Guacamole debugging - raise loglevel

guacamole

#1

Hello community,

I have installed the guacamole-app and managed to get some ssh-connections configured.
But unfortunetly I don’t get neither vnc nor rdp connections to work.

The information about these connections I found in the system logs are very limited. While I find some entries for vnc in /var/log/messages I can’t find anything related to rdp.

So my question is on how to raise the loglevel in these docker containers?
(I found something related in chapter 5 of the guacamole docs. But how is that to be implemented in the docker so that it would survive a restart? docker cp ... isn’t. And by the way is that really the way to go???)

Ah, another one: someone getting access to a windows 10 (1809) desktop joined to the domain through guacamole?

Help appreciated,
Bernd


#2

Hi bernd,
got the same problem that no rdp connection to a windows 10 or server2016 is possible. I played around with the variables und tried different settings, but without success.


#3

Hi @hpz,

well trouble shared is a trouble halved :+1:
At least I found some useful commands to look into the two running containers: docker logs -ft --details container_id.

On the guacd-side I get an error: ERROR: User is not responding.
And on the guacamole-side I get:

2019-03-02T17:13:34.202336150Z 18:13:34.201 [http-nio-8080-exec-1] INFO  o.a.g.r.auth.AuthenticationService - User "my-user" successfully authenticated from [192.168.x.y, 172.x.y.1].
2019-03-02T17:13:37.408866115Z 18:13:37.407 [http-nio-8080-exec-1] INFO  o.a.g.tunnel.TunnelRequestService - User "my-user" connected to connection "guac-win10-64a-my-user".
2019-03-02T17:13:37.415369492Z 18:13:37.408 [http-nio-8080-exec-1] INFO  o.a.g.t.h.RestrictedGuacamoleHTTPTunnelServlet - Using HTTP tunnel (not WebSocket). Performance may be sub-optimal.
2019-03-02T17:13:52.468012260Z 18:13:52.467 [http-nio-8080-exec-4] INFO  o.a.g.tunnel.TunnelRequestService - User "my-user" disconnected from connection "guac-win10-64a-my-user". Duration: 15059 milliseconds
2019-03-02T17:13:52.468531409Z 18:13:52.468 [http-nio-8080-exec-4] ERROR o.a.g.s.GuacamoleHTTPTunnelServlet - HTTP tunnel request failed: Connection to guacd timed out.
2019-03-02T17:13:52.472310810Z 18:13:52.472 [http-nio-8080-exec-6] INFO  o.a.g.tunnel.TunnelRequestService - User "my-user" disconnected from connection "guac-win10-64a-my-user". Duration: 15064 milliseconds
2019-03-02T17:13:57.265395458Z 18:13:57.263 [http-nio-8080-exec-9] WARN  o.a.g.s.GuacamoleHTTPTunnelServlet - HTTP tunnel request rejected: No such tunnel.

So - problems in the tunnels? :metro:

Best,
Bernd


#4

As the weekend goes by…

I’m still interested in a command to raise the debug-level on these containers. Or is there even a general one somebody knows of?

On the other hand - with just the two or three klicks - I installed the app on my ucs member-server and - voilà - it just works…
The errors above are from a slave-server with samba4.

So actually, yes: I do have working connections to windows10 through rpc (nla) and to tightvnc on debian through vnc and there are scenarios where this guacamole isn’t just healthy food :avocado:

Best,
Bernd


Guacamole Problem
#5

Well this did work just some hours I think. Since that I get the following message:

root@ucs-member:~# docker logs -ft --details container_id_guacamole
...
2019-03-15T10:39:27.523623173Z  11:39:27.522 [http-nio-8080-exec-3] ERROR o.a.g.a.ldap.LDAPConnectionService - Unable to connect to LDAP server: Connect Error
2019-03-15T10:39:27.527344882Z  11:39:27.522 [http-nio-8080-exec-3] ERROR o.a.g.a.l.AuthenticationProviderService - Unable to bind using search DN "cn=guaca-12345678,cn=memberserver,cn=computers,dc=domain,dc=com"
2019-03-15T10:39:27.536566763Z  11:39:27.536 [http-nio-8080-exec-3] WARN  o.a.g.r.auth.AuthenticationService - Authentication attempt from [192.168.x.y, 172.z.0.1] for user "myuser" failed.

I checked the password files, they seem to be ok. What else to check?
Thanks,
Bernd