Guacamole Configuration
-
@mpeterson0418 even if its using different urls Guacamole is configured under the hood to use Cloudron for authentication (no one first needs to head to their Cloudron dashboard, but can directly log into Guac).
And once you have enabled the external ldap integration for your Cloudron all members on your ldap can log into Cloudron and therefore apps that use the Cloudron user management.
@fbartels I am definitely going to try that
Maybe you can help me with something within the guacamole config...... for sake or argument I tried building a user account and added my domain NetBIOS name to the front of it <AD><username>.
Now when I try to edit the account in the guacamole interface, I get the following error:
ERROR - An error has occurred and this action cannot be completed. If the problem persists, please notify your system administrator or check your system logs.
It seems like the account is being stored within the mysql database. Any thoughts on how to manually clean it up?
-
@fbartels I am definitely going to try that
Maybe you can help me with something within the guacamole config...... for sake or argument I tried building a user account and added my domain NetBIOS name to the front of it <AD><username>.
Now when I try to edit the account in the guacamole interface, I get the following error:
ERROR - An error has occurred and this action cannot be completed. If the problem persists, please notify your system administrator or check your system logs.
It seems like the account is being stored within the mysql database. Any thoughts on how to manually clean it up?
-
@fbartels I am definitely going to try that
Maybe you can help me with something within the guacamole config...... for sake or argument I tried building a user account and added my domain NetBIOS name to the front of it <AD><username>.
Now when I try to edit the account in the guacamole interface, I get the following error:
ERROR - An error has occurred and this action cannot be completed. If the problem persists, please notify your system administrator or check your system logs.
It seems like the account is being stored within the mysql database. Any thoughts on how to manually clean it up?
I got the external authentication working. Thanks a bunch!
Any thoughts on the lingering user account that I can't remove from Apache Guacamole? Is it stored somewhere within mysql and perhaps something I can edit manually to remove? The user interface keeps giving me the error I referenced earlier:
ERROR - An error has occurred and this action cannot be completed. If the problem persists, please notify your system administrator or check your system logs.
-
I got the external authentication working. Thanks a bunch!
Any thoughts on the lingering user account that I can't remove from Apache Guacamole? Is it stored somewhere within mysql and perhaps something I can edit manually to remove? The user interface keeps giving me the error I referenced earlier:
ERROR - An error has occurred and this action cannot be completed. If the problem persists, please notify your system administrator or check your system logs.
@mpeterson0418 Did you succeed via Cloudron external directory or directly from guacamole to your LDAP ?
As for the lingering user, maybe trying delete from MySQL. If you open web terminal, there is a button on the top for MySQL access. Click that button and press enter. Might want to take an app backup before tinkering with db directly...
-
@mpeterson0418 Did you succeed via Cloudron external directory or directly from guacamole to your LDAP ?
As for the lingering user, maybe trying delete from MySQL. If you open web terminal, there is a button on the top for MySQL access. Click that button and press enter. Might want to take an app backup before tinkering with db directly...
Yes I got the external directory setup and it is pulling in my AD user accounts so we are good there
As for MySQL..... is there a specific location/table on where I can access the database user accounts? Or is everything entered via UserMappings.xml?
-
Yes I got the external directory setup and it is pulling in my AD user accounts so we are good there
As for MySQL..... is there a specific location/table on where I can access the database user accounts? Or is everything entered via UserMappings.xml?
-
Yes I got the external directory setup and it is pulling in my AD user accounts so we are good there
As for MySQL..... is there a specific location/table on where I can access the database user accounts? Or is everything entered via UserMappings.xml?
Hey sorry.... just a quick update I found the MySQL table and was able to edit it as needed. Issue got cleared up after running a couple queries. Thanks for your help!
-
Hey guys,
Was wondering if we could potentially revisit this topic? I'm having a weird problem where my guacamole server is defaulting to mysql authentication even after getting my LDAP config setup and syncing
I've been able to successfully test a login using an AD account from my environment.... however when trying to authenticate with guacamole, it keeps failing and showing a denial from mysql authentication
Can anyone help?
-
Hello @mpeterson0418
You will need to provide more details.From the moment you are trying to log in with LDAP gather the following:
- guacamole configuration
- Cloudron App Logs
- Web browser console logs
- Web browser network logs
Also, did you follow the documentation https://guacamole.apache.org/doc/gug/ldap-auth.html ?
With this information it might be possible to provide assistance.
-
Hey James,
I've actually got a handle on this for the most part. One odd thing I am observing here though is - there's no easy way to just log out using OpenID without it forcefully just logging back into the Guacamole application. Is there some way that I can just have the session hold up back at the login screen after a successful logout until I enter credentials again?
-
Hey James,
I've actually got a handle on this for the most part. One odd thing I am observing here though is - there's no easy way to just log out using OpenID without it forcefully just logging back into the Guacamole application. Is there some way that I can just have the session hold up back at the login screen after a successful logout until I enter credentials again?
Hello @mpeterson0418
I've actually got a handle on this for the most part.
It would be good to share your findings here so other people who want to set up LDAP find your topic.
One odd thing I am observing here though is - there's no easy way to just log out using OpenID without it forcefully just logging back into the Guacamole application. Is there some way that I can just have the session hold up back at the login screen after a successful logout until I enter credentials again?
OpenID? I thought you are configuring LDAP?
But no, I don't have an idea how to solve this behaviour right now. -
Hey James,
Sorry been a bit busy here - but per your comment I can def share some insights. I went into the main cloudron dashboard, and navigated to Users > LDAP to configure my internal AD config (Dashed out some sensitive info for security)
After the data began syncing properly, I manually went into my container and adjusted the authentication protocol to utilize OpenID instead of MySQL auth by adding the highlighted entity -
All seems to be working out, outside of the one tidbit I mentioned previously. But it's manageable for now and my users are having no issues logging in and accessing resources using their AD credentials
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login