Guacamole - Session Disconnects

[Brian Henry <be...@itveterans.com>]

To anyone that has experienced the following session disconnects from the web browser to RDP session.  Once reconnected to the RDP desktop all of the applications are still running.

 

The configuration is setup in a No-Auth configuration which puts the user right at the Windows 2012 R2 login.  Once logged into the RDP session, the guac session to the RDP server periodically disconnects at random times with no distinct pattern.  The current version of guac running is 0.9.9 on the system.  I can get the exact version of web browsers being used but are Explorer and Mozilla.

 

v/r,

 

Brian

 

 

RE: Guacamole - Session Disconnects

[Andrew Kopp <AK...@soleilfoodservice.com>]

Hi Brian,

I experience the same session disconnects you are describing however we do not use no-auth and use various hosts (Windows 7, Windows Server 2008 R2 and 2012 R2). We do have RDP policies configured to keep the disconnected sessions running like in your scenario, however in your case, check the policy that kicks and disconnects idle sessions (this will keep the session still running in the background - https://technet.microsoft.com/en-us/library/cc754272(v=ws.11).aspx). Even though we have ensured this policy was configured properly on our servers the sessions still randomly drop (but much less!). We have particularly noted this behavior on slow or unreliable internet connections (like cellphone tethering) and saturated connections (shared wifi at a coffee shop).

The only thing we do that is different than out of the box is utilize mod_proxy and perform SSL on the web browser connection. This is the path: web browser (SSL) -> apache(reverse proxy – non ssl) -> guac daemon (same box) -> RDP hosts both on same segment and remote segments.

From what I can tell after doing tcpdumps, the disconnects are due to chrome and how it handles the connection between the guac daemon and the client browser. We have not been able to produce reliable patterns however we are continuing to monitor the service and network.


Regards,

Andrew


From: Brian Henry [mailto:behenry@itveterans.com]
Sent: Monday, June 6, 2016 8:35 PM
To: user@guacamole.incubator.apache.org
Subject: Guacamole - Session Disconnects

To anyone that has experienced the following session disconnects from the web browser to RDP session.  Once reconnected to the RDP desktop all of the applications are still running.

The configuration is setup in a No-Auth configuration which puts the user right at the Windows 2012 R2 login.  Once logged into the RDP session, the guac session to the RDP server periodically disconnects at random times with no distinct pattern.  The current version of guac running is 0.9.9 on the system.  I can get the exact version of web browsers being used but are Explorer and Mozilla.

v/r,

Brian



________________________________

This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please disregard. This message may contain confidential information and is intended only for the individual named.

Re: Guacamole - Session Disconnects

[Brian Henry <be...@itveterans.com>]

Andre and Nick,

Thank you for your comments.  Our connection from the Internet is a Metro
Ethernet (200Mbps) connection but some of our users go out a congested
connection going out of their location to get to the remote location.

The No-Auth is used just to allow the Guac to get to the Windows 2012R2
server where there the user is authenticated using their own credentials.
The RDP server, as well as the GuacServer (all one components on one box)
are located. From that landing point within the DMZ the users RDP to their
systems from the centralized service.  It would be nice if the application
could synch directly with any LDAP source and just proxy authentication to
that synch source.  I wanted to ask Mike if that is a future feature of the
product and if not we might contribute to the application to bring more
enterprise and security focused items to meet today's strict cyber security
requirements.

I will check the settings as you have requested but would have to go to
each server or ask if a GPO update can be applied.

Thanks again.

v/r,

Brian

Brian E. Henry

Chief Technology Officer

IT Veterans, LLC



Phone:  +1 540.848.3257 <++1+540.848.3257>

Webpage:  www.ITVeterans.com <http://www.itveterans.com/>

Email:  behenry@itveterans.com



*IT **Veterans*

1101 Pennsylvania Ave, 7th Floor | Washington, DC |Office: 202.756.0208



Confidential: This email is intended for the person or entity to which it
is addressed. The information contained in this email may be confidential
and proprietary. Any retransmission, review, dissemination or other use of,
or taking of any action in reliance upon, this information by persons or
entities other than the intended recipient is prohibited. If you received
this email in error, please contact the sender immediately and destroy the
material and delete it from any computer.

On Tue, Jun 7, 2016 at 12:33 AM, Nick Couchman <ni...@seakr.com>
wrote:

> I'm using Guacamole with RDP and Windows Server 2008 and Windows 7.  In
> general I don't really experience problems with session disconnects.  I run
> 3 different configs of Guacamole - one of them uses LDAP + DB, the other
> two are NoAuth.  I don't think the authentication style really has any
> bearing on the stability of my connections.  We use Chrome, primarily, for
> web browsing, and don't seem to have any issues.  I even have a couple of
> folks using ChromeOS and a VPN connection to connect to Guacamole and then
> RDP to their desktops, and it seems to work fine for that.  I'm running
> 0.9.8 or 0.9.9, and proxying through Apache HTTPD 2.4 and using SSL.
>
> -Nick
>
> On Jun 6, 2016, at 18:36, Brian Henry <be...@itveterans.com> wrote:
>
> To anyone that has experienced the following session disconnects from the
> web browser to RDP session.  Once reconnected to the RDP desktop all of the
> applications are still running.
>
>
>
> The configuration is setup in a No-Auth configuration which puts the user
> right at the Windows 2012 R2 login.  Once logged into the RDP session, the
> guac session to the RDP server periodically disconnects at random times
> with no distinct pattern.  The current version of guac running is 0.9.9 on
> the system.  I can get the exact version of web browsers being used but are
> Explorer and Mozilla.
>
>
>
> v/r,
>
>
>
> Brian
>
>
>
>
>
>
> ------------------------------
>
> This e-mail may contain SEAKR Engineering (SEAKR) Confidential and
> Proprietary Information. If this message is not intended for you, you are
> strictly prohibited from using this message, its contents or attachments in
> any way. If you have received this message in error, please delete the
> message from your mailbox. This e-mail may contain export-controlled
> material and should be handled accordingly.  ­­
>

Re: Guacamole - Session Disconnects

[Nick Couchman <ni...@seakr.com>]

I'm using Guacamole with RDP and Windows Server 2008 and Windows 7.  In general I don't really experience problems with session disconnects.  I run 3 different configs of Guacamole - one of them uses LDAP + DB, the other two are NoAuth.  I don't think the authentication style really has any bearing on the stability of my connections.  We use Chrome, primarily, for web browsing, and don't seem to have any issues.  I even have a couple of folks using ChromeOS and a VPN connection to connect to Guacamole and then RDP to their desktops, and it seems to work fine for that.  I'm running 0.9.8 or 0.9.9, and proxying through Apache HTTPD 2.4 and using SSL.

-Nick

> On Jun 6, 2016, at 18:36, Brian Henry <be...@itveterans.com> wrote:
> 
> To anyone that has experienced the following session disconnects from the web browser to RDP session.  Once reconnected to the RDP desktop all of the applications are still running.
>  
> The configuration is setup in a No-Auth configuration which puts the user right at the Windows 2012 R2 login.  Once logged into the RDP session, the guac session to the RDP server periodically disconnects at random times with no distinct pattern.  The current version of guac running is 0.9.9 on the system.  I can get the exact version of web browsers being used but are Explorer and Mozilla.
>  
> v/r,
>  
> Brian
>  
>  

==
This e-mail may contain SEAKR Engineering (SEAKR) Confidential and Proprietary Information. If this message is not intended for you, you are strictly prohibited from using this message, its contents or attachments in any way. If you have received this message in error, please delete the message from your mailbox. This e-mail may contain export-controlled material and should be handled accordingly.