.com]
Sent: 18 February 2021 17:08
To: user@guacamole.apache.org<ma...@guacamole.apache.org>
Subject: Re: Cannot connect using RDP

See new config file below.  I’ve fixed the “passworde” typo on the one entry, removed the password from another.  Also, removed the domain viable (I’ve tried both ways).  I’ve also turned off the firewall on the Windows 10 PC altogether and unloaded the antivirus software for good measure, it still will not connect to it from Guacamole.


<user-mapping>

    <!-- Per-user authentication and config information -->

    <!-- A user using md5 to hash the password
         guacadmin user and its md5 hashed password below is used to
             login to Guacamole Web UI-->
    <authorize
            username="test"
            password="986b20d853c2c5eb9ebf1ed96d5b6724"
            encoding="md5">

        <!-- First authorized Remote connection -->
        <connection name="Cindy Starcher old PC">
            <protocol>rdp</protocol>
            <param name="hostname">DIS-WS-29.corp.ugins.com<http://dis-ws-29.corp.ugins.com/></param>
            <param name="port">3389</param>
            <param name="username">administrator</param>
            <param name="password”>XXXXXXX</param>
            <param name="domain">ugins</param>
            <param name="security">rdp</param>
            <param name="ignore-cert">true</param>
        </connection>

        <!-- Second authorized remote connection -->
        <connection name="Windows Server 2019">
            <protocol>rdp</protocol>
            <param name="hostname">192.168.236.11</param>
            <param name="port">3389</param>
            <param name="username">ugins\administrator</param>
            <param name="security">any</param>
            <param name="ignore-cert">true</param>
        </connection>

        <!-- Third authorized remote connection -->
        <connection name="FreeNAS Server">
            <protocol>ssh</protocol>
            <param name="hostname">192.168.236.20</param>
            <param name="port">22</param>
            <param name="username">root</param>
        </connection>

    </authorize>

</user-mapping>



Feb 18 16:43:50 dis-ububtu1 guacd[25418]: Creating new client for protocol "rdp"
Feb 18 16:43:50 dis-ububtu1 guacd[25418]: Connection ID is "$476fd94c-d906-41ac-811f-41e64b301d5f"
Feb 18 16:43:50 dis-ububtu1 guacd[25503]: Security mode: Negotiate (ANY)
Feb 18 16:43:50 dis-ububtu1 guacd[25503]: Resize method: none
Feb 18 16:43:50 dis-ububtu1 guacd[25503]: User "@4ac29186-6354-496b-8d2d-c5d0a26ba805" joined connection "$476fd94c-d906-41ac-811f-41e64b301d5f" (1 users now present)
Feb 18 16:43:50 dis-ububtu1 guacd[25503]: Loading keymap "base"
Feb 18 16:43:50 dis-ububtu1 guacd[25503]: Loading keymap "en-us-qwerty"
Feb 18 16:44:05 dis-ububtu1 guacd[25503]: RDP server closed/refused connection: Connection failed (server unreachable?)
Feb 18 16:44:05 dis-ububtu1 guacd[25503]: User "@4ac29186-6354-496b-8d2d-c5d0a26ba805" disconnected (0 users remain)
Feb 18 16:44:05 dis-ububtu1 guacd[25503]: Last user of connection "$476fd94c-d906-41ac-811f-41e64b301d5f" disconnected
Feb 18 16:44:05 dis-ububtu1 guacd[25418]: Connection "$476fd94c-d906-41ac-811f-41e64b301d5f" removed.
Feb 18 16:44:47 dis-ububtu1 guacd[25418]: Creating new client for protocol "rdp"
Feb 18 16:44:47 dis-ububtu1 guacd[25418]: Connection ID is "$cf6354bf-9352-4ccb-a1c9-b7f59a8291c9"
Feb 18 16:44:47 dis-ububtu1 guacd[25547]: Security mode: RDP
Feb 18 16:44:47 dis-ububtu1 guacd[25547]: Resize method: none
Feb 18 16:44:47 dis-ububtu1 guacd[25547]: User "@c3ac4deb-12c7-43ca-8731-9a4f3b3e93e2" joined connection "$cf6354bf-9352-4ccb-a1c9-b7f59a8291c9" (1 users now present)
Feb 18 16:44:47 dis-ububtu1 guacd[25547]: Loading keymap "base"
Feb 18 16:44:47 dis-ububtu1 guacd[25547]: Loading keymap "en-us-qwerty"
Feb 18 16:45:02 dis-ububtu1 guacd[25547]: RDP server closed/refused connection: Connection failed (server unreachable?)
Feb 18 16:45:02 dis-ububtu1 guacd[25547]: User "@c3ac4deb-12c7-43ca-8731-9a4f3b3e93e2" disconnected (0 users remain)
Feb 18 16:45:02 dis-ububtu1 guacd[25547]: Last user of connection "$cf6354bf-9352-4ccb-a1c9-b7f59a8291c9" disconnected
Feb 18 16:45:02 dis-ububtu1 guacd[25418]: Connection "$cf6354bf-9352-4ccb-a1c9-b7f59a8291c9" removed.
Feb 18 16:46:48 dis-ububtu1 guacd[25418]: Creating new client for protocol "rdp"
Feb 18 16:46:49 dis-ububtu1 guacd[25418]: Connection ID is "$6f8b5c57-1346-47ac-a467-3eab1a3edc93"
Feb 18 16:46:49 dis-ububtu1 guacd[25618]: Security mode: RDP
Feb 18 16:46:49 dis-ububtu1 guacd[25618]: Resize method: none
Feb 18 16:46:49 dis-ububtu1 guacd[25618]: User "@9156b7ce-1700-4238-bcbc-3bef36fd92d2" joined connection "$6f8b5c57-1346-47ac-a467-3eab1a3edc93" (1 users now present)
Feb 18 16:46:49 dis-ububtu1 guacd[25618]: Loading keymap "base"
Feb 18 16:46:49 dis-ububtu1 guacd[25618]: Loading keymap "en-us-qwerty"
Feb 18 16:47:04 dis-ububtu1 guacd[25618]: RDP server closed/refused connection: Connection failed (server unreachable?)
Feb 18 16:47:04 dis-ububtu1 guacd[25618]: User "@9156b7ce-1700-4238-bcbc-3bef36fd92d2" disconnected (0 users remain)
Feb 18 16:47:04 dis-ububtu1 guacd[25618]: Last user of connection "$6f8b5c57-1346-47ac-a467-3eab1a3edc93" disconnected
Feb 18 16:47:04 dis-ububtu1 guacd[25418]: Connection "$6f8b5c57-1346-47ac-a467-3eab1a3edc93" removed.
Feb 18 16:49:17 dis-ububtu1 guacd[25732]: Creating new client for protocol "rdp"
Feb 18 16:49:17 dis-ububtu1 guacd[25732]: Connection ID is "$88c4d256-4636-498f-bfea-356b1567b81f"
Feb 18 16:49:17 dis-ububtu1 guacd[25800]: Security mode: RDP
Feb 18 16:49:17 dis-ububtu1 guacd[25800]: Resize method: none
Feb 18 16:49:17 dis-ububtu1 guacd[25800]: User "@95c6f23f-4672-476f-903d-e1c4fd3790ce" joined connection "$88c4d256-4636-498f-bfea-356b1567b81f" (1 users now present)
Feb 18 16:49:17 dis-ububtu1 guacd[25800]: Loading keymap "base"
Feb 18 16:49:17 dis-ububtu1 guacd[25800]: Loading keymap "en-us-qwerty"
Feb 18 16:49:32 dis-ububtu1 guacd[25800]: RDP server closed/refused connection: Connection failed (server unreachable?)
Feb 18 16:49:32 dis-ububtu1 guacd[25800]: User "@95c6f23f-4672-476f-903d-e1c4fd3790ce" disconnected (0 users remain)
Feb 18 16:49:32 dis-ububtu1 guacd[25800]: Last user of connection "$88c4d256-4636-498f-bfea-356b1567b81f" disconnected
Feb 18 16:49:32 dis-ububtu1 guacd[25732]: Connection "$88c4d256-4636-498f-bfea-356b1567b81f" removed.




I’ve also now tried installing TightVNC server on my Windows 10 PC and configuring Guacamole to connect that way.  The screen shows "Connected to Guacamole. Waiting for response…” but does not connect.  The log shows:
Feb 18 17:04:14 dis-ububtu1 guacd[26473]: Creating new client for protocol "vnc"
Feb 18 17:04:14 dis-ububtu1 guacd[26473]: Connection ID is "$da1e89af-259f-45f6-a610-0d9ac1700503"
Feb 18 17:04:14 dis-ububtu1 guacd[26541]: Cursor rendering: local
Feb 18 17:04:14 dis-ububtu1 guacd[26541]: User "@5ff26938-4da3-4059-8f6b-08704a303d05" joined connection "$da1e89af-259f-45f6-a610-0d9ac1700503" (1 users now present)

My config is:
        <!-- First authorized Remote connection -->
        <connection name="Cindy Starcher old PC">
            <protocol>vnc</protocol>
            <param name="hostname">192.168.1.93</param>
            <param name="port">5900</param>
            <param name="password">Forevaluation2021</param>
            <param name="autoretry">3</param>
        </connection>

I can connect to the PC via VNC from my Mac over a VPN with no issue (again, the Guacamole server is on the same LAN as the PC).

I would suspect networking, but I can SSH into hosts on the same LAN with Guacamole no problem.



I might try using the docker install today if I have time just to try something else.



Thank you again for your help



--Bill




On Feb 17, 2021, at 10:00 PM, Mike Jumper <mi...@glyptodon.com>> wrote:

On Wed, Feb 17, 2021 at 5:35 PM Bill Sandor <bi...@allegiance-it.com>> wrote:
...
            <param name="username”>ugins\administrator</param>

I notice that you are specifying the domain here AND with the "domain" parameter. I don't know what the effect of this will be (and that may depend on Windows), but you should either specify the domain as part of the username or separately with the "domain" parameter, not both.

            <param name="passworde”>XXXXX!</param>

The name of this parameter is misspelled. It should be "password", not "passworde".

...
Feb 18 01:14:47 dis-ububtu1 guacd[1931]: RDP server closed/refused connection: Connection failed (server unreachable?)

It looks like the RDP server is refusing the inbound connection outright. Are you sure that the firewall of the RDP server is configured to allow inbound RDP connections from the Guacamole server?

Michael Jumper
CEO, Lead Developer
Glyptodon Inc<https://enterprise.glyptodon.com/>.


Re: Cannot connect using RDP

Posted by Bill Sandor <bi...@allegiance-it.com>.
I can ping all the RDP endpoint IPs and hostnames from the guac server.  Connecting to client via IP or hostname fails the same either way.

I have tried with and without password (thinking it would prompt for password like MS’s RDP client).  Same failure either way.


--Bill Sandor
Allegiance Technologies & Consulting LLC
http://www.allegiance-it.com
330.315.2867

> On Feb 18, 2021, at 12:42 PM, Adrian Owen <ad...@eesm.com> wrote:
> 
> 1st RDP fail  Putty to guac server. Is DNS setup ping by hostname?
>  
> 2nd RDP fail. Username – no password given.
>  
> Adrian
>  
> From: Bill Sandor [mailto:bill@allegiance-it.com <ma...@allegiance-it.com>] 
> Sent: 18 February 2021 17:08
> To: user@guacamole.apache.org <ma...@guacamole.apache.org>
> Subject: Re: Cannot connect using RDP
>  
> See new config file below.  I’ve fixed the “passworde” typo on the one entry, removed the password from another.  Also, removed the domain viable (I’ve tried both ways).  I’ve also turned off the firewall on the Windows 10 PC altogether and unloaded the antivirus software for good measure, it still will not connect to it from Guacamole. 
>  
>  
> <user-mapping>
> 
>     <!-- Per-user authentication and config information -->
> 
>     <!-- A user using md5 to hash the password
>          guacadmin user and its md5 hashed password below is used to 
>              login to Guacamole Web UI-->
>     <authorize 
>             username="test"
>             password="986b20d853c2c5eb9ebf1ed96d5b6724"
>             encoding="md5">
> 
>         <!-- First authorized Remote connection -->
>         <connection name="Cindy Starcher old PC">
>             <protocol>rdp</protocol>
>             <param name="hostname">DIS-WS-29.corp.ugins.com <http://dis-ws-29.corp.ugins.com/></param>
>             <param name="port">3389</param>
>             <param name="username">administrator</param>
>             <param name="password”>XXXXXXX</param>
>             <param name="domain">ugins</param>
>             <param name="security">rdp</param>
>             <param name="ignore-cert">true</param>
>         </connection>
> 
>         <!-- Second authorized remote connection -->
>         <connection name="Windows Server 2019">
>             <protocol>rdp</protocol>
>             <param name="hostname">192.168.236.11</param>
>             <param name="port">3389</param>
>             <param name="username">ugins\administrator</param>
>             <param name="security">any</param>
>             <param name="ignore-cert">true</param>
>         </connection>
> 
>         <!-- Third authorized remote connection -->
>         <connection name="FreeNAS Server">
>             <protocol>ssh</protocol>
>             <param name="hostname">192.168.236.20</param>
>             <param name="port">22</param>
>             <param name="username">root</param>
>         </connection>
> 
>     </authorize>
> 
> </user-mapping>
>                            
>  
>  
> Feb 18 16:43:50 dis-ububtu1 guacd[25418]: Creating new client for protocol "rdp"
> Feb 18 16:43:50 dis-ububtu1 guacd[25418]: Connection ID is "$476fd94c-d906-41ac-811f-41e64b301d5f"
> Feb 18 16:43:50 dis-ububtu1 guacd[25503]: Security mode: Negotiate (ANY)
> Feb 18 16:43:50 dis-ububtu1 guacd[25503]: Resize method: none
> Feb 18 16:43:50 dis-ububtu1 guacd[25503]: User "@4ac29186-6354-496b-8d2d-c5d0a26ba805" joined connection "$476fd94c-d906-41ac-811f-41e64b301d5f" (1 users now present)
> Feb 18 16:43:50 dis-ububtu1 guacd[25503]: Loading keymap "base"
> Feb 18 16:43:50 dis-ububtu1 guacd[25503]: Loading keymap "en-us-qwerty"
> Feb 18 16:44:05 dis-ububtu1 guacd[25503]: RDP server closed/refused connection: Connection failed (server unreachable?)
> Feb 18 16:44:05 dis-ububtu1 guacd[25503]: User "@4ac29186-6354-496b-8d2d-c5d0a26ba805" disconnected (0 users remain)
> Feb 18 16:44:05 dis-ububtu1 guacd[25503]: Last user of connection "$476fd94c-d906-41ac-811f-41e64b301d5f" disconnected
> Feb 18 16:44:05 dis-ububtu1 guacd[25418]: Connection "$476fd94c-d906-41ac-811f-41e64b301d5f" removed.
> Feb 18 16:44:47 dis-ububtu1 guacd[25418]: Creating new client for protocol "rdp"
> Feb 18 16:44:47 dis-ububtu1 guacd[25418]: Connection ID is "$cf6354bf-9352-4ccb-a1c9-b7f59a8291c9"
> Feb 18 16:44:47 dis-ububtu1 guacd[25547]: Security mode: RDP
> Feb 18 16:44:47 dis-ububtu1 guacd[25547]: Resize method: none
> Feb 18 16:44:47 dis-ububtu1 guacd[25547]: User "@c3ac4deb-12c7-43ca-8731-9a4f3b3e93e2" joined connection "$cf6354bf-9352-4ccb-a1c9-b7f59a8291c9" (1 users now present)
> Feb 18 16:44:47 dis-ububtu1 guacd[25547]: Loading keymap "base"
> Feb 18 16:44:47 dis-ububtu1 guacd[25547]: Loading keymap "en-us-qwerty"
> Feb 18 16:45:02 dis-ububtu1 guacd[25547]: RDP server closed/refused connection: Connection failed (server unreachable?)
> Feb 18 16:45:02 dis-ububtu1 guacd[25547]: User "@c3ac4deb-12c7-43ca-8731-9a4f3b3e93e2" disconnected (0 users remain)
> Feb 18 16:45:02 dis-ububtu1 guacd[25547]: Last user of connection "$cf6354bf-9352-4ccb-a1c9-b7f59a8291c9" disconnected
> Feb 18 16:45:02 dis-ububtu1 guacd[25418]: Connection "$cf6354bf-9352-4ccb-a1c9-b7f59a8291c9" removed.
> Feb 18 16:46:48 dis-ububtu1 guacd[25418]: Creating new client for protocol "rdp"
> Feb 18 16:46:49 dis-ububtu1 guacd[25418]: Connection ID is "$6f8b5c57-1346-47ac-a467-3eab1a3edc93"
> Feb 18 16:46:49 dis-ububtu1 guacd[25618]: Security mode: RDP
> Feb 18 16:46:49 dis-ububtu1 guacd[25618]: Resize method: none
> Feb 18 16:46:49 dis-ububtu1 guacd[25618]: User "@9156b7ce-1700-4238-bcbc-3bef36fd92d2" joined connection "$6f8b5c57-1346-47ac-a467-3eab1a3edc93" (1 users now present)
> Feb 18 16:46:49 dis-ububtu1 guacd[25618]: Loading keymap "base"
> Feb 18 16:46:49 dis-ububtu1 guacd[25618]: Loading keymap "en-us-qwerty"
> Feb 18 16:47:04 dis-ububtu1 guacd[25618]: RDP server closed/refused connection: Connection failed (server unreachable?)
> Feb 18 16:47:04 dis-ububtu1 guacd[25618]: User "@9156b7ce-1700-4238-bcbc-3bef36fd92d2" disconnected (0 users remain)
> Feb 18 16:47:04 dis-ububtu1 guacd[25618]: Last user of connection "$6f8b5c57-1346-47ac-a467-3eab1a3edc93" disconnected
> Feb 18 16:47:04 dis-ububtu1 guacd[25418]: Connection "$6f8b5c57-1346-47ac-a467-3eab1a3edc93" removed.
> Feb 18 16:49:17 dis-ububtu1 guacd[25732]: Creating new client for protocol "rdp"
> Feb 18 16:49:17 dis-ububtu1 guacd[25732]: Connection ID is "$88c4d256-4636-498f-bfea-356b1567b81f"
> Feb 18 16:49:17 dis-ububtu1 guacd[25800]: Security mode: RDP
> Feb 18 16:49:17 dis-ububtu1 guacd[25800]: Resize method: none
> Feb 18 16:49:17 dis-ububtu1 guacd[25800]: User "@95c6f23f-4672-476f-903d-e1c4fd3790ce" joined connection "$88c4d256-4636-498f-bfea-356b1567b81f" (1 users now present)
> Feb 18 16:49:17 dis-ububtu1 guacd[25800]: Loading keymap "base"
> Feb 18 16:49:17 dis-ububtu1 guacd[25800]: Loading keymap "en-us-qwerty"
> Feb 18 16:49:32 dis-ububtu1 guacd[25800]: RDP server closed/refused connection: Connection failed (server unreachable?)
> Feb 18 16:49:32 dis-ububtu1 guacd[25800]: User "@95c6f23f-4672-476f-903d-e1c4fd3790ce" disconnected (0 users remain)
> Feb 18 16:49:32 dis-ububtu1 guacd[25800]: Last user of connection "$88c4d256-4636-498f-bfea-356b1567b81f" disconnected
> Feb 18 16:49:32 dis-ububtu1 guacd[25732]: Connection "$88c4d256-4636-498f-bfea-356b1567b81f" removed.
>  
>  
>  
>  
> I’ve also now tried installing TightVNC server on my Windows 10 PC and configuring Guacamole to connect that way.  The screen shows "Connected to Guacamole. Waiting for response…” but does not connect.  The log shows:
> Feb 18 17:04:14 dis-ububtu1 guacd[26473]: Creating new client for protocol "vnc"
> Feb 18 17:04:14 dis-ububtu1 guacd[26473]: Connection ID is "$da1e89af-259f-45f6-a610-0d9ac1700503"
> Feb 18 17:04:14 dis-ububtu1 guacd[26541]: Cursor rendering: local
> Feb 18 17:04:14 dis-ububtu1 guacd[26541]: User "@5ff26938-4da3-4059-8f6b-08704a303d05" joined connection "$da1e89af-259f-45f6-a610-0d9ac1700503" (1 users now present)
>  
> My config is:
>         <!-- First authorized Remote connection -->
>         <connection name="Cindy Starcher old PC">
>             <protocol>vnc</protocol>
>             <param name="hostname">192.168.1.93</param>
>             <param name="port">5900</param>
>             <param name="password">Forevaluation2021</param>
>             <param name="autoretry">3</param>
>         </connection>
> 
>  
> I can connect to the PC via VNC from my Mac over a VPN with no issue (again, the Guacamole server is on the same LAN as the PC).
>  
> I would suspect networking, but I can SSH into hosts on the same LAN with Guacamole no problem.
>  
>  
>  
> I might try using the docker install today if I have time just to try something else.
>  
>  
>  
> Thank you again for your help
>  
>  
>  
> --Bill
>  
>  
>  
>  
> On Feb 17, 2021, at 10:00 PM, Mike Jumper <mike.jumper@glyptodon.com <ma...@glyptodon.com>> wrote:
>  
> On Wed, Feb 17, 2021 at 5:35 PM Bill Sandor <bill@allegiance-it.com <ma...@allegiance-it.com>> wrote:
> ...
>             <param name="username”>ugins\administrator</param>
>  
> I notice that you are specifying the domain here AND with the "domain" parameter. I don't know what the effect of this will be (and that may depend on Windows), but you should either specify the domain as part of the username or separately with the "domain" parameter, not both.
>  
>             <param name="passworde”>XXXXX!</param>
>  
> The name of this parameter is misspelled. It should be "password", not "passworde". 
>  
> ...
> Feb 18 01:14:47 dis-ububtu1 guacd[1931]: RDP server closed/refused connection: Connection failed (server unreachable?)
>  
> It looks like the RDP server is refusing the inbound connection outright. Are you sure that the firewall of the RDP server is configured to allow inbound RDP connections from the Guacamole server?
>  
> Michael Jumper
> CEO, Lead Developer
> Glyptodon Inc <https://enterprise.glyptodon.com/>.


RE: Cannot connect using RDP

Posted by Adrian Owen <ad...@eesm.com>.
1st RDP fail  Putty to guac server. Is DNS setup ping by hostname?

2nd RDP fail. Username – no password given.

Adrian

From: Bill Sandor [mailto:bill@allegiance-it.com]
Sent: 18 February 2021 17:08
To: user@guacamole.apache.org
Subject: Re: Cannot connect using RDP

See new config file below.  I’ve fixed the “passworde” typo on the one entry, removed the password from another.  Also, removed the domain viable (I’ve tried both ways).  I’ve also turned off the firewall on the Windows 10 PC altogether and unloaded the antivirus software for good measure, it still will not connect to it from Guacamole.


<user-mapping>

    <!-- Per-user authentication and config information -->

    <!-- A user using md5 to hash the password
         guacadmin user and its md5 hashed password below is used to
             login to Guacamole Web UI-->
    <authorize
            username="test"
            password="986b20d853c2c5eb9ebf1ed96d5b6724"
            encoding="md5">

        <!-- First authorized Remote connection -->
        <connection name="Cindy Starcher old PC">
            <protocol>rdp</protocol>
            <param name="hostname">DIS-WS-29.corp.ugins.com<http://DIS-WS-29.corp.ugins.com></param>
            <param name="port">3389</param>
            <param name="username">administrator</param>
            <param name="password”>XXXXXXX</param>
            <param name="domain">ugins</param>
            <param name="security">rdp</param>
            <param name="ignore-cert">true</param>
        </connection>

        <!-- Second authorized remote connection -->
        <connection name="Windows Server 2019">
            <protocol>rdp</protocol>
            <param name="hostname">192.168.236.11</param>
            <param name="port">3389</param>
            <param name="username">ugins\administrator</param>
            <param name="security">any</param>
            <param name="ignore-cert">true</param>
        </connection>

        <!-- Third authorized remote connection -->
        <connection name="FreeNAS Server">
            <protocol>ssh</protocol>
            <param name="hostname">192.168.236.20</param>
            <param name="port">22</param>
            <param name="username">root</param>
        </connection>

    </authorize>

</user-mapping>



Feb 18 16:43:50 dis-ububtu1 guacd[25418]: Creating new client for protocol "rdp"
Feb 18 16:43:50 dis-ububtu1 guacd[25418]: Connection ID is "$476fd94c-d906-41ac-811f-41e64b301d5f"
Feb 18 16:43:50 dis-ububtu1 guacd[25503]: Security mode: Negotiate (ANY)
Feb 18 16:43:50 dis-ububtu1 guacd[25503]: Resize method: none
Feb 18 16:43:50 dis-ububtu1 guacd[25503]: User "@4ac29186-6354-496b-8d2d-c5d0a26ba805" joined connection "$476fd94c-d906-41ac-811f-41e64b301d5f" (1 users now present)
Feb 18 16:43:50 dis-ububtu1 guacd[25503]: Loading keymap "base"
Feb 18 16:43:50 dis-ububtu1 guacd[25503]: Loading keymap "en-us-qwerty"
Feb 18 16:44:05 dis-ububtu1 guacd[25503]: RDP server closed/refused connection: Connection failed (server unreachable?)
Feb 18 16:44:05 dis-ububtu1 guacd[25503]: User "@4ac29186-6354-496b-8d2d-c5d0a26ba805" disconnected (0 users remain)
Feb 18 16:44:05 dis-ububtu1 guacd[25503]: Last user of connection "$476fd94c-d906-41ac-811f-41e64b301d5f" disconnected
Feb 18 16:44:05 dis-ububtu1 guacd[25418]: Connection "$476fd94c-d906-41ac-811f-41e64b301d5f" removed.
Feb 18 16:44:47 dis-ububtu1 guacd[25418]: Creating new client for protocol "rdp"
Feb 18 16:44:47 dis-ububtu1 guacd[25418]: Connection ID is "$cf6354bf-9352-4ccb-a1c9-b7f59a8291c9"
Feb 18 16:44:47 dis-ububtu1 guacd[25547]: Security mode: RDP
Feb 18 16:44:47 dis-ububtu1 guacd[25547]: Resize method: none
Feb 18 16:44:47 dis-ububtu1 guacd[25547]: User "@c3ac4deb-12c7-43ca-8731-9a4f3b3e93e2" joined connection "$cf6354bf-9352-4ccb-a1c9-b7f59a8291c9" (1 users now present)
Feb 18 16:44:47 dis-ububtu1 guacd[25547]: Loading keymap "base"
Feb 18 16:44:47 dis-ububtu1 guacd[25547]: Loading keymap "en-us-qwerty"
Feb 18 16:45:02 dis-ububtu1 guacd[25547]: RDP server closed/refused connection: Connection failed (server unreachable?)
Feb 18 16:45:02 dis-ububtu1 guacd[25547]: User "@c3ac4deb-12c7-43ca-8731-9a4f3b3e93e2" disconnected (0 users remain)
Feb 18 16:45:02 dis-ububtu1 guacd[25547]: Last user of connection "$cf6354bf-9352-4ccb-a1c9-b7f59a8291c9" disconnected
Feb 18 16:45:02 dis-ububtu1 guacd[25418]: Connection "$cf6354bf-9352-4ccb-a1c9-b7f59a8291c9" removed.
Feb 18 16:46:48 dis-ububtu1 guacd[25418]: Creating new client for protocol "rdp"
Feb 18 16:46:49 dis-ububtu1 guacd[25418]: Connection ID is "$6f8b5c57-1346-47ac-a467-3eab1a3edc93"
Feb 18 16:46:49 dis-ububtu1 guacd[25618]: Security mode: RDP
Feb 18 16:46:49 dis-ububtu1 guacd[25618]: Resize method: none
Feb 18 16:46:49 dis-ububtu1 guacd[25618]: User "@9156b7ce-1700-4238-bcbc-3bef36fd92d2" joined connection "$6f8b5c57-1346-47ac-a467-3eab1a3edc93" (1 users now present)
Feb 18 16:46:49 dis-ububtu1 guacd[25618]: Loading keymap "base"
Feb 18 16:46:49 dis-ububtu1 guacd[25618]: Loading keymap "en-us-qwerty"
Feb 18 16:47:04 dis-ububtu1 guacd[25618]: RDP server closed/refused connection: Connection failed (server unreachable?)
Feb 18 16:47:04 dis-ububtu1 guacd[25618]: User "@9156b7ce-1700-4238-bcbc-3bef36fd92d2" disconnected (0 users remain)
Feb 18 16:47:04 dis-ububtu1 guacd[25618]: Last user of connection "$6f8b5c57-1346-47ac-a467-3eab1a3edc93" disconnected
Feb 18 16:47:04 dis-ububtu1 guacd[25418]: Connection "$6f8b5c57-1346-47ac-a467-3eab1a3edc93" removed.
Feb 18 16:49:17 dis-ububtu1 guacd[25732]: Creating new client for protocol "rdp"
Feb 18 16:49:17 dis-ububtu1 guacd[25732]: Connection ID is "$88c4d256-4636-498f-bfea-356b1567b81f"
Feb 18 16:49:17 dis-ububtu1 guacd[25800]: Security mode: RDP
Feb 18 16:49:17 dis-ububtu1 guacd[25800]: Resize method: none
Feb 18 16:49:17 dis-ububtu1 guacd[25800]: User "@95c6f23f-4672-476f-903d-e1c4fd3790ce" joined connection "$88c4d256-4636-498f-bfea-356b1567b81f" (1 users now present)
Feb 18 16:49:17 dis-ububtu1 guacd[25800]: Loading keymap "base"
Feb 18 16:49:17 dis-ububtu1 guacd[25800]: Loading keymap "en-us-qwerty"
Feb 18 16:49:32 dis-ububtu1 guacd[25800]: RDP server closed/refused connection: Connection failed (server unreachable?)
Feb 18 16:49:32 dis-ububtu1 guacd[25800]: User "@95c6f23f-4672-476f-903d-e1c4fd3790ce" disconnected (0 users remain)
Feb 18 16:49:32 dis-ububtu1 guacd[25800]: Last user of connection "$88c4d256-4636-498f-bfea-356b1567b81f" disconnected
Feb 18 16:49:32 dis-ububtu1 guacd[25732]: Connection "$88c4d256-4636-498f-bfea-356b1567b81f" removed.




I’ve also now tried installing TightVNC server on my Windows 10 PC and configuring Guacamole to connect that way.  The screen shows "Connected to Guacamole. Waiting for response…” but does not connect.  The log shows:
Feb 18 17:04:14 dis-ububtu1 guacd[26473]: Creating new client for protocol "vnc"
Feb 18 17:04:14 dis-ububtu1 guacd[26473]: Connection ID is "$da1e89af-259f-45f6-a610-0d9ac1700503"
Feb 18 17:04:14 dis-ububtu1 guacd[26541]: Cursor rendering: local
Feb 18 17:04:14 dis-ububtu1 guacd[26541]: User "@5ff26938-4da3-4059-8f6b-08704a303d05" joined connection "$da1e89af-259f-45f6-a610-0d9ac1700503" (1 users now present)

My config is:
        <!-- First authorized Remote connection -->
        <connection name="Cindy Starcher old PC">
            <protocol>vnc</protocol>
            <param name="hostname">192.168.1.93</param>
            <param name="port">5900</param>
            <param name="password">Forevaluation2021</param>
            <param name="autoretry">3</param>
        </connection>

I can connect to the PC via VNC from my Mac over a VPN with no issue (again, the Guacamole server is on the same LAN as the PC).

I would suspect networking, but I can SSH into hosts on the same LAN with Guacamole no problem.



I might try using the docker install today if I have time just to try something else.



Thank you again for your help



--Bill




On Feb 17, 2021, at 10:00 PM, Mike Jumper <mi...@glyptodon.com>> wrote:

On Wed, Feb 17, 2021 at 5:35 PM Bill Sandor <bi...@allegiance-it.com>> wrote:
...
            <param name="username”>ugins\administrator</param>

I notice that you are specifying the domain here AND with the "domain" parameter. I don't know what the effect of this will be (and that may depend on Windows), but you should either specify the domain as part of the username or separately with the "domain" parameter, not both.

            <param name="passworde”>XXXXX!</param>

The name of this parameter is misspelled. It should be "password", not "passworde".

...
Feb 18 01:14:47 dis-ububtu1 guacd[1931]: RDP server closed/refused connection: Connection failed (server unreachable?)

It looks like the RDP server is refusing the inbound connection outright. Are you sure that the firewall of the RDP server is configured to allow inbound RDP connections from the Guacamole server?

Michael Jumper
CEO, Lead Developer
Glyptodon Inc<https://enterprise.glyptodon.com/>.



Re: Cannot connect using RDP

Posted by Bill Sandor <bi...@allegiance-it.com>.
See new config file below.  I’ve fixed the “passworde” typo on the one entry, removed the password from another.  Also, removed the domain viable (I’ve tried both ways).  I’ve also turned off the firewall on the Windows 10 PC altogether and unloaded the antivirus software for good measure, it still will not connect to it from Guacamole. 


<user-mapping>

    <!-- Per-user authentication and config information -->

    <!-- A user using md5 to hash the password
         guacadmin user and its md5 hashed password below is used to 
             login to Guacamole Web UI-->
    <authorize 
            username="test"
            password="986b20d853c2c5eb9ebf1ed96d5b6724"
            encoding="md5">

        <!-- First authorized Remote connection -->
        <connection name="Cindy Starcher old PC">
            <protocol>rdp</protocol>
            <param name="hostname">DIS-WS-29.corp.ugins.com</param>
            <param name="port">3389</param>
            <param name="username">administrator</param>
            <param name="password”>XXXXXXX</param>
            <param name="domain">ugins</param>
            <param name="security">rdp</param>
            <param name="ignore-cert">true</param>
        </connection>

        <!-- Second authorized remote connection -->
        <connection name="Windows Server 2019">
            <protocol>rdp</protocol>
            <param name="hostname">192.168.236.11</param>
            <param name="port">3389</param>
            <param name="username">ugins\administrator</param>
            <param name="security">any</param>
            <param name="ignore-cert">true</param>
        </connection>

        <!-- Third authorized remote connection -->
        <connection name="FreeNAS Server">
            <protocol>ssh</protocol>
            <param name="hostname">192.168.236.20</param>
            <param name="port">22</param>
            <param name="username">root</param>
        </connection>

    </authorize>

</user-mapping>
                           


Feb 18 16:43:50 dis-ububtu1 guacd[25418]: Creating new client for protocol "rdp"
Feb 18 16:43:50 dis-ububtu1 guacd[25418]: Connection ID is "$476fd94c-d906-41ac-811f-41e64b301d5f"
Feb 18 16:43:50 dis-ububtu1 guacd[25503]: Security mode: Negotiate (ANY)
Feb 18 16:43:50 dis-ububtu1 guacd[25503]: Resize method: none
Feb 18 16:43:50 dis-ububtu1 guacd[25503]: User "@4ac29186-6354-496b-8d2d-c5d0a26ba805" joined connection "$476fd94c-d906-41ac-811f-41e64b301d5f" (1 users now present)
Feb 18 16:43:50 dis-ububtu1 guacd[25503]: Loading keymap "base"
Feb 18 16:43:50 dis-ububtu1 guacd[25503]: Loading keymap "en-us-qwerty"
Feb 18 16:44:05 dis-ububtu1 guacd[25503]: RDP server closed/refused connection: Connection failed (server unreachable?)
Feb 18 16:44:05 dis-ububtu1 guacd[25503]: User "@4ac29186-6354-496b-8d2d-c5d0a26ba805" disconnected (0 users remain)
Feb 18 16:44:05 dis-ububtu1 guacd[25503]: Last user of connection "$476fd94c-d906-41ac-811f-41e64b301d5f" disconnected
Feb 18 16:44:05 dis-ububtu1 guacd[25418]: Connection "$476fd94c-d906-41ac-811f-41e64b301d5f" removed.
Feb 18 16:44:47 dis-ububtu1 guacd[25418]: Creating new client for protocol "rdp"
Feb 18 16:44:47 dis-ububtu1 guacd[25418]: Connection ID is "$cf6354bf-9352-4ccb-a1c9-b7f59a8291c9"
Feb 18 16:44:47 dis-ububtu1 guacd[25547]: Security mode: RDP
Feb 18 16:44:47 dis-ububtu1 guacd[25547]: Resize method: none
Feb 18 16:44:47 dis-ububtu1 guacd[25547]: User "@c3ac4deb-12c7-43ca-8731-9a4f3b3e93e2" joined connection "$cf6354bf-9352-4ccb-a1c9-b7f59a8291c9" (1 users now present)
Feb 18 16:44:47 dis-ububtu1 guacd[25547]: Loading keymap "base"
Feb 18 16:44:47 dis-ububtu1 guacd[25547]: Loading keymap "en-us-qwerty"
Feb 18 16:45:02 dis-ububtu1 guacd[25547]: RDP server closed/refused connection: Connection failed (server unreachable?)
Feb 18 16:45:02 dis-ububtu1 guacd[25547]: User "@c3ac4deb-12c7-43ca-8731-9a4f3b3e93e2" disconnected (0 users remain)
Feb 18 16:45:02 dis-ububtu1 guacd[25547]: Last user of connection "$cf6354bf-9352-4ccb-a1c9-b7f59a8291c9" disconnected
Feb 18 16:45:02 dis-ububtu1 guacd[25418]: Connection "$cf6354bf-9352-4ccb-a1c9-b7f59a8291c9" removed.
Feb 18 16:46:48 dis-ububtu1 guacd[25418]: Creating new client for protocol "rdp"
Feb 18 16:46:49 dis-ububtu1 guacd[25418]: Connection ID is "$6f8b5c57-1346-47ac-a467-3eab1a3edc93"
Feb 18 16:46:49 dis-ububtu1 guacd[25618]: Security mode: RDP
Feb 18 16:46:49 dis-ububtu1 guacd[25618]: Resize method: none
Feb 18 16:46:49 dis-ububtu1 guacd[25618]: User "@9156b7ce-1700-4238-bcbc-3bef36fd92d2" joined connection "$6f8b5c57-1346-47ac-a467-3eab1a3edc93" (1 users now present)
Feb 18 16:46:49 dis-ububtu1 guacd[25618]: Loading keymap "base"
Feb 18 16:46:49 dis-ububtu1 guacd[25618]: Loading keymap "en-us-qwerty"
Feb 18 16:47:04 dis-ububtu1 guacd[25618]: RDP server closed/refused connection: Connection failed (server unreachable?)
Feb 18 16:47:04 dis-ububtu1 guacd[25618]: User "@9156b7ce-1700-4238-bcbc-3bef36fd92d2" disconnected (0 users remain)
Feb 18 16:47:04 dis-ububtu1 guacd[25618]: Last user of connection "$6f8b5c57-1346-47ac-a467-3eab1a3edc93" disconnected
Feb 18 16:47:04 dis-ububtu1 guacd[25418]: Connection "$6f8b5c57-1346-47ac-a467-3eab1a3edc93" removed.
Feb 18 16:49:17 dis-ububtu1 guacd[25732]: Creating new client for protocol "rdp"
Feb 18 16:49:17 dis-ububtu1 guacd[25732]: Connection ID is "$88c4d256-4636-498f-bfea-356b1567b81f"
Feb 18 16:49:17 dis-ububtu1 guacd[25800]: Security mode: RDP
Feb 18 16:49:17 dis-ububtu1 guacd[25800]: Resize method: none
Feb 18 16:49:17 dis-ububtu1 guacd[25800]: User "@95c6f23f-4672-476f-903d-e1c4fd3790ce" joined connection "$88c4d256-4636-498f-bfea-356b1567b81f" (1 users now present)
Feb 18 16:49:17 dis-ububtu1 guacd[25800]: Loading keymap "base"
Feb 18 16:49:17 dis-ububtu1 guacd[25800]: Loading keymap "en-us-qwerty"
Feb 18 16:49:32 dis-ububtu1 guacd[25800]: RDP server closed/refused connection: Connection failed (server unreachable?)
Feb 18 16:49:32 dis-ububtu1 guacd[25800]: User "@95c6f23f-4672-476f-903d-e1c4fd3790ce" disconnected (0 users remain)
Feb 18 16:49:32 dis-ububtu1 guacd[25800]: Last user of connection "$88c4d256-4636-498f-bfea-356b1567b81f" disconnected
Feb 18 16:49:32 dis-ububtu1 guacd[25732]: Connection "$88c4d256-4636-498f-bfea-356b1567b81f" removed.




I’ve also now tried installing TightVNC server on my Windows 10 PC and configuring Guacamole to connect that way.  The screen shows "Connected to Guacamole. Waiting for response…” but does not connect.  The log shows:
Feb 18 17:04:14 dis-ububtu1 guacd[26473]: Creating new client for protocol "vnc"
Feb 18 17:04:14 dis-ububtu1 guacd[26473]: Connection ID is "$da1e89af-259f-45f6-a610-0d9ac1700503"
Feb 18 17:04:14 dis-ububtu1 guacd[26541]: Cursor rendering: local
Feb 18 17:04:14 dis-ububtu1 guacd[26541]: User "@5ff26938-4da3-4059-8f6b-08704a303d05" joined connection "$da1e89af-259f-45f6-a610-0d9ac1700503" (1 users now present)

My config is:
        <!-- First authorized Remote connection -->
        <connection name="Cindy Starcher old PC">
            <protocol>vnc</protocol>
            <param name="hostname">192.168.1.93</param>
            <param name="port">5900</param>
            <param name="password">Forevaluation2021</param>
            <param name="autoretry">3</param>
        </connection>


I can connect to the PC via VNC from my Mac over a VPN with no issue (again, the Guacamole server is on the same LAN as the PC).

I would suspect networking, but I can SSH into hosts on the same LAN with Guacamole no problem.



I might try using the docker install today if I have time just to try something else.



Thank you again for your help



--Bill




> On Feb 17, 2021, at 10:00 PM, Mike Jumper <mi...@glyptodon.com> wrote:
> 
> On Wed, Feb 17, 2021 at 5:35 PM Bill Sandor <bill@allegiance-it.com <ma...@allegiance-it.com>> wrote:
> ...
>             <param name="username”>ugins\administrator</param>
> 
> I notice that you are specifying the domain here AND with the "domain" parameter. I don't know what the effect of this will be (and that may depend on Windows), but you should either specify the domain as part of the username or separately with the "domain" parameter, not both.
> 
>             <param name="passworde”>XXXXX!</param>
> 
> The name of this parameter is misspelled. It should be "password", not "passworde". 
> 
> ...
> Feb 18 01:14:47 dis-ububtu1 guacd[1931]: RDP server closed/refused connection: Connection failed (server unreachable?)
> 
> It looks like the RDP server is refusing the inbound connection outright. Are you sure that the firewall of the RDP server is configured to allow inbound RDP connections from the Guacamole server?
> 
> Michael Jumper
> CEO, Lead Developer
> Glyptodon Inc <https://enterprise.glyptodon.com/>. 
> 


Re: Cannot connect using RDP

Posted by Mike Jumper <mi...@glyptodon.com>.
On Wed, Feb 17, 2021 at 5:35 PM Bill Sandor <bi...@allegiance-it.com> wrote:

> ...
>             <param name="username”>ugins\administrator</param>
>

I notice that you are specifying the domain here AND with the "domain"
parameter. I don't know what the effect of this will be (and that may
depend on Windows), but you should either specify the domain as part of the
username or separately with the "domain" parameter, not both.

            <param name="passworde”>XXXXX!</param>
>

The name of this parameter is misspelled. It should be "password", not
"passworde".

...
> Feb 18 01:14:47 dis-ububtu1 guacd[1931]: RDP server closed/refused
> connection: Connection failed (server unreachable?)


It looks like the RDP server is refusing the inbound connection outright.
Are you sure that the firewall of the RDP server is configured to allow
inbound RDP connections from the Guacamole server?

Michael Jumper
CEO, Lead Developer
Glyptodon Inc <https://enterprise.glyptodon.com/>.