How to restrict User from accessing connections

[Arkaprabha Chakraborty <ch...@gmail.com>]

I have a user group with sub-user groups in guacamole. I want to
restrict some of the connections to this sub-user group. How to do so?

Re: How to restrict User from accessing connections

[Lee Doughty <le...@virginiacyberrange.org>]

This would be where the custom authentication extensions would come into
play. You'd need to write your own UI and connect it to Guacamole.

There are some vendors that do this, but I've only seen it packaged with
some larger scope project that is more than just authentication.. auch as
buying a fully managed seats-on-VMs product, or paired with training, or
similar options.

-Lee

On Sat, Jun 4, 2022, 3:22 PM Arkaprabha Chakraborty <
chakrabortyarkaprabha998@gmail.com> wrote:

> Also if I want to create an authenticated workflow. Like say a user wants
> to access an RDP so it makes a request to the admin. The admin checks it
> and accepts it and the user has the access to the RDP. Is it possible to
> setup using guacamole or are there any related apps built on guacamole that
> can do this?
>
> On Sat, Jun 4, 2022, 11:41 PM Michael Jumper <mj...@apache.org> wrote:
>
>> On Sat, Jun 4, 2022, 03:04 Arkaprabha Chakraborty <
>> chakrabortyarkaprabha998@gmail.com> wrote:
>>
>>> I have a user group with sub-user groups in guacamole. I want to
>>> restrict some of the connections to this sub-user group. How to do so?
>>>
>>
>> You would need to remove that group from its parent group. The members of
>> a user group will always inherit the permissions of that group, whether the
>> members are users or other groups.
>>
>> - Mike
>>
>>

Re: How to restrict User from accessing connections

[Arkaprabha Chakraborty <ch...@gmail.com>]

Also if I want to create an authenticated workflow. Like say a user wants
to access an RDP so it makes a request to the admin. The admin checks it
and accepts it and the user has the access to the RDP. Is it possible to
setup using guacamole or are there any related apps built on guacamole that
can do this?

On Sat, Jun 4, 2022, 11:41 PM Michael Jumper <mj...@apache.org> wrote:

> On Sat, Jun 4, 2022, 03:04 Arkaprabha Chakraborty <
> chakrabortyarkaprabha998@gmail.com> wrote:
>
>> I have a user group with sub-user groups in guacamole. I want to
>> restrict some of the connections to this sub-user group. How to do so?
>>
>
> You would need to remove that group from its parent group. The members of
> a user group will always inherit the permissions of that group, whether the
> members are users or other groups.
>
> - Mike
>
>

Re: How to restrict User from accessing connections

[Michael Jumper <mj...@apache.org>]

On Sat, Jun 4, 2022, 03:04 Arkaprabha Chakraborty <
chakrabortyarkaprabha998@gmail.com> wrote:

> I have a user group with sub-user groups in guacamole. I want to
> restrict some of the connections to this sub-user group. How to do so?
>

You would need to remove that group from its parent group. The members of a
user group will always inherit the permissions of that group, whether the
members are users or other groups.

- Mike