You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@guacamole.apache.org by Manoj Patil <ma...@gmail.com> on 2019/05/26 05:35:26 UTC
How to get client ip address on guacamole
Hi Everyone,
Sorry to post a Noob question here. I was evaluating Guacamole for one of
the requirements we have to rdp into remote machine and was able to setup
client and Server and do the rdp to both Windows and Linux machines.
Now I am taking it to next level. I catch or get a client ip address and pass to xrdp session
through guacamole+x11rdp.
Again please ignore this if you folk think its too obvious or it is answered
elsewhere(kindly point), considering me a noob.
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org
Re: How to get client ip address on guacamole
Posted by Manoj Patil <ma...@gmail.com>.
hi,
i am done all the setting as per document but it shows the Firewalll WAN ip
not machine local ip address
my server.xml setting
<Valve className="org.apache.catalina.valves.RemoteIpValve"
internalProxies="192\.168\.80\.162|172\.16\.20\.37"
remoteIpHeader="x-forwarded-for"
remoteIpProxiesHeader="x-forwarded-by"
protocolHeader="x-forwarded-proto"
protocolHeaderHttpsValue="https" />
<Valve className="org.apache.catalina.valves.ErrorReportValve"
showReport="false"
showServerInfo="false"/>
On 26-May-2019, at 11:24 PM, Mike Jumper <mj...@apache.org> wrote:
On Sun, May 26, 2019, 10:14 Manoj Patil <ma...@gmail.com> wrote:
> Dear,
>
> I see the history tab and table but in that remote host it display the
> firewall ip not actual machine ip and i want actual machine ip.
>
> i used Guacamole(tomcat+nginix)+x!rdp(linux host).
>
http://guacamole.apache.org/doc/gug/proxying-guacamole.html#tomcat-remote-ip
Re: How to get client ip address on guacamole
Posted by Manoj Patil <ma...@gmail.com>.
Please reply
On Wed, 29 May 2019, 09:05 Manoj Patil <manoj2patil@gmail.com wrote:
> Sorry for that message is resend multiple times for intruption in network.
>
> I am done all setting as per you provided document but it shows firewall
> ip not client lan ip . what I am done wrong . please give me the resolution.
>
> Also how I pass this ip to xrdp session
>
> On Tue, 28 May 2019, 22:31 Mike Jumper <mjumper@apache.org wrote:
>
>> Manoj, please stop resending the same message every few hours.
>>
>> - Mike
>>
>>
>> On Tue, May 28, 2019 at 2:58 AM Manoj Patil <ma...@gmail.com>
>> wrote:
>>
>>>
>>>
>>> Begin forwarded message:
>>>
>>> *From: *Manoj Patil <ma...@gmail.com>
>>> *Subject: **Re: How to get client ip address on guacamole*
>>> *Date: *28 May 2019 at 12:13:18 PM IST
>>> *To: *user@guacamole.apache.org
>>>
>>> hi,
>>>
>>> i am done all the setting as per document but it shows the Firewalll WAN
>>> ip not machine local ip address
>>>
>>> my server.xml setting
>>>
>>> <Valve className="org.apache.catalina.valves.RemoteIpValve"
>>>
>>> internalProxies="192\.168\.80\.162|172\.16\.20\.37"
>>>
>>> remoteIpHeader="x-forwarded-for"
>>>
>>> remoteIpProxiesHeader="x-forwarded-by"
>>>
>>> protocolHeader="x-forwarded-proto"
>>>
>>> protocolHeaderHttpsValue="https" />
>>> <Valve className="org.apache.catalina.valves.ErrorReportValve"
>>>
>>> showReport="false"
>>>
>>> showServerInfo="false"/>
>>>
>>>
>>> My nginx setting is——
>>>
>>> server {
>>>
>>> listen 80;
>>> listen [::]:80;
>>> server_name gucserver;
>>> return 301 https://$server_name$request_uri;
>>>
>>>
>>> location /acecbs/ {
>>> proxy_pass http://192.168.80.162:8080/guacamole/;
>>> proxy_buffering off;
>>> proxy_http_version 1.1;
>>> proxy_set_header X-Forwarded-Host $host;
>>> proxy_set_header X-Forwarded-Server $host;
>>> proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
>>> proxy_set_header Upgrade $http_upgrade;
>>> proxy_set_header Connection $http_connection;
>>> proxy_cookie_path /guacamole/ /acecbs/;
>>> access_log off;
>>> }
>>>
>>>
>>> Username Start time Duration Connection name Remote host
>>> samho
>>> 2019-05-28 12:07:55 0 seconds samta_ho 223.196.84.130
>>> samho
>>> 2019-05-28 12:07:49 0 seconds samta_ho 223.196.84.130
>>> samho
>>> 2019-05-28 12:07:37 0 seconds samta_ho 223.196.84.130
>>> samho
>>> 2019-05-28 11:37:15 28 seconds samta_ho 223.196.84.130
>>>
>>> On 26-May-2019, at 11:24 PM, Mike Jumper <mj...@apache.org> wrote:
>>>
>>> On Sun, May 26, 2019, 10:14 Manoj Patil <ma...@gmail.com> wrote:
>>>
>>>> Dear,
>>>>
>>>> I see the history tab and table but in that remote host it display the
>>>> firewall ip not actual machine ip and i want actual machine ip.
>>>>
>>>
>>>> i used Guacamole(tomcat+nginix)+x!rdp(linux host).
>>>>
>>>
>>>
>>> http://guacamole.apache.org/doc/gug/proxying-guacamole.html#tomcat-remote-ip
>>>
>>>
>>>
>>>
Re: How to get client ip address on guacamole
Posted by Manoj Patil <ma...@gmail.com>.
Sorry for that message is resend multiple times for intruption in network.
I am done all setting as per you provided document but it shows firewall ip
not client lan ip . what I am done wrong . please give me the resolution.
Also how I pass this ip to xrdp session
On Tue, 28 May 2019, 22:31 Mike Jumper <mjumper@apache.org wrote:
> Manoj, please stop resending the same message every few hours.
>
> - Mike
>
>
> On Tue, May 28, 2019 at 2:58 AM Manoj Patil <ma...@gmail.com> wrote:
>
>>
>>
>> Begin forwarded message:
>>
>> *From: *Manoj Patil <ma...@gmail.com>
>> *Subject: **Re: How to get client ip address on guacamole*
>> *Date: *28 May 2019 at 12:13:18 PM IST
>> *To: *user@guacamole.apache.org
>>
>> hi,
>>
>> i am done all the setting as per document but it shows the Firewalll WAN
>> ip not machine local ip address
>>
>> my server.xml setting
>>
>> <Valve className="org.apache.catalina.valves.RemoteIpValve"
>>
>> internalProxies="192\.168\.80\.162|172\.16\.20\.37"
>>
>> remoteIpHeader="x-forwarded-for"
>>
>> remoteIpProxiesHeader="x-forwarded-by"
>>
>> protocolHeader="x-forwarded-proto"
>>
>> protocolHeaderHttpsValue="https" />
>> <Valve className="org.apache.catalina.valves.ErrorReportValve"
>> showReport="false"
>>
>> showServerInfo="false"/>
>>
>>
>> My nginx setting is——
>>
>> server {
>>
>> listen 80;
>> listen [::]:80;
>> server_name gucserver;
>> return 301 https://$server_name$request_uri;
>>
>>
>> location /acecbs/ {
>> proxy_pass http://192.168.80.162:8080/guacamole/;
>> proxy_buffering off;
>> proxy_http_version 1.1;
>> proxy_set_header X-Forwarded-Host $host;
>> proxy_set_header X-Forwarded-Server $host;
>> proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
>> proxy_set_header Upgrade $http_upgrade;
>> proxy_set_header Connection $http_connection;
>> proxy_cookie_path /guacamole/ /acecbs/;
>> access_log off;
>> }
>>
>>
>> Username Start time Duration Connection name Remote host
>> samho
>> 2019-05-28 12:07:55 0 seconds samta_ho 223.196.84.130
>> samho
>> 2019-05-28 12:07:49 0 seconds samta_ho 223.196.84.130
>> samho
>> 2019-05-28 12:07:37 0 seconds samta_ho 223.196.84.130
>> samho
>> 2019-05-28 11:37:15 28 seconds samta_ho 223.196.84.130
>>
>> On 26-May-2019, at 11:24 PM, Mike Jumper <mj...@apache.org> wrote:
>>
>> On Sun, May 26, 2019, 10:14 Manoj Patil <ma...@gmail.com> wrote:
>>
>>> Dear,
>>>
>>> I see the history tab and table but in that remote host it display the
>>> firewall ip not actual machine ip and i want actual machine ip.
>>>
>>
>>> i used Guacamole(tomcat+nginix)+x!rdp(linux host).
>>>
>>
>>
>> http://guacamole.apache.org/doc/gug/proxying-guacamole.html#tomcat-remote-ip
>>
>>
>>
>>
Re: How to get client ip address on guacamole
Posted by Mike Jumper <mj...@apache.org>.
Manoj, please stop resending the same message every few hours.
- Mike
On Tue, May 28, 2019 at 2:58 AM Manoj Patil <ma...@gmail.com> wrote:
>
>
> Begin forwarded message:
>
> *From: *Manoj Patil <ma...@gmail.com>
> *Subject: **Re: How to get client ip address on guacamole*
> *Date: *28 May 2019 at 12:13:18 PM IST
> *To: *user@guacamole.apache.org
>
> hi,
>
> i am done all the setting as per document but it shows the Firewalll WAN
> ip not machine local ip address
>
> my server.xml setting
>
> <Valve className="org.apache.catalina.valves.RemoteIpValve"
>
> internalProxies="192\.168\.80\.162|172\.16\.20\.37"
>
> remoteIpHeader="x-forwarded-for"
>
> remoteIpProxiesHeader="x-forwarded-by"
>
> protocolHeader="x-forwarded-proto"
>
> protocolHeaderHttpsValue="https" />
> <Valve className="org.apache.catalina.valves.ErrorReportValve"
> showReport="false"
>
> showServerInfo="false"/>
>
>
> My nginx setting is——
>
> server {
>
> listen 80;
> listen [::]:80;
> server_name gucserver;
> return 301 https://$server_name$request_uri;
>
>
> location /acecbs/ {
> proxy_pass http://192.168.80.162:8080/guacamole/;
> proxy_buffering off;
> proxy_http_version 1.1;
> proxy_set_header X-Forwarded-Host $host;
> proxy_set_header X-Forwarded-Server $host;
> proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
> proxy_set_header Upgrade $http_upgrade;
> proxy_set_header Connection $http_connection;
> proxy_cookie_path /guacamole/ /acecbs/;
> access_log off;
> }
>
>
> Username Start time Duration Connection name Remote host
> samho
> 2019-05-28 12:07:55 0 seconds samta_ho 223.196.84.130
> samho
> 2019-05-28 12:07:49 0 seconds samta_ho 223.196.84.130
> samho
> 2019-05-28 12:07:37 0 seconds samta_ho 223.196.84.130
> samho
> 2019-05-28 11:37:15 28 seconds samta_ho 223.196.84.130
>
> On 26-May-2019, at 11:24 PM, Mike Jumper <mj...@apache.org> wrote:
>
> On Sun, May 26, 2019, 10:14 Manoj Patil <ma...@gmail.com> wrote:
>
>> Dear,
>>
>> I see the history tab and table but in that remote host it display the
>> firewall ip not actual machine ip and i want actual machine ip.
>>
>
>> i used Guacamole(tomcat+nginix)+x!rdp(linux host).
>>
>
>
> http://guacamole.apache.org/doc/gug/proxying-guacamole.html#tomcat-remote-ip
>
>
>
>
Fwd: How to get client ip address on guacamole
Posted by Manoj Patil <ma...@gmail.com>.
> Begin forwarded message:
>
> From: Manoj Patil <ma...@gmail.com>
> Subject: Re: How to get client ip address on guacamole
> Date: 28 May 2019 at 12:13:18 PM IST
> To: user@guacamole.apache.org
>
> hi,
>
> i am done all the setting as per document but it shows the Firewalll WAN ip not machine local ip address
>
> my server.xml setting
>
> <Valve className="org.apache.catalina.valves.RemoteIpValve"
> internalProxies="192\.168\.80\.162|172\.16\.20\.37"
> remoteIpHeader="x-forwarded-for"
> remoteIpProxiesHeader="x-forwarded-by"
> protocolHeader="x-forwarded-proto"
> protocolHeaderHttpsValue="https" />
> <Valve className="org.apache.catalina.valves.ErrorReportValve"
> showReport="false"
> showServerInfo="false"/>
>
>
> My nginx setting is——
>
> server {
>
> listen 80;
> listen [::]:80;
> server_name gucserver;
> return 301 https://$server_name$request_uri <https://$server_name$request_uri/>;
>
>
> location /acecbs/ {
> proxy_pass http://192.168.80.162:8080/guacamole/ <http://192.168.80.162:8080/guacamole/>;
> proxy_buffering off;
> proxy_http_version 1.1;
> proxy_set_header X-Forwarded-Host $host;
> proxy_set_header X-Forwarded-Server $host;
> proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
> proxy_set_header Upgrade $http_upgrade;
> proxy_set_header Connection $http_connection;
> proxy_cookie_path /guacamole/ /acecbs/;
> access_log off;
> }
>
>
> Username Start time Duration Connection name Remote host
> samho
> 2019-05-28 12:07:55 0 seconds samta_ho 223.196.84.130
> samho
> 2019-05-28 12:07:49 0 seconds samta_ho 223.196.84.130
> samho
> 2019-05-28 12:07:37 0 seconds samta_ho 223.196.84.130
> samho
> 2019-05-28 11:37:15 28 seconds samta_ho 223.196.84.130
>
>> On 26-May-2019, at 11:24 PM, Mike Jumper <mjumper@apache.org <ma...@apache.org>> wrote:
>>
>> On Sun, May 26, 2019, 10:14 Manoj Patil <manoj2patil@gmail.com <ma...@gmail.com>> wrote:
>> Dear,
>>
>> I see the history tab and table but in that remote host it display the firewall ip not actual machine ip and i want actual machine ip.
>>
>> i used Guacamole(tomcat+nginix)+x!rdp(linux host).
>>
>> http://guacamole.apache.org/doc/gug/proxying-guacamole.html#tomcat-remote-ip <http://guacamole.apache.org/doc/gug/proxying-guacamole.html#tomcat-remote-ip>
>>
>
Re: How to get client ip address on guacamole
Posted by Mike Jumper <mj...@apache.org>.
On Fri, May 31, 2019 at 8:29 PM Manoj Patil <ma...@gmail.com> wrote:
> Ok
> Is there any way to pass this ip to xrdp session on linux
>
No, I don't believe so. For Windows RDP, yes, but I'm not sure about XRDP.
For Windows RDP, I think the best option would be the "CLIENTNAME"
environment variable, set via Guacamole's "client-name" parameter. It
matches the semantics of what you're looking for, and would be easy to use
if supported:
http://guacamole.apache.org/doc/gug/configuring-guacamole.html#rdp-session-settings
... but I don't believe XRDP supports this. The next best alternative would
be some sort of custom static virtual channel (SVC), which Guacamole also
supports for RDP:
http://guacamole.apache.org/doc/gug/configuring-guacamole.html#rdp-device-redirection
(see the "static-channels" parameter)
... but I don't believe XRDP supports this either.
It is possible that XRDP does have this support and I'm just not familiar
enough with current XRDP. If the XRDP folks have a similar mailing list,
forum, etc., I'd recommend reaching out to them.
- Mike
Re: How to get client ip address on guacamole
Posted by Manoj Patil <ma...@gmail.com>.
Ok
Is there any way to pass this ip to xrdp session on linux
On Fri, 31 May 2019, 23:39 Mike Jumper <mjumper@apache.org wrote:
> On Fri, May 31, 2019 at 10:46 AM Manoj Patil <ma...@gmail.com>
> wrote:
>
>> Means I am not catch actual client ip address is it right.
>>
>> If any ideas to catch this client lan ip address and pass through the
>> xrdp session.
>>
>
> As far as your server is concerned, the WAN IP of the firewall *is* the
> client IP address. There is no other client IP address outside that
> firewall. The LAN address is strictly local and only has meaning inside the
> firewalled network. It will not be visible nor usable outside that local
> network. No external service will be able to report the user's IP address
> as anything but the WAN IP of their NAT'ing firewall.
>
> - Mike
>
>
Re: How to get client ip address on guacamole
Posted by Mike Jumper <mj...@apache.org>.
On Fri, May 31, 2019 at 10:46 AM Manoj Patil <ma...@gmail.com> wrote:
> Means I am not catch actual client ip address is it right.
>
> If any ideas to catch this client lan ip address and pass through the xrdp
> session.
>
As far as your server is concerned, the WAN IP of the firewall *is* the
client IP address. There is no other client IP address outside that
firewall. The LAN address is strictly local and only has meaning inside the
firewalled network. It will not be visible nor usable outside that local
network. No external service will be able to report the user's IP address
as anything but the WAN IP of their NAT'ing firewall.
- Mike
Re: How to get client ip address on guacamole
Posted by Manoj Patil <ma...@gmail.com>.
Means I am not catch actual client ip address is it right.
If any ideas to catch this client lan ip address and pass through the xrdp
session.
On Fri, 31 May 2019, 19:55 Mike Jumper <mjumper@apache.org wrote:
> On Thu, May 30, 2019 at 8:52 PM Manoj Patil <ma...@gmail.com> wrote:
>
>> Dear Mike,
>>
>> In my case firewall is not perform NAT. means NAT not configured in
>> firewall.
>>
>
> If:
>
> 1) A user with IP address X is connecting behind some sort of firewall
> device (router?).
> 2) The firewall itself has a WAN port with its own IP address Y (in your
> case 223.196.84.130)
> 3) When the user connects to a web application, that web application sees
> IP address Y, not X
> 4) Communication between the server and Y is transparently rerouted
> internally to X by the firewall
>
> then the firewall is performing NAT.
>
> Does the above not describe what your firewall is doing?
>
> - Mike
>
>
Re: How to get client ip address on guacamole
Posted by Mike Jumper <mj...@apache.org>.
On Thu, May 30, 2019 at 8:52 PM Manoj Patil <ma...@gmail.com> wrote:
> Dear Mike,
>
> In my case firewall is not perform NAT. means NAT not configured in
> firewall.
>
If:
1) A user with IP address X is connecting behind some sort of firewall
device (router?).
2) The firewall itself has a WAN port with its own IP address Y (in your
case 223.196.84.130)
3) When the user connects to a web application, that web application sees
IP address Y, not X
4) Communication between the server and Y is transparently rerouted
internally to X by the firewall
then the firewall is performing NAT.
Does the above not describe what your firewall is doing?
- Mike
Re: How to get client ip address on guacamole
Posted by Manoj Patil <ma...@gmail.com>.
Dear Mike,
In my case firewall is not perform NAT. means NAT not configured in firewall.
> On 31-May-2019, at 12:00 AM, Mike Jumper <mj...@apache.org> wrote:
>
> On Mon, May 27, 2019 at 11:43 PM Manoj Patil <manoj2patil@gmail.com <ma...@gmail.com>> wrote:
> hi,
>
> i am done all the setting as per document but it shows the Firewalll WAN ip not machine local ip address
>
> If the firewall in question is performing network address translation (NAT), then this is really all that can be expected. The IP address visible to servers on the internet will only be the WAN IP of the router. It is (thankfully) not possible for a server to see past NAT. As far as your server is concerned, that WAN IP address is the correct address of the client.
>
>
> my server.xml setting
> ...
>
> Assuming those addresses are correct for your reverse proxy, your server.xml looks fine.
>
> My nginx setting is——
> ...
>
> Your Nginx configuration looks fine as well.
>
>
> Username Start time Duration Connection name Remote host
> samho
> 2019-05-28 12:07:55 0 seconds samta_ho 223.196.84.130
>
> The above is a public IP. If the above public IP is that of a firewall in front of your user (not your reverse proxy), then this is the behavior expected. You are not going to be able to determine the internal IP of a user behind a firewall performing NAT. You will only be able to determine the IP of the machine actually connecting to your reverse proxy, which in this case would be the WAN port of the router.
>
> - Mike
>
Re: How to get client ip address on guacamole
Posted by Mike Jumper <mj...@apache.org>.
On Mon, May 27, 2019 at 11:43 PM Manoj Patil <ma...@gmail.com> wrote:
> hi,
>
> i am done all the setting as per document but it shows the Firewalll WAN
> ip not machine local ip address
>
If the firewall in question is performing network address translation
(NAT), then this is really all that can be expected. The IP address visible
to servers on the internet will only be the WAN IP of the router. It is
(thankfully) not possible for a server to see past NAT. As far as your
server is concerned, that WAN IP address is the correct address of the
client.
> my server.xml setting
> ...
>
Assuming those addresses are correct for your reverse proxy, your
server.xml looks fine.
My nginx setting is——
> ...
>
Your Nginx configuration looks fine as well.
>
> Username Start time Duration Connection name Remote host
> samho
> 2019-05-28 12:07:55 0 seconds samta_ho 223.196.84.130
>
The above is a public IP. If the above public IP is that of a firewall in
front of your user (not your reverse proxy), then this is the behavior
expected. You are not going to be able to determine the internal IP of a
user behind a firewall performing NAT. You will only be able to determine
the IP of the machine actually connecting to your reverse proxy, which in
this case would be the WAN port of the router.
- Mike
Re: How to get client ip address on guacamole
Posted by Manoj Patil <ma...@gmail.com>.
hi,
i am done all the setting as per document but it shows the Firewalll WAN ip not machine local ip address
my server.xml setting
<Valve className="org.apache.catalina.valves.RemoteIpValve"
internalProxies="192\.168\.80\.162|172\.16\.20\.37"
remoteIpHeader="x-forwarded-for"
remoteIpProxiesHeader="x-forwarded-by"
protocolHeader="x-forwarded-proto"
protocolHeaderHttpsValue="https" />
<Valve className="org.apache.catalina.valves.ErrorReportValve"
showReport="false"
showServerInfo="false"/>
My nginx setting is——
server {
listen 80;
listen [::]:80;
server_name gucserver;
return 301 https://$server_name$request_uri;
location /acecbs/ {
proxy_pass http://192.168.80.162:8080/guacamole/;
proxy_buffering off;
proxy_http_version 1.1;
proxy_set_header X-Forwarded-Host $host;
proxy_set_header X-Forwarded-Server $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $http_connection;
proxy_cookie_path /guacamole/ /acecbs/;
access_log off;
}
Username Start time Duration Connection name Remote host
samho
2019-05-28 12:07:55 0 seconds samta_ho 223.196.84.130
samho
2019-05-28 12:07:49 0 seconds samta_ho 223.196.84.130
samho
2019-05-28 12:07:37 0 seconds samta_ho 223.196.84.130
samho
2019-05-28 11:37:15 28 seconds samta_ho 223.196.84.130
> On 26-May-2019, at 11:24 PM, Mike Jumper <mj...@apache.org> wrote:
>
> On Sun, May 26, 2019, 10:14 Manoj Patil <manoj2patil@gmail.com <ma...@gmail.com>> wrote:
> Dear,
>
> I see the history tab and table but in that remote host it display the firewall ip not actual machine ip and i want actual machine ip.
>
> i used Guacamole(tomcat+nginix)+x!rdp(linux host).
>
> http://guacamole.apache.org/doc/gug/proxying-guacamole.html#tomcat-remote-ip <http://guacamole.apache.org/doc/gug/proxying-guacamole.html#tomcat-remote-ip>
>
Re: How to get client ip address on guacamole
Posted by Mike Jumper <mj...@apache.org>.
On Sun, May 26, 2019, 10:14 Manoj Patil <ma...@gmail.com> wrote:
> Dear,
>
> I see the history tab and table but in that remote host it display the
> firewall ip not actual machine ip and i want actual machine ip.
>
> i used Guacamole(tomcat+nginix)+x!rdp(linux host).
>
http://guacamole.apache.org/doc/gug/proxying-guacamole.html#tomcat-remote-ip
Re: How to get client ip address on guacamole
Posted by Manoj Patil <ma...@gmail.com>.
Dear,
I see the history tab and table but in that remote host it display the firewall ip not actual machine ip and i want actual machine ip.
i used Guacamole(tomcat+nginix)+x!rdp(linux host).
please see screen shot
> On 26-May-2019, at 8:55 PM, Manoj Patil <ma...@gmail.com> wrote:
>
> Yes I want to required to get client ip address at xrdp server
>
> My scenario is
>
> Both Guacamole and X11rdp are installed on same server and I want to get client up on that server
>
> On Sun, 26 May 2019, 16:33 Nick Couchman <vnick@apache.org <ma...@apache.org> wrote:
> On Sun, May 26, 2019 at 3:03 AM Manoj Patil <manoj2patil@gmail.com <ma...@gmail.com>> wrote:
> we used linux Xrdp through Guacamole and the security reason we catch client visited ip and stored in my database and after i am only allowed to visit a specific ip.
>
>
> Guacamole already captures this information for you - if you use the JDBC module, Guacamole captures connection history records. It isn't clear from your question whether you need it within a specific place on the XRDP side of the connection, but if all you need is to know when a certain user/IP establishes a connection, it is already contained in the Guacamole database.
>
> http://guacamole.apache.org/doc/gug/administration.html#connection-history <http://guacamole.apache.org/doc/gug/administration.html#connection-history>
>
> -Nick
Re: How to get client ip address on guacamole
Posted by Manoj Patil <ma...@gmail.com>.
Yes I want to required to get client ip address at xrdp server
My scenario is
Both Guacamole and X11rdp are installed on same server and I want to get
client up on that server
On Sun, 26 May 2019, 16:33 Nick Couchman <vnick@apache.org wrote:
> On Sun, May 26, 2019 at 3:03 AM Manoj Patil <ma...@gmail.com> wrote:
>
>> we used linux Xrdp through Guacamole and the security reason we catch
>> client visited ip and stored in my database and after i am only allowed to
>> visit a specific ip.
>>
>>
> Guacamole already captures this information for you - if you use the JDBC
> module, Guacamole captures connection history records. It isn't clear from
> your question whether you need it within a specific place on the XRDP side
> of the connection, but if all you need is to know when a certain user/IP
> establishes a connection, it is already contained in the Guacamole database.
>
> http://guacamole.apache.org/doc/gug/administration.html#connection-history
>
> -Nick
>
Re: How to get client ip address on guacamole
Posted by Nick Couchman <vn...@apache.org>.
On Sun, May 26, 2019 at 3:03 AM Manoj Patil <ma...@gmail.com> wrote:
> we used linux Xrdp through Guacamole and the security reason we catch
> client visited ip and stored in my database and after i am only allowed to
> visit a specific ip.
>
>
Guacamole already captures this information for you - if you use the JDBC
module, Guacamole captures connection history records. It isn't clear from
your question whether you need it within a specific place on the XRDP side
of the connection, but if all you need is to know when a certain user/IP
establishes a connection, it is already contained in the Guacamole database.
http://guacamole.apache.org/doc/gug/administration.html#connection-history
-Nick
Re: How to get client ip address on guacamole
Posted by Manoj Patil <ma...@gmail.com>.
we used linux Xrdp through Guacamole and the security reason we catch client visited ip and stored in my database and after i am only allowed to visit a specific ip.
Please give me solution.
> On 26-May-2019, at 11:41 AM, Manoj Patil <ma...@gmail.com> wrote:
>
> Beacaue of we have launch a application from X11rdp and we know who is used this application and how many times this ip is visited .
>
> please help me in that and give me code to get ip address.
>
>
>
>> On 26-May-2019, at 11:38 AM, Mike Jumper <mjumper@apache.org <ma...@apache.org>> wrote:
>>
>> On Sat, May 25, 2019, 22:35 Manoj Patil <manoj2patil@gmail.com <ma...@gmail.com>> wrote:
>> Hi Everyone,
>>
>> Sorry to post a Noob question here. I was evaluating Guacamole for one of
>> the requirements we have to rdp into remote machine and was able to setup
>> client and Server and do the rdp to both Windows and Linux machines.
>>
>> Now I am taking it to next level. I catch or get a client ip address and pass to xrdp session
>>
>> through guacamole+x11rdp.
>>
>> Can you describe the high-level need behind this? Why do you need the client IP address within XRDP?
>>
>> This would be doable with normal Windows RDP leveraging a static virtual channel, or perhaps through passing the GUAC_CLIENT_ADDRESS token:
>>
>> http://guacamole.apache.org/doc/gug/configuring-guacamole.html#parameter-tokens <http://guacamole.apache.org/doc/gug/configuring-guacamole.html#parameter-tokens>
>>
>> Much of this will depend on how you intend to expose the address within XRDP, and on whether XRDP supports the the parts of the RDP protocol that could allow it. I suspect it may not.
>>
>> - Mike
>>
>
Re: How to get client ip address on guacamole
Posted by Manoj Patil <ma...@gmail.com>.
Beacaue of we have launch a application from X11rdp and we know who is used this application and how many times this ip is visited .
please help me in that and give me code to get ip address.
> On 26-May-2019, at 11:38 AM, Mike Jumper <mj...@apache.org> wrote:
>
> On Sat, May 25, 2019, 22:35 Manoj Patil <manoj2patil@gmail.com <ma...@gmail.com>> wrote:
> Hi Everyone,
>
> Sorry to post a Noob question here. I was evaluating Guacamole for one of
> the requirements we have to rdp into remote machine and was able to setup
> client and Server and do the rdp to both Windows and Linux machines.
>
> Now I am taking it to next level. I catch or get a client ip address and pass to xrdp session
>
> through guacamole+x11rdp.
>
> Can you describe the high-level need behind this? Why do you need the client IP address within XRDP?
>
> This would be doable with normal Windows RDP leveraging a static virtual channel, or perhaps through passing the GUAC_CLIENT_ADDRESS token:
>
> http://guacamole.apache.org/doc/gug/configuring-guacamole.html#parameter-tokens <http://guacamole.apache.org/doc/gug/configuring-guacamole.html#parameter-tokens>
>
> Much of this will depend on how you intend to expose the address within XRDP, and on whether XRDP supports the the parts of the RDP protocol that could allow it. I suspect it may not.
>
> - Mike
>
Re: How to get client ip address on guacamole
Posted by Mike Jumper <mj...@apache.org>.
On Sat, May 25, 2019, 22:35 Manoj Patil <ma...@gmail.com> wrote:
> Hi Everyone,
>
> Sorry to post a Noob question here. I was evaluating Guacamole for one of
> the requirements we have to rdp into remote machine and was able to setup
> client and Server and do the rdp to both Windows and Linux machines.
>
> Now I am taking it to next level. I catch or get a client ip address and
> pass to xrdp session
>
> through guacamole+x11rdp.
>
Can you describe the high-level need behind this? Why do you need the
client IP address within XRDP?
This would be doable with normal Windows RDP leveraging a static virtual
channel, or perhaps through passing the GUAC_CLIENT_ADDRESS token:
http://guacamole.apache.org/doc/gug/configuring-guacamole.html#parameter-tokens
Much of this will depend on how you intend to expose the address within
XRDP, and on whether XRDP supports the the parts of the RDP protocol that
could allow it. I suspect it may not.
- Mike