You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@guacamole.apache.org by Tezarin <te...@yahoo.com.INVALID> on 2018/05/02 15:22:09 UTC

Re: Setting up Guacamole inside Docker containers

 Hi,
Do you guys have a scrip that can do some group search and implementation? 

# enumerate the (already existing) LDAP group "VPN Users"## get all user "samaccountname" (e.g. joe.smith, etc.)# enumerate all the (already existing) LDAP groups that match the pattern "*-OS-Admin"# for each LDAP group:## ensure there is a guacamole group with this name# for each user:
## if they are in an LDAP group "FOO-OS-Admin", add them to the guac group "FOO-OS-Admin"
Thanks



    On Wednesday, April 25, 2018, 5:07:59 PM EDT, Mike Jumper <mi...@guac-dev.org> wrote:  
 
 On Wed, Apr 25, 2018 at 2:03 PM, Tezarin <te...@yahoo.com.invalid> wrote:

>  Hi all,
> I noticed I am not able to connect to any of my CentOS remote devices but
> Windows are find. The log shows:
>
> "o.a.g.t.h.RestrictedGuacamoleHTTPTunnelServlet - Using HTTP tunnel (not
> WebSocket). Performance may be sub-optimal."
> And the GUI shows: "The connection has been closed because the server is
> taking too long to respond. This is usually caused by network problems,
> such as a spotty wireless signal, or slow network speeds. Please check your
> network connection and try again or contact your system administrator."
>
> How can I fix that?
>

If you are serving Guacamole behind a reverse proxy like Apache or Nginx,
make sure you have configured things properly such that WebSocket will work
and HTTP requests/responses are not buffered:

http://guacamole.apache.org/doc/gug/proxying-guacamole.html

If not, check your network setup. There is likely a proxy or similar
software between the browser and the Guacamole server which is both
preventing use of WebSocket and buffering HTTP connections, effectively
blocking Guacamole communication until the connection closes.

- Mike
  

Re: Setting up Guacamole inside Docker containers

Posted by Tezarin <te...@yahoo.com.INVALID>.
 
Perfect, thank you. I will search this forum.
Regards    On Wednesday, May 30, 2018, 1:11:05 PM EDT, Nick Couchman <vn...@apache.org> wrote:  
 
 On Wed, May 2, 2018 at 11:22 AM, Tezarin <te...@yahoo.com.invalid> wrote:

>  Hi,
> Do you guys have a scrip that can do some group search and implementation?
>
> # enumerate the (already existing) LDAP group "VPN Users"## get all user
> "samaccountname" (e.g. joe.smith, etc.)# enumerate all the (already
> existing) LDAP groups that match the pattern "*-OS-Admin"# for each LDAP
> group:## ensure there is a guacamole group with this name# for each user:
> ## if they are in an LDAP group "FOO-OS-Admin", add them to the guac group
> "FOO-OS-Admin"
> Thanks
>
>
There aren't any official scripts for this, but I think it's something that
others on the lists have done in the past - it is something that has been
asked before, and I'm fairly certain I've seen people post their
solutions.  In any case, it should be pretty easy - use ldapsearch (or your
favorite LDAP searching tool) to search the tree for specific users and get
whatever attributes you want, parse that out, then convert it to a SQL
script and insert the data.

-Nick
  

Re: Setting up Guacamole inside Docker containers

Posted by Nick Couchman <vn...@apache.org>.
On Wed, May 2, 2018 at 11:22 AM, Tezarin <te...@yahoo.com.invalid> wrote:

>  Hi,
> Do you guys have a scrip that can do some group search and implementation?
>
> # enumerate the (already existing) LDAP group "VPN Users"## get all user
> "samaccountname" (e.g. joe.smith, etc.)# enumerate all the (already
> existing) LDAP groups that match the pattern "*-OS-Admin"# for each LDAP
> group:## ensure there is a guacamole group with this name# for each user:
> ## if they are in an LDAP group "FOO-OS-Admin", add them to the guac group
> "FOO-OS-Admin"
> Thanks
>
>
There aren't any official scripts for this, but I think it's something that
others on the lists have done in the past - it is something that has been
asked before, and I'm fairly certain I've seen people post their
solutions.  In any case, it should be pretty easy - use ldapsearch (or your
favorite LDAP searching tool) to search the tree for specific users and get
whatever attributes you want, parse that out, then convert it to a SQL
script and insert the data.

-Nick