You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@guacamole.apache.org by Peter De Tender <pe...@pdtit.be> on 2020/05/11 12:31:45 UTC
RDP File transfer not working on windows 2016 or 2019
Hi,
I had an initial support request on RDP File Transfer last week, as I couldn't get it to work.
However, that was on my test win2019 VM, where it works fine on 2012R2.
My security setting is NLA, but I also tried with TLS and Any. (ignore cert).
Is this a Guacamole limitation or Windows security change since 2016?
Running CENTOS 7.5 and Guacamole 1.1.0 from ZeroCool setup script.
Thanks Peter
Get Outlook for Android<https://aka.ms/ghei36>
RE: RDP File transfer not working on windows 2016 or 2019
Posted by "Newman, Dennis" <de...@spglobal.com>.
I would appreciate details as well.
Thanks
-----Original Message-----
From: Peter De Tender <pe...@pdtit.be>
Sent: Tuesday, May 12, 2020 4:46 AM
To: user@guacamole.apache.org
Subject: RE: RDP File transfer not working on windows 2016 or 2019
EXTERNAL MESSAGE
Hey,
Thanks; I was thinking about providing a similar setup, as I can imagine users filling up the data drive of the Guacamole server using this approach, and that's not what we want.
Is there any more details on how to correctly configure this, including the NGINX settings in the documentation?
-----Original Message-----
From: sciUser <sh...@securitycentric.net>
Sent: Monday, May 11, 2020 11:21 PM
To: user@guacamole.apache.org
Subject: Re: RDP File transfer not working on windows 2016 or 2019
we set this up using NFS to our filer, check permissions use, getfacl <foldername> to get current acls, should be for /Downloads/{GUACUSER};
# owner: root
# group: root
user::rwx
group::---
other::---
Again our use case is that our provisioning platform controls guacamole and we write to the database directly to create the connections and using a JIT/Zero Trust method to assign users.
You will also need to adjust the apache/nginx file transfer size then restart the service.
we have tested up 8TB with no issues, however we did dial it back to 1TB per user.
Hope this helps.
-----
A Cybersecurity Enablement Company
We don't just run you through the motions, Our labs teach you how to think!
Known good Guacamole installations
--
Sent from: http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org
________________________________
The information contained in this message is intended only for the recipient, and may be a confidential attorney-client communication or may otherwise be privileged and confidential and protected from disclosure. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, please be aware that any dissemination or copying of this communication is strictly prohibited. If you have received this communication in error, please immediately notify us by replying to the message and deleting it from your computer. S&P Global Inc. reserves the right, subject to applicable local law, to monitor, review and process the content of any electronic message or information sent to or from S&P Global Inc. e-mail addresses without informing the sender or recipient of the message. By sending electronic message or information to S&P Global Inc. e-mail addresses you, as the sender, are consenting to S&P Global Inc. processing any of your personal data therein.
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org
Re: RDP File transfer not working on windows 2016 or 2019
Posted by Peter De Tender <pe...@pdtit.be>.
This is really useful, thanks for sharing this!
________________________________
From: sciUser <sh...@securitycentric.net>
Sent: Tuesday, May 12, 2020 18:18
To: user@guacamole.apache.org <us...@guacamole.apache.org>
Subject: RE: RDP File transfer not working on windows 2016 or 2019
To allow nginx to handle large file transfers you will need to navigate to
/etc/nginx use you editor on nginx.conf then add or make adjustments to the
following. As you will see we allow up to 10G per user.
sendfile on;
client_max_body_size 10000m;
#tcp_nopush on;
keepalive_timeout 65;
Save and restart nginx.
For */Downloads/{GUACUSER};*
Here is a little trick for NAS or secondary SR storage.
1. You can use a traditional NAS and NFS mounts
2. Local storage with NFS (Secondary Disc and make local NFS mount)
3. USB 3.1 Storage with NFS (Do not use Flash, this is for SSD)
In my use case I use option 2 (10TB Raid 5 15k RPM SAS)and then attach a 2TB
VDI to the Guacamole VM, this is where we have short term users use for
storage. Long term users get attached to a 30TB 10Gbe array.
-----
A Cybersecurity Enablement Company
We don't just run you through the motions, Our labs teach you how to think!
Known good Guacamole installations
--
Sent from: http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org
RE: RDP File transfer not working on windows 2016 or 2019
Posted by sciUser <sh...@securitycentric.net>.
To allow nginx to handle large file transfers you will need to navigate to
/etc/nginx use you editor on nginx.conf then add or make adjustments to the
following. As you will see we allow up to 10G per user.
sendfile on;
client_max_body_size 10000m;
#tcp_nopush on;
keepalive_timeout 65;
Save and restart nginx.
For */Downloads/{GUACUSER};*
Here is a little trick for NAS or secondary SR storage.
1. You can use a traditional NAS and NFS mounts
2. Local storage with NFS (Secondary Disc and make local NFS mount)
3. USB 3.1 Storage with NFS (Do not use Flash, this is for SSD)
In my use case I use option 2 (10TB Raid 5 15k RPM SAS)and then attach a 2TB
VDI to the Guacamole VM, this is where we have short term users use for
storage. Long term users get attached to a 30TB 10Gbe array.
-----
A Cybersecurity Enablement Company
We don't just run you through the motions, Our labs teach you how to think!
Known good Guacamole installations
--
Sent from: http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org
RE: RDP File transfer not working on windows 2016 or 2019
Posted by Peter De Tender <pe...@pdtit.be>.
Hey,
Thanks; I was thinking about providing a similar setup, as I can imagine users filling up the data drive of the Guacamole server using this approach, and that's not what we want.
Is there any more details on how to correctly configure this, including the NGINX settings in the documentation?
-----Original Message-----
From: sciUser <sh...@securitycentric.net>
Sent: Monday, May 11, 2020 11:21 PM
To: user@guacamole.apache.org
Subject: Re: RDP File transfer not working on windows 2016 or 2019
we set this up using NFS to our filer, check permissions use, getfacl <foldername> to get current acls, should be for /Downloads/{GUACUSER};
# owner: root
# group: root
user::rwx
group::---
other::---
Again our use case is that our provisioning platform controls guacamole and we write to the database directly to create the connections and using a JIT/Zero Trust method to assign users.
You will also need to adjust the apache/nginx file transfer size then restart the service.
we have tested up 8TB with no issues, however we did dial it back to 1TB per user.
Hope this helps.
-----
A Cybersecurity Enablement Company
We don't just run you through the motions, Our labs teach you how to think!
Known good Guacamole installations
--
Sent from: http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org
Re: RDP File transfer not working on windows 2016 or 2019
Posted by sciUser <sh...@securitycentric.net>.
we set this up using NFS to our filer, check permissions use, getfacl
<foldername> to get current acls, should be for /Downloads/{GUACUSER};
# owner: root
# group: root
user::rwx
group::---
other::---
Again our use case is that our provisioning platform controls guacamole and
we write to the database directly to create the connections and using a
JIT/Zero Trust method to assign users.
You will also need to adjust the apache/nginx file transfer size then
restart the service.
we have tested up 8TB with no issues, however we did dial it back to 1TB per
user.
Hope this helps.
-----
A Cybersecurity Enablement Company
We don't just run you through the motions, Our labs teach you how to think!
Known good Guacamole installations
--
Sent from: http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org
Re: RDP File transfer not working on windows 2016 or 2019
Posted by Peter De Tender <pe...@pdtit.be>.
Nick,
I just found that "solution" on linuxintro.org Guacamole wiki 🙂, so thought about giving it a try.
But yes, most probably I should squeeze down the security a bit more...
/Peter
________________________________
From: Nick Couchman <vn...@apache.org>
Sent: Monday, May 11, 2020 22:42
To: user@guacamole.apache.org <us...@guacamole.apache.org>
Subject: Re: RDP File transfer not working on windows 2016 or 2019
On Mon, May 11, 2020 at 4:06 PM Peter De Tender <pe...@pdtit.be>> wrote:
Hey Nick and all,
Good news!
I got this working after running chmod 777 on my "File Exchange" folder on the Guachost, as well as on the Download subfolder.
Ah, I would guess instead of "chmod 777" you just need to change ownership to the user/group running guacd.
-Nick
Re: RDP File transfer not working on windows 2016 or 2019
Posted by Nick Couchman <vn...@apache.org>.
On Mon, May 11, 2020 at 4:06 PM Peter De Tender <pe...@pdtit.be> wrote:
> Hey Nick and all,
>
>
> Good news!
>
> I got this working after running chmod 777 on my "File Exchange" folder on
> the Guachost, as well as on the Download subfolder.
>
>
Ah, I would guess instead of "chmod 777" you just need to change
ownership to the user/group running guacd.
-Nick
>
Re: RDP File transfer not working on windows 2016 or 2019
Posted by Peter De Tender <pe...@pdtit.be>.
Hey Nick and all,
Good news!
I got this working after running chmod 777 on my "File Exchange" folder on the Guachost, as well as on the Download subfolder.
It now works for all 3 Windows versions, 2012R2, 2016 and 2019.
Sweet!
Get Outlook for Android<https://aka.ms/ghei36>
________________________________
From: Peter De Tender <pe...@pdtit.be>
Sent: Monday, May 11, 2020 2:31:45 PM
To: user@guacamole.apache.org <us...@guacamole.apache.org>
Subject: RDP File transfer not working on windows 2016 or 2019
Hi,
I had an initial support request on RDP File Transfer last week, as I couldn't get it to work.
However, that was on my test win2019 VM, where it works fine on 2012R2.
My security setting is NLA, but I also tried with TLS and Any. (ignore cert).
Is this a Guacamole limitation or Windows security change since 2016?
Running CENTOS 7.5 and Guacamole 1.1.0 from ZeroCool setup script.
Thanks Peter
Get Outlook for Android<https://aka.ms/ghei36>
Re: RDP File transfer not working on windows 2016 or 2019
Posted by Peter De Tender <pe...@pdtit.be>.
Hey Nick,
It's only file transfers. Even more weird, uploads from my local device to the VM session are going, but files I copy in the Downloads folder of the G-drive get stored in my GuacVM transfer folder, but not triggering my browser to download the actual files.
But only on win2019 and 2016. No issue on 2012r2 with the same settings overall.
Thanks Peter
Get Outlook for Android<https://aka.ms/ghei36>
________________________________
From: Nick Couchman <vn...@apache.org>
Sent: Monday, May 11, 2020 4:46:02 PM
To: user@guacamole.apache.org <us...@guacamole.apache.org>
Subject: Re: RDP File transfer not working on windows 2016 or 2019
On Mon, May 11, 2020 at 8:32 AM Peter De Tender <pe...@pdtit.be>> wrote:
Hi,
I had an initial support request on RDP File Transfer last week, as I couldn't get it to work.
However, that was on my test win2019 VM, where it works fine on 2012R2.
My security setting is NLA, but I also tried with TLS and Any. (ignore cert).
Is this a Guacamole limitation or Windows security change since 2016?
Running CENTOS 7.5 and Guacamole 1.1.0 from ZeroCool setup script.
Is the entire connection failing, or just the ability to transfer files??
-Nick
Re: RDP File transfer not working on windows 2016 or 2019
Posted by Nick Couchman <vn...@apache.org>.
On Mon, May 11, 2020 at 8:32 AM Peter De Tender <pe...@pdtit.be> wrote:
> Hi,
>
> I had an initial support request on RDP File Transfer last week, as I
> couldn't get it to work.
>
> However, that was on my test win2019 VM, where it works fine on 2012R2.
>
> My security setting is NLA, but I also tried with TLS and Any. (ignore
> cert).
>
> Is this a Guacamole limitation or Windows security change since 2016?
>
> Running CENTOS 7.5 and Guacamole 1.1.0 from ZeroCool setup script.
>
>
Is the entire connection failing, or just the ability to transfer files??
-Nick
AW: RDP File transfer not working on windows 2016 or 2019
Posted by Joachim Lindenberg <jo...@lindenberg.one>.
Hi Peter,
for VMs you like hit https://issues.apache.org/jira/browse/GUACAMOLE-952. Try security “vmconnect”.
Best Regards, Joachim
Von: Peter De Tender <pe...@pdtit.be>
Gesendet: Monday, 11 May 2020 14:32
An: user@guacamole.apache.org
Betreff: RDP File transfer not working on windows 2016 or 2019
Hi,
I had an initial support request on RDP File Transfer last week, as I couldn't get it to work.
However, that was on my test win2019 VM, where it works fine on 2012R2.
My security setting is NLA, but I also tried with TLS and Any. (ignore cert).
Is this a Guacamole limitation or Windows security change since 2016?
Running CENTOS 7.5 and Guacamole 1.1.0 from ZeroCool setup script.
Thanks Peter
Get Outlook for Android <https://aka.ms/ghei36>