@ptahbe

https://apache.org/dyn/closer.lua/guacamole/1.4.0/binary/guacamole-auth-totp-1.4.0.tar.gz?action=download . Extract this file , it will contain a guacamole-auth-totp-1.4.0.jar .

Open File manager and upload guacamole-auth-totp-1.4.0.jar into the extensions directory.

a84abe6c-48e0-4371-a669-4006c96e7e04-image.png

Restart the app. You can also do this from the "..." button above.

Then, when you login, you will see:

7a940d14-8ac0-423d-8be5-ad91774a1b1b-image.png

@ptahbe database auth (against mysql) is pre-configured in the package. So, nothing extra is required to be configured to enable 2FA.

@girish Thanks for looking into this!

In the mean time I've also been able to get the connection to work by using the "old key" method.

@seanteal107 no worries 🙂 I wasn't exactly sure what you are asking for:

I've Googled and watched every tutorial and forum recommendation I can stand to gaze upon... from TigerVNC, TightVNC, RealVNC... but to no avail.
Running script after script. Install, uninstall, reinstall...
I just have no idea where I'm going wrong. Installed libvncserver-dev on the server...

Is this all on bodhi linux? I have to admit, I have no clue what bodhi linux is, it's the first time I am hearing about it.

@adampbartley you have to login as admin, looks like you are logged in as a normal user. Usually, there is a popup immediately after the install that shows the admin login information. After an install, you can find the instructions in the "First time setup" dropdown item.

c4fdfd90-1541-404d-b4f6-ef75ed0dcf0f-image.png

Username: guacadmin Password: guacadmin

@ehsanfox in the end you just need to issue a docker pull docker itself will take care of the rest. Afterwards you should be able to install the app.

@girish Thanks for the input. I actually decided to just build the server manually without using docker, but to answer your question, how I've done it (and this would be a SUPER AWESOME feature for you to add in your app) is to set up an encrypted tunnel using SSH. I'm doing a remote port forward from the machine I'm remoting into, to the guacamole server. Guacamole connections are then simply configured to connect to localhost and the forwarded port. Traffic then goes through an encrypted tunnel to the machine I'm remoting into.

@girish many thanks for the advice I did as you asked and I could not telnet to the server via the terminal app, so I then went to the cloudron server and tried it from there it would also not work, which lead me down a bit of rabbit hole 😄

Eventually I managed to find and issue with the virtual nic on the server itself and managed to resolve that, and now it is working perfectly.

Not sure how I missed it but you helped me find so many thanks.

Kind Regards

Scott

@dark_dragone not 100% sure but I think search domains is a client feature. This means that docker (the DNS client on behalf of the guac container) should be configured to have a dns search. See https://docs.docker.com/config/containers/container-networking/ (--dns-search). Maybe you can quickly try by editing /etc/systemd/system/docker.service.d/cloudron.conf and restarting docker.

I think you can also add it in your local machine's /etc/resolv.conf

@robi The universe gave me a hint this could be due to a session timeout, will re-test.

@tshafaat211 is there anything in the guacamole logs - https://docs.cloudron.io/apps/#log-viewer ?

@rez I see. Cloudron apps do not run in host mode because we need the network isolation for security purposes. Still I am not sure I understand why a docker container cannot access external network regardless. I thought this was taken care of by linux routing.

@jonlabs If you open a web terminal, are you able to telnet ip-of-server 22 (22 is the SSH port). Does it connect?

@girish Thank you for your prompt action on this. I have tested and all is now working as intended.

@girish Thanks! - should have figured that out - didn't see the button 😊

Fair enough, currently it has no memory limit set, so it uses the default 256MB. Which is probably quite low for java apps.

I had to look up why this was needed. https://github.com/glyptodon/clipboard-permission-manager has an explanation.

@murgero Thanks for following up, apologies for not seeing this sooner.

I don’t really know if they are fully compatible. I started using it a number of years ago since it then was a more secure and faster VNC implementation. It works cross platform by downloading a server application from RealVNC, and then registering an account with them. The free tier allows for 5 desktops/servers. The added benefit from a simplicity point of is that you connect via the client app through their servers, eliminating the need to open standard VNC ports in your firewall.

I never did manage to find out how, and if, it is possible to connect in other ways. That’s why I was hoping someone else knew...

Thank you very much!

@odie Good catch! This was an oversight on my part. I have pushed an update to fix this.