You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@guacamole.apache.org by Nick Couchman <vn...@apache.org> on 2018/11/20 15:00:08 UTC
Re: guacamole radius
On Tue, Nov 20, 2018 at 9:19 AM SergeyKh <ma...@gmail.com> wrote:
> Hello Nick!
> can you please tell me something about my problem with guacamole and your
> radius extension? am i doing something wrong? so i can't get to the web-app
> to choose my connections. it only works with one connection that starts
> automatically.
>
Sergey,
I have not had a chance to test it out, yet, to figure out if there is a
bug in the extension. When I get a chance I will see if I can reproduce
the behavior you're seeing.
Regards,
Nick
Re: guacamole radius
Posted by Nick Couchman <vn...@apache.org>.
On Mon, Feb 25, 2019 at 6:38 PM drhy <dy...@huntergroup.co.nz> wrote:
> Hi Nick,
>
> Please be assured that the Radius module in its current form is fantastic -
> thanks to all those authoring and testing it. But being a typical user, I'm
> a little greedy....
>
> Are you saying that the Radius module cannot now, and for 1.1.0 won't be,
> returning Radius (and hence Active Directory) groups for the
> Radius-authenticated user, and therefore doesn't pass groups on to the JDBC
> module ?
>
>
- The RADIUS module does not support any user groups, nor will it in 1.1.0.
- However, the issues that I referenced impacting how users are mapped to
groups will get implemented and/or fixed in 1.1.0. So, once 1.1.0 comes
out you should be able to create users in the JDBC module, add them to
groups, and then log in with another module and have the group-assigned
permissions take effect.
-Nick
Re: guacamole radius
Posted by drhy <dy...@huntergroup.co.nz>.
Hi Nick,
Please be assured that the Radius module in its current form is fantastic -
thanks to all those authoring and testing it. But being a typical user, I'm
a little greedy....
Are you saying that the Radius module cannot now, and for 1.1.0 won't be,
returning Radius (and hence Active Directory) groups for the
Radius-authenticated user, and therefore doesn't pass groups on to the JDBC
module ?
Thanks again.
-David
--
Sent from: http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/
Re: guacamole radius
Posted by PlayerOne <lb...@akdmc.com>.
vnick wrote
> or you'd have to assign permissions directly to "User 1" in the JDBC
> module
In my testing so far this is exactly what I'm experiencing. Permissions only
work if connections are assigned to users.
--
Sent from: http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/
Re: guacamole radius
Posted by Nick Couchman <vn...@apache.org>.
On Sun, Feb 24, 2019 at 12:01 AM drhy <dy...@huntergroup.co.nz> wrote:
> Hi Nick,
>
> A further clarification from PlayerOne and myself.
>
> We have been testing Radius with MySQL and have been able to successfully
> configure a Guacamole Group with Connections attached to it. When we then
> make Guacamole Users members of that Group, only the Users who are
> Guacamole
> Administrators see the Group's Connections. So in practice ordinary
> (non-Admin) Users don't see any Connections. (The Users and the Group match
> the User, Group and Group membership in Active Directory.)
>
It's probably related to one of two currently opened issues:
https://issues.apache.org/jira/browse/GUACAMOLE-696
https://issues.apache.org/jira/browse/GUACAMOLE-715
The first issue deals with the fact that group permissions within the
database are not applied to users authenticated under a different
extensions. So, for example if you have "Group 1" in JDBC, with "User 1"
as a member of that group, you've assigned permissions to "Group 1" for a
certain connection, and "User 1" authenticates with RADIUS, the permissions
assigned to "Group 1" will *not* be applied. This is a slight nuance in
how permissions are applied, and will likely be tweaked to function more
how people expect it to work in 1.1.0. In 1.0.0, you'd have to have "Group
1" present in the RADIUS extension (which doesn't do groups at all, so that
would be difficult), or you'd have to assign permissions directly to "User
1" in the JDBC module.
The second issue is a bug that requires that, for groups matched between
authentication extensions (specifically between LDAP and JDBC), users are
not given permissions of their group unless they already exist in the JDBC
extension. This is unintended behavior, and should also be corrected in
1.1.0.
I suspect the scenario you're hitting is the one documented in 696.
-Nick
Re: guacamole radius
Posted by drhy <dy...@huntergroup.co.nz>.
Hi Nick,
A further clarification from PlayerOne and myself.
We have been testing Radius with MySQL and have been able to successfully
configure a Guacamole Group with Connections attached to it. When we then
make Guacamole Users members of that Group, only the Users who are Guacamole
Administrators see the Group's Connections. So in practice ordinary
(non-Admin) Users don't see any Connections. (The Users and the Group match
the User, Group and Group membership in Active Directory.)
Looking forward to 1.1.0 :-)
-David
--
Sent from: http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/
Re: guacamole radius
Posted by Nick Couchman <vn...@apache.org>.
>
>
> Thanks.
> After a careful re-read of your postings and the JIRA I now realize that if
> both the username and MySQL Group name exist in Active Directory (which
> Radius is authenticating against) and the password is correct, then the
> user
> will be presented with the Guacamole Connections assigned to the MySQL
> Group.
>
>
Yep - hopefully we'll be able to address this, either by clarifying
documentation or modifying functionality a bit, in 1.1.0.
-Nick
Re: guacamole radius
Posted by drhy <dy...@huntergroup.co.nz>.
Hi Nick
Thanks.
After a careful re-read of your postings and the JIRA I now realize that if
both the username and MySQL Group name exist in Active Directory (which
Radius is authenticating against) and the password is correct, then the user
will be presented with the Guacamole Connections assigned to the MySQL
Group.
-David
--
Sent from: http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/
Re: guacamole radius
Posted by Nick Couchman <vn...@apache.org>.
On Sat, Feb 16, 2019 at 8:40 PM drhy <dy...@huntergroup.co.nz> wrote:
> Hi Nick,
>
> A small issue I have spotted in my testing of the Master/released version
> of
> 1.0.0 with Radius and JDBC/MySQL. The Radius to MySQL hand-off works
> perfectly as discussed in this thread, for Users who have directly linked
> Connections in MySQL, but where Users in MySQL are linked to a Group which
> in turn hold the Connections, then the User is successfully authenticated
> but then sees no connections.
>
>
This is probably related to the following issue:
https://issues.apache.org/jira/browse/GUACAMOLE-696
-Nick
Re: guacamole radius
Posted by drhy <dy...@huntergroup.co.nz>.
Hi Nick,
A small issue I have spotted in my testing of the Master/released version of
1.0.0 with Radius and JDBC/MySQL. The Radius to MySQL hand-off works
perfectly as discussed in this thread, for Users who have directly linked
Connections in MySQL, but where Users in MySQL are linked to a Group which
in turn hold the Connections, then the User is successfully authenticated
but then sees no connections.
-David
--
Sent from: http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/
Re: guacamole radius
Posted by SergeyKh <ma...@gmail.com>.
thank you very much! it works! i'm happy.
пн, 3 дек. 2018 г. в 18:08, Nick Couchman <vn...@apache.org>:
> On Mon, Dec 3, 2018 at 9:39 AM SergeyKh <ma...@gmail.com> wrote:
>
>> Thank you for the investigation.
>> but where is the staging branch? can you share the link?
>>
>>
> I've tracked it down to changed introduced in GUACAMOLE-598 and have
> re-opened that JIRA issue to correct the problem.
>
> To get the staging branch, all you need to do is clone the git repo and
> then check out the staging/1.0.0 branch:
> git clone https://github.com/apache/guacamole-client.git
> git checkout staging/1.0.0
>
> Assuming you already have the code downloaded you should just need to do
> the checkout step, and then build and deploy.
>
> -Nick
>
>>
Re: guacamole radius
Posted by Nick Couchman <vn...@apache.org>.
On Mon, Dec 3, 2018 at 9:39 AM SergeyKh <ma...@gmail.com> wrote:
> Thank you for the investigation.
> but where is the staging branch? can you share the link?
>
>
I've tracked it down to changed introduced in GUACAMOLE-598 and have
re-opened that JIRA issue to correct the problem.
To get the staging branch, all you need to do is clone the git repo and
then check out the staging/1.0.0 branch:
git clone https://github.com/apache/guacamole-client.git
git checkout staging/1.0.0
Assuming you already have the code downloaded you should just need to do
the checkout step, and then build and deploy.
-Nick
>
Re: guacamole radius
Posted by SergeyKh <ma...@gmail.com>.
Thank you for the investigation.
but where is the staging branch? can you share the link?
пн, 3 дек. 2018 г. в 17:32, Nick Couchman <vn...@apache.org>:
> On Mon, Dec 3, 2018 at 2:18 AM SergeyKh <ma...@gmail.com> wrote:
>
>> I'm glad that you funaly belive me.
>>
>
> It wasn't an issue of believing your or not, it was trying to isolate
> exactly what conditions produce the problem you're seeing, and determining
> whether those are code bugs or environment setup issues. My initial
> questions were to try to eliminate other known issues as the cause of the
> problem. I finally got some time to try a few things myself and was able
> to pin down exactly which versions and configurations cause the problem
> you're seeing.
>
> This issue impacts not only the RADIUS module, but also the Header module,
> likely the CAS module, and maybe a couple of others. I'm in the process of
> tracking down where the bug got introduced so that we can figure out the
> best way to fix it.
>
> In the meantime, the staging/1.0.0 branch (for the upcoming 1.0.0 release)
> should work fine, so you can check out and build that branch instead of the
> master branch to get things going.
>
> -Nick
>
Re: guacamole radius
Posted by Nick Couchman <vn...@apache.org>.
On Mon, Dec 3, 2018 at 2:18 AM SergeyKh <ma...@gmail.com> wrote:
> I'm glad that you funaly belive me.
>
It wasn't an issue of believing your or not, it was trying to isolate
exactly what conditions produce the problem you're seeing, and determining
whether those are code bugs or environment setup issues. My initial
questions were to try to eliminate other known issues as the cause of the
problem. I finally got some time to try a few things myself and was able
to pin down exactly which versions and configurations cause the problem
you're seeing.
This issue impacts not only the RADIUS module, but also the Header module,
likely the CAS module, and maybe a couple of others. I'm in the process of
tracking down where the bug got introduced so that we can figure out the
best way to fix it.
In the meantime, the staging/1.0.0 branch (for the upcoming 1.0.0 release)
should work fine, so you can check out and build that branch instead of the
master branch to get things going.
-Nick
Re: guacamole radius
Posted by SergeyKh <ma...@gmail.com>.
I'm glad that you funaly belive me.
пн, 3 дек. 2018 г., 0:04 Nick Couchman vnick@apache.org:
> The contents of catalina.out would be more useful in diagnosing this.
>> Additionally, you might want to put Guacamole Client into debug mode and
>> look at catalina.out and see what message are thrown.:
>>
>>
>> http://guacamole.apache.org/doc/gug/configuring-guacamole.html#webapp-logging
>>
>>
>>> so GET /guacamole/api/session/data/radius/users/MY-AD-USERNAME?token=081C0ABDDED002820358AA33F7AB6960EA4D899B3693505321A37F0E24A67D64
>>> gets 404
>>>
>>
>> This is expected behavior, IIRC.
>>
>>
> Okay, finally tried both staging/1.0.0 and master branches. The
> staging/1.0.0 branch appears to work perfectly fine for me (which is good
> news - means that this issue shouldn't delay that release). With the
> master branch, I'm able to reproduce the issue that you see, here, and I'm
> guessing that the 404 error you're seeing is actually causing the web UI to
> fail. Looks like something recently has caused a regression in
> functionality of that module and it's going to need to be fixed.
>
> -Nick
>
Re: guacamole radius
Posted by Nick Couchman <vn...@apache.org>.
>
> The contents of catalina.out would be more useful in diagnosing this.
> Additionally, you might want to put Guacamole Client into debug mode and
> look at catalina.out and see what message are thrown.:
>
>
> http://guacamole.apache.org/doc/gug/configuring-guacamole.html#webapp-logging
>
>
>> so GET /guacamole/api/session/data/radius/users/MY-AD-USERNAME?token=081C0ABDDED002820358AA33F7AB6960EA4D899B3693505321A37F0E24A67D64
>> gets 404
>>
>
> This is expected behavior, IIRC.
>
>
Okay, finally tried both staging/1.0.0 and master branches. The
staging/1.0.0 branch appears to work perfectly fine for me (which is good
news - means that this issue shouldn't delay that release). With the
master branch, I'm able to reproduce the issue that you see, here, and I'm
guessing that the 404 error you're seeing is actually causing the web UI to
fail. Looks like something recently has caused a regression in
functionality of that module and it's going to need to be fixed.
-Nick
Re: guacamole radius
Posted by Nick Couchman <vn...@apache.org>.
On Tue, Nov 20, 2018 at 3:58 PM SergeyKh <ma...@gmail.com> wrote:
> so the steps:
> 1. built the documentation from the git
> 2. built guacd + guacamole's war + extensions from the git as it described
> in the manual
> 3. installed all the dependencies on ubuntu 18. mysql 5.7.24,
> tomcat 8.5.30.0 and all the stuff that is needed from the manual.
> 4. set up mysql auth. it works as it should. i've got guacadmin, that i
> used to make users and connections. everything is ok for now.
> 6. then i made user with the the same username as my AD user that i want
> to use via radius. the password is empty. (i did the same for ldap auth
> and it worked well )
> 7. enabled radius auth extension. the names of the jars are:
> 01-guacamole-auth-radius-1.0.0.jar
> 02-guacamole-auth-jdbc-mysql-1.0.0.jar
> 8. guacamole.properties:
> radius-hostname: IP of my radius (I've tested with freeradius
> and Rcdevs OpenOTP RADIUS Bridge)
> radius-auth-port: 1812
> radius-shared-secret: secret
> radius-auth-protocol: pap
> 9. restart tomcat
> 10. log in to guacamole with guacadmin from mysql works fine. any other
> uses from mysql works fine. they authenticate, can manage their connections
> and so on.
> 11. log in to guacamole with AD user via radius. the user authenticates
> well. i can see success login message logs in my radius and in tomcat's
> catalina.out
> but:
> if the user has no connections i get:
> "An error has occurred and this action cannot be completed. If the
> problem
> persists, please notify your system administrator or check your system
> logs."
>
Okay, I tried this out myself and I have absolutely no issues making it
work. Here are the exact steps I took to reproduce:
0) I'm running on CentOS7, latest updates installed.
1) Check out Guacamole Client and Server from git repos, and checkout the
staging/1.0.0 branch (not sure if you're using this one or master? I have
not tried with the master branch).
2) Install prereqs for Guacamole Server, build and install Guacamole server
and start via "systemctl enable --now guacd"
3) Install openjdk 1.8.0 headless and devel
4) Download and unpack the latest Tomcat 8.5. Change ownership to
daemon.daemon and start Tomcat.
5) Download and unpack the latest Maven 3.6.2.
6) Build Guacamole Client using the -Plgpl-extensions flag to build the
RADIUS module.
7) Install, initialize, configure, and start the PostreSQL Server
8) Create the directories /etc/guacamole, /etc/guacamole/lib, and
/etc/guacamole/extensions, and change ownership to daemon.daemon
9) Link the PostgreSQL JDBC driver into /etc/guacamole/lib
10) Edit the /etc/guacamole/guacamole.properties file and specify the
PostgreSQL parameters and the RADIUS parameters.
11) Use the two SQL files in the PostgreSQL tarball to initialize the
Guacamole database and create the guacadmin user.
12) Place the PostgreSQL JDBC extension and the RADIUS extension in
/etc/guacamole/extensions. Rename similar to how you did it so that RADIUS
loads and evaluates before PostgreSQL
13) Deploy the guacamole WAR file
14) Configure Nginx to proxy the Tomcat connection and configure SSL
(should not matter whether you do this or not, I'm just trying to lay out
the exact steps I went through)
15) Log in as guacadmin. Verify login works and am taken to the Guacamole
Home screen. There are no connections, so it's essentially the empty
screen with nothing available and the menu in the upper-right corner of the
screen. This user account has full access to settings.
16) Log out and log in as a RADIUS user. Verify that the RADIUS login
succeeds. I am using RADIUS with LinOTP, so I get prompted for PIN + OTP.
Login works and I am taken to the blank Guacamole Home page, with the menu
in the upper-right corner of the screen. This user only has access to
preferences - no ability to administer the system.
17) Log back out and log in as the guacadmin user and create a connection.
Verify that the connection works.
18) Log out and log in as RADIUS user. User still gets blank home page.
19) Log out and back in as guacadmin user. Create the RADIUS user in the
JDBC module (using identical username to RADIUS user). Assign permissions
for this user to access the connection that has been created.
20) Log out and back in as RADIUS user. User gets automatically connected
to the available connection (this is expected behavior).
21) Log out and back in as guacadmin, and create another connection. Do
not assign permissions for the RADIUS user to this connection, yet.
22) Log out and back in as RADIUS user. User still gets automatically
connected to the only connection user has permission to.
23) Log out and back in as guacadmin, and assign permissions for the second
connection to the RADIUS user.
24) Log out and back in as RADIUS user. RADIUS user now gets taken to the
home screen and gets the option of which of the two connections they want
to use.
All of these steps execute without a problem, and everything works as
expected. I am able to use Ctrl-Alt-Shift to get the menu and can
disconnect from the session and get back to the home screen.
>
> if the user has only one connection he can use it because it starts
> automatically right after login but if the user wants to log off that
> connection (ctrl+alt+shift also gets error) and return to his
> guacamole-web-stuff (the place where he can add and manage connections ) he
> gets error:
> "An error has occurred and this action cannot be completed. If the problem
> persists, please notify your system administrator or check your system
> logs."
>
> tomcat's localhost_access_log..txt has:
>
The contents of catalina.out would be more useful in diagnosing this.
Additionally, you might want to put Guacamole Client into debug mode and
look at catalina.out and see what message are thrown.:
http://guacamole.apache.org/doc/gug/configuring-guacamole.html#webapp-logging
> so GET /guacamole/api/session/data/radius/users/MY-AD-USERNAME?token=081C0ABDDED002820358AA33F7AB6960EA4D899B3693505321A37F0E24A67D64
> gets 404
>
This is expected behavior, IIRC.
-Nick
>
Re: guacamole radius
Posted by SergeyKh <ma...@gmail.com>.
radius authenticated users can't see their guacamole web workspace (or i
don't know how that stuff is called).
one login one password. no 2fa.
so the steps:
1. built the documentation from the git
2. built guacd + guacamole's war + extensions from the git as it described
in the manual
3. installed all the dependencies on ubuntu 18. mysql 5.7.24,
tomcat 8.5.30.0 and all the stuff that is needed from the manual.
4. set up mysql auth. it works as it should. i've got guacadmin, that i
used to make users and connections. everything is ok for now.
6. then i made user with the the same username as my AD user that i want to
use via radius. the password is empty. (i did the same for ldap auth and
it worked well )
7. enabled radius auth extension. the names of the jars are:
01-guacamole-auth-radius-1.0.0.jar
02-guacamole-auth-jdbc-mysql-1.0.0.jar
8. guacamole.properties:
radius-hostname: IP of my radius (I've tested with freeradius
and Rcdevs OpenOTP RADIUS Bridge)
radius-auth-port: 1812
radius-shared-secret: secret
radius-auth-protocol: pap
9. restart tomcat
10. log in to guacamole with guacadmin from mysql works fine. any other
uses from mysql works fine. they authenticate, can manage their connections
and so on.
11. log in to guacamole with AD user via radius. the user authenticates
well. i can see success login message logs in my radius and in tomcat's
catalina.out
but:
if the user has no connections i get:
"An error has occurred and this action cannot be completed. If the problem
persists, please notify your system administrator or check your system logs.
"
if the user has only one connection he can use it because it starts
automatically right after login but if the user wants to log off that
connection (ctrl+alt+shift also gets error) and return to his
guacamole-web-stuff (the place where he can add and manage connections ) he
gets error:
"An error has occurred and this action cannot be completed. If the problem
persists, please notify your system administrator or check your system logs.
"
tomcat's localhost_access_log..txt has:
"POST /guacamole/api/tokens HTTP/1.1" 403 437
"POST /guacamole/api/tokens HTTP/1.1" 200 191
"POST /guacamole/api/tokens HTTP/1.1" 200 191
"GET /guacamole/api/patches?token=081C0ABDDED002820358AA33F7AB6960EA4D899B3693505321A37F0E24A67D64
HTTP/1.1" 200 352
"GET /guacamole/api/session/data/mysql-shared/connectionGroups/ROOT/tree?token=081C0ABDDED002820358AA33F7AB6960EA4D899B3693505321A37F0E24A67D64
HTTP/1.1" 200
"GET /guacamole/api/session/data/mysql-shared/self/permissions?token=081C0ABDDED002820358AA33F7AB6960EA4D899B3693505321A37F0E24A67D64
HTTP/1.1" 200 247
"GET /guacamole/api/session/data/mysql/self/permissions?token=081C0ABDDED002820358AA33F7AB6960EA4D899B3693505321A37F0E24A67D64
HTTP/1.1" 200 244
"GET /guacamole/api/session/data/mysql/connectionGroups/ROOT/tree?token=081C0ABDDED002820358AA33F7AB6960EA4D899B3693505321A37F0E24A67D64
HTTP/1.1" 200 434
"POST /guacamole/api/tokens HTTP/1.1" 200 191
"GET /guacamole/images/settings/tablet-keys.png HTTP/1.1" 200 3175
"GET /guacamole/images/logo-144.png HTTP/1.1" 200 9167
"GET /guacamole/images/settings/zoom-in.png HTTP/1.1" 200 1553
"GET /guacamole/images/settings/zoom-out.png HTTP/1.1" 200 1521
"GET /guacamole/images/settings/touchscreen.png HTTP/1.1" 200 24025
"GET /guacamole/images/settings/touchpad.png HTTP/1.1" 200 38013
"GET /guacamole/api/session/data/mysql/connections/1?token=081C0ABDDED002820358AA33F7AB6960EA4D899B3693505321A37F0E24A67D64
HTTP/1.1" 200 315
"GET /guacamole/images/drive.png HTTP/1.1" 200 752
"GET /guacamole/images/action-icons/guac-back.png HTTP/1.1" 200 586
"GET /guacamole/app/element/templates/blank.html HTTP/1.1" 200 173
"GET /guacamole/layouts/ru-ru-qwerty.json HTTP/1.1" 200 15203
"GET /guacamole/websocket-tunnel?token=081C0ABDDED002820358AA33F7AB6960EA4D899B3693505321A37F0E24A67D64&GUAC_DATA_SOURCE=mysql&GUAC_ID=1&GUAC_TYPE=c&GUAC_WID
"GET /guacamole/api/session/tunnels/fa90ae89-3ad0-469e-8da8-cef2ab0f7178/activeConnection/connection/sharingProfiles?token=081C0ABDDED002820358AA33F7AB6960EA
"GET /guacamole/images/logo-144.png HTTP/1.1" 200 9167
"GET /guacamole/api/session/data/mysql-shared/self/effectivePermissions?token=081C0ABDDED002820358AA33F7AB6960EA4D899B3693505321A37F0E24A67D64
HTTP/1.1" 200
"GET /guacamole/images/x.png HTTP/1.1" 200 591
"GET /guacamole/api/session/data/radius/users/MY-AD-USERNAME?token=081C0ABDDED002820358AA33F7AB6960EA4D899B3693505321A37F0E24A67D64
HTTP/1.1" 404 254
"GET /guacamole/api/session/data/mysql/self/effectivePermissions?token=081C0ABDDED002820358AA33F7AB6960EA4D899B3693505321A37F0E24A67D64
HTTP/1.1" 200 301
so GET /guacamole/api/session/data/radius/users/MY-AD-USERNAME?token=081C0ABDDED002820358AA33F7AB6960EA4D899B3693505321A37F0E24A67D64
gets 404
then i used "F12" in chrome and it tells us:
{"message":"Session not associated with authentication provider
\"radius\".","translatableMessage":{"key":"Session not associated with
authentication provider
\"radius\".","variables":null},"statusCode":null,"expected":null,"type":"NOT_FOUND"}
вт, 20 нояб. 2018 г. в 21:54, Nick Couchman <vn...@apache.org>:
> On Tue, Nov 20, 2018 at 1:49 PM SergeyKh <ma...@gmail.com> wrote:
>
>> Yes. 02 is jdbc mysql
>>
>>
> Okay, and, I think you described it elsewhere, but can you provide me the
> exact list of steps you go through to reproduce the issue, and the exact
> behavior you're seeing? It sounds like users cannot see the connection you
> expect them to be able to see, but I just want to make sure that it's
> something I can fully reproduce in my environment.
>
> Thanks - Nick
>
Re: guacamole radius
Posted by Nick Couchman <vn...@apache.org>.
On Tue, Nov 20, 2018 at 1:49 PM SergeyKh <ma...@gmail.com> wrote:
> Yes. 02 is jdbc mysql
>
>
Okay, and, I think you described it elsewhere, but can you provide me the
exact list of steps you go through to reproduce the issue, and the exact
behavior you're seeing? It sounds like users cannot see the connection you
expect them to be able to see, but I just want to make sure that it's
something I can fully reproduce in my environment.
Thanks - Nick
Re: guacamole radius
Posted by SergeyKh <ma...@gmail.com>.
Yes. 02 is jdbc mysql
вт, 20 нояб. 2018 г., 21:47 Nick Couchman vnick@apache.org:
> On Tue, Nov 20, 2018 at 1:44 PM SergeyKh <ma...@gmail.com> wrote:
>
>> My radius extension name starts with 01 so i've tryed it alredy
>>
>>>
>>>
> Okay, but does your JDBC module start with something higher - 02, 03,
> etc., such that it is being evaluated after the RADIUS module?
>
> -Nick
>
Re: guacamole radius
Posted by Nick Couchman <vn...@apache.org>.
On Tue, Nov 20, 2018 at 1:44 PM SergeyKh <ma...@gmail.com> wrote:
> My radius extension name starts with 01 so i've tryed it alredy
>
>>
>>
Okay, but does your JDBC module start with something higher - 02, 03, etc.,
such that it is being evaluated after the RADIUS module?
-Nick
Re: guacamole radius
Posted by SergeyKh <ma...@gmail.com>.
My radius extension name starts with 01 so i've tryed it alredy
вт, 20 нояб. 2018 г., 21:40 Nick Couchman vnick@apache.org:
> On Tue, Nov 20, 2018 at 10:13 AM SergeyKh <ma...@gmail.com> wrote:
>
>> Ok, thank you very much. If you need some more info or my logs i'm here.
>>
>>
> Can you try something else for me? When you install the RADIUS module,
> can you install it as:
> guacamole-auth-0radius-1.0.0.jar
>
> (put the 0 in front of the radius part of the filename), and let me know
> if that helps at all? After you do this, make sure to either reload the
> Guacamole WAR file or restart Tomcat.
>
> Thanks,
> Nick
>
Re: guacamole radius
Posted by Nick Couchman <vn...@apache.org>.
On Tue, Nov 20, 2018 at 10:13 AM SergeyKh <ma...@gmail.com> wrote:
> Ok, thank you very much. If you need some more info or my logs i'm here.
>
>
Can you try something else for me? When you install the RADIUS module, can
you install it as:
guacamole-auth-0radius-1.0.0.jar
(put the 0 in front of the radius part of the filename), and let me know if
that helps at all? After you do this, make sure to either reload the
Guacamole WAR file or restart Tomcat.
Thanks,
Nick
Re: guacamole radius
Posted by SergeyKh <ma...@gmail.com>.
Ok, thank you very much. If you need some more info or my logs i'm here.
вт, 20 нояб. 2018 г., 18:00 Nick Couchman vnick@apache.org:
> On Tue, Nov 20, 2018 at 9:19 AM SergeyKh <ma...@gmail.com> wrote:
>
>> Hello Nick!
>> can you please tell me something about my problem with guacamole and
>> your radius extension? am i doing something wrong? so i can't get to the
>> web-app to choose my connections. it only works with one connection that
>> starts automatically.
>>
>
> Sergey,
> I have not had a chance to test it out, yet, to figure out if there is a
> bug in the extension. When I get a chance I will see if I can reproduce
> the behavior you're seeing.
>
> Regards,
> Nick
>