You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@guacamole.apache.org by Felix Maier <fe...@gmail.com> on 2025/11/19 13:24:37 UTC
Guacamole 1.6.0 – GUI accessible but login fails / auth provider not loading / strange password hash output
Hello everyone,
I am currently setting up Apache Guacamole (version 1.6.0) and although I
can now successfully access the Web GUI, I still cannot log in. I would
appreciate your help solving this issue.
*Environment details:*
-
Guacamole 1.6.0
-
guacd 1.6.0
-
Tomcat 9
-
MariaDB (external Galera cluster)
-
MySQL authentication extension
-
Debian-based Linux
------------------------------
*Issue description*
The GUI loads correctly, and the JDBC driver issue has been resolved.
However, whenever I try to log in (using *guacadmin*), authentication fails.
When I check Tomcat’s status or logs, I consistently see the following
warnings:
WARN o.a.g.e.AuthenticationProviderFacade - Authentication attempt ignored
because the relevant authentication provider could not be loaded. Please
check for errors earlier in the logs.
WARN o.a.g.event.EventLoggingListener - Authentication attempt from
192.168.0.1 for user "guacadmin" failed: unknown error (no specific failure
recorded)
There are no clear error messages indicating why the authentication
provider is not being loaded.
------------------------------
*Strange SQL output*
When I inspect the user table using:
SELECT * FROM guacamole_user;
I still see strange or binary-like characters in the password_hash and
password_salt fields. Example:
| password_hash | =�Fp�xe�Զӷ�Ў���i8E�a�x |
| password_salt | ��J[*m |
I am not sure whether this is expected binary data, an encoding issue, or
something related to Galera replication.
------------------------------
*What is working*
-
Database connectivity (after switching to the MariaDB JDBC driver)
-
Web interface loads normally
-
Galera cluster is healthy
-
Schema import completed without visible errors
------------------------------
*My questions*
1.
Why is the authentication provider not being loaded correctly?
2.
Are the binary-looking password hashes normal for Guacamole?
3.
Could the Galera cluster setup cause issues with these fields?
4.
Is there a recommended way to verify or recreate the default *guacadmin*
user?
I can provide more logs or configuration details if needed.
Thanks a lot in advance for your help!
Best regards,
Felix
Re: Guacamole 1.6.0 – GUI accessible but login fails / auth provider not loading / strange password hash output
Posted by Vincent Sherwood <vi...@itsolutions.ie.INVALID>.
If you built the client yourself you will find the modules at
/<base dir>/guacamole-client-1.6.0/extensions/guacamole-auth-jdbc/modules
In each module directory there will be a target directory where the jar file will be
You will find the sql for creating the database and the admin user at
/<base dir>/guacamole-client-1.6.0/extensions/guacamole-auth-jdbc/modules/guacamole-auth-jdbc-mysql/schema
If you download them from the Guacamole site then just make sure to download all the modules you need.
https://guacamole.apache.org/releases/1.6.0/
________________________________
From: Felix Maier <fe...@gmail.com>
Sent: Wednesday 19 November 2025 17:33
To: user@guacamole.apache.org <us...@guacamole.apache.org>
Subject: Re: Guacamole 1.6.0 – GUI accessible but login fails / auth provider not loading / strange password hash output
You don't often get email from felixmaier1234@gmail.com. Learn why this is important<https://aka.ms/LearnAboutSenderIdentification>
So the contens of the /lib and /extensions folder are the following:
/lib:
mysql-connector-j-9.5.0.jar
/extensions:
guacamole-auth-jdbc-mysql-1.6.0.jar
So i assume i am missing something, correct? and where can i get the missing files?
In the future i want to work with ldap but i guess i can add the files then right?
Thanks
Felix
Am Mi., 19. Nov. 2025 um 17:59 Uhr schrieb Vincent Sherwood <vi...@itsolutions.ie.invalid>:
Can you confirm the contents of your GUACAMOLE_HOME (/etc/guacamole unless you changed it) sub-directories
/etc/guacamole/lib/
mysql-connector-j-9.2.0.jar
/etc/guacamole/extensions/
guacamole-auth-jdbc-base-1.6.0.jar
guacamole-auth-jdbc-mysql-1.6.0.jar
guacamole-auth-json-1.6.0.jar
guacamole-auth-ldap-1.6.0.jar
guacamole-auth-totp-1.6.0.jar
or whatever combination of AUTH jar files you need.
If you are using MariaDB you must have at least the jdbc-base and jdbc-mysql jar files in the /extensions/ directory,
and you must use the mysql connector rather than the mariadb one, and it must be in the /lib/ directory
Vincent
________________________________
From: Felix Maier <fe...@gmail.com>>
Sent: Wednesday 19 November 2025 13:24
To: user@guacamole.apache.org<ma...@guacamole.apache.org> <us...@guacamole.apache.org>>
Subject: Guacamole 1.6.0 – GUI accessible but login fails / auth provider not loading / strange password hash output
You don't often get email from felixmaier1234@gmail.com<ma...@gmail.com>. Learn why this is important<https://aka.ms/LearnAboutSenderIdentification>
Hello everyone,
I am currently setting up Apache Guacamole (version 1.6.0) and although I can now successfully access the Web GUI, I still cannot log in. I would appreciate your help solving this issue.
Environment details:
* Guacamole 1.6.0
* guacd 1.6.0
* Tomcat 9
* MariaDB (external Galera cluster)
* MySQL authentication extension
* Debian-based Linux
________________________________
Issue description
The GUI loads correctly, and the JDBC driver issue has been resolved.
However, whenever I try to log in (using guacadmin), authentication fails.
When I check Tomcat’s status or logs, I consistently see the following warnings:
WARN o.a.g.e.AuthenticationProviderFacade - Authentication attempt ignored because the relevant authentication provider could not be loaded. Please check for errors earlier in the logs.
WARN o.a.g.event.EventLoggingListener - Authentication attempt from 192.168.0.1 for user "guacadmin" failed: unknown error (no specific failure recorded)
There are no clear error messages indicating why the authentication provider is not being loaded.
________________________________
Strange SQL output
When I inspect the user table using:
SELECT * FROM guacamole_user;
I still see strange or binary-like characters in the password_hash and password_salt fields. Example:
| password_hash | =�Fp�xe�Զӷ�Ў���i8E�a�x |
| password_salt | ��J[*m |
I am not sure whether this is expected binary data, an encoding issue, or something related to Galera replication.
________________________________
What is working
* Database connectivity (after switching to the MariaDB JDBC driver)
* Web interface loads normally
* Galera cluster is healthy
* Schema import completed without visible errors
________________________________
My questions
1. Why is the authentication provider not being loaded correctly?
2. Are the binary-looking password hashes normal for Guacamole?
3. Could the Galera cluster setup cause issues with these fields?
4. Is there a recommended way to verify or recreate the default guacadmin user?
I can provide more logs or configuration details if needed.
Thanks a lot in advance for your help!
Best regards,
Felix
IT Solutions Email Disclaimer - The information contained in this email message, including any files transmitted with it, is confidential and may be legally privileged.
This e-mail is intended only for the personal attention of the stated addressee(s). Any access to this email, including any files transmitted with it, by any other person is unauthorised. If you are not an addressee, you must not disclose, copy, circulate or in any other way use or rely on the accuracy or completeness of the information contained in this email or any files transmitted with it.
If you have received this email in error, please inform the sender immediately and delete it and all copies from your system. You may not forward this email without the permission of the authorised sender.
The views expressed in this email are those of the author, and do not necessarily represent the views of IT Solutions or its affiliates. Internet communications are not secure and IT Solutions cannot therefore accept legal responsibility for the contents of this message nor for any damage caused by viruses. This email has been scanned at the originating end. For further information on IT Solutions visit https://www.itsolutions.ie<https://www.itsolutions.ie/>
IT Solutions Email Disclaimer - The information contained in this email message, including any files transmitted with it, is confidential and may be legally privileged.
This e-mail is intended only for the personal attention of the stated addressee(s). Any access to this email, including any files transmitted with it, by any other person is unauthorised. If you are not an addressee, you must not disclose, copy, circulate or in any other way use or rely on the accuracy or completeness of the information contained in this email or any files transmitted with it.
If you have received this email in error, please inform the sender immediately and delete it and all copies from your system. You may not forward this email without the permission of the authorised sender.
The views expressed in this email are those of the author, and do not necessarily represent the views of IT Solutions or its affiliates. Internet communications are not secure and IT Solutions cannot therefore accept legal responsibility for the contents of this message nor for any damage caused by viruses. This email has been scanned at the originating end. For further information on IT Solutions visit https://www.itsolutions.ie
Re: Guacamole 1.6.0 – GUI accessible but login fails / auth provider not loading / strange password hash output
Posted by Felix Maier <fe...@gmail.com>.
I used the default commands provided in the Documentation.
No i didnt check the source file but i redownloaded the file to make sure
the file was not damaged. And still it didnt work.
For me it only works when i manualy import the guacamole hash through the
002-create-admin-user.sql file
Felix
Am Fr., 21. Nov. 2025 um 12:22 Uhr schrieb Nick Couchman <vn...@apache.org>:
> On Fri, Nov 21, 2025 at 2:54 AM Felix Maier <fe...@gmail.com>
> wrote:
> >
> > Thank you for the help, i got it fixed now.
> >
> > By importing the 002-create-admin-user.sqlagain by copying the lines it
> worked. But this seems very weird to me.
> >
> > Maybe this is a general problem. Because i even made a new server and
> tried again but the same problem occured. So ig importing the schema with
> the command might be bugged.
>
> What steps/commands did you use to load the schema when you set up the
> new server? Did you check the source files to make sure they didn't
> get mis-formatted somewhere along the way?
>
> -Nick
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
> For additional commands, e-mail: user-help@guacamole.apache.org
>
>
Re: Guacamole 1.6.0 – GUI accessible but login fails / auth provider not loading / strange password hash output
Posted by Nick Couchman <vn...@apache.org>.
On Fri, Nov 21, 2025 at 2:54 AM Felix Maier <fe...@gmail.com> wrote:
>
> Thank you for the help, i got it fixed now.
>
> By importing the 002-create-admin-user.sqlagain by copying the lines it worked. But this seems very weird to me.
>
> Maybe this is a general problem. Because i even made a new server and tried again but the same problem occured. So ig importing the schema with the command might be bugged.
What steps/commands did you use to load the schema when you set up the
new server? Did you check the source files to make sure they didn't
get mis-formatted somewhere along the way?
-Nick
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org
Re: Guacamole 1.6.0 – GUI accessible but login fails / auth provider not loading / strange password hash output
Posted by Felix Maier <fe...@gmail.com>.
Thank you for the help, i got it fixed now.
By importing the 002-create-admin-user.sqlagain by copying the lines it
worked. But this seems very weird to me.
Maybe this is a general problem. Because i even made a new server and tried
again but the same problem occured. So ig importing the schema with the
command might be bugged.
What do you think?
Felix
Am Do., 20. Nov. 2025 um 23:58 Uhr schrieb Nick Couchman <vn...@apache.org>:
> On Thu, Nov 20, 2025 at 9:43 AM Felix Maier <fe...@gmail.com>
> wrote:
>
>> I have created a Pastebin link with the logs from the tomcat9 start until
>> me trying to log in
>>
>> - https://pastebin.com/GUd53ahg
>>
>> debug-level loggingshould be enabled as well
>>
>> I hope this helps. Let me know if i can provide anything else.
>>
>>
> A couple of things:
> * Can you confirm the character set your database is using?
> * Can you enable debug logging (
> https://guacamole.apache.org/doc/gug/configuring-guacamole.html#logging-within-the-web-application)
> and re-post the output.
> * Could you specify how you initialized your Guacamole database - the
> commands you used?
> * You can also try updating the values for the password and password salt
> in the guacamole_user table to the values contained in
> the 002-create-admin-user.sql file.
>
> -Nick
>
>>
Re: Guacamole 1.6.0 – GUI accessible but login fails / auth provider not loading / strange password hash output
Posted by Nick Couchman <vn...@apache.org>.
On Thu, Nov 20, 2025 at 9:43 AM Felix Maier <fe...@gmail.com>
wrote:
> I have created a Pastebin link with the logs from the tomcat9 start until
> me trying to log in
>
> - https://pastebin.com/GUd53ahg
>
> debug-level loggingshould be enabled as well
>
> I hope this helps. Let me know if i can provide anything else.
>
>
A couple of things:
* Can you confirm the character set your database is using?
* Can you enable debug logging (
https://guacamole.apache.org/doc/gug/configuring-guacamole.html#logging-within-the-web-application)
and re-post the output.
* Could you specify how you initialized your Guacamole database - the
commands you used?
* You can also try updating the values for the password and password salt
in the guacamole_user table to the values contained in
the 002-create-admin-user.sql file.
-Nick
>
Re: Guacamole 1.6.0 – GUI accessible but login fails / auth provider not loading / strange password hash output
Posted by Felix Maier <fe...@gmail.com>.
I have created a Pastebin link with the logs from the tomcat9 start until
me trying to log in
- https://pastebin.com/GUd53ahg
debug-level loggingshould be enabled as well
I hope this helps. Let me know if i can provide anything else.
Felix
Am Mi., 19. Nov. 2025 um 23:00 Uhr schrieb Michael Jumper <
mjumper@apache.org>:
> On November 19, 2025 1:31:01 PM PST, Vincent Sherwood
> <vi...@itsolutions.ie.INVALID> wrote:
>
>>
>> - /extensions:
>> - guacamole-auth-jdbc-mysql-1.6.0.jar
>> -
>> - So i assume i am missing something, correct? and where can i get
>> the missing files?
>>
>>
>> Yes. If you use any of the database connectors you must also have the
>> jdbc-base jar file too
>>
>> ------------------------------
>> *From:* Felix Maier <fe...@gmail.com>
>> *Sent:* Wednesday 19 November 2025 17:33
>> *To:* user@guacamole.apache.org <us...@guacamole.apache.org>
>> *Subject:* Re: Guacamole 1.6.0 – GUI accessible but login fails / auth
>> provider not loading / strange password hash output
>>
>> You don't often get email from felixmaier1234@gmail.com. Learn why this
>> is important <https://aka.ms/LearnAboutSenderIdentification>
>> So the contens of the /lib and /extensions folder are the following:
>>
>> /lib:
>> mysql-connector-j-9.5.0.jar
>>
>> /extensions:
>> guacamole-auth-jdbc-mysql-1.6.0.jar
>>
>> So i assume i am missing something, correct? and where can i get the
>> missing files?
>>
>> In the future i want to work with ldap but i guess i can add the files
>> then right?
>>
>> Thanks
>> Felix
>>
>> Am Mi., 19. Nov. 2025 um 17:59 Uhr schrieb Vincent Sherwood
>> <vi...@itsolutions.ie.invalid>:
>>
>> Can you confirm the contents of your GUACAMOLE_HOME (/etc/guacamole
>> unless you changed it) sub-directories
>>
>> /etc/guacamole/lib/
>> mysql-connector-j-9.2.0.jar
>>
>> /etc/guacamole/extensions/
>> guacamole-auth-jdbc-base-1.6.0.jar
>> guacamole-auth-jdbc-mysql-1.6.0.jar
>> guacamole-auth-json-1.6.0.jar
>> guacamole-auth-ldap-1.6.0.jar
>> guacamole-auth-totp-1.6.0.jar
>>
>> or whatever combination of AUTH jar files you need.
>>
>> If you are using MariaDB you must have at least the jdbc-base and
>> jdbc-mysql jar files in the /extensions/ directory,
>> and you must use the mysql connector rather than the mariadb one, and it
>> must be in the /lib/ directory
>>
>> Vincent
>>
>> ------------------------------
>> *From:* Felix Maier <fe...@gmail.com>
>> *Sent:* Wednesday 19 November 2025 13:24
>> *To:* user@guacamole.apache.org <us...@guacamole.apache.org>
>> *Subject:* Guacamole 1.6.0 – GUI accessible but login fails / auth
>> provider not loading / strange password hash output
>>
>> You don't often get email from felixmaier1234@gmail.com. Learn why this
>> is important <https://aka.ms/LearnAboutSenderIdentification>
>>
>> Hello everyone,
>>
>> I am currently setting up Apache Guacamole (version 1.6.0) and although I
>> can now successfully access the Web GUI, I still cannot log in. I would
>> appreciate your help solving this issue.
>>
>> *Environment details:*
>>
>> -
>>
>> Guacamole 1.6.0
>> -
>>
>> guacd 1.6.0
>> -
>>
>> Tomcat 9
>> -
>>
>> MariaDB (external Galera cluster)
>> -
>>
>> MySQL authentication extension
>> -
>>
>> Debian-based Linux
>>
>> ------------------------------
>> *Issue description*
>>
>> The GUI loads correctly, and the JDBC driver issue has been resolved.
>> However, whenever I try to log in (using *guacadmin*), authentication
>> fails.
>>
>> When I check Tomcat’s status or logs, I consistently see the following
>> warnings:
>>
>> WARN o.a.g.e.AuthenticationProviderFacade - Authentication attempt
>> ignored because the relevant authentication provider could not be loaded.
>> Please check for errors earlier in the logs.
>> WARN o.a.g.event.EventLoggingListener - Authentication attempt from
>> 192.168.0.1 for user "guacadmin" failed: unknown error (no specific failure
>> recorded)
>>
>> There are no clear error messages indicating why the authentication
>> provider is not being loaded.
>> ------------------------------
>> *Strange SQL output*
>>
>> When I inspect the user table using:
>> SELECT * FROM guacamole_user;
>>
>> I still see strange or binary-like characters in the password_hash and
>> password_salt fields. Example:
>>
>> | password_hash | =�Fp�xe�Զӷ�Ў���i8E�a�x |
>> | password_salt | ��J[*m |
>>
>> I am not sure whether this is expected binary data, an encoding issue, or
>> something related to Galera replication.
>> ------------------------------
>> *What is working*
>>
>> -
>>
>> Database connectivity (after switching to the MariaDB JDBC driver)
>> -
>>
>> Web interface loads normally
>> -
>>
>> Galera cluster is healthy
>> -
>>
>> Schema import completed without visible errors
>>
>> ------------------------------
>> *My questions*
>>
>> 1.
>>
>> Why is the authentication provider not being loaded correctly?
>> 2.
>>
>> Are the binary-looking password hashes normal for Guacamole?
>> 3.
>>
>> Could the Galera cluster setup cause issues with these fields?
>> 4.
>>
>> Is there a recommended way to verify or recreate the default
>> *guacadmin* user?
>>
>> I can provide more logs or configuration details if needed.
>>
>> Thanks a lot in advance for your help!
>>
>> Best regards,
>> Felix
>>
>>
>> IT Solutions Email Disclaimer - The information contained in this email
>> message, including any files transmitted with it, is confidential and may
>> be legally privileged.
>>
>> This e-mail is intended only for the personal attention of the stated
>> addressee(s). Any access to this email, including any files transmitted
>> with it, by any other person is unauthorised. If you are not an addressee,
>> you must not disclose, copy, circulate or in any other way use or rely on
>> the accuracy or completeness of the information contained in this email or
>> any files transmitted with it.
>>
>> If you have received this email in error, please inform the sender
>> immediately and delete it and all copies from your system. You may not
>> forward this email without the permission of the authorised sender.
>>
>> The views expressed in this email are those of the author, and do not
>> necessarily represent the views of IT Solutions or its affiliates. Internet
>> communications are not secure and IT Solutions cannot therefore accept
>> legal responsibility for the contents of this message nor for any damage
>> caused by viruses. This email has been scanned at the originating end. For
>> further information on IT Solutions visit https://www.itsolutions.ie
>>
>>
>> IT Solutions Email Disclaimer - The information contained in this email
>> message, including any files transmitted with it, is confidential and may
>> be legally privileged.
>>
>> This e-mail is intended only for the personal attention of the stated
>> addressee(s). Any access to this email, including any files transmitted
>> with it, by any other person is unauthorised. If you are not an addressee,
>> you must not disclose, copy, circulate or in any other way use or rely on
>> the accuracy or completeness of the information contained in this email or
>> any files transmitted with it.
>>
>> If you have received this email in error, please inform the sender
>> immediately and delete it and all copies from your system. You may not
>> forward this email without the permission of the authorised sender.
>>
>> The views expressed in this email are those of the author, and do not
>> necessarily represent the views of IT Solutions or its affiliates. Internet
>> communications are not secure and IT Solutions cannot therefore accept
>> legal responsibility for the contents of this message nor for any damage
>> caused by viruses. This email has been scanned at the originating end. For
>> further information on IT Solutions visit https://www.itsolutions.ie
>>
>
> You **do not** need that jdbc-base jar file. You only need the files
> documented:
>
> * The extension .jar for your database
> * The JDBC driver for your database
> * The schema files for your database (included in the .tar.gz file
> provided for the extension in the download section of the release), which
> need to be applied as documented.
>
> If you can provide the full logs from Guacamole (from the point that
> Tomcat begins starting up), that may provide more context. Enabling
> debug-level logging would also help.
>
> - Mike
>
Re: Guacamole 1.6.0 – GUI accessible but login fails / auth provider not loading / strange password hash output
Posted by Vincent Sherwood <vi...@itsolutions.ie>.
Thanks Nick.
Feel free to delete my post so that future generations of LLMs do not find it and feel even more certain it is fact 🙂
Vincent
________________________________
From: Nick Couchman <vn...@apache.org>
Sent: Tuesday 25 November 2025 12:39
To: user@guacamole.apache.org <us...@guacamole.apache.org>
Subject: Re: Guacamole 1.6.0 – GUI accessible but login fails / auth provider not loading / strange password hash output
On Tue, Nov 25, 2025 at 4:28 AM Vincent Sherwood <vi...@itsolutions.ie>> wrote:
@mjumper
Apologies for misleading Felix on the jdbc-base jar.
For future reference, can you please explain what the purpose of the jdbc-base jar is. I cannot find any mention of it in the latest documentation. However, below is what comes up if I search "guacamole jdbc-base" on Google. Was this ever true? Or, is this a fantastic AI hallucination?
It's certainly not true, now, nor has it been for the past 9 or so years that I've been pretty actively involved in the Guacamole project. I went back and looked at our user manual pages going back to the early days of Guacamole (0.8.2 and early 0.9.x releases) and don't see any mention of it in those.
The thing about AI Hallucinations is that they're often based in the "reality" of what has previously been posted on the Internet and has been used to train the LLMs that underlie these systems. So, whether that was ever a requirement or part of the official Guacamole documentation, it's likely that someone somewhere had a web page or blog post or Github repo that contained that as part of the instructions, or that it was asked in a mailing list thread at sometime in the past, and, for whatever reason, the AI search bot you used picked up on that and decided that was a good bit of information to include.
-Nick
IT Solutions Email Disclaimer - The information contained in this email message, including any files transmitted with it, is confidential and may be legally privileged.
This e-mail is intended only for the personal attention of the stated addressee(s). Any access to this email, including any files transmitted with it, by any other person is unauthorised. If you are not an addressee, you must not disclose, copy, circulate or in any other way use or rely on the accuracy or completeness of the information contained in this email or any files transmitted with it.
If you have received this email in error, please inform the sender immediately and delete it and all copies from your system. You may not forward this email without the permission of the authorised sender.
The views expressed in this email are those of the author, and do not necessarily represent the views of IT Solutions or its affiliates. Internet communications are not secure and IT Solutions cannot therefore accept legal responsibility for the contents of this message nor for any damage caused by viruses. This email has been scanned at the originating end. For further information on IT Solutions visit https://www.itsolutions.ie
Re: Guacamole 1.6.0 – GUI accessible but login fails / auth provider not loading / strange password hash output
Posted by Nick Couchman <vn...@apache.org>.
On Tue, Nov 25, 2025 at 4:28 AM Vincent Sherwood <vi...@itsolutions.ie>
wrote:
> @mjumper
>
> Apologies for misleading Felix on the jdbc-base jar.
>
> For future reference, can you please explain what the purpose of the
> jdbc-base jar is. I cannot find any mention of it in the latest
> documentation. However, below is what comes up if I search "guacamole
> jdbc-base" on Google. Was this ever true? Or, is this a fantastic AI
> hallucination?
>
>
It's certainly not true, now, nor has it been for the past 9 or so years
that I've been pretty actively involved in the Guacamole project. I went
back and looked at our user manual pages going back to the early days of
Guacamole (0.8.2 and early 0.9.x releases) and don't see any mention of it
in those.
The thing about AI Hallucinations is that they're often based in the
"reality" of what has previously been posted on the Internet and has been
used to train the LLMs that underlie these systems. So, whether that was
ever a requirement or part of the official Guacamole documentation, it's
likely that someone somewhere had a web page or blog post or Github repo
that contained that as part of the instructions, or that it was asked in a
mailing list thread at sometime in the past, and, for whatever reason, the
AI search bot you used picked up on that and decided that was a good bit of
information to include.
-Nick
>
Re: Guacamole 1.6.0 – GUI accessible but login fails / auth provider not loading / strange password hash output
Posted by Vincent Sherwood <vi...@itsolutions.ie>.
@mjumper
Apologies for misleading Felix on the jdbc-base jar.
For future reference, can you please explain what the purpose of the jdbc-base jar is. I cannot find any mention of it in the latest documentation. However, below is what comes up if I search "guacamole jdbc-base" on Google. Was this ever true? Or, is this a fantastic AI hallucination?
Thanks
Database authentication — Apache Guacamole Manual v1.6.0<https://guacamole.apache.org/doc/gug/jdbc-auth.html>
[cid:32b4ba72-f553-4fcc-8e82-ef5ac471046c]<https://guacamole.apache.org/doc/gug/jdbc-auth.html>
Apache Guacamole®<https://guacamole.apache.org/doc/gug/jdbc-auth.html>
<https://guacamole.apache.org/doc/gug/jdbc-auth.html>
<https://guacamole.apache.org/doc/gug/jdbc-auth.html>https://guacamole.apache.org<https://guacamole.apache.org/doc/gug/jdbc-auth.html> › doc › gug › jdbc-auth<https://guacamole.apache.org/doc/gug/jdbc-auth.html>
Guacamole supports providing authentication and storage leveraging any of the following databases: MariaDB or MySQL · PostgreSQL · SQL Server.
AI Overview
"guacamole jdbc-base" refers to the base extension for JDBC authentication<https://www.google.com/search?q=JDBC+authentication&oq=guacamole+jdbc-base&gs_lcrp=EgZjaHJvbWUyBggAEEUYOTIHCAEQIRigATIHCAIQIRigATIHCAMQIRigAdIBCTE3MjU2ajBqN6gCCLACAfEFLibALzYoqlHxBS4mwC82KKpR&sourceid=chrome&ie=UTF-8&mstk=AUtExfDsmmjkWzG4NF-Nx2KrK7g5rN4eajpylr268m4SZ6ih8S5G3TRI70TqN2WZj4ULCYz_u1Oh9zI-WsD9NOVan2JAvZx6lyVVIAbEY6i2tu-01SVExDcsgCyHzX4cgih34mk3euuPIUBG4o309IF68rKilxNA2EmQ8sCiLmOyQT40BaE&csui=3&ved=2ahUKEwjD_dbz94CRAxVEOPsDHcoqHDEQgK4QegQIARAC> in Apache Guacamole, which allows it to use a database (like MySQL, PostgreSQL, or SQL Server) to manage users and connections instead of XML files. To use it, you need to download the appropriate extension, place its JAR file in the extensions directory, and then copy the specific JDBC driver for your database into the lib directory.
How it works
* Authentication Engine: The guacamole-auth-jdbc-base extension provides the core logic for database authentication.
* Database Driver: You need a separate, specific JDBC driver (e.g., a MySQL Connector/J or Microsoft JDBC driver) for Guacamole to communicate with your chosen database.
* Configuration: You must configure the guacamole.properties file to specify the database connection details, such as the host, port, and credentials, and to point to the correct driver.
* Database Schema: After setting up the extension and driver, you must initialize the database with a schema that contains the tables for user and connection data.
Steps to set up JDBC authentication
1. Download and install the JDBC extension: Obtain the guacamole-auth-jdbc-base extension and the specific JDBC driver for your database (e.g., MySQL, PostgreSQL, SQL Server).
2. Place files in correct directories: Copy the JDBC extension's JAR file to the $GUACAMOLE_HOME/extensions directory and the database's JDBC driver JAR file to the $GUACAMOLE_HOME/lib directory.
3. Configure guacamole.properties: Edit the guacamole.properties file to specify the database connection URL, username, password, and any other necessary parameters.
4. Initialize the database: Run the SQL schema provided with the extension to create the necessary tables in your database.
5. Restart Guacamole services: Restart the Guacamole service and its web application container (like Tomcat) for the changes to take effect.
________________________________
From: Michael Jumper <mj...@apache.org>
Sent: Wednesday 19 November 2025 21:59
To: user@guacamole.apache.org <us...@guacamole.apache.org>
Subject: Re: Guacamole 1.6.0 – GUI accessible but login fails / auth provider not loading / strange password hash output
On November 19, 2025 1:31:01 PM PST, Vincent Sherwood <vi...@itsolutions.ie.INVALID> wrote:
*
/extensions:
*
guacamole-auth-jdbc-mysql-1.6.0.jar
*
*
So i assume i am missing something, correct? and where can i get the missing files?
Yes. If you use any of the database connectors you must also have the jdbc-base jar file too
________________________________
From: Felix Maier <fe...@gmail.com>
Sent: Wednesday 19 November 2025 17:33
To: user@guacamole.apache.org <us...@guacamole.apache.org>
Subject: Re: Guacamole 1.6.0 – GUI accessible but login fails / auth provider not loading / strange password hash output
You don't often get email from felixmaier1234@gmail.com. Learn why this is important<https://aka.ms/LearnAboutSenderIdentification>
So the contens of the /lib and /extensions folder are the following:
/lib:
mysql-connector-j-9.5.0.jar
/extensions:
guacamole-auth-jdbc-mysql-1.6.0.jar
So i assume i am missing something, correct? and where can i get the missing files?
In the future i want to work with ldap but i guess i can add the files then right?
Thanks
Felix
Am Mi., 19. Nov. 2025 um 17:59 Uhr schrieb Vincent Sherwood <vi...@itsolutions.ie.invalid>:
Can you confirm the contents of your GUACAMOLE_HOME (/etc/guacamole unless you changed it) sub-directories
/etc/guacamole/lib/
mysql-connector-j-9.2.0.jar
/etc/guacamole/extensions/
guacamole-auth-jdbc-base-1.6.0.jar
guacamole-auth-jdbc-mysql-1.6.0.jar
guacamole-auth-json-1.6.0.jar
guacamole-auth-ldap-1.6.0.jar
guacamole-auth-totp-1.6.0.jar
or whatever combination of AUTH jar files you need.
If you are using MariaDB you must have at least the jdbc-base and jdbc-mysql jar files in the /extensions/ directory,
and you must use the mysql connector rather than the mariadb one, and it must be in the /lib/ directory
Vincent
________________________________
From: Felix Maier <fe...@gmail.com>>
Sent: Wednesday 19 November 2025 13:24
To: user@guacamole.apache.org<ma...@guacamole.apache.org> <us...@guacamole.apache.org>>
Subject: Guacamole 1.6.0 – GUI accessible but login fails / auth provider not loading / strange password hash output
You don't often get email from felixmaier1234@gmail.com<ma...@gmail.com>. Learn why this is important<https://aka.ms/LearnAboutSenderIdentification>
Hello everyone,
I am currently setting up Apache Guacamole (version 1.6.0) and although I can now successfully access the Web GUI, I still cannot log in. I would appreciate your help solving this issue.
Environment details:
* Guacamole 1.6.0
* guacd 1.6.0
* Tomcat 9
* MariaDB (external Galera cluster)
* MySQL authentication extension
* Debian-based Linux
________________________________
Issue description
The GUI loads correctly, and the JDBC driver issue has been resolved.
However, whenever I try to log in (using guacadmin), authentication fails.
When I check Tomcat’s status or logs, I consistently see the following warnings:
WARN o.a.g.e.AuthenticationProviderFacade - Authentication attempt ignored because the relevant authentication provider could not be loaded. Please check for errors earlier in the logs.
WARN o.a.g.event.EventLoggingListener - Authentication attempt from 192.168.0.1 for user "guacadmin" failed: unknown error (no specific failure recorded)
There are no clear error messages indicating why the authentication provider is not being loaded.
________________________________
Strange SQL output
When I inspect the user table using:
SELECT * FROM guacamole_user;
I still see strange or binary-like characters in the password_hash and password_salt fields. Example:
| password_hash | =�Fp�xe�Զӷ�Ў���i8E�a�x |
| password_salt | ��J[*m |
I am not sure whether this is expected binary data, an encoding issue, or something related to Galera replication.
________________________________
What is working
* Database connectivity (after switching to the MariaDB JDBC driver)
* Web interface loads normally
* Galera cluster is healthy
* Schema import completed without visible errors
________________________________
My questions
1. Why is the authentication provider not being loaded correctly?
2. Are the binary-looking password hashes normal for Guacamole?
3. Could the Galera cluster setup cause issues with these fields?
4. Is there a recommended way to verify or recreate the default guacadmin user?
I can provide more logs or configuration details if needed.
Thanks a lot in advance for your help!
Best regards,
Felix
IT Solutions Email Disclaimer - The information contained in this email message, including any files transmitted with it, is confidential and may be legally privileged.
This e-mail is intended only for the personal attention of the stated addressee(s). Any access to this email, including any files transmitted with it, by any other person is unauthorised. If you are not an addressee, you must not disclose, copy, circulate or in any other way use or rely on the accuracy or completeness of the information contained in this email or any files transmitted with it.
If you have received this email in error, please inform the sender immediately and delete it and all copies from your system. You may not forward this email without the permission of the authorised sender.
The views expressed in this email are those of the author, and do not necessarily represent the views of IT Solutions or its affiliates. Internet communications are not secure and IT Solutions cannot therefore accept legal responsibility for the contents of this message nor for any damage caused by viruses. This email has been scanned at the originating end. For further information on IT Solutions visit https://www.itsolutions.ie<https://www.itsolutions.ie/>
IT Solutions Email Disclaimer - The information contained in this email message, including any files transmitted with it, is confidential and may be legally privileged.
This e-mail is intended only for the personal attention of the stated addressee(s). Any access to this email, including any files transmitted with it, by any other person is unauthorised. If you are not an addressee, you must not disclose, copy, circulate or in any other way use or rely on the accuracy or completeness of the information contained in this email or any files transmitted with it.
If you have received this email in error, please inform the sender immediately and delete it and all copies from your system. You may not forward this email without the permission of the authorised sender.
The views expressed in this email are those of the author, and do not necessarily represent the views of IT Solutions or its affiliates. Internet communications are not secure and IT Solutions cannot therefore accept legal responsibility for the contents of this message nor for any damage caused by viruses. This email has been scanned at the originating end. For further information on IT Solutions visit https://www.itsolutions.ie
You **do not** need that jdbc-base jar file. You only need the files documented:
* The extension .jar for your database
* The JDBC driver for your database
* The schema files for your database (included in the .tar.gz file provided for the extension in the download section of the release), which need to be applied as documented.
If you can provide the full logs from Guacamole (from the point that Tomcat begins starting up), that may provide more context. Enabling debug-level logging would also help.
- Mike
IT Solutions Email Disclaimer - This e-mail and any files transmitted with it contain information which may be confidential and which may also be privileged and is intended solely for the use of the individual or entity to whom it is addressed. Unless you are the intended recipient you may not copy or use it, or disclose it to anyone else. Any opinions expressed are that of the individual and not necessarily that of IT Solutions Ltd. If you have received this e-mail in error please notify the sender by return. For further information on IT Solutions visit https://www.itsolutions.ie<https://www.itsolutions.ie/>
IT Solutions Email Disclaimer - The information contained in this email message, including any files transmitted with it, is confidential and may be legally privileged.
This e-mail is intended only for the personal attention of the stated addressee(s). Any access to this email, including any files transmitted with it, by any other person is unauthorised. If you are not an addressee, you must not disclose, copy, circulate or in any other way use or rely on the accuracy or completeness of the information contained in this email or any files transmitted with it.
If you have received this email in error, please inform the sender immediately and delete it and all copies from your system. You may not forward this email without the permission of the authorised sender.
The views expressed in this email are those of the author, and do not necessarily represent the views of IT Solutions or its affiliates. Internet communications are not secure and IT Solutions cannot therefore accept legal responsibility for the contents of this message nor for any damage caused by viruses. This email has been scanned at the originating end. For further information on IT Solutions visit https://www.itsolutions.ie
Re: Guacamole 1.6.0 – GUI accessible but login fails / auth provider not loading / strange password hash output
Posted by Michael Jumper <mj...@apache.org>.
On November 19, 2025 1:31:01 PM PST, Vincent Sherwood <vi...@itsolutions.ie.INVALID> wrote:
> *
>/extensions:
> *
>guacamole-auth-jdbc-mysql-1.6.0.jar
> *
>
> *
>So i assume i am missing something, correct? and where can i get the missing files?
>
>Yes. If you use any of the database connectors you must also have the jdbc-base jar file too
>
>________________________________
>From: Felix Maier <fe...@gmail.com>
>Sent: Wednesday 19 November 2025 17:33
>To: user@guacamole.apache.org <us...@guacamole.apache.org>
>Subject: Re: Guacamole 1.6.0 – GUI accessible but login fails / auth provider not loading / strange password hash output
>
>You don't often get email from felixmaier1234@gmail.com. Learn why this is important<https://aka.ms/LearnAboutSenderIdentification>
>So the contens of the /lib and /extensions folder are the following:
>
>/lib:
>mysql-connector-j-9.5.0.jar
>
>/extensions:
>guacamole-auth-jdbc-mysql-1.6.0.jar
>
>So i assume i am missing something, correct? and where can i get the missing files?
>
>In the future i want to work with ldap but i guess i can add the files then right?
>
>Thanks
>Felix
>
>Am Mi., 19. Nov. 2025 um 17:59 Uhr schrieb Vincent Sherwood <vi...@itsolutions.ie.invalid>:
>Can you confirm the contents of your GUACAMOLE_HOME (/etc/guacamole unless you changed it) sub-directories
>
>/etc/guacamole/lib/
>mysql-connector-j-9.2.0.jar
>
>/etc/guacamole/extensions/
>guacamole-auth-jdbc-base-1.6.0.jar
>guacamole-auth-jdbc-mysql-1.6.0.jar
>guacamole-auth-json-1.6.0.jar
>guacamole-auth-ldap-1.6.0.jar
>guacamole-auth-totp-1.6.0.jar
>
>or whatever combination of AUTH jar files you need.
>
>If you are using MariaDB you must have at least the jdbc-base and jdbc-mysql jar files in the /extensions/ directory,
>and you must use the mysql connector rather than the mariadb one, and it must be in the /lib/ directory
>
>Vincent
>
>________________________________
>From: Felix Maier <fe...@gmail.com>>
>Sent: Wednesday 19 November 2025 13:24
>To: user@guacamole.apache.org<ma...@guacamole.apache.org> <us...@guacamole.apache.org>>
>Subject: Guacamole 1.6.0 – GUI accessible but login fails / auth provider not loading / strange password hash output
>
>You don't often get email from felixmaier1234@gmail.com<ma...@gmail.com>. Learn why this is important<https://aka.ms/LearnAboutSenderIdentification>
>
>Hello everyone,
>
>I am currently setting up Apache Guacamole (version 1.6.0) and although I can now successfully access the Web GUI, I still cannot log in. I would appreciate your help solving this issue.
>
>Environment details:
>
> * Guacamole 1.6.0
>
> * guacd 1.6.0
>
> * Tomcat 9
>
> * MariaDB (external Galera cluster)
>
> * MySQL authentication extension
>
> * Debian-based Linux
>
>________________________________
>Issue description
>
>The GUI loads correctly, and the JDBC driver issue has been resolved.
>However, whenever I try to log in (using guacadmin), authentication fails.
>
>When I check Tomcat’s status or logs, I consistently see the following warnings:
>
>WARN o.a.g.e.AuthenticationProviderFacade - Authentication attempt ignored because the relevant authentication provider could not be loaded. Please check for errors earlier in the logs.
>WARN o.a.g.event.EventLoggingListener - Authentication attempt from 192.168.0.1 for user "guacadmin" failed: unknown error (no specific failure recorded)
>
>
>There are no clear error messages indicating why the authentication provider is not being loaded.
>
>________________________________
>Strange SQL output
>
>When I inspect the user table using:
>
>SELECT * FROM guacamole_user;
>
>I still see strange or binary-like characters in the password_hash and password_salt fields. Example:
>
>| password_hash | =�Fp�xe�Զӷ�Ў���i8E�a�x |
>| password_salt | ��J[*m |
>
>
>I am not sure whether this is expected binary data, an encoding issue, or something related to Galera replication.
>
>________________________________
>What is working
>
> * Database connectivity (after switching to the MariaDB JDBC driver)
>
> * Web interface loads normally
>
> * Galera cluster is healthy
>
> * Schema import completed without visible errors
>
>________________________________
>My questions
>
> 1. Why is the authentication provider not being loaded correctly?
>
> 2. Are the binary-looking password hashes normal for Guacamole?
>
> 3. Could the Galera cluster setup cause issues with these fields?
>
> 4. Is there a recommended way to verify or recreate the default guacadmin user?
>
>I can provide more logs or configuration details if needed.
>
>Thanks a lot in advance for your help!
>
>Best regards,
>Felix
>
>
>IT Solutions Email Disclaimer - The information contained in this email message, including any files transmitted with it, is confidential and may be legally privileged.
>
>This e-mail is intended only for the personal attention of the stated addressee(s). Any access to this email, including any files transmitted with it, by any other person is unauthorised. If you are not an addressee, you must not disclose, copy, circulate or in any other way use or rely on the accuracy or completeness of the information contained in this email or any files transmitted with it.
>
>If you have received this email in error, please inform the sender immediately and delete it and all copies from your system. You may not forward this email without the permission of the authorised sender.
>
>The views expressed in this email are those of the author, and do not necessarily represent the views of IT Solutions or its affiliates. Internet communications are not secure and IT Solutions cannot therefore accept legal responsibility for the contents of this message nor for any damage caused by viruses. This email has been scanned at the originating end. For further information on IT Solutions visit https://www.itsolutions.ie<https://www.itsolutions.ie/>
>
>IT Solutions Email Disclaimer - The information contained in this email message, including any files transmitted with it, is confidential and may be legally privileged.
>
>This e-mail is intended only for the personal attention of the stated addressee(s). Any access to this email, including any files transmitted with it, by any other person is unauthorised. If you are not an addressee, you must not disclose, copy, circulate or in any other way use or rely on the accuracy or completeness of the information contained in this email or any files transmitted with it.
>
>If you have received this email in error, please inform the sender immediately and delete it and all copies from your system. You may not forward this email without the permission of the authorised sender.
>
>The views expressed in this email are those of the author, and do not necessarily represent the views of IT Solutions or its affiliates. Internet communications are not secure and IT Solutions cannot therefore accept legal responsibility for the contents of this message nor for any damage caused by viruses. This email has been scanned at the originating end. For further information on IT Solutions visit https://www.itsolutions.ie
You **do not** need that jdbc-base jar file. You only need the files documented:
* The extension .jar for your database
* The JDBC driver for your database
* The schema files for your database (included in the .tar.gz file provided for the extension in the download section of the release), which need to be applied as documented.
If you can provide the full logs from Guacamole (from the point that Tomcat begins starting up), that may provide more context. Enabling debug-level logging would also help.
- Mike
Re: Guacamole 1.6.0 – GUI accessible but login fails / auth provider not loading / strange password hash output
Posted by Vincent Sherwood <vi...@itsolutions.ie.INVALID>.
*
/extensions:
*
guacamole-auth-jdbc-mysql-1.6.0.jar
*
*
So i assume i am missing something, correct? and where can i get the missing files?
Yes. If you use any of the database connectors you must also have the jdbc-base jar file too
________________________________
From: Felix Maier <fe...@gmail.com>
Sent: Wednesday 19 November 2025 17:33
To: user@guacamole.apache.org <us...@guacamole.apache.org>
Subject: Re: Guacamole 1.6.0 – GUI accessible but login fails / auth provider not loading / strange password hash output
You don't often get email from felixmaier1234@gmail.com. Learn why this is important<https://aka.ms/LearnAboutSenderIdentification>
So the contens of the /lib and /extensions folder are the following:
/lib:
mysql-connector-j-9.5.0.jar
/extensions:
guacamole-auth-jdbc-mysql-1.6.0.jar
So i assume i am missing something, correct? and where can i get the missing files?
In the future i want to work with ldap but i guess i can add the files then right?
Thanks
Felix
Am Mi., 19. Nov. 2025 um 17:59 Uhr schrieb Vincent Sherwood <vi...@itsolutions.ie.invalid>:
Can you confirm the contents of your GUACAMOLE_HOME (/etc/guacamole unless you changed it) sub-directories
/etc/guacamole/lib/
mysql-connector-j-9.2.0.jar
/etc/guacamole/extensions/
guacamole-auth-jdbc-base-1.6.0.jar
guacamole-auth-jdbc-mysql-1.6.0.jar
guacamole-auth-json-1.6.0.jar
guacamole-auth-ldap-1.6.0.jar
guacamole-auth-totp-1.6.0.jar
or whatever combination of AUTH jar files you need.
If you are using MariaDB you must have at least the jdbc-base and jdbc-mysql jar files in the /extensions/ directory,
and you must use the mysql connector rather than the mariadb one, and it must be in the /lib/ directory
Vincent
________________________________
From: Felix Maier <fe...@gmail.com>>
Sent: Wednesday 19 November 2025 13:24
To: user@guacamole.apache.org<ma...@guacamole.apache.org> <us...@guacamole.apache.org>>
Subject: Guacamole 1.6.0 – GUI accessible but login fails / auth provider not loading / strange password hash output
You don't often get email from felixmaier1234@gmail.com<ma...@gmail.com>. Learn why this is important<https://aka.ms/LearnAboutSenderIdentification>
Hello everyone,
I am currently setting up Apache Guacamole (version 1.6.0) and although I can now successfully access the Web GUI, I still cannot log in. I would appreciate your help solving this issue.
Environment details:
* Guacamole 1.6.0
* guacd 1.6.0
* Tomcat 9
* MariaDB (external Galera cluster)
* MySQL authentication extension
* Debian-based Linux
________________________________
Issue description
The GUI loads correctly, and the JDBC driver issue has been resolved.
However, whenever I try to log in (using guacadmin), authentication fails.
When I check Tomcat’s status or logs, I consistently see the following warnings:
WARN o.a.g.e.AuthenticationProviderFacade - Authentication attempt ignored because the relevant authentication provider could not be loaded. Please check for errors earlier in the logs.
WARN o.a.g.event.EventLoggingListener - Authentication attempt from 192.168.0.1 for user "guacadmin" failed: unknown error (no specific failure recorded)
There are no clear error messages indicating why the authentication provider is not being loaded.
________________________________
Strange SQL output
When I inspect the user table using:
SELECT * FROM guacamole_user;
I still see strange or binary-like characters in the password_hash and password_salt fields. Example:
| password_hash | =�Fp�xe�Զӷ�Ў���i8E�a�x |
| password_salt | ��J[*m |
I am not sure whether this is expected binary data, an encoding issue, or something related to Galera replication.
________________________________
What is working
* Database connectivity (after switching to the MariaDB JDBC driver)
* Web interface loads normally
* Galera cluster is healthy
* Schema import completed without visible errors
________________________________
My questions
1. Why is the authentication provider not being loaded correctly?
2. Are the binary-looking password hashes normal for Guacamole?
3. Could the Galera cluster setup cause issues with these fields?
4. Is there a recommended way to verify or recreate the default guacadmin user?
I can provide more logs or configuration details if needed.
Thanks a lot in advance for your help!
Best regards,
Felix
IT Solutions Email Disclaimer - The information contained in this email message, including any files transmitted with it, is confidential and may be legally privileged.
This e-mail is intended only for the personal attention of the stated addressee(s). Any access to this email, including any files transmitted with it, by any other person is unauthorised. If you are not an addressee, you must not disclose, copy, circulate or in any other way use or rely on the accuracy or completeness of the information contained in this email or any files transmitted with it.
If you have received this email in error, please inform the sender immediately and delete it and all copies from your system. You may not forward this email without the permission of the authorised sender.
The views expressed in this email are those of the author, and do not necessarily represent the views of IT Solutions or its affiliates. Internet communications are not secure and IT Solutions cannot therefore accept legal responsibility for the contents of this message nor for any damage caused by viruses. This email has been scanned at the originating end. For further information on IT Solutions visit https://www.itsolutions.ie<https://www.itsolutions.ie/>
IT Solutions Email Disclaimer - The information contained in this email message, including any files transmitted with it, is confidential and may be legally privileged.
This e-mail is intended only for the personal attention of the stated addressee(s). Any access to this email, including any files transmitted with it, by any other person is unauthorised. If you are not an addressee, you must not disclose, copy, circulate or in any other way use or rely on the accuracy or completeness of the information contained in this email or any files transmitted with it.
If you have received this email in error, please inform the sender immediately and delete it and all copies from your system. You may not forward this email without the permission of the authorised sender.
The views expressed in this email are those of the author, and do not necessarily represent the views of IT Solutions or its affiliates. Internet communications are not secure and IT Solutions cannot therefore accept legal responsibility for the contents of this message nor for any damage caused by viruses. This email has been scanned at the originating end. For further information on IT Solutions visit https://www.itsolutions.ie
Re: Guacamole 1.6.0 – GUI accessible but login fails / auth provider not loading / strange password hash output
Posted by Felix Maier <fe...@gmail.com>.
So the contens of the /lib and /extensions folder are the following:
/lib:
mysql-connector-j-9.5.0.jar
/extensions:
guacamole-auth-jdbc-mysql-1.6.0.jar
So i assume i am missing something, correct? and where can i get the
missing files?
In the future i want to work with ldap but i guess i can add the files then
right?
Thanks
Felix
Am Mi., 19. Nov. 2025 um 17:59 Uhr schrieb Vincent Sherwood
<vi...@itsolutions.ie.invalid>:
> Can you confirm the contents of your GUACAMOLE_HOME (/etc/guacamole unless
> you changed it) sub-directories
>
> /etc/guacamole/lib/
> mysql-connector-j-9.2.0.jar
>
> /etc/guacamole/extensions/
> guacamole-auth-jdbc-base-1.6.0.jar
> guacamole-auth-jdbc-mysql-1.6.0.jar
> guacamole-auth-json-1.6.0.jar
> guacamole-auth-ldap-1.6.0.jar
> guacamole-auth-totp-1.6.0.jar
>
> or whatever combination of AUTH jar files you need.
>
> If you are using MariaDB you must have at least the jdbc-base and
> jdbc-mysql jar files in the /extensions/ directory,
> and you must use the mysql connector rather than the mariadb one, and it
> must be in the /lib/ directory
>
> Vincent
>
> ------------------------------
> *From:* Felix Maier <fe...@gmail.com>
> *Sent:* Wednesday 19 November 2025 13:24
> *To:* user@guacamole.apache.org <us...@guacamole.apache.org>
> *Subject:* Guacamole 1.6.0 – GUI accessible but login fails / auth
> provider not loading / strange password hash output
>
> You don't often get email from felixmaier1234@gmail.com. Learn why this
> is important <https://aka.ms/LearnAboutSenderIdentification>
>
> Hello everyone,
>
> I am currently setting up Apache Guacamole (version 1.6.0) and although I
> can now successfully access the Web GUI, I still cannot log in. I would
> appreciate your help solving this issue.
>
> *Environment details:*
>
> -
>
> Guacamole 1.6.0
> -
>
> guacd 1.6.0
> -
>
> Tomcat 9
> -
>
> MariaDB (external Galera cluster)
> -
>
> MySQL authentication extension
> -
>
> Debian-based Linux
>
> ------------------------------
> *Issue description*
>
> The GUI loads correctly, and the JDBC driver issue has been resolved.
> However, whenever I try to log in (using *guacadmin*), authentication
> fails.
>
> When I check Tomcat’s status or logs, I consistently see the following
> warnings:
>
> WARN o.a.g.e.AuthenticationProviderFacade - Authentication attempt
> ignored because the relevant authentication provider could not be loaded.
> Please check for errors earlier in the logs.
> WARN o.a.g.event.EventLoggingListener - Authentication attempt from
> 192.168.0.1 for user "guacadmin" failed: unknown error (no specific failure
> recorded)
>
> There are no clear error messages indicating why the authentication
> provider is not being loaded.
> ------------------------------
> *Strange SQL output*
>
> When I inspect the user table using:
> SELECT * FROM guacamole_user;
>
> I still see strange or binary-like characters in the password_hash and
> password_salt fields. Example:
>
> | password_hash | =�Fp�xe�Զӷ�Ў���i8E�a�x |
> | password_salt | ��J[*m |
>
> I am not sure whether this is expected binary data, an encoding issue, or
> something related to Galera replication.
> ------------------------------
> *What is working*
>
> -
>
> Database connectivity (after switching to the MariaDB JDBC driver)
> -
>
> Web interface loads normally
> -
>
> Galera cluster is healthy
> -
>
> Schema import completed without visible errors
>
> ------------------------------
> *My questions*
>
> 1.
>
> Why is the authentication provider not being loaded correctly?
> 2.
>
> Are the binary-looking password hashes normal for Guacamole?
> 3.
>
> Could the Galera cluster setup cause issues with these fields?
> 4.
>
> Is there a recommended way to verify or recreate the default
> *guacadmin* user?
>
> I can provide more logs or configuration details if needed.
>
> Thanks a lot in advance for your help!
>
> Best regards,
> Felix
>
>
> IT Solutions Email Disclaimer - The information contained in this email
> message, including any files transmitted with it, is confidential and may
> be legally privileged.
>
> This e-mail is intended only for the personal attention of the stated
> addressee(s). Any access to this email, including any files transmitted
> with it, by any other person is unauthorised. If you are not an addressee,
> you must not disclose, copy, circulate or in any other way use or rely on
> the accuracy or completeness of the information contained in this email or
> any files transmitted with it.
>
> If you have received this email in error, please inform the sender
> immediately and delete it and all copies from your system. You may not
> forward this email without the permission of the authorised sender.
>
> The views expressed in this email are those of the author, and do not
> necessarily represent the views of IT Solutions or its affiliates. Internet
> communications are not secure and IT Solutions cannot therefore accept
> legal responsibility for the contents of this message nor for any damage
> caused by viruses. This email has been scanned at the originating end. For
> further information on IT Solutions visit https://www.itsolutions.ie
>
Re: Guacamole 1.6.0 – GUI accessible but login fails / auth provider not loading / strange password hash output
Posted by Vincent Sherwood <vi...@itsolutions.ie.INVALID>.
Can you confirm the contents of your GUACAMOLE_HOME (/etc/guacamole unless you changed it) sub-directories
/etc/guacamole/lib/
mysql-connector-j-9.2.0.jar
/etc/guacamole/extensions/
guacamole-auth-jdbc-base-1.6.0.jar
guacamole-auth-jdbc-mysql-1.6.0.jar
guacamole-auth-json-1.6.0.jar
guacamole-auth-ldap-1.6.0.jar
guacamole-auth-totp-1.6.0.jar
or whatever combination of AUTH jar files you need.
If you are using MariaDB you must have at least the jdbc-base and jdbc-mysql jar files in the /extensions/ directory,
and you must use the mysql connector rather than the mariadb one, and it must be in the /lib/ directory
Vincent
________________________________
From: Felix Maier <fe...@gmail.com>
Sent: Wednesday 19 November 2025 13:24
To: user@guacamole.apache.org <us...@guacamole.apache.org>
Subject: Guacamole 1.6.0 – GUI accessible but login fails / auth provider not loading / strange password hash output
You don't often get email from felixmaier1234@gmail.com. Learn why this is important<https://aka.ms/LearnAboutSenderIdentification>
Hello everyone,
I am currently setting up Apache Guacamole (version 1.6.0) and although I can now successfully access the Web GUI, I still cannot log in. I would appreciate your help solving this issue.
Environment details:
* Guacamole 1.6.0
* guacd 1.6.0
* Tomcat 9
* MariaDB (external Galera cluster)
* MySQL authentication extension
* Debian-based Linux
________________________________
Issue description
The GUI loads correctly, and the JDBC driver issue has been resolved.
However, whenever I try to log in (using guacadmin), authentication fails.
When I check Tomcat’s status or logs, I consistently see the following warnings:
WARN o.a.g.e.AuthenticationProviderFacade - Authentication attempt ignored because the relevant authentication provider could not be loaded. Please check for errors earlier in the logs.
WARN o.a.g.event.EventLoggingListener - Authentication attempt from 192.168.0.1 for user "guacadmin" failed: unknown error (no specific failure recorded)
There are no clear error messages indicating why the authentication provider is not being loaded.
________________________________
Strange SQL output
When I inspect the user table using:
SELECT * FROM guacamole_user;
I still see strange or binary-like characters in the password_hash and password_salt fields. Example:
| password_hash | =�Fp�xe�Զӷ�Ў���i8E�a�x |
| password_salt | ��J[*m |
I am not sure whether this is expected binary data, an encoding issue, or something related to Galera replication.
________________________________
What is working
* Database connectivity (after switching to the MariaDB JDBC driver)
* Web interface loads normally
* Galera cluster is healthy
* Schema import completed without visible errors
________________________________
My questions
1. Why is the authentication provider not being loaded correctly?
2. Are the binary-looking password hashes normal for Guacamole?
3. Could the Galera cluster setup cause issues with these fields?
4. Is there a recommended way to verify or recreate the default guacadmin user?
I can provide more logs or configuration details if needed.
Thanks a lot in advance for your help!
Best regards,
Felix
IT Solutions Email Disclaimer - The information contained in this email message, including any files transmitted with it, is confidential and may be legally privileged.
This e-mail is intended only for the personal attention of the stated addressee(s). Any access to this email, including any files transmitted with it, by any other person is unauthorised. If you are not an addressee, you must not disclose, copy, circulate or in any other way use or rely on the accuracy or completeness of the information contained in this email or any files transmitted with it.
If you have received this email in error, please inform the sender immediately and delete it and all copies from your system. You may not forward this email without the permission of the authorised sender.
The views expressed in this email are those of the author, and do not necessarily represent the views of IT Solutions or its affiliates. Internet communications are not secure and IT Solutions cannot therefore accept legal responsibility for the contents of this message nor for any damage caused by viruses. This email has been scanned at the originating end. For further information on IT Solutions visit https://www.itsolutions.ie
Re: Guacamole 1.6.0 – GUI accessible but login fails / auth provider not loading / strange password hash output
Posted by Felix Maier <fe...@gmail.com>.
Yeah i already thought that this would not be normal. Do you have an idea
on how to fix or what the Reason could be for this?
I have a created a Pastebin link where i pasted the whole output from the
command. Maybe the problem is more reasonable or helps.
https://pastebin.com/0tymjyr0
Thanks
Felix
Am Mi., 19. Nov. 2025 um 18:12 Uhr schrieb Vincent Sherwood
<vi...@itsolutions.ie.invalid>:
> As regards the content of your password_hash and password_salt - they do
> not look normal, unless your MariaDB instance has some kind of encryption
> at rest enabled.
>
> The contents of those fields in our database are all strings of the form
> 0xAAAAAAAAAAAAAAAAAAAAAA where the A's are lowercase hexadecimal
> characters (0-9a-f).
>
> Vincent
> ------------------------------
> *From:* Felix Maier <fe...@gmail.com>
> *Sent:* Wednesday 19 November 2025 13:24
> *To:* user@guacamole.apache.org <us...@guacamole.apache.org>
> *Subject:* Guacamole 1.6.0 – GUI accessible but login fails / auth
> provider not loading / strange password hash output
>
> You don't often get email from felixmaier1234@gmail.com. Learn why this
> is important <https://aka.ms/LearnAboutSenderIdentification>
>
> Hello everyone,
>
> I am currently setting up Apache Guacamole (version 1.6.0) and although I
> can now successfully access the Web GUI, I still cannot log in. I would
> appreciate your help solving this issue.
>
> *Environment details:*
>
> -
>
> Guacamole 1.6.0
> -
>
> guacd 1.6.0
> -
>
> Tomcat 9
> -
>
> MariaDB (external Galera cluster)
> -
>
> MySQL authentication extension
> -
>
> Debian-based Linux
>
> ------------------------------
> *Issue description*
>
> The GUI loads correctly, and the JDBC driver issue has been resolved.
> However, whenever I try to log in (using *guacadmin*), authentication
> fails.
>
> When I check Tomcat’s status or logs, I consistently see the following
> warnings:
>
> WARN o.a.g.e.AuthenticationProviderFacade - Authentication attempt
> ignored because the relevant authentication provider could not be loaded.
> Please check for errors earlier in the logs.
> WARN o.a.g.event.EventLoggingListener - Authentication attempt from
> 192.168.0.1 for user "guacadmin" failed: unknown error (no specific failure
> recorded)
>
> There are no clear error messages indicating why the authentication
> provider is not being loaded.
> ------------------------------
> *Strange SQL output*
>
> When I inspect the user table using:
> SELECT * FROM guacamole_user;
>
> I still see strange or binary-like characters in the password_hash and
> password_salt fields. Example:
>
> | password_hash | =�Fp�xe�Զӷ�Ў���i8E�a�x |
> | password_salt | ��J[*m |
>
> I am not sure whether this is expected binary data, an encoding issue, or
> something related to Galera replication.
> ------------------------------
> *What is working*
>
> -
>
> Database connectivity (after switching to the MariaDB JDBC driver)
> -
>
> Web interface loads normally
> -
>
> Galera cluster is healthy
> -
>
> Schema import completed without visible errors
>
> ------------------------------
> *My questions*
>
> 1.
>
> Why is the authentication provider not being loaded correctly?
> 2.
>
> Are the binary-looking password hashes normal for Guacamole?
> 3.
>
> Could the Galera cluster setup cause issues with these fields?
> 4.
>
> Is there a recommended way to verify or recreate the default
> *guacadmin* user?
>
> I can provide more logs or configuration details if needed.
>
> Thanks a lot in advance for your help!
>
> Best regards,
> Felix
>
>
> IT Solutions Email Disclaimer - The information contained in this email
> message, including any files transmitted with it, is confidential and may
> be legally privileged.
>
> This e-mail is intended only for the personal attention of the stated
> addressee(s). Any access to this email, including any files transmitted
> with it, by any other person is unauthorised. If you are not an addressee,
> you must not disclose, copy, circulate or in any other way use or rely on
> the accuracy or completeness of the information contained in this email or
> any files transmitted with it.
>
> If you have received this email in error, please inform the sender
> immediately and delete it and all copies from your system. You may not
> forward this email without the permission of the authorised sender.
>
> The views expressed in this email are those of the author, and do not
> necessarily represent the views of IT Solutions or its affiliates. Internet
> communications are not secure and IT Solutions cannot therefore accept
> legal responsibility for the contents of this message nor for any damage
> caused by viruses. This email has been scanned at the originating end. For
> further information on IT Solutions visit https://www.itsolutions.ie
>
Re: Guacamole 1.6.0 – GUI accessible but login fails / auth provider not loading / strange password hash output
Posted by Vincent Sherwood <vi...@itsolutions.ie.INVALID>.
As regards the content of your password_hash and password_salt - they do not look normal, unless your MariaDB instance has some kind of encryption at rest enabled.
The contents of those fields in our database are all strings of the form 0xAAAAAAAAAAAAAAAAAAAAAA where the A's are lowercase hexadecimal characters (0-9a-f).
Vincent
________________________________
From: Felix Maier <fe...@gmail.com>
Sent: Wednesday 19 November 2025 13:24
To: user@guacamole.apache.org <us...@guacamole.apache.org>
Subject: Guacamole 1.6.0 – GUI accessible but login fails / auth provider not loading / strange password hash output
You don't often get email from felixmaier1234@gmail.com. Learn why this is important<https://aka.ms/LearnAboutSenderIdentification>
Hello everyone,
I am currently setting up Apache Guacamole (version 1.6.0) and although I can now successfully access the Web GUI, I still cannot log in. I would appreciate your help solving this issue.
Environment details:
* Guacamole 1.6.0
* guacd 1.6.0
* Tomcat 9
* MariaDB (external Galera cluster)
* MySQL authentication extension
* Debian-based Linux
________________________________
Issue description
The GUI loads correctly, and the JDBC driver issue has been resolved.
However, whenever I try to log in (using guacadmin), authentication fails.
When I check Tomcat’s status or logs, I consistently see the following warnings:
WARN o.a.g.e.AuthenticationProviderFacade - Authentication attempt ignored because the relevant authentication provider could not be loaded. Please check for errors earlier in the logs.
WARN o.a.g.event.EventLoggingListener - Authentication attempt from 192.168.0.1 for user "guacadmin" failed: unknown error (no specific failure recorded)
There are no clear error messages indicating why the authentication provider is not being loaded.
________________________________
Strange SQL output
When I inspect the user table using:
SELECT * FROM guacamole_user;
I still see strange or binary-like characters in the password_hash and password_salt fields. Example:
| password_hash | =�Fp�xe�Զӷ�Ў���i8E�a�x |
| password_salt | ��J[*m |
I am not sure whether this is expected binary data, an encoding issue, or something related to Galera replication.
________________________________
What is working
* Database connectivity (after switching to the MariaDB JDBC driver)
* Web interface loads normally
* Galera cluster is healthy
* Schema import completed without visible errors
________________________________
My questions
1. Why is the authentication provider not being loaded correctly?
2. Are the binary-looking password hashes normal for Guacamole?
3. Could the Galera cluster setup cause issues with these fields?
4. Is there a recommended way to verify or recreate the default guacadmin user?
I can provide more logs or configuration details if needed.
Thanks a lot in advance for your help!
Best regards,
Felix
IT Solutions Email Disclaimer - The information contained in this email message, including any files transmitted with it, is confidential and may be legally privileged.
This e-mail is intended only for the personal attention of the stated addressee(s). Any access to this email, including any files transmitted with it, by any other person is unauthorised. If you are not an addressee, you must not disclose, copy, circulate or in any other way use or rely on the accuracy or completeness of the information contained in this email or any files transmitted with it.
If you have received this email in error, please inform the sender immediately and delete it and all copies from your system. You may not forward this email without the permission of the authorised sender.
The views expressed in this email are those of the author, and do not necessarily represent the views of IT Solutions or its affiliates. Internet communications are not secure and IT Solutions cannot therefore accept legal responsibility for the contents of this message nor for any damage caused by viruses. This email has been scanned at the originating end. For further information on IT Solutions visit https://www.itsolutions.ie