You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@guacamole.apache.org by Roberto Torres <ro...@prohard.com.br> on 2024/09/23 16:55:56 UTC
Podman - Guacamole
I installed Apache Guacamole following these steps:
https://medium.com/@kunwarmahen/how-to-install-apache-guacamole-using-podman-on-ubuntu-1201b2698071
It worked very well. But now I need to implement SAML authentication.
I went into guacamole-client and made changes to
/home/guacamole/.guacamole/guacamole.properties
When restarting the container, the settings are lost.
As a test, I left a copy of guacamole.properties in /home/guacamole. When
restarting the container, the settings are maintained.
Where am I going wrong?
Re: Podman - Guacamole
Posted by Roberto Torres <ro...@prohard.com.br>.
Hi Oliver.
Thank you very much. It worked. It directs me to authentication.
But after authenticating it gives me a blank page: about:blank#blocked
Em seg., 23 de set. de 2024 às 14:16, Oliver, Dario N <
dario.n.oliver@intel.com> escreveu:
> Hi Roberto,
>
> You should follow the instructions posted at
> https://guacamole.apache.org/doc/gug/guacamole-docker.html#saml-authentication for
> configuring your container with the SAML settings (regardless of if you are
> using podman, you can set the same environment variables in the container
> for SAML settings). I think it will be something like this, which is using
> the MockSAML service to test SAML integrations:
>
> podman run \
> --name guacamole-client \
> --network guacamole-network \
> -e MYSQL_DATABASE=guacdb \
> -e MYSQL_USER=guacadmin \
> -e MYSQL_PASSWORD=password \
> -e GUACD_HOSTNAME=guacamole-server \
> -e MYSQL_HOSTNAME=guacamoledb \
> -e SAML_IDP_METADATA_URL=https://mocksaml.com/api/saml/metadata \
> -e SAML_ENTITY_ID=http://localhost:8090/guacamole/ \
> -e SAML_CALLBACK_URL=http://localhost:8090/guacamole/ \
> -e SAML_STRICT=false \
> -d \
> -p 8090:8080 \
> guacamole/guacamole
>
>
> ------------------------------
> *From:* Roberto Torres <ro...@prohard.com.br>
> *Sent:* Monday, September 23, 2024 9:55 AM
> *To:* user@guacamole.apache.org <us...@guacamole.apache.org>
> *Subject:* Podman - Guacamole
>
> I installed Apache Guacamole following these steps:
>
> https://medium.com/@kunwarmahen/how-to-install-apache-guacamole-using-podman-on-ubuntu-1201b2698071
>
> It worked very well. But now I need to implement SAML authentication.
>
> I went into guacamole-client and made changes to
> /home/guacamole/.guacamole/guacamole.properties
>
> When restarting the container, the settings are lost.
>
> As a test, I left a copy of guacamole.properties in /home/guacamole. When
> restarting the container, the settings are maintained.
>
> Where am I going wrong?
>
Re: Podman - Guacamole
Posted by "Oliver, Dario N" <da...@intel.com>.
Hi Roberto,
You should follow the instructions posted at https://guacamole.apache.org/doc/gug/guacamole-docker.html#saml-authentication for configuring your container with the SAML settings (regardless of if you are using podman, you can set the same environment variables in the container for SAML settings). I think it will be something like this, which is using the MockSAML service to test SAML integrations:
podman run \
--name guacamole-client \
--network guacamole-network \
-e MYSQL_DATABASE=guacdb \
-e MYSQL_USER=guacadmin \
-e MYSQL_PASSWORD=password \
-e GUACD_HOSTNAME=guacamole-server \
-e MYSQL_HOSTNAME=guacamoledb \
-e SAML_IDP_METADATA_URL=https://mocksaml.com/api/saml/metadata \
-e SAML_ENTITY_ID=http://localhost:8090/guacamole/ \
-e SAML_CALLBACK_URL=http://localhost:8090/guacamole/ \
-e SAML_STRICT=false \
-d \
-p 8090:8080 \
guacamole/guacamole
________________________________
From: Roberto Torres <ro...@prohard.com.br>
Sent: Monday, September 23, 2024 9:55 AM
To: user@guacamole.apache.org <us...@guacamole.apache.org>
Subject: Podman - Guacamole
I installed Apache Guacamole following these steps:
https://medium.com/@kunwarmahen/how-to-install-apache-guacamole-using-podman-on-ubuntu-1201b2698071
It worked very well. But now I need to implement SAML authentication.
I went into guacamole-client and made changes to /home/guacamole/.guacamole/guacamole.properties
When restarting the container, the settings are lost.
As a test, I left a copy of guacamole.properties in /home/guacamole. When restarting the container, the settings are maintained.
Where am I going wrong?
Re: Podman - Guacamole
Posted by Nick Couchman <vn...@apache.org>.
On Mon, Sep 23, 2024 at 12:56 PM Roberto Torres <ro...@prohard.com.br>
wrote:
> I installed Apache Guacamole following these steps:
>
> https://medium.com/@kunwarmahen/how-to-install-apache-guacamole-using-podman-on-ubuntu-1201b2698071
>
>
In addition to that, I'd look at the official documentation:
https://guacamole.apache.org/doc/gug/guacamole-docker.html
While it is written for Docker, the overall concepts for Podman should be
similar.
> It worked very well. But now I need to implement SAML authentication.
>
> I went into guacamole-client and made changes to
> /home/guacamole/.guacamole/guacamole.properties
>
> When restarting the container, the settings are lost.
>
>
You should avoid trying to modify guacamole.properties manually in a
container environment - instead use the environment variables that will
allow the container to generate its own configuration:
https://guacamole.apache.org/doc/gug/guacamole-docker.html#saml-authentication
-Nick
Re: Podman - Guacamole
Posted by Aaron Newsome <aa...@gmail.com>.
Hello Roberto. Best to use the environment variables when starting the
container. For my container, I use the following variables:
GUACD_HOSTNAME
GUACD_PORT
POSTGRESQL_HOSTNAME
POSTGRES_PORT
POSTGRESQL_DATABASE
POSTGRESQL_USER
POSTGRESQL_PASSWORD
LDAP_HOSTNAME
LDAP_PORT
LDAP_USER_BASE_DN
LDAP_GROUP_BASE_DN
LDAP_SEARCH_BIND_DN
LDAP_SEARCH_BIND_PASSWORD
LDAP_USERNAME_ATTRIBUTE
DUO_API_HOSTNAME
DUO_INTEGRATION_KEY
DUO_SECRET_KEY
DUO_APPLICATION_KEY
REMOTE_IP_VALVE_ENABLED
RECORDING_SEARCH_PATH
As others have pointed out, the full list of variables available to use are
in the documentation. I'll point out that I'm pretty sure the POSTGRESQL*
vars have been deprecated in favor of POSTGRES* vars. I've had these vars
in place for so long, I just haven't taken the time to update them.
On Mon, Sep 23, 2024 at 11:56 AM Roberto Torres <ro...@prohard.com.br>
wrote:
> I installed Apache Guacamole following these steps:
>
> https://medium.com/@kunwarmahen/how-to-install-apache-guacamole-using-podman-on-ubuntu-1201b2698071
>
> It worked very well. But now I need to implement SAML authentication.
>
> I went into guacamole-client and made changes to
> /home/guacamole/.guacamole/guacamole.properties
>
> When restarting the container, the settings are lost.
>
> As a test, I left a copy of guacamole.properties in /home/guacamole. When
> restarting the container, the settings are maintained.
>
> Where am I going wrong?
>