Errors Building Guacamole Server on Fedora 28



  • Alright... good news and bad news... I have everything working. The authentication issue was caused by my SSL certificate not being properly installed. fixed that and i can log in and everything works great... except..... I get Connected to Guacamole. waiting for a response and it times out.

    So I guess I have the client up and running but the daemon is not working properly.



  • @xylems said in Errors Building Guacamole Server on Fedora 28:

    Alright... good news and bad news... I have everything working. The authentication issue was caused by my SSL certificate not being properly installed. fixed that and i can log in and everything works great... except..... I get Connected to Guacamole. waiting for a response and it times out.

    So I guess I have the client up and running but the daemon is not working properly.

    I have the same thing happening in my home lab right now. I'll see if I can do some diagnosis on that this afternoon for us.



  • @travisdh1 sounds good. I am working on it now myself so if i find something beforehand i will definitely share it!



  • @xylems said in Errors Building Guacamole Server on Fedora 28:

    Alright... good news and bad news... I have everything working. The authentication issue was caused by my SSL certificate not being properly installed. fixed that and i can log in and everything works great... except..... I get Connected to Guacamole. waiting for a response and it times out.

    So I guess I have the client up and running but the daemon is not working properly.

    Is SELinux interfering with the daemon?



  • BINGO!

    Turns out that even if you have the dependencies installed per the installation instructions on the guac site, if you install from fedora repo you need to install the corresponding libraries also provided by the fedora repo.

    these libraries are.. libguac-0.9.14-1.fc28.x86_64 libguac-client-rdp-0.9.14-1.fc28.x86_64 libguac-client-ssh-0.9.14-1.fc28.x86_64 libguac-client-telnet-0.9.14-1.fc28.x86_64 libguac-client-vnc-0.9.14-1.fc28.x86_64 libguac-devel-0.9.14-1.fc28.x86_64

    This is assuming 64 bit and the latest 0.9.14-1 guacd was installed.

    All is working for me now except fonts which i know i havent installed yet so that should be an easy fix.

    Terminus fonts seems to work very well as it comes with the standard monospace font.

    terminus-fonts is the package if anyone is interested.



  • @black3dynamite Not in my case.. I disabled SE linux to avoid it having issues.



  • @xylems said in Errors Building Guacamole Server on Fedora 28:

    BINGO!

    Turns out that even if you have the dependencies installed per the installation instructions on the guac site, if you install from fedora repo you need to install the corresponding libraries also provided by the fedora repo.

    these libraries are.. libguac-0.9.14-1.fc28.x86_64 libguac-client-rdp-0.9.14-1.fc28.x86_64 libguac-client-ssh-0.9.14-1.fc28.x86_64 libguac-client-telnet-0.9.14-1.fc28.x86_64 libguac-client-vnc-0.9.14-1.fc28.x86_64 libguac-devel-0.9.14-1.fc28.x86_64

    This is assuming 64 bit and the latest 0.9.14-1 guacd was installed.

    All is working for me now except fonts which i know i havent installed yet so that should be an easy fix.

    Terminus fonts seems to work very well as it comes with the standard monospace font.

    terminus-fonts is the package if anyone is interested.

    Thanks! I just sat down to take a look.



  • @xylems said in Errors Building Guacamole Server on Fedora 28:

    BINGO!

    Turns out that even if you have the dependencies installed per the installation instructions on the guac site, if you install from fedora repo you need to install the corresponding libraries also provided by the fedora repo.

    these libraries are.. libguac-0.9.14-1.fc28.x86_64 libguac-client-rdp-0.9.14-1.fc28.x86_64 libguac-client-ssh-0.9.14-1.fc28.x86_64 libguac-client-telnet-0.9.14-1.fc28.x86_64 libguac-client-vnc-0.9.14-1.fc28.x86_64 libguac-devel-0.9.14-1.fc28.x86_64

    This is assuming 64 bit and the latest 0.9.14-1 guacd was installed.

    All is working for me now except fonts which i know i havent installed yet so that should be an easy fix.

    Terminus fonts seems to work very well as it comes with the standard monospace font.

    terminus-fonts is the package if anyone is interested.

    Awesome



  • The documentation for so much of Guacamole is plain junk. Nothing I'm reading at https://guacamole.apache.org/doc/gug/ldap-auth.html is matching up with anything done in the Fedora repository packages. Config files just don't exist, and directories are all different 😞

    Edit: Probably the fault of whoever is responsible for the Fedora packaging.



  • @travisdh1 If you would like I can help you get yours up and running.

    As far as getting LDAP to work, I did the following:

    Modify /etc/tomcat/tomcat.conf add the following at the end: GUACAMOLE_HOME=/etc/guacamole

    If that directory doesn't exist, create it.

    Make a file called guacamole.properties. It should contain the following

    #Hostname and port of guacamole proxy
    guacd-hostname: localhost
    guacd-port: 4822

    #Location to read extra .jar's from
    lib-directory: /etc/guacamole/extension

    #Authentication provider class
    #auth-provider: net.sourceforge.guacamole.net.basic.BasicFileAuthenticationProvider

    #Properties used by BasicFileAuthenticationProvider
    #basic-user-mapping: /etc/guacamole/user-mapping.xml

    #LDAP Properties
    ldap-hostname: ldapserver.name
    ldap-port: ldap-port
    ldap-encryption-method: ssl (you can delete this line if you are not doing ssl)
    ldap-search-bind-dn: self-explanatory
    ldap-search-bind-password: self-explanatory
    ldap-config-base-dn: self-explanatory
    ldap-user-base-dn: self-explanatory

    Save the file.

    Make a directory called extensions
    toss the guacamole-auth-ldap-0.9.14.jar file from the guacamole website there (you can find it here: http://guacamole.apache.org/releases/0.9.14/)

    Restart httpd, tomcat, guacd in that order.

    as long as your settings were correct this should enable ldap to work without a problem (it did for me).

    If you do opt for SSL to be enabled, make sure you have enabled the ssl mod for apache, otherwise it will not work



  • @xylems said in Errors Building Guacamole Server on Fedora 28:

    @travisdh1 If you would like I can help you get yours up and running.

    As far as getting LDAP to work, I did the following:

    Modify /etc/tomcat/tomcat.conf add the following at the end: GUACAMOLE_HOME=/etc/guacamole

    If that directory doesn't exist, create it.

    Make a file called guacamole.properties. It should contain the following

    #Hostname and port of guacamole proxy
    guacd-hostname: localhost
    guacd-port: 4822

    #Location to read extra .jar's from
    lib-directory: /etc/guacamole/extension

    #Authentication provider class
    #auth-provider: net.sourceforge.guacamole.net.basic.BasicFileAuthenticationProvider

    #Properties used by BasicFileAuthenticationProvider
    #basic-user-mapping: /etc/guacamole/user-mapping.xml

    #LDAP Properties
    ldap-hostname: ldapserver.name
    ldap-port: ldap-port
    ldap-encryption-method: ssl (you can delete this line if you are not doing ssl)
    ldap-search-bind-dn: self-explanatory
    ldap-search-bind-password: self-explanatory
    ldap-config-base-dn: self-explanatory
    ldap-user-base-dn: self-explanatory

    Save the file.

    Make a directory called extensions
    toss the guacamole-auth-ldap-0.9.14.jar file from the guacamole website there (you can find it here: http://guacamole.apache.org/releases/0.9.14/)

    Restart httpd, tomcat, guacd in that order.

    as long as your settings were correct this should enable ldap to work without a problem (it did for me).

    If you do opt for SSL to be enabled, make sure you have enabled the ssl mod for apache, otherwise it will not work

    Thanks. Do you have time to write up a step by step guide? I'll have time to make that happen if you don't.



  • @travisdh1 step-by-step guide for the entire guacamole installation?



  • @xylems said in Errors Building Guacamole Server on Fedora 28:

    @travisdh1 step-by-step guide for the entire guacamole installation?

    I think I'd split it into two different ones actually. A guacamole install, and a separate one for getting it connected to LDAP. It can be a major time sinc, so thought I'd offer to do the write-up and verification and give you the credit.



  • @travisdh1 You are more than welcome to do the write up as I do not think I would have that kind of time at the moment. :(.

    Though if you have any questions I can certainly answer them for you.



  • @xylems said in Errors Building Guacamole Server on Fedora 28:

    @travisdh1 step-by-step guide for the entire guacamole installation?

    Definitely make it two parts, preferably two posts. Post one for setting up Guac. Post 2 for setting up LDAP.

    Something like this format https://mangolassi.it/topic/16471/install-bookstack-on-fedora-27
    Or this: https://mangolassi.it/topic/16380/install-nextcloud-13-0-0-on-fedora-27