Cloudron makes it easy to run web apps like WordPress, Nextcloud, GitLab on your server. Find out more or install now.


Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • Bookmarks
  • Search
Skins
  • Light
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Collapse
Brand Logo

Cloudron Forum

Apps | Demo | Docs | Install
  1. Cloudron Forum
  2. Discuss
  3. Guacamole Configuration

Guacamole Configuration

Scheduled Pinned Locked Moved Discuss
15 Posts 3 Posters 2.7k Views 3 Watching
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • mpeterson0418M Offline
      mpeterson0418M Offline
      mpeterson0418
      wrote on last edited by
      #1

      I am having some trouble trying to figure out how to get LDAP to work within my configuration. I am observing that a lot of focus has to do with connecting into the /etc/guacamole directory.

      Yet for some reason whenever I try to access the terminal on my cloudron app, I do not see this location available on my guacamole deployment. Making me wonder whether or not this was setup correctly or not (I simply just added the app from the app repository and let it install)

      Any insight here would be greatly appreciated

      girishG 1 Reply Last reply
      0
      • mpeterson0418M mpeterson0418

        I am having some trouble trying to figure out how to get LDAP to work within my configuration. I am observing that a lot of focus has to do with connecting into the /etc/guacamole directory.

        Yet for some reason whenever I try to access the terminal on my cloudron app, I do not see this location available on my guacamole deployment. Making me wonder whether or not this was setup correctly or not (I simply just added the app from the app repository and let it install)

        Any insight here would be greatly appreciated

        girishG Offline
        girishG Offline
        girish
        Staff
        wrote on last edited by
        #2

        @mpeterson0418 By LDAP, do you mean Cloudron authentication or you are trying to configure guacamole with your own LDAP server?

        mpeterson0418M 1 Reply Last reply
        0
        • girishG girish

          @mpeterson0418 By LDAP, do you mean Cloudron authentication or you are trying to configure guacamole with your own LDAP server?

          mpeterson0418M Offline
          mpeterson0418M Offline
          mpeterson0418
          wrote on last edited by
          #3

          @girish I am trying to set it up to work against my Windows AD LDAP server

          girishG fbartelsF 3 Replies Last reply
          0
          • mpeterson0418M mpeterson0418

            @girish I am trying to set it up to work against my Windows AD LDAP server

            girishG Offline
            girishG Offline
            girish
            Staff
            wrote on last edited by girish
            #4

            @mpeterson0418 Ah ok. So, when you install guacamole, you have to make sure to select "Leave user management to the app". At this point, we don't allow changing the auth mechanism post installation, so you might need to re-install.

            To configure, please use the file manager and edit /app/data/guacamole.properties and restart the app. See https://docs.cloudron.io/apps/guacamole/#custom-properties . I think you also have to add the LDAP extension jar file per this . You enable the extension as per https://docs.cloudron.io/apps/guacamole/#extensions

            1 Reply Last reply
            0
            • mpeterson0418M mpeterson0418

              @girish I am trying to set it up to work against my Windows AD LDAP server

              fbartelsF Offline
              fbartelsF Offline
              fbartels
              App Dev
              wrote on last edited by
              #5

              @mpeterson0418 said in Guacamole Configuration:

              Windows AD LDAP server

              In that case it may also be interesting to learn that you can connect your whole Cloudron to your AD. Look at https://docs.cloudron.io/user-management/#external-directory for more information.

              1 Reply Last reply
              2
              • mpeterson0418M mpeterson0418

                @girish I am trying to set it up to work against my Windows AD LDAP server

                girishG Offline
                girishG Offline
                girish
                Staff
                wrote on last edited by
                #6

                @fbartels Ah of course, 🤦 . I think yours might be a better option.

                @mpeterson0418 You can configure Cloudron to integrate with your existing LDAP server and that way all the app will automatically integrate. For this, configure external LDAP directory in Cloudron -> Users and then you have to choose "Cloudron user management" when installing the app.

                mpeterson0418M 1 Reply Last reply
                1
                • girishG girish

                  @fbartels Ah of course, 🤦 . I think yours might be a better option.

                  @mpeterson0418 You can configure Cloudron to integrate with your existing LDAP server and that way all the app will automatically integrate. For this, configure external LDAP directory in Cloudron -> Users and then you have to choose "Cloudron user management" when installing the app.

                  mpeterson0418M Offline
                  mpeterson0418M Offline
                  mpeterson0418
                  wrote on last edited by
                  #7

                  Hi @girish @fbartels

                  So it will in fact pass through the authentication to all the other installed apps on my profile if I setup the External Directory? That's good to know. How exactly will Apache guacamole pick that up though? My concern is that both use different URLs for access, and I think anyone browsing the web could easily just connect to Guacamole without needing to access the cloudron app could they not?

                  fbartelsF 1 Reply Last reply
                  0
                  • mpeterson0418M mpeterson0418

                    Hi @girish @fbartels

                    So it will in fact pass through the authentication to all the other installed apps on my profile if I setup the External Directory? That's good to know. How exactly will Apache guacamole pick that up though? My concern is that both use different URLs for access, and I think anyone browsing the web could easily just connect to Guacamole without needing to access the cloudron app could they not?

                    fbartelsF Offline
                    fbartelsF Offline
                    fbartels
                    App Dev
                    wrote on last edited by
                    #8

                    @mpeterson0418 even if its using different urls Guacamole is configured under the hood to use Cloudron for authentication (no one first needs to head to their Cloudron dashboard, but can directly log into Guac).

                    And once you have enabled the external ldap integration for your Cloudron all members on your ldap can log into Cloudron and therefore apps that use the Cloudron user management.

                    mpeterson0418M 1 Reply Last reply
                    0
                    • fbartelsF fbartels

                      @mpeterson0418 even if its using different urls Guacamole is configured under the hood to use Cloudron for authentication (no one first needs to head to their Cloudron dashboard, but can directly log into Guac).

                      And once you have enabled the external ldap integration for your Cloudron all members on your ldap can log into Cloudron and therefore apps that use the Cloudron user management.

                      mpeterson0418M Offline
                      mpeterson0418M Offline
                      mpeterson0418
                      wrote on last edited by
                      #9

                      @fbartels I am definitely going to try that

                      Maybe you can help me with something within the guacamole config...... for sake or argument I tried building a user account and added my domain NetBIOS name to the front of it <AD><username>.

                      Now when I try to edit the account in the guacamole interface, I get the following error:

                      ERROR - An error has occurred and this action cannot be completed. If the problem persists, please notify your system administrator or check your system logs.

                      It seems like the account is being stored within the mysql database. Any thoughts on how to manually clean it up?

                      fbartelsF mpeterson0418M 2 Replies Last reply
                      0
                      • mpeterson0418M mpeterson0418

                        @fbartels I am definitely going to try that

                        Maybe you can help me with something within the guacamole config...... for sake or argument I tried building a user account and added my domain NetBIOS name to the front of it <AD><username>.

                        Now when I try to edit the account in the guacamole interface, I get the following error:

                        ERROR - An error has occurred and this action cannot be completed. If the problem persists, please notify your system administrator or check your system logs.

                        It seems like the account is being stored within the mysql database. Any thoughts on how to manually clean it up?

                        fbartelsF Offline
                        fbartelsF Offline
                        fbartels
                        App Dev
                        wrote on last edited by
                        #10

                        @mpeterson0418 Oh, I am not using Guac personally, so I cannot really help here.

                        1 Reply Last reply
                        0
                        • mpeterson0418M mpeterson0418

                          @fbartels I am definitely going to try that

                          Maybe you can help me with something within the guacamole config...... for sake or argument I tried building a user account and added my domain NetBIOS name to the front of it <AD><username>.

                          Now when I try to edit the account in the guacamole interface, I get the following error:

                          ERROR - An error has occurred and this action cannot be completed. If the problem persists, please notify your system administrator or check your system logs.

                          It seems like the account is being stored within the mysql database. Any thoughts on how to manually clean it up?

                          mpeterson0418M Offline
                          mpeterson0418M Offline
                          mpeterson0418
                          wrote on last edited by mpeterson0418
                          #11

                          Hi @girish & @fbartels

                          I got the external authentication working. Thanks a bunch!

                          Any thoughts on the lingering user account that I can't remove from Apache Guacamole? Is it stored somewhere within mysql and perhaps something I can edit manually to remove? The user interface keeps giving me the error I referenced earlier:

                          ERROR - An error has occurred and this action cannot be completed. If the problem persists, please notify your system administrator or check your system logs.

                          girishG 1 Reply Last reply
                          0
                          • mpeterson0418M mpeterson0418

                            Hi @girish & @fbartels

                            I got the external authentication working. Thanks a bunch!

                            Any thoughts on the lingering user account that I can't remove from Apache Guacamole? Is it stored somewhere within mysql and perhaps something I can edit manually to remove? The user interface keeps giving me the error I referenced earlier:

                            ERROR - An error has occurred and this action cannot be completed. If the problem persists, please notify your system administrator or check your system logs.

                            girishG Offline
                            girishG Offline
                            girish
                            Staff
                            wrote on last edited by girish
                            #12

                            @mpeterson0418 Did you succeed via Cloudron external directory or directly from guacamole to your LDAP ?

                            As for the lingering user, maybe trying delete from MySQL. If you open web terminal, there is a button on the top for MySQL access. Click that button and press enter. Might want to take an app backup before tinkering with db directly...

                            mpeterson0418M 1 Reply Last reply
                            0
                            • girishG girish

                              @mpeterson0418 Did you succeed via Cloudron external directory or directly from guacamole to your LDAP ?

                              As for the lingering user, maybe trying delete from MySQL. If you open web terminal, there is a button on the top for MySQL access. Click that button and press enter. Might want to take an app backup before tinkering with db directly...

                              mpeterson0418M Offline
                              mpeterson0418M Offline
                              mpeterson0418
                              wrote on last edited by
                              #13

                              @girish

                              Yes I got the external directory setup and it is pulling in my AD user accounts so we are good there

                              As for MySQL..... is there a specific location/table on where I can access the database user accounts? Or is everything entered via UserMappings.xml?

                              girishG mpeterson0418M 2 Replies Last reply
                              0
                              • mpeterson0418M mpeterson0418

                                @girish

                                Yes I got the external directory setup and it is pulling in my AD user accounts so we are good there

                                As for MySQL..... is there a specific location/table on where I can access the database user accounts? Or is everything entered via UserMappings.xml?

                                girishG Offline
                                girishG Offline
                                girish
                                Staff
                                wrote on last edited by
                                #14

                                @mpeterson0418 unfortunately, that part I have no idea since that is very app specific. Maybe you just simply start afresh / re-install. That's probably easier than fixing up db tables by hand since we have no idea about the effect.

                                1 Reply Last reply
                                0
                                • mpeterson0418M mpeterson0418

                                  @girish

                                  Yes I got the external directory setup and it is pulling in my AD user accounts so we are good there

                                  As for MySQL..... is there a specific location/table on where I can access the database user accounts? Or is everything entered via UserMappings.xml?

                                  mpeterson0418M Offline
                                  mpeterson0418M Offline
                                  mpeterson0418
                                  wrote on last edited by
                                  #15

                                  @girish

                                  Hey sorry.... just a quick update I found the MySQL table and was able to edit it as needed. Issue got cleared up after running a couple queries. Thanks for your help!

                                  1 Reply Last reply
                                  1
                                  Reply
                                  • Reply as topic
                                  Log in to reply
                                  • Oldest to Newest
                                  • Newest to Oldest
                                  • Most Votes


                                    • Login

                                    • Don't have an account? Register

                                    • Login or register to search.
                                    • First post
                                      Last post
                                    0
                                    • Categories
                                    • Recent
                                    • Tags
                                    • Popular
                                    • Bookmarks
                                    • Search