You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@guacamole.apache.org by Yves Auffret <ya...@gmail.com> on 2023/07/30 19:40:58 UTC

user-mapping.xml & enable-sftp

Hello,

I’m unable to use sftp protocol for file transfer on VNC connection.

With this user-mapping.xml, I not allowed to connect. But if enable-sftp is
set to false it works (without sftp).

What I’m doing wrong ?

Regards
YA

<user-mapping>
  <authorize username="user1"  password="___PASSWD_MD5_FORMAT___"
encoding="md5">
    <connection name="VNC1">
      <protocol>vnc</protocol>
      <param name="hostname">localhost</param>
      <param name="port">9001</param>
      <param name="username">user1</param>
      <param name="password">my_passwd</param>
      <param name="enable-sftp">true</param>
      <param name="sftp-password">my_sftp_passwd</param>
    </connection>
  </authorize>
</user-mapping>

Re: user-mapping.xml & enable-sftp

Posted by Michael Jumper <mj...@apache.org>.
On 7/30/23 14:18, Yves Auffret wrote:
> Thanks Nick,
> 
> It works!
> 
> I was thinking that username was already declared and sftp-username was 
> optional.
> 

This is probably due to the fact that SFTP support for VNC was added 
before we supported usernames in VNC auth. The default username logic 
for VNC+SFTP was simply not updated to take VNC usernames into account.

The behavior you expected is what happens for SSH and RDP connections, 
both of which have always involved usernames in auth.

- Mike

---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org


Re: user-mapping.xml & enable-sftp

Posted by Yves Auffret <ya...@gmail.com>.
Thanks Nick,

It works!

I was thinking that username was already declared and sftp-username was
optional.

Regards,
YA

Le 30 juillet 2023 à 22:51:48, Nick Couchman (vnick@apache.org) a écrit:

On Sun, Jul 30, 2023 at 3:41 PM Yves Auffret <ya...@gmail.com> wrote:
>
> Hello,
>
> I’m unable to use sftp protocol for file transfer on VNC connection.
>
> With this user-mapping.xml, I not allowed to connect. But if enable-sftp
is set to false it works (without sftp).
>
> What I’m doing wrong ?
>
> Regards
> YA
>
> <user-mapping>
> <authorize username="user1" password="___PASSWD_MD5_FORMAT___"
encoding="md5">
> <connection name="VNC1">
> <protocol>vnc</protocol>
> <param name="hostname">localhost</param>
> <param name="port">9001</param>
> <param name="username">user1</param>
> <param name="password">my_passwd</param>
> <param name="enable-sftp">true</param>
> <param name="sftp-password">my_sftp_passwd</param>
> </connection>
> </authorize>
> </user-mapping>

If you're using enable-sftp with VNC you will likely also need the
following:
* sftp-username
* sftp-password

or

* sftp-username
* sftp-private-key
* sftp-passphrase

While the SFTP hostname defaults to the VNC server to which you're
connecting, leaving the SFTP username and/or password blank will just
result in a blank username and/or password, which will result in the
connection failing.

-Nick

---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org

Re: user-mapping.xml & enable-sftp

Posted by Nick Couchman <vn...@apache.org>.
On Sun, Jul 30, 2023 at 3:41 PM Yves Auffret <ya...@gmail.com> wrote:
>
> Hello,
>
> I’m unable to use sftp protocol for file transfer on VNC connection.
>
> With this user-mapping.xml, I not allowed to connect. But if enable-sftp is set to false it works (without sftp).
>
> What I’m doing wrong ?
>
> Regards
> YA
>
> <user-mapping>
>   <authorize username="user1"  password="___PASSWD_MD5_FORMAT___" encoding="md5">
>     <connection name="VNC1">
>       <protocol>vnc</protocol>
>       <param name="hostname">localhost</param>
>       <param name="port">9001</param>
>       <param name="username">user1</param>
>       <param name="password">my_passwd</param>
>       <param name="enable-sftp">true</param>
>       <param name="sftp-password">my_sftp_passwd</param>
>     </connection>
>   </authorize>
> </user-mapping>

If you're using enable-sftp with VNC you will likely also need the following:
* sftp-username
* sftp-password

or

* sftp-username
* sftp-private-key
* sftp-passphrase

While the SFTP hostname defaults to the VNC server to which you're
connecting, leaving the SFTP username and/or password blank will just
result in a blank username and/or password, which will result in the
connection failing.

-Nick

---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org