You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@guacamole.apache.org by Rahul S <sa...@gmail.com> on 2019/12/18 06:28:16 UTC
With OpenID Connect, user group membership doesn't work as expected.
Hi,
I have installed Apache Guacamole 1.0.0 and have hooked it up with google
domain using OpenID Connect. Everything is working fine except the user
group membership feature
- If I create a non-administrator group with some connections and add a
user to that group I dont see any connections(empty screen) on logging in
as that user on the user's home screen.
- However if i create a administrator group then the user's home screen
works as expected on logging in. It shows all the connections configured.
Also related, if I configure the connections at both the user and group
level then it shows the connections on logging in, but gives the below
error on trying to login to that connection
SEVERE [http-nio-8080-exec-6]
org.apache.coyote.AbstractProtocol$ConnectionHandler.process Error reading
request, ignored
org.apache.ibatis.exceptions.TooManyResultsException: Expected one result
(or null) to be returned by selectOne(), but found: 2
at
org.apache.ibatis.session.defaults.DefaultSqlSession.selectOne(DefaultSqlSession.java:81)
at jdk.internal.reflect.GeneratedMethodAccessor71.invoke(Unknown Source)
at
java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.base/java.lang.reflect.Method.invoke(Method.java:566)
at
org.apache.ibatis.session.SqlSessionManager$SqlSessionInterceptor.invoke(SqlSessionManager.java:357)
at com.sun.proxy.$Proxy36.selectOne(Unknown Source)
at
org.apache.ibatis.session.SqlSessionManager.selectOne(SqlSessionManager.java:166)
at org.apache.ibatis.binding.MapperMethod.execute(MapperMethod.java:83)
at org.apache.ibatis.binding.MapperProxy.invoke(MapperProxy.java:59)
at com.sun.proxy.$Proxy115.selectOne(Unknown Source)
at
org.apache.guacamole.auth.jdbc.permission.ModeledObjectPermissionService.hasPermission(ModeledObjectPermissionService.java:171)
at
org.apache.guacamole.auth.jdbc.permission.ObjectPermissionSet.hasPermission(ObjectPermissionSet.java:103)
at
org.apache.guacamole.auth.jdbc.base.ModeledDirectoryObjectService.hasObjectPermission(ModeledDirectoryObjectService.java:175)
at
org.apache.guacamole.auth.jdbc.connection.ConnectionService.connect(ConnectionService.java:514)
at
org.apache.guacamole.auth.jdbc.connection.ModeledConnection.connect(ModeledConnection.java:263)
at
org.apache.guacamole.tunnel.TunnelRequestService.createConnectedTunnel(TunnelRequestService.java:219)
at
org.apache.guacamole.tunnel.TunnelRequestService.createTunnel(TunnelRequestService.java:393)
at
org.apache.guacamole.tunnel.websocket.RestrictedGuacamoleWebSocketTunnelEndpoint.createTunnel(RestrictedGuacamoleWebSocketTunnelEndpoint.java:113)
at
org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint.onOpen(GuacamoleWebSocketTunnelEndpoint.java:200)
at
org.apache.tomcat.websocket.server.WsHttpUpgradeHandler.init(WsHttpUpgradeHandler.java:133)
at
org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:852)
at
org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1498)
at
org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49)
at
java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128)
at
java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628)
at
org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
at java.base/java.lang.Thread.run(Thread.java:834)
Am not able to configure permissions at the group level but only at
individual user level. This seems to be a bug. Would be great if this thing
could be resolved
Re: With OpenID Connect, user group membership doesn't work as expected.
Posted by Rahul S <sa...@gmail.com>.
Oh that's great. I'll try out the new release and see if it works.
Thanks a lot.
On Wed, 18 Dec 2019, 23:00 Mike Jumper, <mj...@apache.org> wrote:
> On Tue, Dec 17, 2019, 22:28 Rahul S <sa...@gmail.com>
> wrote:
>
>> Hi,
>>
>> I have installed Apache Guacamole 1.0.0 and have hooked it up with google
>> domain using OpenID Connect. Everything is working fine except the user
>> group membership feature
>> - If I create a non-administrator group with some connections and add a
>> user to that group I dont see any connections(empty screen) on logging in
>> as that user on the user's home screen.
>> - However if i create a administrator group then the user's home screen
>> works as expected on logging in. It shows all the connections configured.
>>
>
> This has been identified and fixed:
>
> https://issues.apache.org/jira/browse/GUACAMOLE-715
>
>
>> Also related, if I configure the connections at both the user and group
>> level then it shows the connections on logging in, but gives the below
>> error on trying to login to that connection
>>
>> SEVERE [http-nio-8080-exec-6]
>> org.apache.coyote.AbstractProtocol$ConnectionHandler.process Error reading
>> request, ignored
>> org.apache.ibatis.exceptions.TooManyResultsException: Expected one
>> result (or null) to be returned by selectOne(), but found: 2
>> ...
>> Am not able to configure permissions at the group level but only at
>> individual user level. This seems to be a bug. Would be great if this thing
>> could be resolved
>>
>
> It has:
>
> https://issues.apache.org/jira/browse/GUACAMOLE-697
>
> - Mike
>
>
Re: With OpenID Connect, user group membership doesn't work as expected.
Posted by Mike Jumper <mj...@apache.org>.
On Tue, Dec 17, 2019, 22:28 Rahul S <sa...@gmail.com>
wrote:
> Hi,
>
> I have installed Apache Guacamole 1.0.0 and have hooked it up with google
> domain using OpenID Connect. Everything is working fine except the user
> group membership feature
> - If I create a non-administrator group with some connections and add a
> user to that group I dont see any connections(empty screen) on logging in
> as that user on the user's home screen.
> - However if i create a administrator group then the user's home screen
> works as expected on logging in. It shows all the connections configured.
>
This has been identified and fixed:
https://issues.apache.org/jira/browse/GUACAMOLE-715
> Also related, if I configure the connections at both the user and group
> level then it shows the connections on logging in, but gives the below
> error on trying to login to that connection
>
> SEVERE [http-nio-8080-exec-6]
> org.apache.coyote.AbstractProtocol$ConnectionHandler.process Error reading
> request, ignored
> org.apache.ibatis.exceptions.TooManyResultsException: Expected one result
> (or null) to be returned by selectOne(), but found: 2
> ...
> Am not able to configure permissions at the group level but only at
> individual user level. This seems to be a bug. Would be great if this thing
> could be resolved
>
It has:
https://issues.apache.org/jira/browse/GUACAMOLE-697
- Mike