You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@guacamole.apache.org by alipawsey <al...@live.com> on 2020/04/08 03:46:11 UTC
No MySQL login in Guacamole
Installed Guacamole; All good and have login page.
But "guacadmin" user/pass is not a valid credential as it doesn't connect to
MySQL.
General config is as below on a Debian based OS:
sudo mkdir -p /usr/share/tomcat8/.guacamole/{extension.lib}
wget
https://downloads.mysql.com/archives/get/p/3/file/mysql-connector-java-8.0.18.tar.gz
tar xzf mysql-connector-java-8.0.18.tar.gz
sudo cp mysql-connector-java-8.0.18/mysql-connector-java-8.0.18.jar
/usr/share/tomcat8/.guacamole/lib
wget
http://mirror.intergrid.com.au/apache/guacamole/1.0.0/binary/guacamole-auth-jdbc-1.0.0.tar.gz
tar xzf guacamole-auth-jdbc-1.0.0.tar.gz
sudo cp
guacamole-auth-jdbc-1.0.0.tar.gz/mysql/guacamole-auth-jdbc-mysql-1.0.0.jar
/usr/share/tomcat8/.guacamole/lib
tried *mysql-connector-java-5.1.46-bin.jar* above as well, no difference.
MySQL:
CREATE DATABASE guacdb;
CREATE USER 'guacamole_user'@'localhost' IDENTIFIED BY 'some_password';
GRANT SELECT,INSERT,UPDATE,DELETE ON guacdb.* TO
'guacamole_user'@'localhost';
FLUSH PRIVILEGES;
Schema:
sudo mysql guacdb < 001-create-schema.sql
sudo mysql guacdb < 002-create-admin-user.sql
guacamole.properties:
~ sudo vim /etc/guacamole/guacamole.properties
# MySQL properties
mysql-hostname: localhost
mysql-port: 3306
mysql-database: guacdb
mysql-username: guacamole_user
mysql-password: some_password
Tomcat8 has it logged in /catalina.out/ as:
/[2020-04-04 21:01:49] [info] 21:01:49.054 [http-nio-8080-exec-2] WARN
o.a.g.r.auth.AuthenticationService - Authentication attempt from
0:0:0:0:0:0:0:1 for user "guacadmin" failed./
Any advice? something's missed?
P.S. /user-mapping.xml/ works fine for login and connections.
--
Sent from: http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org
Re: No MySQL login in Guacamole
Posted by alipawsey <al...@live.com>.
Sorry. Banging my head to the wall Working
--
Sent from: http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org
Re: No MySQL login in Guacamole
Posted by Mike Jumper <mi...@glyptodon.com>.
On Tue, Apr 7, 2020, 23:57 alipawsey <al...@live.com> wrote:
> Thanks for the correction. Now:
> pi@raspberrypi:/etc/guacamole $ ls -al
> total 28
> drwxr-xr-x 4 root tomcat8 4096 Apr 8 14:00 .
> drwxr-xr-x 119 root root 4096 Apr 4 21:42 ..
> drwxr-xr-x 2 root root 4096 Apr 8 14:01 extension
>
"extensions", not "extension".
- Mike
Re: No MySQL login in Guacamole
Posted by alipawsey <al...@live.com>.
Thanks for the correction. Now:
pi@raspberrypi:/etc/guacamole $ ls -al
total 28
drwxr-xr-x 4 root tomcat8 4096 Apr 8 14:00 .
drwxr-xr-x 119 root root 4096 Apr 4 21:42 ..
drwxr-xr-x 2 root root 4096 Apr 8 14:01 extension
-rw-r--r-- 1 root root 122 Apr 8 13:59 guacamole.properties
drwxr-xr-x 2 root root 4096 Apr 8 14:01 lib
-rw-r--r-- 1 root root 400 Apr 4 21:42 logback.xml
-rw-r--r-- 1 root root 759 Apr 1 13:49 user-mapping.xml
pi@raspberrypi:/etc/guacamole $ ls -al extension/
total 4924
drwxr-xr-x 2 root root 4096 Apr 8 14:01 .
drwxr-xr-x 4 root tomcat8 4096 Apr 8 14:00 ..
-rw-r--r-- 1 root root 5030106 Apr 1 13:10
guacamole-auth-jdbc-mysql-1.1.0.jar
pi@raspberrypi:/etc/guacamole $ ls -al lib/
total 992
drwxr-xr-x 2 root root 4096 Apr 8 14:01 .
drwxr-xr-x 4 root tomcat8 4096 Apr 8 14:00 ..
-rw-r--r-- 1 root root 1006959 Apr 1 21:14
mysql-connector-java-5.1.48-bin.jar
Having look at the log (/var/log/tomcat8/catalina.out) says GUACAMOLE_HOME
is /etc/guacamole and it doesn't look at /usr/share/tomcat8/.guacamole
[2020-04-08 13:21:34] [info] Pausing ProtocolHandler ["http-nio-8080"]
[2020-04-08 13:21:34] [info] Stopping service [Catalina]
[2020-04-08 13:21:34] [warning] The web application [guacamole-1.1.0]
appears to have started a thread named
[com.google.inject.internal.util.$Finalizer] but has failed to stop it. This
is very likely to create a memory leak. Stack trace of thread:
[2020-04-08 13:21:34] [info] java.base@11.0.6/java.lang.Object.wait(Native
Method)
[2020-04-08 13:21:34] [info]
java.base@11.0.6/java.lang.ref.ReferenceQueue.remove(ReferenceQueue.java:155)
[2020-04-08 13:21:34] [info]
java.base@11.0.6/java.lang.ref.ReferenceQueue.remove(ReferenceQueue.java:176)
[2020-04-08 13:21:34] [info]
com.google.inject.internal.util.$Finalizer.run(Finalizer.java:114)
[2020-04-08 13:21:34] [info] Stopping ProtocolHandler ["http-nio-8080"]
[2020-04-08 13:21:34] [info] Destroying ProtocolHandler ["http-nio-8080"]
[2020-04-08 13:21:34] [info] NOTE: Picked up JDK_JAVA_OPTIONS:
--add-opens=java.base/java.lang=ALL-UNNAMED
--add-opens=java.base/java.io=ALL-UNNAMED
--add-opens=java.rmi/sun.rmi.transport=ALL-UNNAMED
[2020-04-08 13:21:34] [info] OpenJDK Server VM warning: Option
UseConcMarkSweepGC was deprecated in version 9.0 and will likely be removed
in a future release.
[2020-04-08 13:21:35] [warning] Problem with directory
[/var/lib/tomcat8/common/classes], exists: [false], isDirectory: [false],
canRead: [false]
[2020-04-08 13:21:35] [warning] Problem with directory
[/var/lib/tomcat8/common], exists: [false], isDirectory: [false], canRead:
[false]
[2020-04-08 13:21:35] [warning] Problem with directory
[/usr/share/tomcat8/common/classes], exists: [false], isDirectory: [false],
canRead: [false]
[2020-04-08 13:21:35] [warning] Problem with directory
[/usr/share/tomcat8/common], exists: [false], isDirectory: [false], canRead:
[false]
[2020-04-08 13:21:35] [warning] Problem with directory
[/var/lib/tomcat8/server/classes], exists: [false], isDirectory: [false],
canRead: [false]
[2020-04-08 13:21:35] [warning] Problem with directory
[/var/lib/tomcat8/server], exists: [false], isDirectory: [false], canRead:
[false]
[2020-04-08 13:21:35] [warning] Problem with directory
[/usr/share/tomcat8/server/classes], exists: [false], isDirectory: [false],
canRead: [false]
[2020-04-08 13:21:35] [warning] Problem with directory
[/usr/share/tomcat8/server], exists: [false], isDirectory: [false], canRead:
[false]
[2020-04-08 13:21:35] [warning] Problem with directory
[/var/lib/tomcat8/shared/classes], exists: [false], isDirectory: [false],
canRead: [false]
[2020-04-08 13:21:35] [warning] Problem with directory
[/var/lib/tomcat8/shared], exists: [false], isDirectory: [false], canRead:
[false]
[2020-04-08 13:21:35] [warning] Problem with directory
[/usr/share/tomcat8/shared/classes], exists: [false], isDirectory: [false],
canRead: [false]
[2020-04-08 13:21:35] [warning] Problem with directory
[/usr/share/tomcat8/shared], exists: [false], isDirectory: [false], canRead:
[false]
[2020-04-08 13:21:37] [info] Server version: Apache Tomcat/8.5.38
(Debian)
[2020-04-08 13:21:37] [info] Server built: Feb 26 2019 20:37:51 UTC
[2020-04-08 13:21:37] [info] Server number: 8.5.38.0
[2020-04-08 13:21:37] [info] OS Name: Linux
[2020-04-08 13:21:37] [info] OS Version: 4.19.97-v7l+
[2020-04-08 13:21:37] [info] Architecture: arm
[2020-04-08 13:21:37] [info] Java Home:
/usr/lib/jvm/java-11-openjdk-armhf
[2020-04-08 13:21:37] [info] JVM Version:
11.0.6+10-post-Raspbian-1deb10u1
[2020-04-08 13:21:37] [info] JVM Vendor: Raspbian
[2020-04-08 13:21:37] [info] CATALINA_BASE: /var/lib/tomcat8
[2020-04-08 13:21:37] [info] CATALINA_HOME: /usr/share/tomcat8
[2020-04-08 13:21:37] [info] Command line argument:
--add-opens=java.base/java.lang=ALL-UNNAMED
[2020-04-08 13:21:37] [info] Command line argument:
--add-opens=java.base/java.io=ALL-UNNAMED
[2020-04-08 13:21:37] [info] Command line argument:
--add-opens=java.rmi/sun.rmi.transport=ALL-UNNAMED
[2020-04-08 13:21:37] [info] Command line argument:
-Djava.util.logging.config.file=/var/lib/tomcat8/conf/logging.properties
[2020-04-08 13:21:37] [info] Command line argument:
-Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager
[2020-04-08 13:21:37] [info] Command line argument: -Djava.awt.headless=true
[2020-04-08 13:21:37] [info] Command line argument: -XX:+UseConcMarkSweepGC
[2020-04-08 13:21:37] [info] Command line argument:
-Djdk.tls.ephemeralDHKeySize=2048
[2020-04-08 13:21:37] [info] Command line argument:
-Djava.protocol.handler.pkgs=org.apache.catalina.webresources
[2020-04-08 13:21:37] [info] Command line argument:
-Dorg.apache.catalina.security.SecurityListener.UMASK=0027
[2020-04-08 13:21:37] [info] Command line argument: -Dignore.endorsed.dirs=
[2020-04-08 13:21:37] [info] Command line argument:
-Dcatalina.base=/var/lib/tomcat8
[2020-04-08 13:21:37] [info] Command line argument:
-Dcatalina.home=/usr/share/tomcat8
[2020-04-08 13:21:37] [info] Command line argument: -Djava.io.tmpdir=/tmp
[2020-04-08 13:21:37] [info] Loaded APR based Apache Tomcat Native library
[1.2.21] using APR version [1.6.5].
[2020-04-08 13:21:37] [info] APR capabilities: IPv6 [true], sendfile [true],
accept filters [false], random [true].
[2020-04-08 13:21:37] [info] APR/OpenSSL configuration: useAprConnector
[false], useOpenSSL [true]
[2020-04-08 13:21:37] [info] OpenSSL successfully initialized [OpenSSL
1.1.1d 10 Sep 2019]
[2020-04-08 13:21:37] [info] Initializing ProtocolHandler ["http-nio-8080"]
[2020-04-08 13:21:37] [info] Using a shared selector for servlet write/read
[2020-04-08 13:21:37] [info] Initialization processed in 2261 ms
[2020-04-08 13:21:37] [info] Starting service [Catalina]
[2020-04-08 13:21:37] [info] Starting Servlet Engine: Apache Tomcat/8.5.38
(Debian)
[2020-04-08 13:21:38] [info] Deploying web application archive
[/var/lib/tomcat8/webapps/guacamole-1.1.0.war]
[2020-04-08 13:21:43] [info] At least one JAR was scanned for TLDs yet
contained no TLDs. Enable debug logging for this logger for a complete list
of JARs that were scanned but no TLDs were found in them. Skipping unneeded
JARs during scanning can improve startup time and JSP compilation time.
[2020-04-08 13:21:44] [info] 13:21:44.902 [localhost-startStop-1] INFO
o.a.g.environment.LocalEnvironment - GUACAMOLE_HOME is "/etc/guacamole".
[2020-04-08 13:21:45] [info] 13:21:45.202 [localhost-startStop-1] INFO
o.a.g.rest.auth.HashTokenSessionMap - Sessions will expire after 60 minutes
of inactivity.
[2020-04-08 13:21:45] [info] 13:21:45.502 [localhost-startStop-1] INFO
org.apache.guacamole.log.LogModule - Loading logback configuration from
"/etc/guacamole/logback.xml".
[2020-04-08 13:21:45] [info] 13:21:45.662 [localhost-startStop-1] DEBUG
o.a.g.e.LanguageResourceService - Added language: "nl"
[2020-04-08 13:21:45] [info] 13:21:45.663 [localhost-startStop-1] DEBUG
o.a.g.e.LanguageResourceService - Added language: "en"
[2020-04-08 13:21:45] [info] 13:21:45.663 [localhost-startStop-1] DEBUG
o.a.g.e.LanguageResourceService - Added language: "zh"
[2020-04-08 13:21:45] [info] 13:21:45.663 [localhost-startStop-1] DEBUG
o.a.g.e.LanguageResourceService - Added language: "fr"
[2020-04-08 13:21:45] [info] 13:21:45.663 [localhost-startStop-1] DEBUG
o.a.g.e.LanguageResourceService - Added language: "ru"
[2020-04-08 13:21:45] [info] 13:21:45.663 [localhost-startStop-1] DEBUG
o.a.g.e.LanguageResourceService - Added language: "de"
[2020-04-08 13:21:45] [info] 13:21:45.663 [localhost-startStop-1] DEBUG
o.a.g.e.LanguageResourceService - Added language: "no"
[2020-04-08 13:21:45] [info] 13:21:45.664 [localhost-startStop-1] DEBUG
o.a.g.e.LanguageResourceService - Added language: "es"
[2020-04-08 13:21:45] [info] 13:21:45.664 [localhost-startStop-1] DEBUG
o.a.g.e.LanguageResourceService - Added language: "it"
[2020-04-08 13:21:45] [info] 13:21:45.669 [localhost-startStop-1] DEBUG
o.a.g.extension.ExtensionModule - [0] Binding AuthenticationProvider
"org.apache.guacamole.auth.file.FileAuthenticationProvider".
[2020-04-08 13:21:45] [info] 13:21:45.709 [localhost-startStop-1] INFO
o.a.g.environment.LocalEnvironment - GUACAMOLE_HOME is "/etc/guacamole".
[2020-04-08 13:21:46] [info] 13:21:46.155 [localhost-startStop-1] INFO
o.a.g.t.w.WebSocketTunnelModule - Loading JSR-356 WebSocket support...
[2020-04-08 13:21:46] [info] 13:21:46.248 [localhost-startStop-1] DEBUG
o.a.guacamole.tunnel.TunnelModule - WebSocket module loaded:
org.apache.guacamole.tunnel.websocket.WebSocketTunnelModule
[2020-04-08 13:21:47] [info] Registering
org.apache.guacamole.rest.RESTExceptionMapper as a provider class
[2020-04-08 13:21:47] [info] Registering
org.apache.guacamole.rest.extension.ExtensionRESTService as a root resource
class
[2020-04-08 13:21:47] [info] Registering
org.apache.guacamole.rest.language.LanguageRESTService as a root resource
class
[2020-04-08 13:21:47] [info] Registering
org.apache.guacamole.rest.patch.PatchRESTService as a root resource class
[2020-04-08 13:21:47] [info] Registering
org.apache.guacamole.rest.auth.TokenRESTService as a root resource class
[2020-04-08 13:21:47] [info] Registering
org.apache.guacamole.rest.session.SessionRESTService as a root resource
class
[2020-04-08 13:21:47] [info] Registering
org.codehaus.jackson.jaxrs.JacksonJsonProvider as a provider class
[2020-04-08 13:21:47] [info] Initiating Jersey application, version 'Jersey:
1.17.1 02/28/2013 12:47 PM'
[2020-04-08 13:21:47] [info] Binding
org.apache.guacamole.rest.RESTExceptionMapper to
GuiceManagedComponentProvider with the scope "Singleton"
[2020-04-08 13:21:47] [info] Binding
org.codehaus.jackson.jaxrs.JacksonJsonProvider to
GuiceManagedComponentProvider with the scope "Singleton"
[2020-04-08 13:21:49] [info] Binding
org.apache.guacamole.rest.extension.ExtensionRESTService to
GuiceManagedComponentProvider with the scope "PerRequest"
[2020-04-08 13:21:49] [info] Binding
org.apache.guacamole.rest.language.LanguageRESTService to
GuiceManagedComponentProvider with the scope "PerRequest"
[2020-04-08 13:21:49] [info] Binding
org.apache.guacamole.rest.patch.PatchRESTService to
GuiceManagedComponentProvider with the scope "PerRequest"
[2020-04-08 13:21:49] [info] Binding
org.apache.guacamole.rest.auth.TokenRESTService to
GuiceManagedComponentProvider with the scope "PerRequest"
[2020-04-08 13:21:49] [info] Binding
org.apache.guacamole.rest.session.SessionRESTService to
GuiceManagedComponentProvider with the scope "PerRequest"
[2020-04-08 13:21:49] [info] WebjarsServlet initialization completed
[2020-04-08 13:21:49] [info] Deployment of web application archive
[/var/lib/tomcat8/webapps/guacamole-1.1.0.war] has finished in [11,937] ms
[2020-04-08 13:21:49] [info] Deploying web application directory
[/var/lib/tomcat8/webapps/ROOT]
[2020-04-08 13:21:51] [info] At least one JAR was scanned for TLDs yet
contained no TLDs. Enable debug logging for this logger for a complete list
of JARs that were scanned but no TLDs were found in them. Skipping unneeded
JARs during scanning can improve startup time and JSP compilation time.
[2020-04-08 13:21:51] [info] Deployment of web application directory
[/var/lib/tomcat8/webapps/ROOT] has finished in [1,315] ms
[2020-04-08 13:21:51] [info] Starting ProtocolHandler ["http-nio-8080"]
[2020-04-08 13:21:51] [info] Server startup in 13657 ms
[2020-04-08 13:22:39] [info] 13:22:39.097 [http-nio-8080-exec-6] DEBUG
o.a.g.a.f.FileAuthenticationProvider - Reading user mapping file:
"/etc/guacamole/user-mapping.xml"
[2020-04-08 13:22:39] [info] 13:22:39.215 [http-nio-8080-exec-6] DEBUG
o.a.g.r.auth.AuthenticationService - Anonymous authentication attempt from
0:0:0:0:0:0:0:1 failed.
[2020-04-08 13:22:45] [info] 13:22:45.206 [pool-1-thread-1] DEBUG
o.a.g.rest.auth.HashTokenSessionMap - Checking for expired sessions...
[2020-04-08 13:22:45] [info] 13:22:45.207 [pool-1-thread-1] DEBUG
o.a.g.rest.auth.HashTokenSessionMap - Session check completed in 1 ms.
[2020-04-08 13:22:54] [info] 13:22:54.727 [http-nio-8080-exec-7] WARN
o.a.g.r.auth.AuthenticationService - Authentication attempt from
0:0:0:0:0:0:0:1 for user "guacadmin" failed.
[2020-04-08 13:23:03] [info] 13:23:03.060 [http-nio-8080-exec-1] INFO
o.a.g.r.auth.AuthenticationService - User "test" successfully authenticated
from 0:0:0:0:0:0:0:1.
[2020-04-08 13:23:03] [info] 13:23:03.096 [http-nio-8080-exec-1] DEBUG
o.a.g.r.auth.AuthenticationService - Login was successful for user "test".
(test user is from user-mapping.xml)
If everything's alright with guacamole setup, I've missed something in MySQl
setup, then.
--
Sent from: http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org
Re: No MySQL login in Guacamole
Posted by Mike Jumper <mi...@glyptodon.com>.
On Tue, Apr 7, 2020 at 8:46 PM alipawsey <al...@live.com> wrote:
> ...
> sudo cp
> guacamole-auth-jdbc-1.0.0.tar.gz/mysql/guacamole-auth-jdbc-mysql-1.0.0.jar
> /usr/share/tomcat8/.guacamole/lib
>
>
The extension .jar should be within .../extensions/, not .../lib/.
tried *mysql-connector-java-5.1.46-bin.jar* above as well, no difference.
Definitely check the logs either way. The logs will show what extensions
are being loaded and whether any errors occur. If you don't see the
extension mentioned at all, then things are for sure in the wrong location.
The logs will also indicate whether Guacamole is looking within
/usr/share/tomcat8/.guacamole/ as its GUACAMOLE_HOME. It looks correct in
your case, as I believe the Tomcat user on Debian platforms is indeed
"tomcat8" with a home directory located at /usr/share/tomcat8/, but
/etc/guacamole is an easier and more foolproof choice.
- Mike