You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@guacamole.apache.org by Eby Mani <eb...@yahoo.com.INVALID> on 2024/01/11 06:55:07 UTC

downloading file cause remote system disconnection

Guacamole 1.5.3

File uploads to remote systems are working for ssh and RDP, but when trying to download files from remote systems either thru browser / guacctl result in server disconnection and partial file download. Have not restricted file download or upload for any servers. Have tried downloading using various web browsers.

I don't have dedicated sftp server.

For Windows RDP, following is config parameters are used. NOTE: SFTP not configured, username and password saved.
under Device Redirection
Enable Drive - selected
Drive name: ${GUAC_USERNAME}
Drive path: /var/lib/guacamole/sftp/${GUAC_USERNAME}

For linux ssh, special folder created on / for copying files,  username and password saved.
SFTP
Enable SFTP - selected.
File browser root directory: /filecopy/

How do i resolve this issue, does anyone else have similar issue ?.

Thanks,


---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org


Re: downloading file cause remote system disconnection

Posted by Eby Mani <eb...@yahoo.com.INVALID>.
 Correction - Guacamole 1.5.1 Native build.

sorry.


     On Thursday, 11 January, 2024 at 12:27:12 pm IST, Eby Mani <eb...@yahoo.com.invalid> wrote:  
 
 Guacamole 1.5.3

File uploads to remote systems are working for ssh and RDP, but when trying to download files from remote systems either thru browser / guacctl result in server disconnection and partial file download. Have not restricted file download or upload for any servers. Have tried downloading using various web browsers.

I don't have dedicated sftp server.

For Windows RDP, following is config parameters are used. NOTE: SFTP not configured, username and password saved.
under Device Redirection
Enable Drive - selected
Drive name: ${GUAC_USERNAME}
Drive path: /var/lib/guacamole/sftp/${GUAC_USERNAME}

For linux ssh, special folder created on / for copying files,  username and password saved.
SFTP
Enable SFTP - selected.
File browser root directory: /filecopy/

How do i resolve this issue, does anyone else have similar issue ?.

Thanks,


---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org

  

Re: downloading file cause remote system disconnection

Posted by Eby Mani <eb...@yahoo.com.INVALID>.
 > The log below indicates that the connections are falling back to HTTP.
> This does not happen at the time you transfer a file, this happens at the time you make the connection. If you look at the log file you posted you'll see that the message
> Something else might be blocking Websocket supt on the connections - based on the logs you've shared, it's definitely falling back to HTTP.

Thanks Nick,

Guacamole Documentation for ngnix config.
"proxy_set_header Connection $http_connection;"


apidog and other Troubleshooting WebSocket guide recommend the following.
"proxy_set_header Connection "upgrade";"

Leave nginx configuration as per Guacamole Documentation ?.

Any troubleshooting tips to check if WebSocket is getting blocked on server ?. 

Thanks, 

  

Re: downloading file cause remote system disconnection

Posted by Nick Couchman <vn...@apache.org>.
On Fri, Jan 12, 2024 at 12:09 AM Eby Mani <eb...@yahoo.com.invalid> wrote:

>
>  It doesn't say webapp failing back to HTTP, but looks like Guacamole is using HTTP tunnel instead of WebSocket, not sure if this is default.
>
>
The log below indicates that the connections are falling back to HTTP.


> Note " Using HTTP tunnel (not WebSocket). Performance may be sub-optimal."
> occur when initiating file transfer from remote system.
>
>
This does not happen at the time you transfer a file, this happens at the
time you make the connection. If you look at the log file you posted you'll
see that the message about the user joining the connection and the use of
HTTP vs. websocket occurs at the same second (09:32:17). Your connections
are using HTTP, not Websocket.


> Another question is, does ssh host verification play any role in
> transferring files ?.
>
>
No.


> I have restarted nginx, guacad and tomcat9, still no joy.
>
> nginx configuration support websocket.
>
>
Something else might be blocking Websocket supt on the connections - based
on the logs you've shared, it's definitely falling back to HTTP.

-Nick

Re: downloading file cause remote system disconnection

Posted by Eby Mani <eb...@yahoo.com.INVALID>.
 It doesn't say webapp failing back to HTTP, but looks like Guacamole is using HTTP tunnel instead of WebSocket, not sure if this is default.

Note " Using HTTP tunnel (not WebSocket). Performance may be sub-optimal." occur when initiating file transfer from remote system.

Another question is, does ssh host verification play any role in transferring files ?.

I have restarted nginx, guacad and tomcat9, still no joy.

nginx configuration support websocket.

*********************************************
location /jump/ {
    proxy_pass http://localhost:8080;
    proxy_buffering off;
    proxy_http_version 1.1;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection $http_connection;
    client_max_body_size 1g;
    access_log off;
}


log outputs.
*********************************************

tail -f /var/log/tomcat9/catalina.out

[2024-01-12 09:31:31] [info] 09:31:31.027 [http-nio-8080-exec-7] WARN o.a.i.d.pooled.PooledDataSource - Execution of ping query 'SELECT 1' failed: The last packet successfully received from the server was 62,273,492 milliseconds ago. The last packet sent successfully to the server was 62,273,492 milliseconds ago. is longer than the server configured value of 'wait_timeout'. You should consider either expiring and/or testing connection validity before use in your application, increasing the server configured values for client timeouts, or using the Connector/J connection property 'autoReconnect=true' to avoid this problem.
[2024-01-12 09:31:31] [info] 09:31:31.029 [http-nio-8080-exec-7] WARN o.a.i.d.pooled.PooledDataSource - Execution of ping query 'SELECT 1' failed: The last packet successfully received from the server was 62,273,490 milliseconds ago. The last packet sent successfully to the server was 62,273,490 milliseconds ago. is longer than the server configured value of 'wait_timeout'. You should consider either expiring and/or testing connection validity before use in your application, increasing the server configured values for client timeouts, or using the Connector/J connection property 'autoReconnect=true' to avoid this problem.
[2024-01-12 09:31:31] [info] 09:31:31.030 [http-nio-8080-exec-7] WARN o.a.i.d.pooled.PooledDataSource - Execution of ping query 'SELECT 1' failed: The last packet successfully received from the server was 62,263,439 milliseconds ago. The last packet sent successfully to the server was 62,263,439 milliseconds ago. is longer than the server configured value of 'wait_timeout'. You should consider either expiring and/or testing connection validity before use in your application, increasing the server configured values for client timeouts, or using the Connector/J connection property 'autoReconnect=true' to avoid this problem.
[2024-01-12 09:31:42] [info] 09:31:42.398 [http-nio-8080-exec-10] INFO o.a.g.r.auth.AuthenticationService - User "eby.mani" successfully authenticated from \public-ip.
[2024-01-12 09:31:55] [info] 09:31:55.544 [http-nio-8080-exec-3] INFO o.a.g.r.auth.AuthenticationService - User "eby.mani" successfully authenticated from \public-ip.
[2024-01-12 09:32:08] [info] 09:32:08.161 [http-nio-8080-exec-6] INFO o.a.g.r.auth.AuthenticationService - User "eby.mani" successfully authenticated from \public-ip.
[2024-01-12 09:32:17] [info] 09:32:17.657 [http-nio-8080-exec-10] INFO o.a.g.tunnel.TunnelRequestService - User "eby.mani" connected to connection "20".
[2024-01-12 09:32:17] [info] 09:32:17.658 [http-nio-8080-exec-10] INFO o.a.g.t.h.RestrictedGuacamoleHTTPTunnelServlet - Using HTTP tunnel (not WebSocket). Performance may be sub-optimal.
[2024-01-12 09:32:54] [info] 09:32:54.385 [http-nio-8080-exec-10] INFO o.a.g.tunnel.TunnelRequestService - User "eby.mani" disconnected from connection "20". Duration: 36727 milliseconds
[2024-01-12 09:32:54] [info] 09:32:54.390 [http-nio-8080-exec-2] INFO o.a.g.tunnel.TunnelRequestService - User "eby.mani" disconnected from connection "20". Duration: 36732 milliseconds
[2024-01-12 09:32:54] [info] 09:32:54.404 [http-nio-8080-exec-5] WARN o.a.g.s.GuacamoleHTTPTunnelServlet - HTTP tunnel request rejected: No such tunnel.
[2024-01-12 09:32:54] [info] 09:32:54.577 [http-nio-8080-exec-1] WARN o.a.g.s.GuacamoleHTTPTunnelServlet - HTTP tunnel request rejected: No such tunnel.

*********************************************
Thanks.


On Friday, 12 January, 2024 at 01:53:43 am IST, Michael Jumper <mj...@apache.org> wrote:

Do you see any messages in the Guacamole (not guacd) logs noting that
the webapp is falling back to using HTTP as WebSocket could not be used?

There may be something interfering with use of WebSocket. If this
happens, the HTTP tunnel will kick in and alternate between a pair of
HTTP connections to achieve the same kind of streaming, and that will
prevent downloading files due to browser throttling of HTTP requests:

https://issues.apache.org/jira/browse/GUACAMOLE-506

- Mike


---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org

---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org


Re: downloading file cause remote system disconnection

Posted by Michael Jumper <mj...@apache.org>.
On 1/10/24 22:55, Eby Mani wrote:
> Guacamole 1.5.3
> 
> File uploads to remote systems are working for ssh and RDP, but when trying to download files from remote systems either thru browser / guacctl result in server disconnection and partial file download. Have not restricted file download or upload for any servers. Have tried downloading using various web browsers.
> 
> ...

Do you see any messages in the Guacamole (not guacd) logs noting that 
the webapp is falling back to using HTTP as WebSocket could not be used?

There may be something interfering with use of WebSocket. If this 
happens, the HTTP tunnel will kick in and alternate between a pair of 
HTTP connections to achieve the same kind of streaming, and that will 
prevent downloading files due to browser throttling of HTTP requests:

https://issues.apache.org/jira/browse/GUACAMOLE-506

- Mike

---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org