User logoff matching

[Obuno <ob...@protonmail.com.INVALID>]

Hi there,

Let me 1st thank you for Guacamole, it's amazing !!!

I've recently updated from 1.3.0 to 1.4.0 (shifted to load balanced containers etc. etc.) and all nice and sweet.

My only small concern is that previously, from my reverse proxy cloaking and load balancing toward the GCM backends, I could match the following regex in the occurrence of a user logout:
"/guacamole/api/tokens/\S{64}"

That doesn't seems to be the case anymore, any hints at how could I "watch" for logouts?

Let me know,
Kind regards,
Obuno
------- Original Message -------
On Friday, March 12th, 2021 at 11:39 AM, Obuno <ob...@protonmail.com> wrote:

> Hi there all,
>
> I'm testing Guacamole, all working very great. I've integrated with an LDAPS AD system and that works all well, auths are fine etc etc.
> My issue is that in the occurrence of a logoff and/or session timeout, I can't find a way to send a logoff event towards the AD/LDAP.
>
> The idea behind this requirement is to provide further Authorizations (NGFWs) using a 3rd party SSO scheme which gather users login/logoff done at AD.
> Hence, users belonging to the correct guacamole tied groups pop's up, although never disappears in the SSO scheme.
>
> Any help/idea would be greatly appreciated.
> Thanks, kind regards