NS8-Guacamole - first testing prerelease

[mrmarkuz (Markus Neuberger)]

Hi friends,

by using the ns8-kickstart-db templates by @stephdl I was finally able to create my first NS8 module.

If you like to test Guacamole on NS8:

add-module ghcr.io/mrmarkuz/guacamole:working

Just configure the guacamole hostname in the app settings page in cluster admin and browse to https://configured.hostname.tld/guacamole. The default login is user guacadmin, password guacadmin.

Backup/Restore should work already from the template.

Still on the todo list:

• LDAP/AD bind
• Branding
• Remove guacamole path in URL

[stephdl (Stéphane de Labrusse)]

I am happy

[oneitonitram (Martin)]

Congratulations on your first Module @mrmarkuz

@mrmarkuz

• LDAP/AD bind
• Branding

I am also very interested in learning how the AD/Ldap Integrations works.

Managed to install successfully, the module is reachable at /guacamole

username and password guacadmin/guacadmin

[oneitonitram (Martin)]

is this not all i need to conenct to a server

I keep getting this

[alefattorini (Alessio Fattorini)]

Woooooooooow
Looks like FOSDEM you did well.
Good job my friend!

@stephdl you have a new promising padawan!

I would move it to Development testing and create a new topic once it is released. What do you think @mrmarkuz ?

[LayLow (HF)]

@mrmarkuz

test Guacamole

How to remove the module? (My case 1 node cluster). I tried this:

[root@srv1 ~]# remove-module guacamole:working
<3>Cannot retrieve the NODE_ID of guacamole:working

[root@srv1 ~]# remove-module guacamole
<3>Cannot retrieve the NODE_ID of guacamole

[root@srv1 ~]# remove-module --help
usage: remove-module [-h] [–no-preserve] [–force] module

positional arguments:
module

options:
-h, --help show this help message and exit
–no-preserve erase also the module home directory
–force unconditionally erase the module from Redis (dangerous)
[root@srv1 ~]#

Reason for removal is that no ldap domains are listed in the settings page.

HTH

[mrmarkuz (Markus Neuberger)]

remove-module guacamole1

LDAP isn’t implemented yet…

[LayLow (HF)]

@mrmarkuz

LDAP isn’t implemented yet

Ah, my bad in bad reading

Anyway, the issue is the following:

• Installed the module (add-module)
• Entered the settings FQDN, certificate and HTTPS
• Save setting
• go to FQDN entered in settings

[Andy_Wismer (André Wismer)]

@oneitonitram

is this not all i need to conenct to a server

Do you really need help to do a simple SSH connection to a server?

All current OS have. a usable SSH client nowadays, even Windows!
Why would any sane person waste more than one persons time trying to run SSH over HTML5 when every OS has SSH?

A Desktop is a different matter, the encryption for any Desktoptransfer with VNC or RDP is not enough, so a VPN is needed. Guacamole makes setting up a VPN redundant.

My 2 cents
Andy

[oneitonitram (Martin)]

@mrmarkuz

remove-module guacamole1

i think this will preseve some data,

remove-module --no-preserve guacamole1

for complete removal

[oneitonitram (Martin)]

@Andy_Wismer

Do you really need help to do a simple SSH connection to a server?

Using Guacamole, YEs Andy i actually need help, thats why i posted.

[LayLow (HF)]

@oneitonitram

remove-module --no-preserve guacamole1

Thanks @oneitonitram !

[root@srv1 ~]# remove-module --no-preserve guacamole1

<7>podman rmi --ignore 1238c5206383fd1e698aaa63f8b0ed18efbec1926cf376e511849eaf07d46419

Untagged: Package guacamole · GitHub

Deleted: 1238c5206383fd1e698aaa63f8b0ed18efbec1926cf376e511849eaf07d46419

{}

[root@srv1 ~]#

[mrmarkuz (Markus Neuberger)]

@LayLow

Anyway, the issue is the following:

@mrmarkuz

https://configured.hostname.tld/guacamole

Looks like you missed the /guacamole path

[LayLow (HF)]

@mrmarkuz

Looks like you missed the /guacamole path

Ok, let me try again. BUT, I rather have immediate access through the given FQDN without a trailing directory. Just like the Sterling PDF module of @oneitonitram. Simply go to the dedicated subdomain. Very user friendly for for the end user spelling and remembering ‘guacamole’ is a nightmare and has nothing to do with what they want.

They simply want their desktop, hence e.g. https://mypc.mydomain.com

[mrmarkuz (Markus Neuberger)]

It’s on the todo list:

@mrmarkuz

Remove guacamole path in URL

[LayLow (HF)]

@mrmarkuz

the todo list:

I need to RTFM!!

It works as advertised! Thanks!

[mrmarkuz (Markus Neuberger)]

Please test the brand new Guacamole 1.5.5 app!

The open points were finished:

@mrmarkuz

• LDAP/AD bind
• Branding
• Remove guacamole path in URL

The LDAP/AD bind is optional.

To be able to install via Software Center you can add my repo.

Installation from CLI:

add-module ghcr.io/mrmarkuz/guacamole:1.0.0-beta.2

Removal:

remove-module --no-preserve guacamole1

Documentation is on GitHub.

[LayLow (HF)]

@mrmarkuz

my repo.

That is WAY cool!

@mrmarkuz

The LDAP/AD bind is optional.

And works!

@mrmarkuz

Remove guacamole path in URL

And that has been ‘fixed’ too! Very clean URL now. No more “kwakomoloo” typos!

[oneitonitram (Martin)]

@LayLow

kwakomoloo

this sounds like an african dialect

@mrmarkuz i dont think you have defined the administrative user while using ldap.

seems guacadmin is still able to login as the defacto admin
under users, i dont see the ldap users, even though they have already loggedin before.

Am i missing something?

[mrmarkuz (Markus Neuberger)]

Thanks for testing, guys!

@oneitonitram

Am i missing something?

You need to give permissions to the ldap users, one method is to create a “domain admins” group as guacadmin, so every LDAP domain admin can login and sees all users/groups.

You can delete the guacadmin user, if you don’t like it to login anymore but it’s a good fallback if LDAP isn’t working.

LDAP is only used for auth, the permissions are stored in postgresql, it was the same for Guacamole in NS7.

It’s documented here.