You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@guacamole.apache.org by Jorge López Díaz <Jo...@eu.equinix.com.INVALID> on 2023/12/13 12:19:36 UTC
Major bug message log in guacd 1.5.4
Hi,
We updated our guacd Docker image to v1.5.4 and after hours working as expected, connections stared to failed and it was not possible to establish new connections. In the container logs we saw this message:
Major bug, unable to allocate a TLS value for currentThread
After rolling back to v1.5.3 everything is working as expected.
Do you have any issue like this?
Thanks
Jorge López Díaz
Managed Services Operations Senior Analyst
EQUINIX | Calle Valgrande 6, 28108, Alcobendas, Madrid, España
E jorge.lopez@eu.equinix.com<ma...@eu.equinix.com> | M +34682449912
[signature_2548136705] <https://equinix.qualtrics.com/jfe/form/SV_5tZRNCGwOKna7A1>
[Twitter]<https://twitter.com/equinix>[LinkedIn]<http://www.linkedin.com/company/equinix>[Facebook]<http://www.facebook.com/Equinix>[YouTube]<http://www.youtube.com/user/equinixvideos>
This email is from Equinix (EMEA) B.V. or one of its associated companies in the territory from where this email has been sent. This email, and any files transmitted with it, contains information which is confidential, is solely for the use of the intended recipient and may be legally privileged. If you have received this email in error, please notify the sender and delete this email immediately. Equinix (EMEA) B.V.. Registered Office: Amstelplein 1, 1096 HA Amsterdam, The Netherlands. Registered in The Netherlands No. 57577889.
Aw: Re: Re: Major bug message log in guacd 1.5.4
Posted by michael böhm <ks...@gmx.net.INVALID>.
Hi everyone,
I proceeded as Antoine proposed and set "ARG ALPINE_BASE_IMAGE=3.18" in
staging/1.5.5 Dockerfile.
The build worked and I was able to start the guacd container from this image.
I tried more than 100 consecutive reconnects to an RDP session without the
issue appearing.
So, it looks good to me. Can anyone confirm?
Infos on my docker-host:
NAME="Ubuntu"
VERSION_ID="22.04"
VERSION="22.04.3 LTS (Jammy Jellyfish)"
VERSION_CODENAME=jammy
ID=ubuntu
ID_LIKE=debian
HOME_URL="https://www.ubuntu.com/"
SUPPORT_URL="https://help.ubuntu.com/"
BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/"
PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-
policy"
Kernel 5.15.0-92-generic
Docker version 25.0.3, build 4debf41
Thanks to everyone working on this.
Best wishes
Michael
**Gesendet:** Freitag, 09. Februar 2024 um 09:00 Uhr
**Von:** "Antoine Besnier" <be...@yahoo.fr.INVALID>
**An:** "user@guacamole.apache.org" <us...@guacamole.apache.org>
**Betreff:** Re: Aw: Re: Major bug message log in guacd 1.5.4
Hi,
On Alpine, openssl1.1-compat-dev is available for 3.17, 3.18 and Edge, but not
3.19 (which is the version for the 'latest' tag). You could try by changing
the version of Alpine.
Cheers
Antoine
Le vendredi 9 fevrier 2024 a 07:35:42 UTC+1, michael bohm
<ks...@gmx.net.invalid> a ecrit :
Hi everyone
I'd gladly test in our environment. However, the docker build does not work
for me:
/tmp/guacamole-server ‹staging/1.5.5› » git checkout staging/1.5.5
1 ↵
Switched to branch 'staging/1.5.5'
Your branch is up to date with 'origin/staging/1.5.5'.
/tmp/guacamole-server ‹staging/1.5.5› » docker build -t guac_test .
[+] Building 0.9s (6/13)
docker:default
=> [internal] load build definition from Dockerfile
0.0s
=> => transferring dockerfile: 6.10kB
0.0s
=> [internal] load metadata for docker.io/library/alpine:latest
0.0s
=> [internal] load .dockerignore
0.0s
=> => transferring context: 681B
0.0s
=> CACHED [builder 1/5] FROM docker.io/library/alpine:latest
0.0s
=> [internal] load build context
0.0s
=> => transferring context: 28.84kB
0.0s
=> ERROR [builder 2/5] RUN apk add --no-cache autoconf
automake build-base
cairo-dev cmake
git 0.8s
\------
> [builder 2/5] RUN apk add --no-cache autoconf
automake build-base
cairo-dev cmake
git grep
libjpeg-turbo-dev libpng-dev
libtool libwebp-dev
make openssl1.1-compat-dev
pango-dev pulseaudio-dev
util-linux-dev:
0.285 fetch <https://dl-
cdn.alpinelinux.org/alpine/v3.19/main/x86_64/APKINDEX.tar.gz>
0.475 fetch <https://dl-
cdn.alpinelinux.org/alpine/v3.19/community/x86_64/APKINDEX.tar.gz>
0.718 ERROR: unable to select packages:
0.718 openssl1.1-compat-dev (no such package):
0.718 required by: world[openssl1.1-compat-dev]
\------
Dockerfile:29
\--------------------
28 | # Install build dependencies
29 | >>> RUN apk add --no-cache \
30 | >>> autoconf \
31 | >>> automake \
32 | >>> build-base \
33 | >>> cairo-dev \
34 | >>> cmake \
35 | >>> git \
36 | >>> grep \
37 | >>> libjpeg-turbo-dev \
38 | >>> libpng-dev \
39 | >>> libtool \
40 | >>> libwebp-dev \
41 | >>> make \
42 | >>> openssl1.1-compat-dev \
43 | >>> pango-dev \
44 | >>> pulseaudio-dev \
45 | >>> util-linux-dev
46 |
\--------------------
ERROR: failed to solve: process "/bin/sh -c apk add --no-cache
autoconf automake
build-base cairo-dev
cmake git
grep libjpeg-turbo-dev
libpng-dev libtool
libwebp-dev make
openssl1.1-compat-dev pango-dev
pulseaudio-dev util-linux-dev" did not complete
successfully: exit code: 1
It seems that "openssl1.1-compat-dev" is not present in base image
alpine:latest's repositories. Am I doing something wrong? On the master branch
I can build the image just fine.
Thanks and best wishes
Michael
**Gesendet:** Freitag, 09. Februar 2024 um 02:59 Uhr
**Von:** "Michael Jumper" <mj...@apache.org>
**An:** user@guacamole.apache.org
**Betreff:** Re: Major bug message log in guacd 1.5.4
On 2/7/24 05:24, Nick Couchman wrote:
> On Wed, Feb 7, 2024 at 6:40 AM Yannick Martin
> <yannick.martin@ovhcloud.com <ma...@ovhcloud.com>> wrote:
>
> Hello
>
> About pthread_keys leak, I wonder if
> <https://github.com/apache/guacamole-
> server/blob/master/src/libguac/client.c#L299>
> <<https://github.com/apache/guacamole-
> server/blob/master/src/libguac/client.c#L299>>
> and L300 is not a duplicate call of those done in:
> guac_rwlock_init(&(client->__users_lock));
> guac_rwlock_init(&(client->__pending_users_lock));
>
> which call pthread_key_create too =>
> <https://github.com/apache/guacamole-
> server/blob/master/src/libguac/rwlock.c#L52>
> <<https://github.com/apache/guacamole-
> server/blob/master/src/libguac/rwlock.c#L52>>
>
>
> Two issues with this:
> * I'm not sure that duplicating a call to pthread_key_create()
> would/should result in the behavior we're seeing - where TLS-based
> connections fail after a certain, relatively well-defined number (58-60).
> * This also would not explain why this only occurs in certain
> situations, on certain platforms - that is, the same exact libguac code
> running on EL7 (RHEL, CentOS, etc.) does not result in the resource
> leak, whereas it does on some other set of platforms (Debian, Alpine,
> EulerOS). Unless the pthread library has been changed substantially
> between those versions to not clean up after itself?
>
This *might* now be fixed on master and staging/1.5.5, if folks want to
take a look. The issue does appear to be have been the duplicate
pthread_key_create() calls noted above (pending confirmation with testing).
If this is the cause, it's still unclear why the behavior varies between
platforms. It might be a matter of varying implementations, different
resource limits, or something else platform-specific.
\- Mike
\---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org
\--------------------------------------------------------------------- To
unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org For additional
commands, e-mail: user-help@guacamole.apache.org
\--------------------------------------------------------------------- To
unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org For additional
commands, e-mail: user-help@guacamole.apache.org
Re: Aw: Re: Major bug message log in guacd 1.5.4
Posted by Antoine Besnier <be...@yahoo.fr.INVALID>.
Hi,
On Alpine, openssl1.1-compat-dev is available for 3.17, 3.18 and Edge, but not 3.19 (which is the version for the 'latest' tag). You could try by changing the version of Alpine.
CheersAntoine
Le vendredi 9 février 2024 à 07:35:42 UTC+1, michael böhm <ks...@gmx.net.invalid> a écrit :
Hi everyone I'd gladly test in our environment. However, the docker build does not work for me: /tmp/guacamole-server ‹staging/1.5.5› » git checkout staging/1.5.5 1 ↵
Switched to branch 'staging/1.5.5'
Your branch is up to date with 'origin/staging/1.5.5'.
/tmp/guacamole-server ‹staging/1.5.5› » docker build -t guac_test .
[+] Building 0.9s (6/13) docker:default
=> [internal] load build definition from Dockerfile 0.0s
=> => transferring dockerfile: 6.10kB 0.0s
=> [internal] load metadata for docker.io/library/alpine:latest 0.0s
=> [internal] load .dockerignore 0.0s
=> => transferring context: 681B 0.0s
=> CACHED [builder 1/5] FROM docker.io/library/alpine:latest 0.0s
=> [internal] load build context 0.0s
=> => transferring context: 28.84kB 0.0s
=> ERROR [builder 2/5] RUN apk add --no-cache autoconf automake build-base cairo-dev cmake git 0.8s
------
> [builder 2/5] RUN apk add --no-cache autoconf automake build-base cairo-dev cmake git grep libjpeg-turbo-dev libpng-dev libtool libwebp-dev make openssl1.1-compat-dev pango-dev pulseaudio-dev util-linux-dev:
0.285 fetch https://dl-cdn.alpinelinux.org/alpine/v3.19/main/x86_64/APKINDEX.tar.gz
0.475 fetch https://dl-cdn.alpinelinux.org/alpine/v3.19/community/x86_64/APKINDEX.tar.gz
0.718 ERROR: unable to select packages:
0.718 openssl1.1-compat-dev (no such package):
0.718 required by: world[openssl1.1-compat-dev]
------
Dockerfile:29
--------------------
28 | # Install build dependencies
29 | >>> RUN apk add --no-cache \
30 | >>> autoconf \
31 | >>> automake \
32 | >>> build-base \
33 | >>> cairo-dev \
34 | >>> cmake \
35 | >>> git \
36 | >>> grep \
37 | >>> libjpeg-turbo-dev \
38 | >>> libpng-dev \
39 | >>> libtool \
40 | >>> libwebp-dev \
41 | >>> make \
42 | >>> openssl1.1-compat-dev \
43 | >>> pango-dev \
44 | >>> pulseaudio-dev \
45 | >>> util-linux-dev
46 |
--------------------
ERROR: failed to solve: process "/bin/sh -c apk add --no-cache autoconf automake build-base cairo-dev cmake git grep libjpeg-turbo-dev libpng-dev libtool libwebp-dev make openssl1.1-compat-dev pango-dev pulseaudio-dev util-linux-dev" did not complete successfully: exit code: 1 It seems that "openssl1.1-compat-dev" is not present in base image alpine:latest's repositories. Am I doing something wrong? On the master branch I can build the image just fine. Thanks and best wishes Michael Gesendet: Freitag, 09. Februar 2024 um 02:59 Uhr
Von: "Michael Jumper" <mj...@apache.org>
An: user@guacamole.apache.org
Betreff: Re: Major bug message log in guacd 1.5.4On 2/7/24 05:24, Nick Couchman wrote:
> On Wed, Feb 7, 2024 at 6:40 AM Yannick Martin
> <yannick.martin@ovhcloud.com <ma...@ovhcloud.com>> wrote:
>
> Hello
>
> About pthread_keys leak, I wonder if
> https://github.com/apache/guacamole-server/blob/master/src/libguac/client.c#L299 <https://github.com/apache/guacamole-server/blob/master/src/libguac/client.c#L299>
> and L300 is not a duplicate call of those done in:
> guac_rwlock_init(&(client->__users_lock));
> guac_rwlock_init(&(client->__pending_users_lock));
>
> which call pthread_key_create too =>
> https://github.com/apache/guacamole-server/blob/master/src/libguac/rwlock.c#L52 <https://github.com/apache/guacamole-server/blob/master/src/libguac/rwlock.c#L52>
>
>
> Two issues with this:
> * I'm not sure that duplicating a call to pthread_key_create()
> would/should result in the behavior we're seeing - where TLS-based
> connections fail after a certain, relatively well-defined number (58-60).
> * This also would not explain why this only occurs in certain
> situations, on certain platforms - that is, the same exact libguac code
> running on EL7 (RHEL, CentOS, etc.) does not result in the resource
> leak, whereas it does on some other set of platforms (Debian, Alpine,
> EulerOS). Unless the pthread library has been changed substantially
> between those versions to not clean up after itself?
>
This *might* now be fixed on master and staging/1.5.5, if folks want to
take a look. The issue does appear to be have been the duplicate
pthread_key_create() calls noted above (pending confirmation with testing).
If this is the cause, it's still unclear why the behavior varies between
platforms. It might be a matter of varying implementations, different
resource limits, or something else platform-specific.
- Mike
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org
---------------------------------------------------------------------To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.orgFor additional commands, e-mail: user-help@guacamole.apache.org
Aw: Re: Major bug message log in guacd 1.5.4
Posted by michael böhm <ks...@gmx.net.INVALID>.
Hi everyone
I'd gladly test in our environment. However, the docker build does not work
for me:
/tmp/guacamole-server ‹staging/1.5.5› » git checkout staging/1.5.5
1 ↵
Switched to branch 'staging/1.5.5'
Your branch is up to date with 'origin/staging/1.5.5'.
/tmp/guacamole-server ‹staging/1.5.5› » docker build -t guac_test .
[+] Building 0.9s (6/13)
docker:default
=> [internal] load build definition from Dockerfile
0.0s
=> => transferring dockerfile: 6.10kB
0.0s
=> [internal] load metadata for docker.io/library/alpine:latest
0.0s
=> [internal] load .dockerignore
0.0s
=> => transferring context: 681B
0.0s
=> CACHED [builder 1/5] FROM docker.io/library/alpine:latest
0.0s
=> [internal] load build context
0.0s
=> => transferring context: 28.84kB
0.0s
=> ERROR [builder 2/5] RUN apk add --no-cache autoconf
automake build-base
cairo-dev cmake
git 0.8s
\------
> [builder 2/5] RUN apk add --no-cache autoconf
automake build-base
cairo-dev cmake
git grep
libjpeg-turbo-dev libpng-dev
libtool libwebp-dev
make openssl1.1-compat-dev
pango-dev pulseaudio-dev
util-linux-dev:
0.285 fetch https://dl-
cdn.alpinelinux.org/alpine/v3.19/main/x86_64/APKINDEX.tar.gz
0.475 fetch https://dl-
cdn.alpinelinux.org/alpine/v3.19/community/x86_64/APKINDEX.tar.gz
0.718 ERROR: unable to select packages:
0.718 openssl1.1-compat-dev (no such package):
0.718 required by: world[openssl1.1-compat-dev]
\------
Dockerfile:29
\--------------------
28 | # Install build dependencies
29 | >>> RUN apk add --no-cache \
30 | >>> autoconf \
31 | >>> automake \
32 | >>> build-base \
33 | >>> cairo-dev \
34 | >>> cmake \
35 | >>> git \
36 | >>> grep \
37 | >>> libjpeg-turbo-dev \
38 | >>> libpng-dev \
39 | >>> libtool \
40 | >>> libwebp-dev \
41 | >>> make \
42 | >>> openssl1.1-compat-dev \
43 | >>> pango-dev \
44 | >>> pulseaudio-dev \
45 | >>> util-linux-dev
46 |
\--------------------
ERROR: failed to solve: process "/bin/sh -c apk add --no-cache
autoconf automake
build-base cairo-dev
cmake git
grep libjpeg-turbo-dev
libpng-dev libtool
libwebp-dev make
openssl1.1-compat-dev pango-dev
pulseaudio-dev util-linux-dev" did not complete
successfully: exit code: 1
It seems that "openssl1.1-compat-dev" is not present in base image
alpine:latest's repositories. Am I doing something wrong? On the master branch
I can build the image just fine.
Thanks and best wishes
Michael
**Gesendet:** Freitag, 09. Februar 2024 um 02:59 Uhr
**Von:** "Michael Jumper" <mj...@apache.org>
**An:** user@guacamole.apache.org
**Betreff:** Re: Major bug message log in guacd 1.5.4
On 2/7/24 05:24, Nick Couchman wrote:
> On Wed, Feb 7, 2024 at 6:40 AM Yannick Martin
> <yannick.martin@ovhcloud.com <ma...@ovhcloud.com>> wrote:
>
> Hello
>
> About pthread_keys leak, I wonder if
> <https://github.com/apache/guacamole-
> server/blob/master/src/libguac/client.c#L299>
> <<https://github.com/apache/guacamole-
> server/blob/master/src/libguac/client.c#L299>>
> and L300 is not a duplicate call of those done in:
> guac_rwlock_init(&(client->__users_lock));
> guac_rwlock_init(&(client->__pending_users_lock));
>
> which call pthread_key_create too =>
> <https://github.com/apache/guacamole-
> server/blob/master/src/libguac/rwlock.c#L52>
> <<https://github.com/apache/guacamole-
> server/blob/master/src/libguac/rwlock.c#L52>>
>
>
> Two issues with this:
> * I'm not sure that duplicating a call to pthread_key_create()
> would/should result in the behavior we're seeing - where TLS-based
> connections fail after a certain, relatively well-defined number (58-60).
> * This also would not explain why this only occurs in certain
> situations, on certain platforms - that is, the same exact libguac code
> running on EL7 (RHEL, CentOS, etc.) does not result in the resource
> leak, whereas it does on some other set of platforms (Debian, Alpine,
> EulerOS). Unless the pthread library has been changed substantially
> between those versions to not clean up after itself?
>
This *might* now be fixed on master and staging/1.5.5, if folks want to
take a look. The issue does appear to be have been the duplicate
pthread_key_create() calls noted above (pending confirmation with testing).
If this is the cause, it's still unclear why the behavior varies between
platforms. It might be a matter of varying implementations, different
resource limits, or something else platform-specific.
\- Mike
\---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org
\--------------------------------------------------------------------- To
unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org For additional
commands, e-mail: user-help@guacamole.apache.org
Re: Major bug message log in guacd 1.5.4
Posted by Michael Jumper <mj...@apache.org>.
On 2/7/24 05:24, Nick Couchman wrote:
> On Wed, Feb 7, 2024 at 6:40 AM Yannick Martin
> <yannick.martin@ovhcloud.com <ma...@ovhcloud.com>> wrote:
>
> Hello
>
> About pthread_keys leak, I wonder if
> https://github.com/apache/guacamole-server/blob/master/src/libguac/client.c#L299 <https://github.com/apache/guacamole-server/blob/master/src/libguac/client.c#L299>
> and L300 is not a duplicate call of those done in:
> guac_rwlock_init(&(client->__users_lock));
> guac_rwlock_init(&(client->__pending_users_lock));
>
> which call pthread_key_create too =>
> https://github.com/apache/guacamole-server/blob/master/src/libguac/rwlock.c#L52 <https://github.com/apache/guacamole-server/blob/master/src/libguac/rwlock.c#L52>
>
>
> Two issues with this:
> * I'm not sure that duplicating a call to pthread_key_create()
> would/should result in the behavior we're seeing - where TLS-based
> connections fail after a certain, relatively well-defined number (58-60).
> * This also would not explain why this only occurs in certain
> situations, on certain platforms - that is, the same exact libguac code
> running on EL7 (RHEL, CentOS, etc.) does not result in the resource
> leak, whereas it does on some other set of platforms (Debian, Alpine,
> EulerOS). Unless the pthread library has been changed substantially
> between those versions to not clean up after itself?
>
This *might* now be fixed on master and staging/1.5.5, if folks want to
take a look. The issue does appear to be have been the duplicate
pthread_key_create() calls noted above (pending confirmation with testing).
If this is the cause, it's still unclear why the behavior varies between
platforms. It might be a matter of varying implementations, different
resource limits, or something else platform-specific.
- Mike
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org
Re: Major bug message log in guacd 1.5.4
Posted by Nick Couchman <vn...@apache.org>.
On Wed, Feb 7, 2024 at 6:40 AM Yannick Martin <ya...@ovhcloud.com>
wrote:
> Hello
>
> About pthread_keys leak, I wonder if
>
> https://github.com/apache/guacamole-server/blob/master/src/libguac/client.c#L299
> and L300 is not a duplicate call of those done in:
> guac_rwlock_init(&(client->__users_lock));
> guac_rwlock_init(&(client->__pending_users_lock));
>
> which call pthread_key_create too =>
>
> https://github.com/apache/guacamole-server/blob/master/src/libguac/rwlock.c#L52
>
>
Two issues with this:
* I'm not sure that duplicating a call to pthread_key_create() would/should
result in the behavior we're seeing - where TLS-based connections fail
after a certain, relatively well-defined number (58-60).
* This also would not explain why this only occurs in certain situations,
on certain platforms - that is, the same exact libguac code running on EL7
(RHEL, CentOS, etc.) does not result in the resource leak, whereas it does
on some other set of platforms (Debian, Alpine, EulerOS). Unless the
pthread library has been changed substantially between those versions to
not clean up after itself?
-Nick
Re: Major bug message log in guacd 1.5.4
Posted by Nick Couchman <vn...@apache.org>.
On Mon, Jan 8, 2024 at 6:07 AM Joonas Tuomisto <jo...@gmail.com> wrote:
> Hi,
>
> I also ran into this exact issue it seems, but we're not using the
> Guacamole Docker images, instead we're using custom built RPM packages
> on OpenSUSE Leap 15.5 as a native systemd service.
>
> To me this does indeed look like some kind of resource leak in guacd.
>
> Initially everything works, but eventually guacd stops being able to
> initiate new connections, and it's not limited to just one protocol,
> at least both RDP and SSH are impacted.
>
> I'm not entirely sure how forking processes interact with system
> limits and how to debug this to find what resource exactly is being
> leaked.
>
> I attached to guacd with strace after encountering this state and
> initiated a new RDP/SSH connection and it does appear to be failing
> after a connect() but I didn't notice anything weird.
>
> connect() goes -1 EINPROGRESS and poll, recvfrom() goes -1 EAGAIN.
>
> There's indeed a whole bunch of eventfd2() when trying an RDP connection.
>
> guacd logs (for RDP):
> > RDP server closed/refused connection: Security negotiation failed (wrong
> security type?)
>
> guacd logs (for SSH):
> > GLib (gthread-posix.c): Unexpected error from C library during
> 'pthread_key_create': Resource temporarily unavailable. Aborting.
>
Interesting. If you're able to track down how this is leaking, that'd be
really helpful. I'm running 1.5.4 on CentOS 7, and not seeing this at all.
-Nick
RE: Major bug message log in guacd 1.5.4
Posted by Pål Hjelmeseth Myklebust <p....@usit.uio.no>.
We also experienced this. Upgraded from 1.5.3 to 1.5.4 and everything worked fine. The next day nobody was able to establish a connection. I did not have time to debug, so I downgraded the guacd server to 1.5.3, the web client and the extensions are still running 1.5.4, and everything works ok.
-
Pål
-----Original Message-----
From: Joonas Tuomisto <jo...@gmail.com>
Sent: Monday, January 8, 2024 12:06 PM
To: user@guacamole.apache.org
Subject: Re: Major bug message log in guacd 1.5.4
Hi,
I also ran into this exact issue it seems, but we're not using the Guacamole Docker images, instead we're using custom built RPM packages on OpenSUSE Leap 15.5 as a native systemd service.
To me this does indeed look like some kind of resource leak in guacd.
Initially everything works, but eventually guacd stops being able to initiate new connections, and it's not limited to just one protocol, at least both RDP and SSH are impacted.
I'm not entirely sure how forking processes interact with system limits and how to debug this to find what resource exactly is being leaked.
I attached to guacd with strace after encountering this state and initiated a new RDP/SSH connection and it does appear to be failing after a connect() but I didn't notice anything weird.
connect() goes -1 EINPROGRESS and poll, recvfrom() goes -1 EAGAIN.
There's indeed a whole bunch of eventfd2() when trying an RDP connection.
guacd logs (for RDP):
> RDP server closed/refused connection: Security negotiation failed
> (wrong security type?)
guacd logs (for SSH):
> GLib (gthread-posix.c): Unexpected error from C library during 'pthread_key_create': Resource temporarily unavailable. Aborting.
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org
Re: Major bug message log in guacd 1.5.4
Posted by Joonas Tuomisto <jo...@gmail.com>.
Hi,
I also ran into this exact issue it seems, but we're not using the
Guacamole Docker images, instead we're using custom built RPM packages
on OpenSUSE Leap 15.5 as a native systemd service.
To me this does indeed look like some kind of resource leak in guacd.
Initially everything works, but eventually guacd stops being able to
initiate new connections, and it's not limited to just one protocol,
at least both RDP and SSH are impacted.
I'm not entirely sure how forking processes interact with system
limits and how to debug this to find what resource exactly is being
leaked.
I attached to guacd with strace after encountering this state and
initiated a new RDP/SSH connection and it does appear to be failing
after a connect() but I didn't notice anything weird.
connect() goes -1 EINPROGRESS and poll, recvfrom() goes -1 EAGAIN.
There's indeed a whole bunch of eventfd2() when trying an RDP connection.
guacd logs (for RDP):
> RDP server closed/refused connection: Security negotiation failed (wrong security type?)
guacd logs (for SSH):
> GLib (gthread-posix.c): Unexpected error from C library during 'pthread_key_create': Resource temporarily unavailable. Aborting.
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org
Re: Major bug message log in guacd 1.5.4
Posted by Vieri <re...@yahoo.com.INVALID>.
On Saturday, January 6, 2024 at 06:50:38 AM GMT+1, Michael Jumper <mj...@apache.org> wrote:
> Interesting that there's so many eventfds. I wonder if there might be an underlying library call that's leaking these...
>
> To my knowledge, we're not opening any eventfds directly within the Guacamole codebase, but FreeRDP definitely does. There might be
> something that's not being freed quite right.
Hi,
I've hit the same issue again. Before restarting guacd and resuming normal operation, the processes were as shown below:
166475 ? 00:00:25 guacd
170223 ? 00:00:23 guacd
216997 ? 00:00:31 guacd
227763 ? 00:05:46 guacd
235636 ? 00:00:10 guacd
COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME
guacd 235636 guacd cwd DIR 253,4 4096 2 /
guacd 235636 guacd rtd DIR 253,4 4096 2 /
guacd 235636 guacd txt REG 253,4 43048 6304952 /usr/sbin/guacd
guacd 235636 guacd mem REG 253,4 88712 3801105 /lib64/libresolv-2.33.so
guacd 235636 guacd mem REG 253,4 403016 6303450 /usr/lib64/libopus.so.0.8.0
guacd 235636 guacd mem REG 253,4 280696 6303443 /usr/lib64/libFLAC.so.8.3.0
guacd 235636 guacd mem REG 253,4 571256 6303544 /usr/lib64/libsndfile.so.1.0.31
guacd 235636 guacd mem REG 253,4 607568 10635891 /usr/lib64/pulseaudio/libpulsecommon-15.0.so
guacd 235636 guacd mem REG 253,4 725464 6303397 /usr/lib64/libxvidcore.so.4.3
guacd 235636 guacd mem REG 253,4 1957104 6303394 /usr/lib64/libx264.so.157
guacd 235636 guacd mem REG 253,4 81216 6303521 /usr/lib64/libtheoradec.so.1.1.4
guacd 235636 guacd mem REG 253,4 201088 6303520 /usr/lib64/libtheoraenc.so.1.1.2
guacd 235636 guacd mem REG 253,4 332960 6303499 /usr/lib64/libmp3lame.so.0.0.0
guacd 235636 guacd mem REG 253,4 1799512 6303495 /usr/lib64/libdav1d.so.5.1.1
guacd 235636 guacd mem REG 253,4 48952 6303529 /usr/lib64/libwebpmux.so.3.0.5
guacd 235636 guacd mem REG 253,4 100520 6165345 /usr/lib/gcc/x86_64-pc-linux-gnu/11.2.0/libgcc_s.so.1
guacd 235636 guacd mem REG 253,4 2161136 6165346 /usr/lib/gcc/x86_64-pc-linux-gnu/11.2.0/libstdc++.so.6.0.29
guacd 235636 guacd mem REG 253,4 398864 6303568 /usr/lib64/libpulse.so.0.24.0
guacd 235636 guacd mem REG 253,4 1137224 6303457 /usr/lib64/libasound.so.2.0.0
guacd 235636 guacd mem REG 253,4 21888 6303405 /usr/lib64/libasyncns.so.0.3.1
guacd 235636 guacd mem REG 253,4 545576 6303597 /usr/lib64/libavutil.so.56.70.100
guacd 235636 guacd mem REG 253,4 12799736 6303592 /usr/lib64/libavcodec.so.58.134.100
guacd 235636 guacd mem REG 253,4 1136960 6303503 /usr/lib64/libopenh264.so.2.1.1
guacd 235636 guacd mem REG 253,4 621416 6303596 /usr/lib64/libswscale.so.5.9.100
guacd 235636 guacd mem REG 253,4 3785912 6305021 /usr/lib64/libwinpr2.so.2.4.1
guacd 235636 guacd mem REG 253,4 8510336 6305027 /usr/lib64/libfreerdp2.so.2.4.1
guacd 235636 guacd mem REG 253,4 161168 6303595 /usr/lib64/libswresample.so.3.9.100
guacd 235636 guacd mem REG 253,4 311328 6304853 /usr/lib64/libssh2.so.1.0.1
guacd 235636 guacd mem REG 253,4 3365648 6305030 /usr/lib64/libfreerdp-client2.so.2.4.1
guacd 235636 guacd mem REG 253,4 382104 6304965 /usr/lib64/libguac-client-rdp.so.0.0.0
guacd 235636 guacd mem REG 253,4 26760 3801190 /lib64/libnss_dns-2.33.so
guacd 235636 guacd mem REG 253,4 47384 3801196 /lib64/libnss_files-2.33.so
guacd 235636 guacd mem REG 253,4 74904 3801231 /lib64/libbz2.so.1.0.8
guacd 235636 guacd mem REG 253,4 194528 6300672 /usr/lib64/libexpat.so.1.8.1
guacd 235636 guacd mem REG 253,4 1304768 3801202 /lib64/libm-2.33.so
guacd 235636 guacd mem REG 253,4 108904 3801161 /lib64/libz.so.1.2.12
guacd 235636 guacd mem REG 253,4 899416 2104311 /usr/lib64/libfreetype.so.6.18.0
guacd 235636 guacd mem REG 253,4 333784 6301726 /usr/lib64/libfontconfig.so.1.12.0
guacd 235636 guacd mem REG 253,4 746480 6304850 /usr/lib64/libpixman-1.so.0.40.0
guacd 235636 guacd mem REG 253,4 35640 3801255 /lib64/librt-2.33.so
guacd 235636 guacd mem REG 253,4 492856 6303531 /usr/lib64/libwebp.so.7.1.0
guacd 235636 guacd mem REG 253,4 803280 6303486 /usr/lib64/libvorbisenc.so.2.0.12
guacd 235636 guacd mem REG 253,4 193664 6303488 /usr/lib64/libvorbis.so.0.4.9
guacd 235636 guacd mem REG 253,4 43800 6303391 /usr/lib64/libogg.so.0.8.5
guacd 235636 guacd mem REG 253,4 36384 3801192 /lib64/libuuid.so.1.3.0
guacd 235636 guacd mem REG 253,4 3205896 6300957 /usr/lib64/libcrypto.so.1.1
guacd 235636 guacd mem REG 253,4 249656 1843283 /usr/lib64/libpng16.so.16.37.0
guacd 235636 guacd mem REG 253,4 678872 6301722 /usr/lib64/libjpeg.so.62.3.0
guacd 235636 guacd mem REG 253,4 18496 3801205 /lib64/libdl-2.33.so
guacd 235636 guacd mem REG 253,4 1174792 6304866 /usr/lib64/libcairo.so.2.11600.0
guacd 235636 guacd mem REG 253,4 1794208 3801204 /lib64/libc-2.33.so
guacd 235636 guacd mem REG 253,4 681336 6300958 /usr/lib64/libssl.so.1.1
guacd 235636 guacd mem REG 253,4 147448 3801215 /lib64/libpthread-2.33.so
guacd 235636 guacd mem REG 253,4 139352 6303876 /usr/lib64/libguac.so.23.0.0
guacd 235636 guacd mem REG 253,4 15448 6303889 /usr/lib64/freerdp2/libguac-common-svc-client.so
guacd 235636 guacd mem REG 253,4 202224 3801090 /lib64/ld-2.33.so
guacd 235636 guacd 0r CHR 1,3 0t0 4 /dev/null
guacd 235636 guacd 1w CHR 1,3 0t0 4 /dev/null
guacd 235636 guacd 2w CHR 1,3 0t0 4 /dev/null
guacd 235636 guacd 3u unix 0x0000000078543b10 0t0 373203549 type=DGRAM
guacd 235636 guacd 4u IPv4 360435966 0t0 TCP localhost:4822 (LISTEN)
guacd 235636 guacd 5u IPv4 373246904 0t0 TCP localhost:4822->localhost:47744 (ESTABLISHED)
guacd 235636 guacd 6u IPv4 373246505 0t0 TCP localhost:4822->localhost:46866 (ESTABLISHED)
guacd 235636 guacd 7u IPv4 373390195 0t0 TCP localhost:4822->localhost:60164 (CLOSE_WAIT)
guacd 235636 guacd 8u unix 0x00000000668b104e 0t0 373262705 type=STREAM
guacd 235636 guacd 9u unix 0x000000008875554c 0t0 373262704 type=DGRAM
guacd 235636 guacd 10u unix 0x0000000038a3d7d3 0t0 373259625 type=STREAM
guacd 235636 guacd 11u unix 0x000000003cb5202e 0t0 373259624 type=DGRAM
guacd 235636 guacd 12u IPv4 373390050 0t0 TCP localhost:4822->localhost:57868 (ESTABLISHED)
guacd 235636 guacd 13u unix 0x000000001ab34ec5 0t0 373400808 type=STREAM
guacd 235636 guacd 14u unix 0x000000003197c47a 0t0 373400807 type=DGRAM
guacd 235636 guacd 15u IPv4 373431497 0t0 TCP localhost:4822->localhost:60946 (ESTABLISHED)
guacd 235636 guacd 16u unix 0x000000001b715c93 0t0 373425660 type=STREAM
guacd 235636 guacd 17u unix 0x000000007271438f 0t0 373425659 type=DGRAM
guacd 235636 guacd 18u unix 0x00000000ecb23882 0t0 373441766 type=STREAM
guacd 235636 guacd 19u unix 0x000000003af310f5 0t0 373441763 type=DGRAM
guacd 235636 guacd 20u a_inode 0,13 0 14718 [eventfd:31]
guacd 235636 guacd 21u a_inode 0,13 0 14718 [eventfd:108]
guacd 235636 guacd 22u a_inode 0,13 0 14718 [eventfd:180]
guacd 235636 guacd 23u a_inode 0,13 0 14718 [eventfd:316]
guacd 235636 guacd 24u a_inode 0,13 0 14718 [eventfd:317]
guacd 235636 guacd 25u a_inode 0,13 0 14718 [eventfd:318]
guacd 235636 guacd 26u a_inode 0,13 0 14718 [eventfd:319]
guacd 235636 guacd 27u a_inode 0,13 0 14718 [eventfd:320]
guacd 235636 guacd 28u a_inode 0,13 0 14718 [eventfd:321]
guacd 235636 guacd 29u a_inode 0,13 0 14718 [eventfd:322]
guacd 235636 guacd 30u a_inode 0,13 0 14718 [eventfd:323]
guacd 235636 guacd 31u a_inode 0,13 0 14718 [eventfd:324]
guacd 235636 guacd 32u a_inode 0,13 0 14718 [eventfd:325]
guacd 235636 guacd 33u a_inode 0,13 0 14718 [eventfd:326]
guacd 235636 guacd 34u a_inode 0,13 0 14718 [eventfd:327]
guacd 235636 guacd 35u a_inode 0,13 0 14718 [eventfd:328]
guacd 235636 guacd 36u a_inode 0,13 0 14718 [eventfd:329]
guacd 235636 guacd 37u a_inode 0,13 0 14718 [eventfd:330]
guacd 235636 guacd 38u a_inode 0,13 0 14718 [eventfd:331]
guacd 235636 guacd 39u a_inode 0,13 0 14718 [eventfd:332]
guacd 235636 guacd 40u a_inode 0,13 0 14718 [eventfd:333]
guacd 235636 guacd 41u a_inode 0,13 0 14718 [eventfd:334]
guacd 235636 guacd 42u a_inode 0,13 0 14718 [eventfd:335]
guacd 235636 guacd 43u a_inode 0,13 0 14718 [eventfd:336]
guacd 235636 guacd 44u a_inode 0,13 0 14718 [eventfd:337]
guacd 235636 guacd 45u a_inode 0,13 0 14718 [eventfd:338]
guacd 235636 guacd 46u a_inode 0,13 0 14718 [eventfd:339]
guacd 235636 guacd 47u a_inode 0,13 0 14718 [eventfd:340]
guacd 235636 guacd 48u a_inode 0,13 0 14718 [eventfd:341]
guacd 235636 guacd 49u a_inode 0,13 0 14718 [eventfd:342]
guacd 235636 guacd 50u a_inode 0,13 0 14718 [eventfd:343]
guacd 235636 guacd 51u a_inode 0,13 0 14718 [eventfd:344]
guacd 235636 guacd 52u a_inode 0,13 0 14718 [eventfd:345]
guacd 235636 guacd 53u a_inode 0,13 0 14718 [eventfd:346]
guacd 235636 guacd 54u a_inode 0,13 0 14718 [eventfd:347]
guacd 235636 guacd 55u a_inode 0,13 0 14718 [eventfd:348]
guacd 235636 guacd 56u a_inode 0,13 0 14718 [eventfd:349]
guacd 235636 guacd 57u a_inode 0,13 0 14718 [eventfd:350]
guacd 235636 guacd 58u a_inode 0,13 0 14718 [eventfd:351]
guacd 235636 guacd 59u a_inode 0,13 0 14718 [eventfd:352]
guacd 235636 guacd 60u a_inode 0,13 0 14718 [eventfd:353]
guacd 235636 guacd 61u a_inode 0,13 0 14718 [eventfd:354]
guacd 235636 guacd 62u a_inode 0,13 0 14718 [eventfd:355]
guacd 235636 guacd 63u a_inode 0,13 0 14718 [eventfd:356]
guacd 235636 guacd 64u a_inode 0,13 0 14718 [eventfd:357]
guacd 235636 guacd 65u a_inode 0,13 0 14718 [eventfd:358]
guacd 235636 guacd 66u a_inode 0,13 0 14718 [eventfd:359]
guacd 235636 guacd 67u a_inode 0,13 0 14718 [eventfd:360]
guacd 235636 guacd 68u a_inode 0,13 0 14718 [eventfd:361]
guacd 235636 guacd 69u a_inode 0,13 0 14718 [eventfd:362]
guacd 235636 guacd 70u a_inode 0,13 0 14718 [eventfd:363]
guacd 235636 guacd 71u a_inode 0,13 0 14718 [eventfd:364]
guacd 235636 guacd 72u a_inode 0,13 0 14718 [eventfd:365]
guacd 235636 guacd 73u a_inode 0,13 0 14718 [eventfd:366]
guacd 235636 guacd 74u a_inode 0,13 0 14718 [eventfd:367]
guacd 235636 guacd 75u a_inode 0,13 0 14718 [eventfd:368]
guacd 235636 guacd 76u a_inode 0,13 0 14718 [eventfd:369]
guacd 235636 guacd 77u a_inode 0,13 0 14718 [eventfd:370]
guacd 235636 guacd 78u a_inode 0,13 0 14718 [eventfd:371]
guacd 235636 guacd 79u a_inode 0,13 0 14718 [eventfd:372]
guacd 235636 guacd 80u a_inode 0,13 0 14718 [eventfd:373]
guacd 235636 guacd 81u a_inode 0,13 0 14718 [eventfd:374]
guacd 235636 guacd 82u IPv4 373439738 0t0 TCP 10.1.144.254:46070->10.1.144.245:ms-wbt-server (ESTABLISHED)
guacd 235636 guacd 83u a_inode 0,13 0 14718 [eventfd:375]
guacd 235636 guacd 84u a_inode 0,13 0 14718 [eventfd:376]
guacd 235636 guacd 85u a_inode 0,13 0 14718 [eventfd:377]
guacd 235636 guacd 86u a_inode 0,13 0 14718 [eventfd:378]
guacd 235636 guacd 87u a_inode 0,13 0 14718 [eventfd:379]
COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME
guacd 227763 guacd cwd DIR 253,4 4096 2 /
guacd 227763 guacd rtd DIR 253,4 4096 2 /
guacd 227763 guacd txt REG 253,4 43048 6304952 /usr/sbin/guacd
guacd 227763 guacd mem REG 253,4 74904 3801231 /lib64/libbz2.so.1.0.8
guacd 227763 guacd mem REG 253,4 194528 6300672 /usr/lib64/libexpat.so.1.8.1
guacd 227763 guacd mem REG 253,4 1304768 3801202 /lib64/libm-2.33.so
guacd 227763 guacd mem REG 253,4 108904 3801161 /lib64/libz.so.1.2.12
guacd 227763 guacd mem REG 253,4 899416 2104311 /usr/lib64/libfreetype.so.6.18.0
guacd 227763 guacd mem REG 253,4 333784 6301726 /usr/lib64/libfontconfig.so.1.12.0
guacd 227763 guacd mem REG 253,4 746480 6304850 /usr/lib64/libpixman-1.so.0.40.0
guacd 227763 guacd mem REG 253,4 35640 3801255 /lib64/librt-2.33.so
guacd 227763 guacd mem REG 253,4 492856 6303531 /usr/lib64/libwebp.so.7.1.0
guacd 227763 guacd mem REG 253,4 803280 6303486 /usr/lib64/libvorbisenc.so.2.0.12
guacd 227763 guacd mem REG 253,4 193664 6303488 /usr/lib64/libvorbis.so.0.4.9
guacd 227763 guacd mem REG 253,4 43800 6303391 /usr/lib64/libogg.so.0.8.5
guacd 227763 guacd mem REG 253,4 36384 3801192 /lib64/libuuid.so.1.3.0
guacd 227763 guacd mem REG 253,4 3205896 6300957 /usr/lib64/libcrypto.so.1.1
guacd 227763 guacd mem REG 253,4 249656 1843283 /usr/lib64/libpng16.so.16.37.0
guacd 227763 guacd mem REG 253,4 678872 6301722 /usr/lib64/libjpeg.so.62.3.0
guacd 227763 guacd mem REG 253,4 18496 3801205 /lib64/libdl-2.33.so
guacd 227763 guacd mem REG 253,4 1174792 6304866 /usr/lib64/libcairo.so.2.11600.0
guacd 227763 guacd mem REG 253,4 1794208 3801204 /lib64/libc-2.33.so
guacd 227763 guacd mem REG 253,4 681336 6300958 /usr/lib64/libssl.so.1.1
guacd 227763 guacd mem REG 253,4 147448 3801215 /lib64/libpthread-2.33.so
guacd 227763 guacd mem REG 253,4 139352 6303876 /usr/lib64/libguac.so.23.0.0
guacd 227763 guacd mem REG 253,4 202224 3801090 /lib64/ld-2.33.so
guacd 227763 guacd 0r CHR 1,3 0t0 4 /dev/null
guacd 227763 guacd 1w CHR 1,3 0t0 4 /dev/null
guacd 227763 guacd 2w CHR 1,3 0t0 4 /dev/null
guacd 227763 guacd 3u unix 0x0000000078543b10 0t0 373203549 type=DGRAM
guacd 227763 guacd 4u IPv4 360435966 0t0 TCP localhost:4822 (LISTEN)
guacd 227763 guacd 5u IPv4 373246904 0t0 TCP localhost:4822->localhost:47744 (ESTABLISHED)
guacd 227763 guacd 6u IPv4 373246505 0t0 TCP localhost:4822->localhost:46866 (ESTABLISHED)
guacd 227763 guacd 8u unix 0x00000000668b104e 0t0 373262705 type=STREAM
guacd 227763 guacd 9u unix 0x000000008875554c 0t0 373262704 type=DGRAM
guacd 227763 guacd 10u unix 0x0000000038a3d7d3 0t0 373259625 type=STREAM
guacd 227763 guacd 11u unix 0x000000003cb5202e 0t0 373259624 type=DGRAM
guacd 227763 guacd 12u IPv4 373390050 0t0 TCP localhost:4822->localhost:57868 (ESTABLISHED)
guacd 227763 guacd 13u unix 0x000000001ab34ec5 0t0 373400808 type=STREAM
guacd 227763 guacd 14u unix 0x000000003197c47a 0t0 373400807 type=DGRAM
guacd 227763 guacd 15u IPv4 373431497 0t0 TCP localhost:4822->localhost:60946 (ESTABLISHED)
guacd 227763 guacd 19u unix 0x000000003157ed56 0t0 373441765 type=STREAM
guacd 227763 guacd 20u unix 0x00000000b196844d 0t0 373441764 type=DGRAM
COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME
guacd 216997 guacd cwd DIR 253,4 4096 2 /
guacd 216997 guacd rtd DIR 253,4 4096 2 /
guacd 216997 guacd txt REG 253,4 43048 6304952 /usr/sbin/guacd
guacd 216997 guacd mem REG 253,4 88712 3801105 /lib64/libresolv-2.33.so
guacd 216997 guacd mem REG 253,4 403016 6303450 /usr/lib64/libopus.so.0.8.0
guacd 216997 guacd mem REG 253,4 280696 6303443 /usr/lib64/libFLAC.so.8.3.0
guacd 216997 guacd mem REG 253,4 21888 6303405 /usr/lib64/libasyncns.so.0.3.1
guacd 216997 guacd mem REG 253,4 571256 6303544 /usr/lib64/libsndfile.so.1.0.31
guacd 216997 guacd mem REG 253,4 607568 10635891 /usr/lib64/pulseaudio/libpulsecommon-15.0.so
guacd 216997 guacd mem REG 253,4 725464 6303397 /usr/lib64/libxvidcore.so.4.3
guacd 216997 guacd mem REG 253,4 1957104 6303394 /usr/lib64/libx264.so.157
guacd 216997 guacd mem REG 253,4 81216 6303521 /usr/lib64/libtheoradec.so.1.1.4
guacd 216997 guacd mem REG 253,4 201088 6303520 /usr/lib64/libtheoraenc.so.1.1.2
guacd 216997 guacd mem REG 253,4 332960 6303499 /usr/lib64/libmp3lame.so.0.0.0
guacd 216997 guacd mem REG 253,4 1799512 6303495 /usr/lib64/libdav1d.so.5.1.1
guacd 216997 guacd mem REG 253,4 48952 6303529 /usr/lib64/libwebpmux.so.3.0.5
guacd 216997 guacd mem REG 253,4 100520 6165345 /usr/lib/gcc/x86_64-pc-linux-gnu/11.2.0/libgcc_s.so.1
guacd 216997 guacd mem REG 253,4 2161136 6165346 /usr/lib/gcc/x86_64-pc-linux-gnu/11.2.0/libstdc++.so.6.0.29
guacd 216997 guacd mem REG 253,4 398864 6303568 /usr/lib64/libpulse.so.0.24.0
guacd 216997 guacd mem REG 253,4 1137224 6303457 /usr/lib64/libasound.so.2.0.0
guacd 216997 guacd mem REG 253,4 545576 6303597 /usr/lib64/libavutil.so.56.70.100
guacd 216997 guacd mem REG 253,4 12799736 6303592 /usr/lib64/libavcodec.so.58.134.100
guacd 216997 guacd mem REG 253,4 1136960 6303503 /usr/lib64/libopenh264.so.2.1.1
guacd 216997 guacd mem REG 253,4 621416 6303596 /usr/lib64/libswscale.so.5.9.100
guacd 216997 guacd mem REG 253,4 3785912 6305021 /usr/lib64/libwinpr2.so.2.4.1
guacd 216997 guacd mem REG 253,4 8510336 6305027 /usr/lib64/libfreerdp2.so.2.4.1
guacd 216997 guacd mem REG 253,4 161168 6303595 /usr/lib64/libswresample.so.3.9.100
guacd 216997 guacd mem REG 253,4 311328 6304853 /usr/lib64/libssh2.so.1.0.1
guacd 216997 guacd mem REG 253,4 3365648 6305030 /usr/lib64/libfreerdp-client2.so.2.4.1
guacd 216997 guacd mem REG 253,4 382104 6304965 /usr/lib64/libguac-client-rdp.so.0.0.0
guacd 216997 guacd mem REG 253,4 74904 3801231 /lib64/libbz2.so.1.0.8
guacd 216997 guacd mem REG 253,4 194528 6300672 /usr/lib64/libexpat.so.1.8.1
guacd 216997 guacd mem REG 253,4 1304768 3801202 /lib64/libm-2.33.so
guacd 216997 guacd mem REG 253,4 108904 3801161 /lib64/libz.so.1.2.12
guacd 216997 guacd mem REG 253,4 899416 2104311 /usr/lib64/libfreetype.so.6.18.0
guacd 216997 guacd mem REG 253,4 333784 6301726 /usr/lib64/libfontconfig.so.1.12.0
guacd 216997 guacd mem REG 253,4 746480 6304850 /usr/lib64/libpixman-1.so.0.40.0
guacd 216997 guacd mem REG 253,4 35640 3801255 /lib64/librt-2.33.so
guacd 216997 guacd mem REG 253,4 492856 6303531 /usr/lib64/libwebp.so.7.1.0
guacd 216997 guacd mem REG 253,4 803280 6303486 /usr/lib64/libvorbisenc.so.2.0.12
guacd 216997 guacd mem REG 253,4 193664 6303488 /usr/lib64/libvorbis.so.0.4.9
guacd 216997 guacd mem REG 253,4 43800 6303391 /usr/lib64/libogg.so.0.8.5
guacd 216997 guacd mem REG 253,4 36384 3801192 /lib64/libuuid.so.1.3.0
guacd 216997 guacd mem REG 253,4 3205896 6300957 /usr/lib64/libcrypto.so.1.1
guacd 216997 guacd mem REG 253,4 249656 1843283 /usr/lib64/libpng16.so.16.37.0
guacd 216997 guacd mem REG 253,4 678872 6301722 /usr/lib64/libjpeg.so.62.3.0
guacd 216997 guacd mem REG 253,4 18496 3801205 /lib64/libdl-2.33.so
guacd 216997 guacd mem REG 253,4 1174792 6304866 /usr/lib64/libcairo.so.2.11600.0
guacd 216997 guacd mem REG 253,4 1794208 3801204 /lib64/libc-2.33.so
guacd 216997 guacd mem REG 253,4 681336 6300958 /usr/lib64/libssl.so.1.1
guacd 216997 guacd mem REG 253,4 147448 3801215 /lib64/libpthread-2.33.so
guacd 216997 guacd mem REG 253,4 139352 6303876 /usr/lib64/libguac.so.23.0.0
guacd 216997 guacd mem REG 253,4 15448 6303889 /usr/lib64/freerdp2/libguac-common-svc-client.so
guacd 216997 guacd mem REG 253,4 202224 3801090 /lib64/ld-2.33.so
guacd 216997 guacd 0r CHR 1,3 0t0 4 /dev/null
guacd 216997 guacd 1w CHR 1,3 0t0 4 /dev/null
guacd 216997 guacd 2w CHR 1,3 0t0 4 /dev/null
guacd 216997 guacd 3u unix 0x0000000078543b10 0t0 373203549 type=DGRAM
guacd 216997 guacd 4u IPv4 360435966 0t0 TCP localhost:4822 (LISTEN)
guacd 216997 guacd 5u IPv4 373246904 0t0 TCP localhost:4822->localhost:47744 (ESTABLISHED)
guacd 216997 guacd 6u IPv4 373246505 0t0 TCP localhost:4822->localhost:46866 (ESTABLISHED)
guacd 216997 guacd 7u unix 0x00000000ba87a912 0t0 373400809 type=STREAM
guacd 216997 guacd 8u unix 0x00000000668b104e 0t0 373262705 type=STREAM
guacd 216997 guacd 9u unix 0x000000008875554c 0t0 373262704 type=DGRAM
guacd 216997 guacd 10u unix 0x0000000038a3d7d3 0t0 373259625 type=STREAM
guacd 216997 guacd 11u unix 0x000000003cb5202e 0t0 373259624 type=DGRAM
guacd 216997 guacd 12u IPv4 373390050 0t0 TCP localhost:4822->localhost:57868 (ESTABLISHED)
guacd 216997 guacd 13u unix 0x0000000014779e8a 0t0 373400806 type=DGRAM
guacd 216997 guacd 14u a_inode 0,13 0 14718 [eventfd:182]
guacd 216997 guacd 15u a_inode 0,13 0 14718 [eventfd:184]
guacd 216997 guacd 16u a_inode 0,13 0 14718 [eventfd:185]
guacd 216997 guacd 17u a_inode 0,13 0 14718 [eventfd:186]
guacd 216997 guacd 18u a_inode 0,13 0 14718 [eventfd:187]
guacd 216997 guacd 19u a_inode 0,13 0 14718 [eventfd:188]
guacd 216997 guacd 20u a_inode 0,13 0 14718 [eventfd:189]
guacd 216997 guacd 21u a_inode 0,13 0 14718 [eventfd:190]
guacd 216997 guacd 22u a_inode 0,13 0 14718 [eventfd:191]
guacd 216997 guacd 23u a_inode 0,13 0 14718 [eventfd:192]
guacd 216997 guacd 24u a_inode 0,13 0 14718 [eventfd:193]
guacd 216997 guacd 25u a_inode 0,13 0 14718 [eventfd:194]
guacd 216997 guacd 26u a_inode 0,13 0 14718 [eventfd:195]
guacd 216997 guacd 27u a_inode 0,13 0 14718 [eventfd:196]
guacd 216997 guacd 28u a_inode 0,13 0 14718 [eventfd:197]
guacd 216997 guacd 29u a_inode 0,13 0 14718 [eventfd:198]
guacd 216997 guacd 30u a_inode 0,13 0 14718 [eventfd:199]
guacd 216997 guacd 31u a_inode 0,13 0 14718 [eventfd:200]
guacd 216997 guacd 32u a_inode 0,13 0 14718 [eventfd:201]
guacd 216997 guacd 33u a_inode 0,13 0 14718 [eventfd:202]
guacd 216997 guacd 34u a_inode 0,13 0 14718 [eventfd:203]
guacd 216997 guacd 35u a_inode 0,13 0 14718 [eventfd:204]
guacd 216997 guacd 36u a_inode 0,13 0 14718 [eventfd:205]
guacd 216997 guacd 37u a_inode 0,13 0 14718 [eventfd:206]
guacd 216997 guacd 38u a_inode 0,13 0 14718 [eventfd:207]
guacd 216997 guacd 39u a_inode 0,13 0 14718 [eventfd:208]
guacd 216997 guacd 40u a_inode 0,13 0 14718 [eventfd:209]
guacd 216997 guacd 41u a_inode 0,13 0 14718 [eventfd:210]
guacd 216997 guacd 42u a_inode 0,13 0 14718 [eventfd:211]
guacd 216997 guacd 43u a_inode 0,13 0 14718 [eventfd:212]
guacd 216997 guacd 44u a_inode 0,13 0 14718 [eventfd:213]
guacd 216997 guacd 45u a_inode 0,13 0 14718 [eventfd:214]
guacd 216997 guacd 46u a_inode 0,13 0 14718 [eventfd:215]
guacd 216997 guacd 47u a_inode 0,13 0 14718 [eventfd:216]
guacd 216997 guacd 48u a_inode 0,13 0 14718 [eventfd:217]
guacd 216997 guacd 49u a_inode 0,13 0 14718 [eventfd:218]
guacd 216997 guacd 50u a_inode 0,13 0 14718 [eventfd:219]
guacd 216997 guacd 51u a_inode 0,13 0 14718 [eventfd:220]
guacd 216997 guacd 52u a_inode 0,13 0 14718 [eventfd:221]
guacd 216997 guacd 53u a_inode 0,13 0 14718 [eventfd:222]
guacd 216997 guacd 54u a_inode 0,13 0 14718 [eventfd:223]
guacd 216997 guacd 55u a_inode 0,13 0 14718 [eventfd:224]
guacd 216997 guacd 56u a_inode 0,13 0 14718 [eventfd:225]
guacd 216997 guacd 57u a_inode 0,13 0 14718 [eventfd:226]
guacd 216997 guacd 58u a_inode 0,13 0 14718 [eventfd:227]
guacd 216997 guacd 59u a_inode 0,13 0 14718 [eventfd:228]
guacd 216997 guacd 60u a_inode 0,13 0 14718 [eventfd:229]
guacd 216997 guacd 61u a_inode 0,13 0 14718 [eventfd:230]
guacd 216997 guacd 62u a_inode 0,13 0 14718 [eventfd:231]
guacd 216997 guacd 63u a_inode 0,13 0 14718 [eventfd:232]
guacd 216997 guacd 64u a_inode 0,13 0 14718 [eventfd:233]
guacd 216997 guacd 65u a_inode 0,13 0 14718 [eventfd:234]
guacd 216997 guacd 66u a_inode 0,13 0 14718 [eventfd:235]
guacd 216997 guacd 67u a_inode 0,13 0 14718 [eventfd:236]
guacd 216997 guacd 68u a_inode 0,13 0 14718 [eventfd:237]
guacd 216997 guacd 69u a_inode 0,13 0 14718 [eventfd:238]
guacd 216997 guacd 70u a_inode 0,13 0 14718 [eventfd:239]
guacd 216997 guacd 71u a_inode 0,13 0 14718 [eventfd:240]
guacd 216997 guacd 72u a_inode 0,13 0 14718 [eventfd:241]
guacd 216997 guacd 73u a_inode 0,13 0 14718 [eventfd:242]
guacd 216997 guacd 74u a_inode 0,13 0 14718 [eventfd:243]
guacd 216997 guacd 75u a_inode 0,13 0 14718 [eventfd:244]
guacd 216997 guacd 76u IPv4 373406758 0t0 TCP 10.1.144.254:46282->10.1.144.244:ms-wbt-server (ESTABLISHED)
guacd 216997 guacd 77u a_inode 0,13 0 14718 [eventfd:245]
guacd 216997 guacd 78u a_inode 0,13 0 14718 [eventfd:246]
guacd 216997 guacd 79u a_inode 0,13 0 14718 [eventfd:247]
guacd 216997 guacd 80u a_inode 0,13 0 14718 [eventfd:248]
guacd 216997 guacd 81u a_inode 0,13 0 14718 [eventfd:249]
COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME
guacd 170223 guacd cwd DIR 253,4 4096 2 /
guacd 170223 guacd rtd DIR 253,4 4096 2 /
guacd 170223 guacd txt REG 253,4 43048 6304952 /usr/sbin/guacd
guacd 170223 guacd mem REG 253,4 73584 6303890 /usr/lib64/freerdp2/libguacai-client.so
guacd 170223 guacd mem REG 253,4 26760 3801190 /lib64/libnss_dns-2.33.so
guacd 170223 guacd mem REG 253,4 47384 3801196 /lib64/libnss_files-2.33.so
guacd 170223 guacd mem REG 253,4 88712 3801105 /lib64/libresolv-2.33.so
guacd 170223 guacd mem REG 253,4 403016 6303450 /usr/lib64/libopus.so.0.8.0
guacd 170223 guacd mem REG 253,4 571256 6303544 /usr/lib64/libsndfile.so.1.0.31
guacd 170223 guacd mem REG 253,4 725464 6303397 /usr/lib64/libxvidcore.so.4.3
guacd 170223 guacd mem REG 253,4 12799736 6303592 /usr/lib64/libavcodec.so.58.134.100
guacd 170223 guacd mem REG 253,4 280696 6303443 /usr/lib64/libFLAC.so.8.3.0
guacd 170223 guacd mem REG 253,4 21888 6303405 /usr/lib64/libasyncns.so.0.3.1
guacd 170223 guacd mem REG 253,4 607568 10635891 /usr/lib64/pulseaudio/libpulsecommon-15.0.so
guacd 170223 guacd mem REG 253,4 1957104 6303394 /usr/lib64/libx264.so.157
guacd 170223 guacd mem REG 253,4 81216 6303521 /usr/lib64/libtheoradec.so.1.1.4
guacd 170223 guacd mem REG 253,4 201088 6303520 /usr/lib64/libtheoraenc.so.1.1.2
guacd 170223 guacd mem REG 253,4 332960 6303499 /usr/lib64/libmp3lame.so.0.0.0
guacd 170223 guacd mem REG 253,4 1799512 6303495 /usr/lib64/libdav1d.so.5.1.1
guacd 170223 guacd mem REG 253,4 48952 6303529 /usr/lib64/libwebpmux.so.3.0.5
guacd 170223 guacd mem REG 253,4 100520 6165345 /usr/lib/gcc/x86_64-pc-linux-gnu/11.2.0/libgcc_s.so.1
guacd 170223 guacd mem REG 253,4 2161136 6165346 /usr/lib/gcc/x86_64-pc-linux-gnu/11.2.0/libstdc++.so.6.0.29
guacd 170223 guacd mem REG 253,4 398864 6303568 /usr/lib64/libpulse.so.0.24.0
guacd 170223 guacd mem REG 253,4 1137224 6303457 /usr/lib64/libasound.so.2.0.0
guacd 170223 guacd mem REG 253,4 161168 6303595 /usr/lib64/libswresample.so.3.9.100
guacd 170223 guacd mem REG 253,4 545576 6303597 /usr/lib64/libavutil.so.56.70.100
guacd 170223 guacd mem REG 253,4 1136960 6303503 /usr/lib64/libopenh264.so.2.1.1
guacd 170223 guacd mem REG 253,4 621416 6303596 /usr/lib64/libswscale.so.5.9.100
guacd 170223 guacd mem REG 253,4 311328 6304853 /usr/lib64/libssh2.so.1.0.1
guacd 170223 guacd mem REG 253,4 3785912 6305021 /usr/lib64/libwinpr2.so.2.4.1
guacd 170223 guacd mem REG 253,4 3365648 6305030 /usr/lib64/libfreerdp-client2.so.2.4.1
guacd 170223 guacd mem REG 253,4 8510336 6305027 /usr/lib64/libfreerdp2.so.2.4.1
guacd 170223 guacd mem REG 253,4 382104 6304965 /usr/lib64/libguac-client-rdp.so.0.0.0
guacd 170223 guacd mem REG 253,4 74904 3801231 /lib64/libbz2.so.1.0.8
guacd 170223 guacd mem REG 253,4 194528 6300672 /usr/lib64/libexpat.so.1.8.1
guacd 170223 guacd mem REG 253,4 1304768 3801202 /lib64/libm-2.33.so
guacd 170223 guacd mem REG 253,4 108904 3801161 /lib64/libz.so.1.2.12
guacd 170223 guacd mem REG 253,4 899416 2104311 /usr/lib64/libfreetype.so.6.18.0
guacd 170223 guacd mem REG 253,4 333784 6301726 /usr/lib64/libfontconfig.so.1.12.0
guacd 170223 guacd mem REG 253,4 746480 6304850 /usr/lib64/libpixman-1.so.0.40.0
guacd 170223 guacd mem REG 253,4 35640 3801255 /lib64/librt-2.33.so
guacd 170223 guacd mem REG 253,4 492856 6303531 /usr/lib64/libwebp.so.7.1.0
guacd 170223 guacd mem REG 253,4 803280 6303486 /usr/lib64/libvorbisenc.so.2.0.12
guacd 170223 guacd mem REG 253,4 193664 6303488 /usr/lib64/libvorbis.so.0.4.9
guacd 170223 guacd mem REG 253,4 43800 6303391 /usr/lib64/libogg.so.0.8.5
guacd 170223 guacd mem REG 253,4 36384 3801192 /lib64/libuuid.so.1.3.0
guacd 170223 guacd mem REG 253,4 3205896 6300957 /usr/lib64/libcrypto.so.1.1
guacd 170223 guacd mem REG 253,4 249656 1843283 /usr/lib64/libpng16.so.16.37.0
guacd 170223 guacd mem REG 253,4 678872 6301722 /usr/lib64/libjpeg.so.62.3.0
guacd 170223 guacd mem REG 253,4 18496 3801205 /lib64/libdl-2.33.so
guacd 170223 guacd mem REG 253,4 1174792 6304866 /usr/lib64/libcairo.so.2.11600.0
guacd 170223 guacd mem REG 253,4 1794208 3801204 /lib64/libc-2.33.so
guacd 170223 guacd mem REG 253,4 681336 6300958 /usr/lib64/libssl.so.1.1
guacd 170223 guacd mem REG 253,4 147448 3801215 /lib64/libpthread-2.33.so
guacd 170223 guacd mem REG 253,4 139352 6303876 /usr/lib64/libguac.so.23.0.0
guacd 170223 guacd mem REG 253,4 15448 6303889 /usr/lib64/freerdp2/libguac-common-svc-client.so
guacd 170223 guacd mem REG 253,4 202224 3801090 /lib64/ld-2.33.so
guacd 170223 guacd 0r CHR 1,3 0t0 4 /dev/null
guacd 170223 guacd 1w CHR 1,3 0t0 4 /dev/null
guacd 170223 guacd 2w CHR 1,3 0t0 4 /dev/null
guacd 170223 guacd 3u unix 0x0000000078543b10 0t0 373203549 type=DGRAM
guacd 170223 guacd 4u IPv4 360435966 0t0 TCP localhost:4822 (LISTEN)
guacd 170223 guacd 5u IPv4 373246904 0t0 TCP localhost:4822->localhost:47744 (ESTABLISHED)
guacd 170223 guacd 6u IPv4 373246505 0t0 TCP localhost:4822->localhost:46866 (ESTABLISHED)
guacd 170223 guacd 7u unix 0x000000004b6d16ac 0t0 373262706 type=STREAM
guacd 170223 guacd 8u unix 0x000000000b6168d4 0t0 373262703 type=DGRAM
guacd 170223 guacd 9u a_inode 0,13 0 14718 [eventfd:46]
guacd 170223 guacd 10u unix 0x0000000038a3d7d3 0t0 373259625 type=STREAM
guacd 170223 guacd 11u unix 0x000000003cb5202e 0t0 373259624 type=DGRAM
guacd 170223 guacd 12u a_inode 0,13 0 14718 [eventfd:47]
guacd 170223 guacd 13u a_inode 0,13 0 14718 [eventfd:48]
guacd 170223 guacd 14u a_inode 0,13 0 14718 [eventfd:49]
guacd 170223 guacd 15u a_inode 0,13 0 14718 [eventfd:51]
guacd 170223 guacd 16u a_inode 0,13 0 14718 [eventfd:52]
guacd 170223 guacd 17u a_inode 0,13 0 14718 [eventfd:53]
guacd 170223 guacd 18u a_inode 0,13 0 14718 [eventfd:54]
guacd 170223 guacd 19u a_inode 0,13 0 14718 [eventfd:55]
guacd 170223 guacd 20u a_inode 0,13 0 14718 [eventfd:56]
guacd 170223 guacd 21u a_inode 0,13 0 14718 [eventfd:57]
guacd 170223 guacd 22u a_inode 0,13 0 14718 [eventfd:58]
guacd 170223 guacd 23u a_inode 0,13 0 14718 [eventfd:59]
guacd 170223 guacd 24u a_inode 0,13 0 14718 [eventfd:60]
guacd 170223 guacd 25u a_inode 0,13 0 14718 [eventfd:61]
guacd 170223 guacd 26u a_inode 0,13 0 14718 [eventfd:62]
guacd 170223 guacd 27u a_inode 0,13 0 14718 [eventfd:63]
guacd 170223 guacd 28u a_inode 0,13 0 14718 [eventfd:64]
guacd 170223 guacd 29u a_inode 0,13 0 14718 [eventfd:65]
guacd 170223 guacd 30u a_inode 0,13 0 14718 [eventfd:66]
guacd 170223 guacd 31u a_inode 0,13 0 14718 [eventfd:67]
guacd 170223 guacd 32u a_inode 0,13 0 14718 [eventfd:68]
guacd 170223 guacd 33u a_inode 0,13 0 14718 [eventfd:69]
guacd 170223 guacd 34u a_inode 0,13 0 14718 [eventfd:70]
guacd 170223 guacd 35u a_inode 0,13 0 14718 [eventfd:71]
guacd 170223 guacd 36u a_inode 0,13 0 14718 [eventfd:72]
guacd 170223 guacd 37u a_inode 0,13 0 14718 [eventfd:73]
guacd 170223 guacd 38u a_inode 0,13 0 14718 [eventfd:74]
guacd 170223 guacd 39u a_inode 0,13 0 14718 [eventfd:75]
guacd 170223 guacd 40u a_inode 0,13 0 14718 [eventfd:76]
guacd 170223 guacd 41u a_inode 0,13 0 14718 [eventfd:77]
guacd 170223 guacd 42u a_inode 0,13 0 14718 [eventfd:78]
guacd 170223 guacd 43u a_inode 0,13 0 14718 [eventfd:79]
guacd 170223 guacd 44u a_inode 0,13 0 14718 [eventfd:80]
guacd 170223 guacd 45u a_inode 0,13 0 14718 [eventfd:81]
guacd 170223 guacd 46u a_inode 0,13 0 14718 [eventfd:82]
guacd 170223 guacd 47u a_inode 0,13 0 14718 [eventfd:83]
guacd 170223 guacd 48u a_inode 0,13 0 14718 [eventfd:84]
guacd 170223 guacd 49u a_inode 0,13 0 14718 [eventfd:85]
guacd 170223 guacd 50u a_inode 0,13 0 14718 [eventfd:86]
guacd 170223 guacd 51u a_inode 0,13 0 14718 [eventfd:87]
guacd 170223 guacd 52u a_inode 0,13 0 14718 [eventfd:88]
guacd 170223 guacd 53u a_inode 0,13 0 14718 [eventfd:89]
guacd 170223 guacd 54u a_inode 0,13 0 14718 [eventfd:90]
guacd 170223 guacd 55u a_inode 0,13 0 14718 [eventfd:91]
guacd 170223 guacd 56u a_inode 0,13 0 14718 [eventfd:92]
guacd 170223 guacd 57u a_inode 0,13 0 14718 [eventfd:93]
guacd 170223 guacd 58u a_inode 0,13 0 14718 [eventfd:94]
guacd 170223 guacd 59u a_inode 0,13 0 14718 [eventfd:95]
guacd 170223 guacd 60u a_inode 0,13 0 14718 [eventfd:96]
guacd 170223 guacd 61u a_inode 0,13 0 14718 [eventfd:97]
guacd 170223 guacd 62u a_inode 0,13 0 14718 [eventfd:98]
guacd 170223 guacd 63u a_inode 0,13 0 14718 [eventfd:99]
guacd 170223 guacd 64u a_inode 0,13 0 14718 [eventfd:100]
guacd 170223 guacd 65u a_inode 0,13 0 14718 [eventfd:101]
guacd 170223 guacd 66u a_inode 0,13 0 14718 [eventfd:102]
guacd 170223 guacd 67u a_inode 0,13 0 14718 [eventfd:103]
guacd 170223 guacd 68u a_inode 0,13 0 14718 [eventfd:104]
guacd 170223 guacd 69u a_inode 0,13 0 14718 [eventfd:105]
guacd 170223 guacd 70u a_inode 0,13 0 14718 [eventfd:106]
guacd 170223 guacd 71u a_inode 0,13 0 14718 [eventfd:107]
guacd 170223 guacd 72u a_inode 0,13 0 14718 [eventfd:169]
guacd 170223 guacd 73u IPv4 373273768 0t0 TCP 10.1.246.91:49280->10.1.247.173:ms-wbt-server (ESTABLISHED)
guacd 170223 guacd 74u a_inode 0,13 0 14718 [eventfd:175]
guacd 170223 guacd 75u a_inode 0,13 0 14718 [eventfd:176]
guacd 170223 guacd 76u a_inode 0,13 0 14718 [eventfd:177]
guacd 170223 guacd 77u a_inode 0,13 0 14718 [eventfd:178]
guacd 170223 guacd 78u a_inode 0,13 0 14718 [eventfd:179]
COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME
guacd 166475 guacd cwd DIR 253,4 4096 2 /
guacd 166475 guacd rtd DIR 253,4 4096 2 /
guacd 166475 guacd txt REG 253,4 43048 6304952 /usr/sbin/guacd
guacd 166475 guacd mem REG 253,4 73584 6303890 /usr/lib64/freerdp2/libguacai-client.so
guacd 166475 guacd mem REG 253,4 26760 3801190 /lib64/libnss_dns-2.33.so
guacd 166475 guacd mem REG 253,4 47384 3801196 /lib64/libnss_files-2.33.so
guacd 166475 guacd mem REG 253,4 88712 3801105 /lib64/libresolv-2.33.so
guacd 166475 guacd mem REG 253,4 403016 6303450 /usr/lib64/libopus.so.0.8.0
guacd 166475 guacd mem REG 253,4 571256 6303544 /usr/lib64/libsndfile.so.1.0.31
guacd 166475 guacd mem REG 253,4 725464 6303397 /usr/lib64/libxvidcore.so.4.3
guacd 166475 guacd mem REG 253,4 12799736 6303592 /usr/lib64/libavcodec.so.58.134.100
guacd 166475 guacd mem REG 253,4 280696 6303443 /usr/lib64/libFLAC.so.8.3.0
guacd 166475 guacd mem REG 253,4 21888 6303405 /usr/lib64/libasyncns.so.0.3.1
guacd 166475 guacd mem REG 253,4 607568 10635891 /usr/lib64/pulseaudio/libpulsecommon-15.0.so
guacd 166475 guacd mem REG 253,4 1957104 6303394 /usr/lib64/libx264.so.157
guacd 166475 guacd mem REG 253,4 81216 6303521 /usr/lib64/libtheoradec.so.1.1.4
guacd 166475 guacd mem REG 253,4 201088 6303520 /usr/lib64/libtheoraenc.so.1.1.2
guacd 166475 guacd mem REG 253,4 332960 6303499 /usr/lib64/libmp3lame.so.0.0.0
guacd 166475 guacd mem REG 253,4 1799512 6303495 /usr/lib64/libdav1d.so.5.1.1
guacd 166475 guacd mem REG 253,4 48952 6303529 /usr/lib64/libwebpmux.so.3.0.5
guacd 166475 guacd mem REG 253,4 100520 6165345 /usr/lib/gcc/x86_64-pc-linux-gnu/11.2.0/libgcc_s.so.1
guacd 166475 guacd mem REG 253,4 2161136 6165346 /usr/lib/gcc/x86_64-pc-linux-gnu/11.2.0/libstdc++.so.6.0.29
guacd 166475 guacd mem REG 253,4 398864 6303568 /usr/lib64/libpulse.so.0.24.0
guacd 166475 guacd mem REG 253,4 1137224 6303457 /usr/lib64/libasound.so.2.0.0
guacd 166475 guacd mem REG 253,4 161168 6303595 /usr/lib64/libswresample.so.3.9.100
guacd 166475 guacd mem REG 253,4 545576 6303597 /usr/lib64/libavutil.so.56.70.100
guacd 166475 guacd mem REG 253,4 1136960 6303503 /usr/lib64/libopenh264.so.2.1.1
guacd 166475 guacd mem REG 253,4 621416 6303596 /usr/lib64/libswscale.so.5.9.100
guacd 166475 guacd mem REG 253,4 311328 6304853 /usr/lib64/libssh2.so.1.0.1
guacd 166475 guacd mem REG 253,4 3785912 6305021 /usr/lib64/libwinpr2.so.2.4.1
guacd 166475 guacd mem REG 253,4 3365648 6305030 /usr/lib64/libfreerdp-client2.so.2.4.1
guacd 166475 guacd mem REG 253,4 8510336 6305027 /usr/lib64/libfreerdp2.so.2.4.1
guacd 166475 guacd mem REG 253,4 382104 6304965 /usr/lib64/libguac-client-rdp.so.0.0.0
guacd 166475 guacd mem REG 253,4 74904 3801231 /lib64/libbz2.so.1.0.8
guacd 166475 guacd mem REG 253,4 194528 6300672 /usr/lib64/libexpat.so.1.8.1
guacd 166475 guacd mem REG 253,4 1304768 3801202 /lib64/libm-2.33.so
guacd 166475 guacd mem REG 253,4 108904 3801161 /lib64/libz.so.1.2.12
guacd 166475 guacd mem REG 253,4 899416 2104311 /usr/lib64/libfreetype.so.6.18.0
guacd 166475 guacd mem REG 253,4 333784 6301726 /usr/lib64/libfontconfig.so.1.12.0
guacd 166475 guacd mem REG 253,4 746480 6304850 /usr/lib64/libpixman-1.so.0.40.0
guacd 166475 guacd mem REG 253,4 35640 3801255 /lib64/librt-2.33.so
guacd 166475 guacd mem REG 253,4 492856 6303531 /usr/lib64/libwebp.so.7.1.0
guacd 166475 guacd mem REG 253,4 803280 6303486 /usr/lib64/libvorbisenc.so.2.0.12
guacd 166475 guacd mem REG 253,4 193664 6303488 /usr/lib64/libvorbis.so.0.4.9
guacd 166475 guacd mem REG 253,4 43800 6303391 /usr/lib64/libogg.so.0.8.5
guacd 166475 guacd mem REG 253,4 36384 3801192 /lib64/libuuid.so.1.3.0
guacd 166475 guacd mem REG 253,4 3205896 6300957 /usr/lib64/libcrypto.so.1.1
guacd 166475 guacd mem REG 253,4 249656 1843283 /usr/lib64/libpng16.so.16.37.0
guacd 166475 guacd mem REG 253,4 678872 6301722 /usr/lib64/libjpeg.so.62.3.0
guacd 166475 guacd mem REG 253,4 18496 3801205 /lib64/libdl-2.33.so
guacd 166475 guacd mem REG 253,4 1174792 6304866 /usr/lib64/libcairo.so.2.11600.0
guacd 166475 guacd mem REG 253,4 1794208 3801204 /lib64/libc-2.33.so
guacd 166475 guacd mem REG 253,4 681336 6300958 /usr/lib64/libssl.so.1.1
guacd 166475 guacd mem REG 253,4 147448 3801215 /lib64/libpthread-2.33.so
guacd 166475 guacd mem REG 253,4 139352 6303876 /usr/lib64/libguac.so.23.0.0
guacd 166475 guacd mem REG 253,4 15448 6303889 /usr/lib64/freerdp2/libguac-common-svc-client.so
guacd 166475 guacd mem REG 253,4 202224 3801090 /lib64/ld-2.33.so
guacd 166475 guacd 0r CHR 1,3 0t0 4 /dev/null
guacd 166475 guacd 1w CHR 1,3 0t0 4 /dev/null
guacd 166475 guacd 2w CHR 1,3 0t0 4 /dev/null
guacd 166475 guacd 3u unix 0x0000000078543b10 0t0 373203549 type=DGRAM
guacd 166475 guacd 4u IPv4 360435966 0t0 TCP localhost:4822 (LISTEN)
guacd 166475 guacd 5u IPv4 373211291 0t0 TCP localhost:4822->localhost:45846 (CLOSE_WAIT)
guacd 166475 guacd 6u IPv4 373246505 0t0 TCP localhost:4822->localhost:46866 (ESTABLISHED)
guacd 166475 guacd 7u unix 0x00000000b5c65691 0t0 373190643 type=STREAM
guacd 166475 guacd 8u unix 0x000000008c37f82e 0t0 373190642 type=DGRAM
guacd 166475 guacd 9u unix 0x0000000029e6eece 0t0 373259626 type=STREAM
guacd 166475 guacd 10u unix 0x00000000016846a4 0t0 373259623 type=DGRAM
guacd 166475 guacd 11u a_inode 0,13 0 14718 [eventfd:30]
guacd 166475 guacd 12u a_inode 0,13 0 14718 [eventfd:32]
guacd 166475 guacd 13u a_inode 0,13 0 14718 [eventfd:109]
guacd 166475 guacd 14u a_inode 0,13 0 14718 [eventfd:110]
guacd 166475 guacd 15u a_inode 0,13 0 14718 [eventfd:111]
guacd 166475 guacd 16u a_inode 0,13 0 14718 [eventfd:112]
guacd 166475 guacd 17u a_inode 0,13 0 14718 [eventfd:113]
guacd 166475 guacd 18u a_inode 0,13 0 14718 [eventfd:114]
guacd 166475 guacd 19u a_inode 0,13 0 14718 [eventfd:115]
guacd 166475 guacd 20u a_inode 0,13 0 14718 [eventfd:116]
guacd 166475 guacd 21u a_inode 0,13 0 14718 [eventfd:117]
guacd 166475 guacd 22u a_inode 0,13 0 14718 [eventfd:118]
guacd 166475 guacd 23u a_inode 0,13 0 14718 [eventfd:119]
guacd 166475 guacd 24u a_inode 0,13 0 14718 [eventfd:120]
guacd 166475 guacd 25u a_inode 0,13 0 14718 [eventfd:121]
guacd 166475 guacd 26u a_inode 0,13 0 14718 [eventfd:122]
guacd 166475 guacd 27u a_inode 0,13 0 14718 [eventfd:123]
guacd 166475 guacd 28u a_inode 0,13 0 14718 [eventfd:124]
guacd 166475 guacd 29u a_inode 0,13 0 14718 [eventfd:125]
guacd 166475 guacd 30u a_inode 0,13 0 14718 [eventfd:126]
guacd 166475 guacd 31u a_inode 0,13 0 14718 [eventfd:127]
guacd 166475 guacd 32u a_inode 0,13 0 14718 [eventfd:128]
guacd 166475 guacd 33u a_inode 0,13 0 14718 [eventfd:129]
guacd 166475 guacd 34u a_inode 0,13 0 14718 [eventfd:130]
guacd 166475 guacd 35u a_inode 0,13 0 14718 [eventfd:131]
guacd 166475 guacd 36u a_inode 0,13 0 14718 [eventfd:132]
guacd 166475 guacd 37u a_inode 0,13 0 14718 [eventfd:133]
guacd 166475 guacd 38u a_inode 0,13 0 14718 [eventfd:134]
guacd 166475 guacd 39u a_inode 0,13 0 14718 [eventfd:135]
guacd 166475 guacd 40u a_inode 0,13 0 14718 [eventfd:136]
guacd 166475 guacd 41u a_inode 0,13 0 14718 [eventfd:137]
guacd 166475 guacd 42u a_inode 0,13 0 14718 [eventfd:138]
guacd 166475 guacd 43u a_inode 0,13 0 14718 [eventfd:139]
guacd 166475 guacd 44u a_inode 0,13 0 14718 [eventfd:140]
guacd 166475 guacd 45u a_inode 0,13 0 14718 [eventfd:141]
guacd 166475 guacd 46u a_inode 0,13 0 14718 [eventfd:142]
guacd 166475 guacd 47u a_inode 0,13 0 14718 [eventfd:143]
guacd 166475 guacd 48u a_inode 0,13 0 14718 [eventfd:144]
guacd 166475 guacd 49u a_inode 0,13 0 14718 [eventfd:145]
guacd 166475 guacd 50u a_inode 0,13 0 14718 [eventfd:146]
guacd 166475 guacd 51u a_inode 0,13 0 14718 [eventfd:147]
guacd 166475 guacd 52u a_inode 0,13 0 14718 [eventfd:148]
guacd 166475 guacd 53u a_inode 0,13 0 14718 [eventfd:149]
guacd 166475 guacd 54u a_inode 0,13 0 14718 [eventfd:150]
guacd 166475 guacd 55u a_inode 0,13 0 14718 [eventfd:151]
guacd 166475 guacd 56u a_inode 0,13 0 14718 [eventfd:152]
guacd 166475 guacd 57u a_inode 0,13 0 14718 [eventfd:153]
guacd 166475 guacd 58u a_inode 0,13 0 14718 [eventfd:154]
guacd 166475 guacd 59u a_inode 0,13 0 14718 [eventfd:155]
guacd 166475 guacd 60u a_inode 0,13 0 14718 [eventfd:156]
guacd 166475 guacd 61u a_inode 0,13 0 14718 [eventfd:157]
guacd 166475 guacd 62u a_inode 0,13 0 14718 [eventfd:158]
guacd 166475 guacd 63u a_inode 0,13 0 14718 [eventfd:159]
guacd 166475 guacd 64u a_inode 0,13 0 14718 [eventfd:160]
guacd 166475 guacd 65u a_inode 0,13 0 14718 [eventfd:161]
guacd 166475 guacd 66u a_inode 0,13 0 14718 [eventfd:162]
guacd 166475 guacd 67u a_inode 0,13 0 14718 [eventfd:163]
guacd 166475 guacd 68u a_inode 0,13 0 14718 [eventfd:164]
guacd 166475 guacd 69u a_inode 0,13 0 14718 [eventfd:165]
guacd 166475 guacd 70u a_inode 0,13 0 14718 [eventfd:166]
guacd 166475 guacd 71u a_inode 0,13 0 14718 [eventfd:167]
guacd 166475 guacd 72u a_inode 0,13 0 14718 [eventfd:168]
guacd 166475 guacd 73u IPv4 373253538 0t0 TCP 10.1.111.254:38392->host.domain.local:ms-wbt-server (ESTABLISHED)
guacd 166475 guacd 74u a_inode 0,13 0 14718 [eventfd:41]
guacd 166475 guacd 75u a_inode 0,13 0 14718 [eventfd:170]
guacd 166475 guacd 76u a_inode 0,13 0 14718 [eventfd:171]
guacd 166475 guacd 77u a_inode 0,13 0 14718 [eventfd:172]
guacd 166475 guacd 78u a_inode 0,13 0 14718 [eventfd:173]
I'm wondering if the other users in this thread have the same eventfd issue or if my case is different than the OP's.
I haven't upgraded FreeRDP yet for the sake of keeping the same version on both 1.4.0 and 1.5.4 guac systems, but I guess at this point I might as well do so.
Trying out 1.5.3 isn't an option for security reasons unless CVE-2023-43826 can be backported to that version.
Any thoughts welcome.
Vieri
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org
Re: Major bug message log in guacd 1.5.4
Posted by Michael Jumper <mj...@apache.org>.
On 1/4/24 16:35, Vieri wrote:
> On Thursday, January 4, 2024 at 02:50:47 PM GMT+1, Nick Couchman <vn...@apache.org> wrote:
>
>> I suspect that you're hitting some other limitation in the number of files/sockets open that is causing all new connections to fail
>
>
> Hi Nick,
>
> ...
> guacd 84702 guacd 8u a_inode 0,13 0 14718 [eventfd:32]
> guacd 84702 guacd 9u a_inode 0,13 0 14718 [eventfd:41]
> guacd 84702 guacd 10u a_inode 0,13 0 14718 [eventfd:46]
> guacd 84702 guacd 11u a_inode 0,13 0 14718 [eventfd:47]
> guacd 84702 guacd 12u a_inode 0,13 0 14718 [eventfd:48]
> ...
> guacd 84702 guacd 73u a_inode 0,13 0 14718 [eventfd:109]
> guacd 84702 guacd 74u a_inode 0,13 0 14718 [eventfd:110]
> guacd 84702 guacd 75u a_inode 0,13 0 14718 [eventfd:111]
>
Interesting that there's so many eventfds. I wonder if there might be an
underlying library call that's leaking these...
To my knowledge, we're not opening any eventfds directly within the
Guacamole codebase, but FreeRDP definitely does. There might be
something that's not being freed quite right.
- Mike
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org
Re: Major bug message log in guacd 1.5.4
Posted by Vieri <re...@yahoo.com.INVALID>.
On Thursday, January 4, 2024 at 02:50:47 PM GMT+1, Nick Couchman <vn...@apache.org> wrote:
> I suspect that you're hitting some other limitation in the number of files/sockets open that is causing all new connections to fail
Hi Nick,
# ps -ae | grep guacd
84702 ? 00:00:29 guacd
227763 ? 00:02:13 guacd
# cat /proc/84702/limits
Limit Soft Limit Hard Limit Units
Max cpu time unlimited unlimited seconds
Max file size unlimited unlimited bytes
Max data size unlimited unlimited bytes
Max stack size 8388608 unlimited bytes
Max core file size 0 unlimited bytes
Max resident set unlimited unlimited bytes
Max processes 127588 127588 processes
Max open files 16384 65535 files
Max locked memory 65536 65536 bytes
Max address space unlimited unlimited bytes
Max file locks unlimited unlimited locks
Max pending signals 127588 127588 signals
Max msgqueue size 819200 819200 bytes
Max nice priority 0 0
Max realtime priority 0 0
Max realtime timeout unlimited unlimited us
# cat /proc/227763/limits
Limit Soft Limit Hard Limit Units
Max cpu time unlimited unlimited seconds
Max file size unlimited unlimited bytes
Max data size unlimited unlimited bytes
Max stack size 8388608 unlimited bytes
Max core file size 0 unlimited bytes
Max resident set unlimited unlimited bytes
Max processes 127588 127588 processes
Max open files 16384 65535 files
Max locked memory 65536 65536 bytes
Max address space unlimited unlimited bytes
Max file locks unlimited unlimited locks
Max pending signals 127588 127588 signals
Max msgqueue size 819200 819200 bytes
Max nice priority 0 0
Max realtime priority 0 0
Max realtime timeout unlimited unlimited us
# lsof -p 84702
COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME
guacd 84702 guacd cwd DIR 253,4 4096 2 /
guacd 84702 guacd rtd DIR 253,4 4096 2 /
guacd 84702 guacd txt REG 253,4 43048 6304952 /usr/sbin/guacd
guacd 84702 guacd mem REG 253,4 47384 3801196 /lib64/libnss_files-2.33.so
guacd 84702 guacd mem REG 253,4 88712 3801105 /lib64/libresolv-2.33.so
guacd 84702 guacd mem REG 253,4 403016 6303450 /usr/lib64/libopus.so.0.8.0
guacd 84702 guacd mem REG 253,4 1957104 6303394 /usr/lib64/libx264.so.157
guacd 84702 guacd mem REG 253,4 73584 6303890 /usr/lib64/freerdp2/libguacai-client.so
guacd 84702 guacd mem REG 253,4 280696 6303443 /usr/lib64/libFLAC.so.8.3.0
guacd 84702 guacd mem REG 253,4 12799736 6303592 /usr/lib64/libavcodec.so.58.134.100
guacd 84702 guacd mem REG 253,4 26760 3801190 /lib64/libnss_dns-2.33.so
guacd 84702 guacd mem REG 253,4 21888 6303405 /usr/lib64/libasyncns.so.0.3.1
guacd 84702 guacd mem REG 253,4 571256 6303544 /usr/lib64/libsndfile.so.1.0.31
guacd 84702 guacd mem REG 253,4 607568 10635891 /usr/lib64/pulseaudio/libpulsecommon-15.0.so
guacd 84702 guacd mem REG 253,4 725464 6303397 /usr/lib64/libxvidcore.so.4.3
guacd 84702 guacd mem REG 253,4 81216 6303521 /usr/lib64/libtheoradec.so.1.1.4
guacd 84702 guacd mem REG 253,4 201088 6303520 /usr/lib64/libtheoraenc.so.1.1.2
guacd 84702 guacd mem REG 253,4 332960 6303499 /usr/lib64/libmp3lame.so.0.0.0
guacd 84702 guacd mem REG 253,4 1799512 6303495 /usr/lib64/libdav1d.so.5.1.1
guacd 84702 guacd mem REG 253,4 48952 6303529 /usr/lib64/libwebpmux.so.3.0.5
guacd 84702 guacd mem REG 253,4 100520 6165345 /usr/lib/gcc/x86_64-pc-linux-gnu/11.2.0/libgcc_s.so.1
guacd 84702 guacd mem REG 253,4 2161136 6165346 /usr/lib/gcc/x86_64-pc-linux-gnu/11.2.0/libstdc++.so.6.0.29
guacd 84702 guacd mem REG 253,4 398864 6303568 /usr/lib64/libpulse.so.0.24.0
guacd 84702 guacd mem REG 253,4 1137224 6303457 /usr/lib64/libasound.so.2.0.0
guacd 84702 guacd mem REG 253,4 161168 6303595 /usr/lib64/libswresample.so.3.9.100
guacd 84702 guacd mem REG 253,4 545576 6303597 /usr/lib64/libavutil.so.56.70.100
guacd 84702 guacd mem REG 253,4 1136960 6303503 /usr/lib64/libopenh264.so.2.1.1
guacd 84702 guacd mem REG 253,4 621416 6303596 /usr/lib64/libswscale.so.5.9.100
guacd 84702 guacd mem REG 253,4 311328 6304853 /usr/lib64/libssh2.so.1.0.1
guacd 84702 guacd mem REG 253,4 3785912 6305021 /usr/lib64/libwinpr2.so.2.4.1
guacd 84702 guacd mem REG 253,4 3365648 6305030 /usr/lib64/libfreerdp-client2.so.2.4.1
guacd 84702 guacd mem REG 253,4 8510336 6305027 /usr/lib64/libfreerdp2.so.2.4.1
guacd 84702 guacd mem REG 253,4 382104 6304965 /usr/lib64/libguac-client-rdp.so.0.0.0
guacd 84702 guacd mem REG 253,4 74904 3801231 /lib64/libbz2.so.1.0.8
guacd 84702 guacd mem REG 253,4 194528 6300672 /usr/lib64/libexpat.so.1.8.1
guacd 84702 guacd mem REG 253,4 1304768 3801202 /lib64/libm-2.33.so
guacd 84702 guacd mem REG 253,4 108904 3801161 /lib64/libz.so.1.2.12
guacd 84702 guacd mem REG 253,4 899416 2104311 /usr/lib64/libfreetype.so.6.18.0
guacd 84702 guacd mem REG 253,4 333784 6301726 /usr/lib64/libfontconfig.so.1.12.0
guacd 84702 guacd mem REG 253,4 746480 6304850 /usr/lib64/libpixman-1.so.0.40.0
guacd 84702 guacd mem REG 253,4 35640 3801255 /lib64/librt-2.33.so
guacd 84702 guacd mem REG 253,4 492856 6303531 /usr/lib64/libwebp.so.7.1.0
guacd 84702 guacd mem REG 253,4 803280 6303486 /usr/lib64/libvorbisenc.so.2.0.12
guacd 84702 guacd mem REG 253,4 193664 6303488 /usr/lib64/libvorbis.so.0.4.9
guacd 84702 guacd mem REG 253,4 43800 6303391 /usr/lib64/libogg.so.0.8.5
guacd 84702 guacd mem REG 253,4 36384 3801192 /lib64/libuuid.so.1.3.0
guacd 84702 guacd mem REG 253,4 3205896 6300957 /usr/lib64/libcrypto.so.1.1
guacd 84702 guacd mem REG 253,4 249656 1843283 /usr/lib64/libpng16.so.16.37.0
guacd 84702 guacd mem REG 253,4 678872 6301722 /usr/lib64/libjpeg.so.62.3.0
guacd 84702 guacd mem REG 253,4 18496 3801205 /lib64/libdl-2.33.so
guacd 84702 guacd mem REG 253,4 1174792 6304866 /usr/lib64/libcairo.so.2.11600.0
guacd 84702 guacd mem REG 253,4 1794208 3801204 /lib64/libc-2.33.so
guacd 84702 guacd mem REG 253,4 681336 6300958 /usr/lib64/libssl.so.1.1
guacd 84702 guacd mem REG 253,4 147448 3801215 /lib64/libpthread-2.33.so
guacd 84702 guacd mem REG 253,4 139352 6303876 /usr/lib64/libguac.so.23.0.0
guacd 84702 guacd mem REG 253,4 15448 6303889 /usr/lib64/freerdp2/libguac-common-svc-client.so
guacd 84702 guacd mem REG 253,4 202224 3801090 /lib64/ld-2.33.so
guacd 84702 guacd 0r CHR 1,3 0t0 4 /dev/null
guacd 84702 guacd 1w CHR 1,3 0t0 4 /dev/null
guacd 84702 guacd 2w CHR 1,3 0t0 4 /dev/null
guacd 84702 guacd 3u unix 0x000000009a44b001 0t0 364882163 type=DGRAM
guacd 84702 guacd 4u IPv4 360435966 0t0 TCP localhost:4822 (LISTEN)
guacd 84702 guacd 5u IPv4 366609907 0t0 TCP localhost:4822->localhost:52690 (ESTABLISHED)
guacd 84702 guacd 6u unix 0x000000001355fcea 0t0 366687129 type=STREAM
guacd 84702 guacd 7u unix 0x00000000a5d74288 0t0 366687126 type=DGRAM
guacd 84702 guacd 8u a_inode 0,13 0 14718 [eventfd:32]
guacd 84702 guacd 9u a_inode 0,13 0 14718 [eventfd:41]
guacd 84702 guacd 10u a_inode 0,13 0 14718 [eventfd:46]
guacd 84702 guacd 11u a_inode 0,13 0 14718 [eventfd:47]
guacd 84702 guacd 12u a_inode 0,13 0 14718 [eventfd:48]
guacd 84702 guacd 13u a_inode 0,13 0 14718 [eventfd:49]
guacd 84702 guacd 14u a_inode 0,13 0 14718 [eventfd:51]
guacd 84702 guacd 15u a_inode 0,13 0 14718 [eventfd:52]
guacd 84702 guacd 16u a_inode 0,13 0 14718 [eventfd:53]
guacd 84702 guacd 17u a_inode 0,13 0 14718 [eventfd:54]
guacd 84702 guacd 18u a_inode 0,13 0 14718 [eventfd:55]
guacd 84702 guacd 19u a_inode 0,13 0 14718 [eventfd:56]
guacd 84702 guacd 20u a_inode 0,13 0 14718 [eventfd:57]
guacd 84702 guacd 21u a_inode 0,13 0 14718 [eventfd:58]
guacd 84702 guacd 22u a_inode 0,13 0 14718 [eventfd:59]
guacd 84702 guacd 23u a_inode 0,13 0 14718 [eventfd:60]
guacd 84702 guacd 24u a_inode 0,13 0 14718 [eventfd:61]
guacd 84702 guacd 25u a_inode 0,13 0 14718 [eventfd:62]
guacd 84702 guacd 26u a_inode 0,13 0 14718 [eventfd:63]
guacd 84702 guacd 27u a_inode 0,13 0 14718 [eventfd:64]
guacd 84702 guacd 28u a_inode 0,13 0 14718 [eventfd:65]
guacd 84702 guacd 29u a_inode 0,13 0 14718 [eventfd:66]
guacd 84702 guacd 30u a_inode 0,13 0 14718 [eventfd:67]
guacd 84702 guacd 31u a_inode 0,13 0 14718 [eventfd:68]
guacd 84702 guacd 32u a_inode 0,13 0 14718 [eventfd:69]
guacd 84702 guacd 33u a_inode 0,13 0 14718 [eventfd:70]
guacd 84702 guacd 34u a_inode 0,13 0 14718 [eventfd:71]
guacd 84702 guacd 35u a_inode 0,13 0 14718 [eventfd:72]
guacd 84702 guacd 36u a_inode 0,13 0 14718 [eventfd:73]
guacd 84702 guacd 37u a_inode 0,13 0 14718 [eventfd:74]
guacd 84702 guacd 38u a_inode 0,13 0 14718 [eventfd:75]
guacd 84702 guacd 39u a_inode 0,13 0 14718 [eventfd:76]
guacd 84702 guacd 40u a_inode 0,13 0 14718 [eventfd:77]
guacd 84702 guacd 41u a_inode 0,13 0 14718 [eventfd:78]
guacd 84702 guacd 42u a_inode 0,13 0 14718 [eventfd:79]
guacd 84702 guacd 43u a_inode 0,13 0 14718 [eventfd:80]
guacd 84702 guacd 44u a_inode 0,13 0 14718 [eventfd:81]
guacd 84702 guacd 45u a_inode 0,13 0 14718 [eventfd:82]
guacd 84702 guacd 46u a_inode 0,13 0 14718 [eventfd:83]
guacd 84702 guacd 47u a_inode 0,13 0 14718 [eventfd:84]
guacd 84702 guacd 48u a_inode 0,13 0 14718 [eventfd:85]
guacd 84702 guacd 49u a_inode 0,13 0 14718 [eventfd:86]
guacd 84702 guacd 50u a_inode 0,13 0 14718 [eventfd:87]
guacd 84702 guacd 51u a_inode 0,13 0 14718 [eventfd:88]
guacd 84702 guacd 52u a_inode 0,13 0 14718 [eventfd:89]
guacd 84702 guacd 53u a_inode 0,13 0 14718 [eventfd:90]
guacd 84702 guacd 54u a_inode 0,13 0 14718 [eventfd:91]
guacd 84702 guacd 55u a_inode 0,13 0 14718 [eventfd:92]
guacd 84702 guacd 56u a_inode 0,13 0 14718 [eventfd:93]
guacd 84702 guacd 57u a_inode 0,13 0 14718 [eventfd:94]
guacd 84702 guacd 58u a_inode 0,13 0 14718 [eventfd:95]
guacd 84702 guacd 59u a_inode 0,13 0 14718 [eventfd:96]
guacd 84702 guacd 60u a_inode 0,13 0 14718 [eventfd:97]
guacd 84702 guacd 61u a_inode 0,13 0 14718 [eventfd:98]
guacd 84702 guacd 62u a_inode 0,13 0 14718 [eventfd:99]
guacd 84702 guacd 63u a_inode 0,13 0 14718 [eventfd:100]
guacd 84702 guacd 64u a_inode 0,13 0 14718 [eventfd:101]
guacd 84702 guacd 65u a_inode 0,13 0 14718 [eventfd:102]
guacd 84702 guacd 66u a_inode 0,13 0 14718 [eventfd:103]
guacd 84702 guacd 67u a_inode 0,13 0 14718 [eventfd:104]
guacd 84702 guacd 68u a_inode 0,13 0 14718 [eventfd:105]
guacd 84702 guacd 69u a_inode 0,13 0 14718 [eventfd:106]
guacd 84702 guacd 70u IPv4 366692506 0t0 TCP 10.1.1.2:44216->myhost.mydomain.local:ms-wbt-server (ESTABLISHED)
guacd 84702 guacd 71u a_inode 0,13 0 14718 [eventfd:107]
guacd 84702 guacd 72u a_inode 0,13 0 14718 [eventfd:108]
guacd 84702 guacd 73u a_inode 0,13 0 14718 [eventfd:109]
guacd 84702 guacd 74u a_inode 0,13 0 14718 [eventfd:110]
guacd 84702 guacd 75u a_inode 0,13 0 14718 [eventfd:111]
# lsof -p 227763
COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME
guacd 227763 guacd cwd DIR 253,4 4096 2 /
guacd 227763 guacd rtd DIR 253,4 4096 2 /
guacd 227763 guacd txt REG 253,4 43048 6304952 /usr/sbin/guacd
guacd 227763 guacd mem REG 253,4 74904 3801231 /lib64/libbz2.so.1.0.8
guacd 227763 guacd mem REG 253,4 194528 6300672 /usr/lib64/libexpat.so.1.8.1
guacd 227763 guacd mem REG 253,4 1304768 3801202 /lib64/libm-2.33.so
guacd 227763 guacd mem REG 253,4 108904 3801161 /lib64/libz.so.1.2.12
guacd 227763 guacd mem REG 253,4 899416 2104311 /usr/lib64/libfreetype.so.6.18.0
guacd 227763 guacd mem REG 253,4 333784 6301726 /usr/lib64/libfontconfig.so.1.12.0
guacd 227763 guacd mem REG 253,4 746480 6304850 /usr/lib64/libpixman-1.so.0.40.0
guacd 227763 guacd mem REG 253,4 35640 3801255 /lib64/librt-2.33.so
guacd 227763 guacd mem REG 253,4 492856 6303531 /usr/lib64/libwebp.so.7.1.0
guacd 227763 guacd mem REG 253,4 803280 6303486 /usr/lib64/libvorbisenc.so.2.0.12
guacd 227763 guacd mem REG 253,4 193664 6303488 /usr/lib64/libvorbis.so.0.4.9
guacd 227763 guacd mem REG 253,4 43800 6303391 /usr/lib64/libogg.so.0.8.5
guacd 227763 guacd mem REG 253,4 36384 3801192 /lib64/libuuid.so.1.3.0
guacd 227763 guacd mem REG 253,4 3205896 6300957 /usr/lib64/libcrypto.so.1.1
guacd 227763 guacd mem REG 253,4 249656 1843283 /usr/lib64/libpng16.so.16.37.0
guacd 227763 guacd mem REG 253,4 678872 6301722 /usr/lib64/libjpeg.so.62.3.0
guacd 227763 guacd mem REG 253,4 18496 3801205 /lib64/libdl-2.33.so
guacd 227763 guacd mem REG 253,4 1174792 6304866 /usr/lib64/libcairo.so.2.11600.0
guacd 227763 guacd mem REG 253,4 1794208 3801204 /lib64/libc-2.33.so
guacd 227763 guacd mem REG 253,4 681336 6300958 /usr/lib64/libssl.so.1.1
guacd 227763 guacd mem REG 253,4 147448 3801215 /lib64/libpthread-2.33.so
guacd 227763 guacd mem REG 253,4 139352 6303876 /usr/lib64/libguac.so.23.0.0
guacd 227763 guacd mem REG 253,4 202224 3801090 /lib64/ld-2.33.so
guacd 227763 guacd 0r CHR 1,3 0t0 4 /dev/null
guacd 227763 guacd 1w CHR 1,3 0t0 4 /dev/null
guacd 227763 guacd 2w CHR 1,3 0t0 4 /dev/null
guacd 227763 guacd 3u unix 0x000000009a44b001 0t0 364882163 type=DGRAM
guacd 227763 guacd 4u IPv4 360435966 0t0 TCP localhost:4822 (LISTEN)
guacd 227763 guacd 5u IPv4 366609907 0t0 TCP localhost:4822->localhost:52690 (ESTABLISHED)
guacd 227763 guacd 7u unix 0x0000000087de7851 0t0 366687128 type=STREAM
guacd 227763 guacd 8u unix 0x00000000b3a6c4b6 0t0 366687127 type=DGRAM
I'm supposing "Max open files" is what you're suggesting I check.
This was taken when I had only one user connected with just one active RDP session.
These ulimit values are the same on both of my guacamole systems (1.4.0 and 1.5.4).
I get more guacd processes listed as user connections rise. However, my system usually doesn't go beyond 20 simultaneous connections.
It's hard to think it's a socket resource issue.
I'll keep looking.
Thanks,
Vieri
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org
Re: Major bug message log in guacd 1.5.4
Posted by Nick Couchman <vn...@apache.org>.
On Thu, Jan 4, 2024 at 2:00 AM Vieri <re...@yahoo.com.invalid> wrote:
> Hi,
>
> I understand what you're saying about docker images and reverting to
> 1.5.3, Mike.
> However, in my case I'm NOT using Docker.
>
> As I said, I have two different hosts and BOTH are using FreeRDP 2.4.1 (am
> not using 2.10.0 as you suggest).
> The 2 hosts are 2 different machines. The only software that changes is,
> as I said, guacd (and Apache Tomcat to be exact, but it's still 8.5 on
> both).
>
> I have NOT tried downgrading guacamole to 1.5.3.
> I am using 1.4.0 on my old system and 1.5.4 on the new one.
> Obviously, 1.4.0 and 1.5.3 have vulnerabilities that I want to get rid of,
> so I'm eager to move to 1.5.4. However, this issue is a show stopper.
>
> Also, while I understand that the error "Major bug, unable to allocate a
> TLS value for currentThread" comes from FreeRDP, I also reported in my
> previous post that all other protocols are also affected.
> My telnet and ssh connections fail too, but they obviously do not use
> FreeRDP.
> So, it seems that as soon as guacd hits the FreeRDP issue, every single
> connection type (including those that do not use FreeRDP) fail.
> A guacd restart makes every single connection type work again -- not just
> RDP.
> I might be wrong, and I don't have more information to offer (my guacd
> 1.5.4 process was restarted and working fine for now).
> However, it seems that the FreeRDP "failure" has a crippling effect on
> guacd not just for RDP connections.
>
>
I highly doubt that FreeRDP is having any impact on other guacd connections
- I suspect that you're hitting some other limitation in the number of
files/sockets open that is causing all new connections to fail, and the
FreeRDP one just happens to be the most likely one or first one to hit the
issue. You might look at things like the "nofile" hard and soft limits for
the user running guacd and see if you're running up against that. IIRC,
opening sockets counts as opening a "file" in Linux, so if you are opening
a lot of connections, you may be hitting that.
It may not be nofile specifically, so you might need to investigate other
limits, either in /etc/security/limits.conf, or sysctl, and see if you're
running up against any of those.
-Nick
Re: Major bug message log in guacd 1.5.4
Posted by Vieri <re...@yahoo.com.INVALID>.
Hi,
I understand what you're saying about docker images and reverting to 1.5.3, Mike.
However, in my case I'm NOT using Docker.
As I said, I have two different hosts and BOTH are using FreeRDP 2.4.1 (am not using 2.10.0 as you suggest).
The 2 hosts are 2 different machines. The only software that changes is, as I said, guacd (and Apache Tomcat to be exact, but it's still 8.5 on both).
I have NOT tried downgrading guacamole to 1.5.3.
I am using 1.4.0 on my old system and 1.5.4 on the new one.
Obviously, 1.4.0 and 1.5.3 have vulnerabilities that I want to get rid of, so I'm eager to move to 1.5.4. However, this issue is a show stopper.
Also, while I understand that the error "Major bug, unable to allocate a TLS value for currentThread" comes from FreeRDP, I also reported in my previous post that all other protocols are also affected.
My telnet and ssh connections fail too, but they obviously do not use FreeRDP.
So, it seems that as soon as guacd hits the FreeRDP issue, every single connection type (including those that do not use FreeRDP) fail.
A guacd restart makes every single connection type work again -- not just RDP.
I might be wrong, and I don't have more information to offer (my guacd 1.5.4 process was restarted and working fine for now).
However, it seems that the FreeRDP "failure" has a crippling effect on guacd not just for RDP connections.
If I understand correctly you're saying that the 1.5.3 docker image is using a different freeRDP version than the 1.5.4 image, and that you want people using 1.5.4 to use FreeRDP 2.10.0.
Since I don't use the docker images I have no idea which FreeRDP version 1.5.3 is using.
In any case, my 2 hosts (1.4.0 and 1.5.4) are not using FreeRDP 2.10.0, but they ARE using the same FreeRDP version (2.4.1), but I'm seeing the same issue as the rest of the reports on this ML.
So in my case, it's probably recommended to upgrade FreeRDP from 2.4.1 to 2.10.0 for other reasons, but I'm wondering if it's really relevant to this issue.
I guess the only thing I can try is to rebuild my guacamole 1.5.4 setup with FreeRDP 2.10.0 (upgrade 2.4.1 to 2.10.0), and leave my old guacamole 1.4.0 with FreeRDP 2.4.1 untouched.
Regards,
Vieri
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org
Re: Major bug message log in guacd 1.5.4
Posted by Michael Jumper <mj...@apache.org>.
Correction, that should be:
$ git clone https://github.com/apache/guacamole-server
$ cd guacamole-server/
$ git checkout 1.5.4
$ sudo docker build -t guacamole/guacd \
--build-arg WITH_FREERDP=2.10.0 \
--build-arg ALPINE_BASE_IMAGE=3.18 .
- Mike
On 1/3/24 09:13, Michael Jumper wrote:
> All, if you wish to test this issue further, the thing to test is
> whether the *1.5.4* images suffer from the same failure even if rebuilt
> against the same version of FreeRDP used by 1.5.3 (version 2.10.0).
>
> There is no need to confirm that the issue does not occur with 1.5.3
> version of the Docker images. This is already known but too broad a
> result, as switching from "guacamole/guacd:1.5.4" to
> "guacamole/guacd:1.5.3" does not simply switch to an older version of
> Guacamole; it switches to older versions of absolutely everything,
> including the very software reporting the error (FreeRDP).
>
> See:
>
> * https://lists.apache.org/thread/9xws51d32h6mqz35d9odh2kwnl04g8p9
> * https://lists.apache.org/thread/27mg4wg4lh7rnqxnjw8j3xhjlbj1v95w
>
> You can try rebuilding against FreeRDP 2.10.0 by checking out a copy of
> the 1.5.4 source and using the "WITH_FREERDP" build arg to specify
> "2.10.0":
>
> $ git clone https://github.com/apache/guacamole-server
> $ cd guacamole-server/
> $ git checkout 1.5.4
> $ sudo docker build -t guacamole/guacamole \
> --build-arg WITH_FREERDP=2.10.0 \
> --build-arg ALPINE_BASE_IMAGE=3.18 .
>
> - Mike
>
> On 1/3/24 08:59, John Watson wrote:
>> 1.5.3 does not have the issue. I was dealing with it in 4 different
>> environments on 1.5.4 very frequently, and have had 0 incidents since
>> reverting to 1.5.3.
>>
>> On Tue, Jan 2, 2024 at 8:46 AM Vieri <re...@yahoo.com.invalid> wrote:
>>
>>
>> From the OP it seems that guacamole 1.5.3 did not have this issue,
>> but it is yet to be confirmed.
>>
>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
>> <ma...@guacamole.apache.org>
>> For additional commands, e-mail: user-help@guacamole.apache.org
>> <ma...@guacamole.apache.org>
>>
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org
Re: Major bug message log in guacd 1.5.4
Posted by Michael Jumper <mj...@apache.org>.
All, if you wish to test this issue further, the thing to test is
whether the *1.5.4* images suffer from the same failure even if rebuilt
against the same version of FreeRDP used by 1.5.3 (version 2.10.0).
There is no need to confirm that the issue does not occur with 1.5.3
version of the Docker images. This is already known but too broad a
result, as switching from "guacamole/guacd:1.5.4" to
"guacamole/guacd:1.5.3" does not simply switch to an older version of
Guacamole; it switches to older versions of absolutely everything,
including the very software reporting the error (FreeRDP).
See:
* https://lists.apache.org/thread/9xws51d32h6mqz35d9odh2kwnl04g8p9
* https://lists.apache.org/thread/27mg4wg4lh7rnqxnjw8j3xhjlbj1v95w
You can try rebuilding against FreeRDP 2.10.0 by checking out a copy of
the 1.5.4 source and using the "WITH_FREERDP" build arg to specify "2.10.0":
$ git clone https://github.com/apache/guacamole-server
$ cd guacamole-server/
$ git checkout 1.5.4
$ sudo docker build -t guacamole/guacamole \
--build-arg WITH_FREERDP=2.10.0 \
--build-arg ALPINE_BASE_IMAGE=3.18 .
- Mike
On 1/3/24 08:59, John Watson wrote:
> 1.5.3 does not have the issue. I was dealing with it in 4 different
> environments on 1.5.4 very frequently, and have had 0 incidents since
> reverting to 1.5.3.
>
> On Tue, Jan 2, 2024 at 8:46 AM Vieri <re...@yahoo.com.invalid> wrote:
>
>
> From the OP it seems that guacamole 1.5.3 did not have this issue,
> but it is yet to be confirmed.
>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
> <ma...@guacamole.apache.org>
> For additional commands, e-mail: user-help@guacamole.apache.org
> <ma...@guacamole.apache.org>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org
Re: Major bug message log in guacd 1.5.4
Posted by John Watson <jw...@gmail.com>.
1.5.3 does not have the issue. I was dealing with it in 4 different
environments on 1.5.4 very frequently, and have had 0 incidents since
reverting to 1.5.3.
On Tue, Jan 2, 2024 at 8:46 AM Vieri <re...@yahoo.com.invalid> wrote:
>
> From the OP it seems that guacamole 1.5.3 did not have this issue, but it
> is yet to be confirmed.
>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
> For additional commands, e-mail: user-help@guacamole.apache.org
>
>
Re: Major bug message log in guacd 1.5.4
Posted by Vieri <re...@yahoo.com.INVALID>.
From the OP it seems that guacamole 1.5.3 did not have this issue, but it is yet to be confirmed.
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org
Re: Major bug message log in guacd 1.5.4
Posted by Anders Fogh Eriksen <af...@adminbyrequest.com.INVALID>.
We have the exact same issue as Vieri is experiencing. We can add a bit more information.
The error message:
Major bug, unable to allocate a TLS value for currentThread
is thrown by FreeRDP: https://github.com/FreeRDP/FreeRDP/blob/87557b1e4ef636e18a7dea58f0cae76fa5dff4fb/winpr/libwinpr/thread/thread.c#L439
We have a setup running Guacd in Docker running Alpine 3.18.5 on an Ubuntu 20.04 OS. After exactly 59 connections guacd is put in a state where it will throw the error above every time a new connection attempt is made.
The only way to get guacd out of this state seems to be to restart the Docker host. After a reboot, we're able to do another 59 connections before needing to restart again.
Furthermore, we can also see the following from our logs:
guacd[6368]: DEBUG: SSL_CTX_new failed
2024-01-02T08:47:53.508450591Z [2024-01-02 08:47:53 UTC] guacd[6368]: DEBUG: transport_connect_tls:freerdp_set_last_error_ex ERRCONNECT_CONNECT_CANCELLED [0x0002000B]
2024-01-02T08:47:53.509335078Z [2024-01-02 08:47:53 UTC] guacd[6368]: DEBUG: SVC "rdpdr" disconnected.
2024-01-02T08:47:53.509352781Z [2024-01-02 08:47:53 UTC] guacd[6368]: DEBUG: SVC "rdpsnd" disconnected.
2024-01-02T08:47:53.509358692Z [2024-01-02 08:47:53 UTC] guacd[6368]: INFO: RDP server closed/refused connection: Connection failed (server unreachable?)
Which seems to be an issue from within OpenSSL because of the SSL_CTX_new message.
We're currently backtracking from the FreeRDP and Guacd code to see if we can figure our why this state occurs; but any help from the developers would be hugely appreciated. This is currently holding back a product launch in our end, so we're very motivated to help figure out what's causing this.
From: Vieri <re...@yahoo.com.INVALID>
Date: Tuesday, 2 January 2024 at 08.30
To: user@guacamole.apache.org <us...@guacamole.apache.org>
Subject: Re: Major bug message log in guacd 1.5.4
Hi,
I'm running two different systems: one with Guacamole client & server 1.5.4 and another with guacamole 1.4.0. Both systems are running the same freeRDP version 2.4.1.
The guacamole 1.4.0 system has been running fine for a very long time and still is.
The 1.5.4 system has been running fine for a few weeks now, but suddenly I'm hitting the FreeRDP "major bug" issue, and the RDP client connection fails.
Major bug, unable to allocate a TLS value for currentThread
freerdp_tcp_is_hostname_resolvable:freerdp_set_last_error_ex resetting error state
freerdp_tcp_connect:freerdp_set_last_error_ex resetting error state
Protocol Security Negotiation Failure
rdp_client_connect:freerdp_set_last_error_ex ERRCONNECT_SECURITY_NEGO_CONNECT_FAILED [0x0002000C]
Error: protocol security negotiation or connectionfailure
SVC "rdpdr" disconnected.
SVC "rdpsnd" disconnected.
RDP server closed/refused connection: Security negotiation failed (wrong security type?)
This is the same target RDP server, same FreeRDP version, but different guacamole software. Even Apache Tomcat is almost the same (8.5.72 vs. 8.5.73).
I then tried several target RDP hosts, and they all gave the same error.
So then I tried both telnet and ssh hosts. They failed too, but with no errors -- just a timeout.
Finally, the *only* thing I tried was to restart the guacd daemon on the 1.5.4 system, and everything started working again (RDP, telnet, ssh).
Unfortunately, now that I've restarted guacd 1.5.4 I cannot reproduce the problem for further research (until maybe it starts failing again which can take quite a while).
Vieri
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org
Re: Major bug message log in guacd 1.5.4
Posted by Vieri <re...@yahoo.com.INVALID>.
Hi,
I'm running two different systems: one with Guacamole client & server 1.5.4 and another with guacamole 1.4.0. Both systems are running the same freeRDP version 2.4.1.
The guacamole 1.4.0 system has been running fine for a very long time and still is.
The 1.5.4 system has been running fine for a few weeks now, but suddenly I'm hitting the FreeRDP "major bug" issue, and the RDP client connection fails.
Major bug, unable to allocate a TLS value for currentThread
freerdp_tcp_is_hostname_resolvable:freerdp_set_last_error_ex resetting error state
freerdp_tcp_connect:freerdp_set_last_error_ex resetting error state
Protocol Security Negotiation Failure
rdp_client_connect:freerdp_set_last_error_ex ERRCONNECT_SECURITY_NEGO_CONNECT_FAILED [0x0002000C]
Error: protocol security negotiation or connectionfailure
SVC "rdpdr" disconnected.
SVC "rdpsnd" disconnected.
RDP server closed/refused connection: Security negotiation failed (wrong security type?)
This is the same target RDP server, same FreeRDP version, but different guacamole software. Even Apache Tomcat is almost the same (8.5.72 vs. 8.5.73).
I then tried several target RDP hosts, and they all gave the same error.
So then I tried both telnet and ssh hosts. They failed too, but with no errors -- just a timeout.
Finally, the *only* thing I tried was to restart the guacd daemon on the 1.5.4 system, and everything started working again (RDP, telnet, ssh).
Unfortunately, now that I've restarted guacd 1.5.4 I cannot reproduce the problem for further research (until maybe it starts failing again which can take quite a while).
Vieri
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org
Re: Major bug message log in guacd 1.5.4
Posted by Michael Jumper <mj...@apache.org>.
On 12/13/2023 4:19 AM, Jorge López Díaz wrote:
> Hi,
>
> We updated our guacd Docker image to v1.5.4 and after hours working as
> expected, connections stared to failed and it was not possible to
> establish new connections. In the container logs we saw this message:
>
> /Major bug, unable to allocate a TLS value for currentThread/
>
> After rolling back to v1.5.3 everything is working as expected.
>
> Do you have any issue like this?
>
I have not seen this before, but the log message is from FreeRDP:
https://github.com/FreeRDP/FreeRDP/blob/53cb5f8852258c8a4bb18715d34a51a31080e620/winpr/libwinpr/thread/thread.c#L439
If you can reproduce the issue reliably, given that the message itself
suspects a bug, I'd recommend reporting the issue to FreeRDP with steps
to reproduce:
https://github.com/FreeRDP/FreeRDP/issues
If this turns out to be a bug in a specific version of FreeRDP, it is
possible to manually rebuild the Docker image with an older version of
FreeRDP using the "WITH_FREERDP" build argument:
https://github.com/apache/guacamole-server/blob/f0ab6655445d72ef92c7f33683817b9cea6ef1e8/Dockerfile#L65
- Mike
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org