You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@guacamole.apache.org by Chris Lee <ch...@centurycity.com.hk> on 2020/03/25 02:50:30 UTC

Best Settings for RDP virtual disk drive

Hi All,

I am setup the Apache Guacamole 1.1.0 on Fedora Linux with AD Auth against with MS AD which using MySQL database as backend.

For RDP Virtual Disk Drive setting, any recommendation for setup Drive Path for all AD users without share the same path?

[cid:image001.png@01D60292.52911950]

For example:

AD user ID           Drive Path:

David                     /tmp/share-drive/david
Peter                     /tmp/share-drive/peter

Also, it is safe to set it on /tmp folder or other folder?

Many thanks in advance.

Regards,
Chris



This message and its attachment (if any) are strictly confidential and sent to the designated recipient(s) only. If you are not the intended recipient, please notify the sender by e-mail and delete this message and its attachment (if any) from your computer system immediately . Century City International Holdings Limited, Paliburg Holdings Limited, Regal Hotels International Holdings Limited, its respective related subsidiaries, associated companies and affiliates do not guarantee this message and its attachment (if any) are free of computer virus and would not accept any liability whatsoever arising from Internet transmission.

RE: Best Settings for RDP virtual disk drive

Posted by Chris Lee <ch...@centurycity.com.hk>.
Thanks Sebastian,

I updated the settings as below and working nicely:

[cid:image001.png@01D602C1.A617A740]

Cheer,
Chris

From: Sebastian Männling <se...@qubestack.org>
Sent: Wednesday, March 25, 2020 1:26 PM
To: user@guacamole.apache.org
Subject: Re: Best Settings for RDP virtual disk drive

Hi,

you can use ${GUAC_USERNAME}

See https://guacamole.apache.org/doc/gug/configuring-guacamole.html#parameter-tokens

Regarding the /tmp directory, keep in mind that there are automatic cleanup jobs and usually iirc /tmp is tmpfs (ram) in fedora.
Sent from my iPhone


On 25. Mar 2020, at 03:50, Chris Lee <ch...@centurycity.com.hk>> wrote:

Hi All,

I am setup the Apache Guacamole 1.1.0 on Fedora Linux with AD Auth against with MS AD which using MySQL database as backend.

For RDP Virtual Disk Drive setting, any recommendation for setup Drive Path for all AD users without share the same path?

<image001.png>

For example:

AD user ID           Drive Path:

David                     /tmp/share-drive/david
Peter                     /tmp/share-drive/peter

Also, it is safe to set it on /tmp folder or other folder?

Many thanks in advance.

Regards,
Chris


This message and its attachment (if any) are strictly confidential and sent to the designated recipient(s) only. If you are not the intended recipient, please notify the sender by e-mail and delete this message and its attachment (if any) from your computer system immediately . Century City International Holdings Limited, Paliburg Holdings Limited, Regal Hotels International Holdings Limited, its respective related subsidiaries, associated companies and affiliates do not guarantee this message and its attachment (if any) are free of computer virus and would not accept any liability whatsoever arising from Internet transmission.


This message and its attachment (if any) are strictly confidential and sent to the designated recipient(s) only. If you are not the intended recipient, please notify the sender by e-mail and delete this message and its attachment (if any) from your computer system immediately . Century City International Holdings Limited, Paliburg Holdings Limited, Regal Hotels International Holdings Limited, its respective related subsidiaries, associated companies and affiliates do not guarantee this message and its attachment (if any) are free of computer virus and would not accept any liability whatsoever arising from Internet transmission.

Re: Best Settings for RDP virtual disk drive

Posted by Nick Couchman <vn...@apache.org>.
Another option, particularly if you are concerned about file permissions,
is to utilize the SFTP support in Guacamole.  If you're using the
${GUAC_USERNAME} and ${GUAC_PASSWORD} parameters, and you have a SFTP
server that integrates with your Windows (AD) authentication, you can do
this transparently such that the SFTP connection is established using the
same credentials as Windows and happens at connection time.  This does
require maintaining a SFTP server, so it isn't quite as low-maintenance as
just using the RDP file sharing, but just another possibility.

-Nick

On Wed, Mar 25, 2020 at 6:21 AM Stefan Bogdan Cimpeanu <bo...@cimpeanu.org>
wrote:

> Hi Chris,
>
> Perfectly valid, but then we’d have to maintain a NAS (or two) too
> (resources, maintenance, backups, etc.) :)
> Also, the scenario here is a bit more complex too, where we’d need to have
> different data locations for different countries, due to legal requirements.
>
> The most elegant way would’ve been user affinity, but I suppose that’s not
> really possible.
>
> Thanks,
> Bogdan
>
> On 25 Mar 2020, at 12:14, Chris Lee <ch...@centurycity.com.hk> wrote:
>
> Hi Bogdan,
>
> How about multiple severs mount the same NAS shared folder?
>
> /mnt/nas/guaca/${GUAC_USERNAME}
>
> Regards,
> Chris
>
> *From:* Stefan Bogdan Cimpeanu <bo...@cimpeanu.org>
> *Sent:* Wednesday, March 25, 2020 5:02 PM
> *To:* user@guacamole.apache.org
> *Subject:* Re: Best Settings for RDP virtual disk drive
>
> This is a good topic though… we’ve also set up using
> /some/path/${GUAC_USERNAME} but facing the following issue: given we’ve
> multiple guacamole servers behind load balancers, users don’t always hit
> the same instance, hence their data is not available.
> Any way to set some sort of affinity at user level?
>
> The alternative would be to use network mounts for the users directories,
> but we’d want to avoid that.
>
> Regards,
> Bogdan
>
>
> On 25 Mar 2020, at 07:25, Sebastian Männling <
> sebastian.maennling@qubestack.org> wrote:
>
> Hi,
>
> you can use ${GUAC_USERNAME}
>
>
> See
> https://guacamole.apache.org/doc/gug/configuring-guacamole.html#parameter-tokens
>
> Regarding the /tmp directory, keep in mind that there are automatic
> cleanup jobs and usually iirc /tmp is tmpfs (ram) in fedora.
> Sent from my iPhone
>
>
> On 25. Mar 2020, at 03:50, Chris Lee <ch...@centurycity.com.hk> wrote:
>
> 
> Hi All,
>
> I am setup the Apache Guacamole 1.1.0 on Fedora Linux with AD Auth against
> with MS AD which using MySQL database as backend.
>
> For RDP Virtual Disk Drive setting, any recommendation for setup Drive
> Path for all AD users without share the same path?
>
> <image001.png>
>
>
> For example:
>
> AD user ID           Drive Path:
>
> David                     /tmp/share-drive/david
> Peter                     /tmp/share-drive/peter
>
> Also, it is safe to set it on /tmp folder or other folder?
>
> Many thanks in advance.
>
> Regards,
> Chris
>
>
>
> This message and its attachment (if any) are strictly confidential and
> sent to the designated recipient(s) only. If you are not the intended
> recipient, please notify the sender by e-mail and delete this message and
> its attachment (if any) from your computer system immediately . Century
> City International Holdings Limited, Paliburg Holdings Limited, Regal
> Hotels International Holdings Limited, its respective related subsidiaries,
> associated companies and affiliates do not guarantee this message and its
> attachment (if any) are free of computer virus and would not accept any
> liability whatsoever arising from Internet transmission.
>
>
>
>
> This message and its attachment (if any) are strictly confidential and
> sent to the designated recipient(s) only. If you are not the intended
> recipient, please notify the sender by e-mail and delete this message and
> its attachment (if any) from your computer system immediately . Century
> City International Holdings Limited, Paliburg Holdings Limited, Regal
> Hotels International Holdings Limited, its respective related subsidiaries,
> associated companies and affiliates do not guarantee this message and its
> attachment (if any) are free of computer virus and would not accept any
> liability whatsoever arising from Internet transmission.
>
>
>

Re: Best Settings for RDP virtual disk drive

Posted by Stefan Bogdan Cimpeanu <bo...@cimpeanu.org>.
Thank you for the suggestions!

> On 26 Mar 2020, at 10:08, Chris Lee <ch...@centurycity.com.hk> wrote:
> 
> Hi Bogdan,
>  
> You make consider to use Cloud Service, such as Azure Files, so you don’t need to worry about the resources, backup…..
>  
> Regards,
> Chris 
>  
> From: Stefan Bogdan Cimpeanu <bo...@cimpeanu.org> 
> Sent: Wednesday, March 25, 2020 6:21 PM
> To: user@guacamole.apache.org
> Subject: Re: Best Settings for RDP virtual disk drive
>  
> Hi Chris,
>  
> Perfectly valid, but then we’d have to maintain a NAS (or two) too (resources, maintenance, backups, etc.) :)
> Also, the scenario here is a bit more complex too, where we’d need to have different data locations for different countries, due to legal requirements.
>  
> The most elegant way would’ve been user affinity, but I suppose that’s not really possible.
>  
> Thanks,
> Bogdan
> 
> 
> On 25 Mar 2020, at 12:14, Chris Lee <chrislee@centurycity.com.hk <ma...@centurycity.com.hk>> wrote:
>  
> Hi Bogdan,
>  
> How about multiple severs mount the same NAS shared folder?
>  
> /mnt/nas/guaca/${GUAC_USERNAME}
>  
> Regards,
> Chris 
>  
> From: Stefan Bogdan Cimpeanu <bogdan@cimpeanu.org <ma...@cimpeanu.org>> 
> Sent: Wednesday, March 25, 2020 5:02 PM
> To: user@guacamole.apache.org <ma...@guacamole.apache.org>
> Subject: Re: Best Settings for RDP virtual disk drive
>  
> This is a good topic though… we’ve also set up using /some/path/${GUAC_USERNAME} but facing the following issue: given we’ve multiple guacamole servers behind load balancers, users don’t always hit the same instance, hence their data is not available.
> Any way to set some sort of affinity at user level?
>  
> The alternative would be to use network mounts for the users directories, but we’d want to avoid that.
>  
> Regards,
> Bogdan
> 
> 
> 
> On 25 Mar 2020, at 07:25, Sebastian Männling <sebastian.maennling@qubestack.org <ma...@qubestack.org>> wrote:
>  
> Hi,
>  
> you can use ${GUAC_USERNAME}
>  
> See https://guacamole.apache.org/doc/gug/configuring-guacamole.html#parameter-tokens <https://guacamole.apache.org/doc/gug/configuring-guacamole.html#parameter-tokens>
> 
> Regarding the /tmp directory, keep in mind that there are automatic cleanup jobs and usually iirc /tmp is tmpfs (ram) in fedora.
> 
> Sent from my iPhone
> 
> 
> 
> On 25. Mar 2020, at 03:50, Chris Lee <chrislee@centurycity.com.hk <ma...@centurycity.com.hk>> wrote:
> 
> 
> Hi All,
>  
> I am setup the Apache Guacamole 1.1.0 on Fedora Linux with AD Auth against with MS AD which using MySQL database as backend.
>  
> For RDP Virtual Disk Drive setting, any recommendation for setup Drive Path for all AD users without share the same path?
>  
> <image001.png>
>  
>  
> For example:
>  
> AD user ID           Drive Path:
>  
> David                     /tmp/share-drive/david
> Peter                     /tmp/share-drive/peter
>  
> Also, it is safe to set it on /tmp folder or other folder?
>  
> Many thanks in advance.
>  
> Regards,
> Chris
>  
>  
> 
> This message and its attachment (if any) are strictly confidential and sent to the designated recipient(s) only. If you are not the intended recipient, please notify the sender by e-mail and delete this message and its attachment (if any) from your computer system immediately . Century City International Holdings Limited, Paliburg Holdings Limited, Regal Hotels International Holdings Limited, its respective related subsidiaries, associated companies and affiliates do not guarantee this message and its attachment (if any) are free of computer virus and would not accept any liability whatsoever arising from Internet transmission.
>  
> 
> 
> This message and its attachment (if any) are strictly confidential and sent to the designated recipient(s) only. If you are not the intended recipient, please notify the sender by e-mail and delete this message and its attachment (if any) from your computer system immediately . Century City International Holdings Limited, Paliburg Holdings Limited, Regal Hotels International Holdings Limited, its respective related subsidiaries, associated companies and affiliates do not guarantee this message and its attachment (if any) are free of computer virus and would not accept any liability whatsoever arising from Internet transmission.
>  
> 
> 
> This message and its attachment (if any) are strictly confidential and sent to the designated recipient(s) only. If you are not the intended recipient, please notify the sender by e-mail and delete this message and its attachment (if any) from your computer system immediately . Century City International Holdings Limited, Paliburg Holdings Limited, Regal Hotels International Holdings Limited, its respective related subsidiaries, associated companies and affiliates do not guarantee this message and its attachment (if any) are free of computer virus and would not accept any liability whatsoever arising from Internet transmission.


RE: Best Settings for RDP virtual disk drive

Posted by Chris Lee <ch...@centurycity.com.hk>.
Hi Bogdan,

You make consider to use Cloud Service, such as Azure Files, so you don’t need to worry about the resources, backup…..

Regards,
Chris

From: Stefan Bogdan Cimpeanu <bo...@cimpeanu.org>
Sent: Wednesday, March 25, 2020 6:21 PM
To: user@guacamole.apache.org
Subject: Re: Best Settings for RDP virtual disk drive

Hi Chris,

Perfectly valid, but then we’d have to maintain a NAS (or two) too (resources, maintenance, backups, etc.) :)
Also, the scenario here is a bit more complex too, where we’d need to have different data locations for different countries, due to legal requirements.

The most elegant way would’ve been user affinity, but I suppose that’s not really possible.

Thanks,
Bogdan


On 25 Mar 2020, at 12:14, Chris Lee <ch...@centurycity.com.hk>> wrote:

Hi Bogdan,

How about multiple severs mount the same NAS shared folder?

/mnt/nas/guaca/${GUAC_USERNAME}

Regards,
Chris

From: Stefan Bogdan Cimpeanu <bo...@cimpeanu.org>>
Sent: Wednesday, March 25, 2020 5:02 PM
To: user@guacamole.apache.org<ma...@guacamole.apache.org>
Subject: Re: Best Settings for RDP virtual disk drive

This is a good topic though… we’ve also set up using /some/path/${GUAC_USERNAME} but facing the following issue: given we’ve multiple guacamole servers behind load balancers, users don’t always hit the same instance, hence their data is not available.
Any way to set some sort of affinity at user level?

The alternative would be to use network mounts for the users directories, but we’d want to avoid that.

Regards,
Bogdan



On 25 Mar 2020, at 07:25, Sebastian Männling <se...@qubestack.org>> wrote:

Hi,

you can use ${GUAC_USERNAME}

See https://guacamole.apache.org/doc/gug/configuring-guacamole.html#parameter-tokens

Regarding the /tmp directory, keep in mind that there are automatic cleanup jobs and usually iirc /tmp is tmpfs (ram) in fedora.
Sent from my iPhone



On 25. Mar 2020, at 03:50, Chris Lee <ch...@centurycity.com.hk>> wrote:

Hi All,

I am setup the Apache Guacamole 1.1.0 on Fedora Linux with AD Auth against with MS AD which using MySQL database as backend.

For RDP Virtual Disk Drive setting, any recommendation for setup Drive Path for all AD users without share the same path?

<image001.png>


For example:

AD user ID           Drive Path:

David                     /tmp/share-drive/david
Peter                     /tmp/share-drive/peter

Also, it is safe to set it on /tmp folder or other folder?

Many thanks in advance.

Regards,
Chris


This message and its attachment (if any) are strictly confidential and sent to the designated recipient(s) only. If you are not the intended recipient, please notify the sender by e-mail and delete this message and its attachment (if any) from your computer system immediately . Century City International Holdings Limited, Paliburg Holdings Limited, Regal Hotels International Holdings Limited, its respective related subsidiaries, associated companies and affiliates do not guarantee this message and its attachment (if any) are free of computer virus and would not accept any liability whatsoever arising from Internet transmission.



This message and its attachment (if any) are strictly confidential and sent to the designated recipient(s) only. If you are not the intended recipient, please notify the sender by e-mail and delete this message and its attachment (if any) from your computer system immediately . Century City International Holdings Limited, Paliburg Holdings Limited, Regal Hotels International Holdings Limited, its respective related subsidiaries, associated companies and affiliates do not guarantee this message and its attachment (if any) are free of computer virus and would not accept any liability whatsoever arising from Internet transmission.



This message and its attachment (if any) are strictly confidential and sent to the designated recipient(s) only. If you are not the intended recipient, please notify the sender by e-mail and delete this message and its attachment (if any) from your computer system immediately . Century City International Holdings Limited, Paliburg Holdings Limited, Regal Hotels International Holdings Limited, its respective related subsidiaries, associated companies and affiliates do not guarantee this message and its attachment (if any) are free of computer virus and would not accept any liability whatsoever arising from Internet transmission.

Re: Best Settings for RDP virtual disk drive

Posted by Stefan Bogdan Cimpeanu <bo...@cimpeanu.org>.
Hi Chris,

Perfectly valid, but then we’d have to maintain a NAS (or two) too (resources, maintenance, backups, etc.) :)
Also, the scenario here is a bit more complex too, where we’d need to have different data locations for different countries, due to legal requirements.

The most elegant way would’ve been user affinity, but I suppose that’s not really possible.

Thanks,
Bogdan

> On 25 Mar 2020, at 12:14, Chris Lee <ch...@centurycity.com.hk> wrote:
> 
> Hi Bogdan,
>  
> How about multiple severs mount the same NAS shared folder?
>  
> /mnt/nas/guaca/${GUAC_USERNAME}
>  
> Regards,
> Chris 
>  
> From: Stefan Bogdan Cimpeanu <bo...@cimpeanu.org> 
> Sent: Wednesday, March 25, 2020 5:02 PM
> To: user@guacamole.apache.org
> Subject: Re: Best Settings for RDP virtual disk drive
>  
> This is a good topic though… we’ve also set up using /some/path/${GUAC_USERNAME} but facing the following issue: given we’ve multiple guacamole servers behind load balancers, users don’t always hit the same instance, hence their data is not available.
> Any way to set some sort of affinity at user level?
>  
> The alternative would be to use network mounts for the users directories, but we’d want to avoid that.
>  
> Regards,
> Bogdan
> 
> 
> On 25 Mar 2020, at 07:25, Sebastian Männling <sebastian.maennling@qubestack.org <ma...@qubestack.org>> wrote:
>  
> Hi,
>  
> you can use ${GUAC_USERNAME}
>  
> See https://guacamole.apache.org/doc/gug/configuring-guacamole.html#parameter-tokens <https://guacamole.apache.org/doc/gug/configuring-guacamole.html#parameter-tokens>
> 
> Regarding the /tmp directory, keep in mind that there are automatic cleanup jobs and usually iirc /tmp is tmpfs (ram) in fedora.
> 
> Sent from my iPhone
> 
> 
> On 25. Mar 2020, at 03:50, Chris Lee <chrislee@centurycity.com.hk <ma...@centurycity.com.hk>> wrote:
> 
> 
> Hi All,
>  
> I am setup the Apache Guacamole 1.1.0 on Fedora Linux with AD Auth against with MS AD which using MySQL database as backend.
>  
> For RDP Virtual Disk Drive setting, any recommendation for setup Drive Path for all AD users without share the same path?
>  
> <image001.png>
>  
>  
> For example:
>  
> AD user ID           Drive Path:
>  
> David                     /tmp/share-drive/david
> Peter                     /tmp/share-drive/peter
>  
> Also, it is safe to set it on /tmp folder or other folder?
>  
> Many thanks in advance.
>  
> Regards,
> Chris
>  
>  
> 
> This message and its attachment (if any) are strictly confidential and sent to the designated recipient(s) only. If you are not the intended recipient, please notify the sender by e-mail and delete this message and its attachment (if any) from your computer system immediately . Century City International Holdings Limited, Paliburg Holdings Limited, Regal Hotels International Holdings Limited, its respective related subsidiaries, associated companies and affiliates do not guarantee this message and its attachment (if any) are free of computer virus and would not accept any liability whatsoever arising from Internet transmission.
>  
> 
> 
> This message and its attachment (if any) are strictly confidential and sent to the designated recipient(s) only. If you are not the intended recipient, please notify the sender by e-mail and delete this message and its attachment (if any) from your computer system immediately . Century City International Holdings Limited, Paliburg Holdings Limited, Regal Hotels International Holdings Limited, its respective related subsidiaries, associated companies and affiliates do not guarantee this message and its attachment (if any) are free of computer virus and would not accept any liability whatsoever arising from Internet transmission.


RE: Best Settings for RDP virtual disk drive

Posted by Chris Lee <ch...@centurycity.com.hk>.
Hi Bogdan,

How about multiple severs mount the same NAS shared folder?

/mnt/nas/guaca/${GUAC_USERNAME}

Regards,
Chris

From: Stefan Bogdan Cimpeanu <bo...@cimpeanu.org>
Sent: Wednesday, March 25, 2020 5:02 PM
To: user@guacamole.apache.org
Subject: Re: Best Settings for RDP virtual disk drive

This is a good topic though… we’ve also set up using /some/path/${GUAC_USERNAME} but facing the following issue: given we’ve multiple guacamole servers behind load balancers, users don’t always hit the same instance, hence their data is not available.
Any way to set some sort of affinity at user level?

The alternative would be to use network mounts for the users directories, but we’d want to avoid that.

Regards,
Bogdan


On 25 Mar 2020, at 07:25, Sebastian Männling <se...@qubestack.org>> wrote:

Hi,

you can use ${GUAC_USERNAME}

See https://guacamole.apache.org/doc/gug/configuring-guacamole.html#parameter-tokens

Regarding the /tmp directory, keep in mind that there are automatic cleanup jobs and usually iirc /tmp is tmpfs (ram) in fedora.
Sent from my iPhone


On 25. Mar 2020, at 03:50, Chris Lee <ch...@centurycity.com.hk>> wrote:

Hi All,

I am setup the Apache Guacamole 1.1.0 on Fedora Linux with AD Auth against with MS AD which using MySQL database as backend.

For RDP Virtual Disk Drive setting, any recommendation for setup Drive Path for all AD users without share the same path?

<image001.png>


For example:

AD user ID           Drive Path:

David                     /tmp/share-drive/david
Peter                     /tmp/share-drive/peter

Also, it is safe to set it on /tmp folder or other folder?

Many thanks in advance.

Regards,
Chris


This message and its attachment (if any) are strictly confidential and sent to the designated recipient(s) only. If you are not the intended recipient, please notify the sender by e-mail and delete this message and its attachment (if any) from your computer system immediately . Century City International Holdings Limited, Paliburg Holdings Limited, Regal Hotels International Holdings Limited, its respective related subsidiaries, associated companies and affiliates do not guarantee this message and its attachment (if any) are free of computer virus and would not accept any liability whatsoever arising from Internet transmission.



This message and its attachment (if any) are strictly confidential and sent to the designated recipient(s) only. If you are not the intended recipient, please notify the sender by e-mail and delete this message and its attachment (if any) from your computer system immediately . Century City International Holdings Limited, Paliburg Holdings Limited, Regal Hotels International Holdings Limited, its respective related subsidiaries, associated companies and affiliates do not guarantee this message and its attachment (if any) are free of computer virus and would not accept any liability whatsoever arising from Internet transmission.

Re: Best Settings for RDP virtual disk drive

Posted by sciUser <sh...@securitycentric.net>.
Easy solution is to use NFS share so it wont mater which Guac server makes
the connection the user will always get their files.

Thank You



-----
A Cybersecurity Enablement Company 
We don't just run you through the motions, Our labs teach you how to think! 
Known good Guacamole  installations

--
Sent from: http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org


Re: Best Settings for RDP virtual disk drive

Posted by Sebastian Männling <se...@qubestack.org>.
@Bogdan, if i understand your question/request correctly... this 'user affinity' is something that can be done by the loadbalancer (to a certain degree)
we have a similary setup (two guacamole servers behind a haproxy loadbalancer) and we configured the lb to be client IP persistence.
https://www.haproxy.com/de/blog/client-ip-persistence-or-source-ip-hash-load-balancing/

in our setup the clients always have the same ips, so this might not apply to your needs, and having some shared storage (nfs/smb/nas or even some kind of sync) might be a better solution.

Regards,
Sebastian

On Wednesday, March 25, 2020 10:02 CET, Stefan Bogdan Cimpeanu <bo...@cimpeanu.org> wrote:
  This is a good topic though… we’ve also set up using /some/path/${GUAC_USERNAME} but facing the following issue: given we’ve multiple guacamole servers behind load balancers, users don’t always hit the same instance, hence their data is not available.Any way to set some sort of affinity at user level? The alternative would be to use network mounts for the users directories, but we’d want to avoid that. Regards,Bogdan On 25 Mar 2020, at 07:25, Sebastian Männling <se...@qubestack.org> wrote: Hi, you can use ${GUAC_USERNAME} See https://guacamole.apache.org/doc/gug/configuring-guacamole.html#parameter-tokens

Regarding the /tmp directory, keep in mind that there are automatic cleanup jobs and usually iirc /tmp is tmpfs (ram) in fedora.
 Sent from my iPhone On 25. Mar 2020, at 03:50, Chris Lee <ch...@centurycity.com.hk> wrote:
 Hi All,

 I am setup the Apache Guacamole 1.1.0 on Fedora Linux with AD Auth against with MS AD which using MySQL database as backend.

 For RDP Virtual Disk Drive setting, any recommendation for setup Drive Path for all AD users without share the same path?

 
 <image001.png>
 
 For example:

 AD user ID           Drive Path:

 David                     /tmp/share-drive/david
Peter                     /tmp/share-drive/peter

 Also, it is safe to set it on /tmp folder or other folder?

 Many thanks in advance.

 Regards,
Chris

  This message and its attachment (if any) are strictly confidential and sent to the designated recipient(s) only. If you are not the intended recipient, please notify the sender by e-mail and delete this message and its attachment (if any) from your computer system immediately . Century City International Holdings Limited, Paliburg Holdings Limited, Regal Hotels International Holdings Limited, its respective related subsidiaries, associated companies and affiliates do not guarantee this message and its attachment (if any) are free of computer virus and would not accept any liability whatsoever arising from Internet transmission.
 

Re: Best Settings for RDP virtual disk drive

Posted by Stefan Bogdan Cimpeanu <bo...@cimpeanu.org>.
This is a good topic though… we’ve also set up using /some/path/${GUAC_USERNAME} but facing the following issue: given we’ve multiple guacamole servers behind load balancers, users don’t always hit the same instance, hence their data is not available.
Any way to set some sort of affinity at user level?

The alternative would be to use network mounts for the users directories, but we’d want to avoid that.

Regards,
Bogdan

> On 25 Mar 2020, at 07:25, Sebastian Männling <se...@qubestack.org> wrote:
> 
> Hi,
> 
> you can use ${GUAC_USERNAME}
> 
> See https://guacamole.apache.org/doc/gug/configuring-guacamole.html#parameter-tokens <https://guacamole.apache.org/doc/gug/configuring-guacamole.html#parameter-tokens>
> 
> Regarding the /tmp directory, keep in mind that there are automatic cleanup jobs and usually iirc /tmp is tmpfs (ram) in fedora.
> 
> Sent from my iPhone
> 
>> On 25. Mar 2020, at 03:50, Chris Lee <ch...@centurycity.com.hk> wrote:
>> 
>> 
>> Hi All,
>>  
>> I am setup the Apache Guacamole 1.1.0 on Fedora Linux with AD Auth against with MS AD which using MySQL database as backend.
>>  
>> For RDP Virtual Disk Drive setting, any recommendation for setup Drive Path for all AD users without share the same path?
>>  
>> <image001.png>
>> 
>>  
>> For example:
>>  
>> AD user ID           Drive Path:
>>  
>> David                     /tmp/share-drive/david
>> Peter                     /tmp/share-drive/peter
>>  
>> Also, it is safe to set it on /tmp folder or other folder?
>>  
>> Many thanks in advance.
>>  
>> Regards,
>> Chris
>>  
>> 
>> 
>> This message and its attachment (if any) are strictly confidential and sent to the designated recipient(s) only. If you are not the intended recipient, please notify the sender by e-mail and delete this message and its attachment (if any) from your computer system immediately . Century City International Holdings Limited, Paliburg Holdings Limited, Regal Hotels International Holdings Limited, its respective related subsidiaries, associated companies and affiliates do not guarantee this message and its attachment (if any) are free of computer virus and would not accept any liability whatsoever arising from Internet transmission.


Re: Best Settings for RDP virtual disk drive

Posted by Sebastian Männling <se...@qubestack.org>.
Hi,

you can use ${GUAC_USERNAME}

See https://guacamole.apache.org/doc/gug/configuring-guacamole.html#parameter-tokens

Regarding the /tmp directory, keep in mind that there are automatic cleanup jobs and usually iirc /tmp is tmpfs (ram) in fedora.

Sent from my iPhone

> On 25. Mar 2020, at 03:50, Chris Lee <ch...@centurycity.com.hk> wrote:
> 
> 
> Hi All,
>  
> I am setup the Apache Guacamole 1.1.0 on Fedora Linux with AD Auth against with MS AD which using MySQL database as backend.
>  
> For RDP Virtual Disk Drive setting, any recommendation for setup Drive Path for all AD users without share the same path?
>  
> <image001.png>
>  
> For example:
>  
> AD user ID           Drive Path:
>  
> David                     /tmp/share-drive/david
> Peter                     /tmp/share-drive/peter
>  
> Also, it is safe to set it on /tmp folder or other folder?
>  
> Many thanks in advance.
>  
> Regards,
> Chris
>  
> 
> 
> This message and its attachment (if any) are strictly confidential and sent to the designated recipient(s) only. If you are not the intended recipient, please notify the sender by e-mail and delete this message and its attachment (if any) from your computer system immediately . Century City International Holdings Limited, Paliburg Holdings Limited, Regal Hotels International Holdings Limited, its respective related subsidiaries, associated companies and affiliates do not guarantee this message and its attachment (if any) are free of computer virus and would not accept any liability whatsoever arising from Internet transmission.