{{NeedsUpdateMessageBox|backgroundcolor = #faa|image =Warning.png|heading =WARNING|message = This is recommended only for advanced users, proceed with caution.}}= What is Guacamole? = [https://guacamole.incubator.apache.org/ Guacamole] is an HTML5 remote desktop gateway that can be installed on Amahi 9 (Fedora 23). This guidance may work with other Amahi versions with some modification.

== What is Guacamole? == Guacamole is an No browser plugins are needed, and no client software needs to be installed. The client requires nothing more than a web browser supporting HTML5 remote desktop gatewayand AJAX.

Guacamole provides REF: [http://www.tecmint.com/guacamole-access to desktop environments using -remote desktop protocols like VNC and RDP. A centralized server acts as a tunnel and proxy, allowing access to multiple desktops through a -linux-windows-machines-via-web -browser./ Setting Up Web-Based Guacamole Tool to Access Remote Linux/Windows Machines]

No browser plugins = Install Guacamole =<div style="border: 1px solid #A3B1BF; padding: .8em 1em; background-color: #E6F2FF; margin: 0px 1em;">'''WARNING:''' All commands in this tutorial are needed, and no client software needs to be installed. The client requires nothing more than a web browser supporting HTML5 and AJAXexecuted as <code>root</code> (or precede with <code>sudo</code>).</div>

In terminal, as root, We have created a bash script to make installation simple or you can manually install dependencies with using the guidance below. You '''MUST''' complete the [[Guacamole#Create Amahi Web App|Create Amahi Web App]] step prior to executing the following: wget <nowiki>https://www.dropbox.com/s/4hadafih8ahuj2n/install-guacamole.sh</nowiki> chmod 755 install-guacamole.sh ./install-guacamole.sh

For Do NOT use this script on anything less than Amahi 9 / Fedora 21 or lower{{Code|Code = $ suPassword: 23 unless you edit it first to match your systems' requirements. (See [[Guacamole# sudo yum install tomcat gcc cairo-devel libjpeg-devel libpng-devel uuid-devel freerdp-devel pango-devel libssh2-devel libtelnet-devel libvncserver-devel pulseaudio-libs-devel openssl-devel libvorbis-devel libwebp-devel}}For Fedora 23 or higher{{CodeInstall Dependencies|Code = $ suPassword: # sudo dnf install tomcat gcc cairo-devel libjpeg-devel libpng-devel uuid-devel freerdp-devel pango-devel libssh2-devel libtelnet-devel libvncserver-devel pulseaudio-libs-devel openssl-devel libvorbis-devel libwebp-devel}}Install Dependencies]] to learn what changes are necessary.)

Some packages may be already included in == Create Amahi Web App ==Login to your Amahi Dashboard and install so Fedora the Amahi [https://www.amahi.org/apps/ Amahi will skip itweb-apps Web Apps] plug-in. Ensure you '''enable''' [[Advanced Settings]].

* NoteEdit ''####-guacamole.conf'' in '''/etc/httpd/conf.d''' (replacing #### with the appropriate number): If you do not see the "Webapps" option under "Apps" then you need to activate "Advanced Settings" under the "Settings" tab of your Amahi dashboard vi /etc/httpd/conf.d/####-guacamole.conf

=== Setting up MySQL Authentication ======= Creating Right below the Database ====In terminal''ServerAlias'' line, run add the following command{{Code|Code = sudo mysql -u root -p}}:The password requested is the root user password for MySQL on Amahi; In MariaDB enter the followingProxyPass / <nowiki>http:{{Code|Code = create database guacdb;}}{{Code|Code = create user 'guacuser'@'//localhost' identified by 'guac123';}}:8080/guacamole/</nowiki>{{Code|Code = grant select,insert,update,delete on guacdb.* to 'guacuser'@' ProxyPassReverse / <nowiki>http://localhost';}}{{Code|Code = flush privileges;}}{{Code|Code = quit}}:8080/guacamole/</nowiki>

Again, if you use vi for creating this file, press the <i>Esc</i> key to get back in command mode and <i>:wq</i> to write the changes and quit vi. Restart Apache systemctl restart httpd ==Install Dependencies == Installing Due to the Fedora 23 ''freerdp'' packages being unstable, we must use the CentOS stable version. (Do not do this if you are installing on Fedora 21 or below) To install, execute the following:<pre>wget https://www.dropbox.com/s/p2uc1rcpckky75v/libxkbfile-1.0.8-5.el7.x86_64.rpmwget https://www.dropbox.com/s/0tjm7q93z9pw0hj/freerdp-libs-1.0.2-6.el7_2.1.x86_64.rpmwget https://www.dropbox.com/s/aysml7coehz0hqi/freerdp-devel-1.0.2-6.el7_2.1.x86_64.rpmrpm -Uvh libxkbfile-1.0.8-5.el7.x86_64.rpmrpm -Uvh freerdp-libs-1.0.2-6.el7_2.1.x86_64.rpmrpm -Uvh freerdp-devel-1.0.2-6.el7_2.1.x86_64.rpm</pre>  Now install the Fedora dependencies:For Fedora 23 or newer (Fedora 21, substitute <code>yum</code> for <code>dnf</code> and add <code>freerdp-devel</code> to the list of dependencies): dnf install tomcat gcc cairo-devel libjpeg-devel libpng-devel uuid-devel pango-devel \ libssh2-devel libtelnet-devel libvncserver-devel pulseaudio-libs-devel openssl-devel \ libvorbis-devel libwebp-devel dejavu-sans-mono-fonts terminus-fonts terminus-fonts-console == Configure MySQL Authentication ===== Install MySQL Authentication Module ====

 {{Code|Code = sudo mkdir -p /var/hda/web-apps/guacamole/sqlauth && cd /var/hda/web-apps/guacamole/sqlauth}}

{{Code|Code = sudo wget <nowiki>http://sourceforge.net/projects/guacamole/files/current/extensions/guacamole-auth-jdbc-0.9.9.tar.gz}}</nowiki>

{{Code|Code = sudo tar -zxf guacamole-auth-jdbc-0.9.9.tar.gz}}

{{Code|Code = sudo wget <nowiki>http://dev.mysql.com/get/Downloads/Connector/j/mysql-connector-java-5.1.38.tar.gz}}</nowiki>

{{Code|Code = sudo tar -zxf mysql-connector-java-5.1.38.tar.gz}}

{{Code|Code = sudo mkdir -p /usr/share/tomcat/.guacamole/{extensions,lib}}}

{{Code|Code = sudo mv guacamole-auth-jdbc-0.9.9/mysql/guacamole-auth-jdbc-mysql-0.9.9.jar /usr/share/tomcat/.guacamole/extensions/}}{{Code|Code = sudo mv mysql-connector-java-5.1.38/mysql-connector-java-5.1.38-bin.jar /usr/share/tomcat/.guacamole/lib/}} 

{{Code| Code = sudo systemctl restart mariadb === Create the Database === hda-create-db-and-user guacdb === Configure Database Settings ===Create a directory for the configuration file. mkdir -p /etc/guacamole/ Create a file called "guacamole.properties" in that directory vi /etc/guacamole/guacamole.service}}properties

Press the <i>i</i> key to begin inserting text into the guacamole.properties file and include the following contents: # MySQL properties mysql-hostname: localhost mysql-port: 3306 mysql-database: guacdb mysql-username: guacdb mysql-password: guacdb # Additional settings mysql-default-max-connections-per-user: 0 mysql-default-max-group-connections-per-user: 0 If you use vi for creating this file, press the <i>Esc</i> key to get back in command mode and <i>:wq</i> to write the changes and quit vi. Now create a symbolic link of this file for Tomcat ln -s /etc/guacamole/guacamole.properties /usr/share/tomcat/.guacamole/ ==== Loading Load Guacamole's schema into the MySQL Tables =Data ===

{{Code|Code = cd /var/hda/web-apps/guacamole/sqlauth/guacamole-auth-jdbc-0.9.9/mysql/schema/ }}

sudo cat ./*.sql | mysql -u root uroot -p guacdbThe above is bash code. I have to format it differently to get all of the code to show on this wiki page.

The password requested is ::'''WARNING:''' Please see [[Database Root Password]] for the root user appropriate login password for MySQL.

=== Installing Install Guacamole Server ===

{{Code|Code = cd /var/hda/web-apps/guacamole}}

{{Code|Code = sudo wget <nowiki>https://sourceforge.net/projects/guacamole/files/current/source/guacamole-server-0.9.9.tar.gz}}</nowiki> 

{{Code|Code = tar -xzf guacamole-server-0.9.9.tar.gz}} 

{{Code|Code = cd guacamole-server-0.9.9/}} 

{{Code|Code = sudo ./configure --with-init-dir=/etc/init.d}}{{Code|Code = sudo make}}{{Code|Code = sudo make install}}{{Code|Code = sudo ldconfig}}

=== Installing Install Guacamole Client ===

{{Code| Code = sudo mkdir -p /var/lib/guacamole && cd /var/lib/guacamole/}} 

{{Code| Code = sudo wget <nowiki>http://sourceforge.net/projects/guacamole/files/current/binary/guacamole-0.9.9.war -O guacamole.war}}</nowiki> 

{{Code| Code = sudo ln -s /var/lib/guacamole/guacamole.war /var/lib/tomcat/webapps/}}

=== Guacamole's Configuration File =Update Amahi Web App Files ==Create a Symbolic links between guacamole in Tomcat and Amahi's web app directory for the configuration file. {{Code| Code = sudo mkdir ln -p s /var/lib/tomcat/etcwebapps/guacamole/}} Create a file called "guacamole.properties" in that directory{{Code| Code = sudo vi * /var/hda/etcweb-apps/guacamole/guacamole.properties}}and include the following contents # MySQL properties mysql-hostname: localhost mysql-port: 3306 mysql-database: guacdb mysql-username: guacuser mysql-password: guacDBpass # Additional settings mysql-default-max-connections-per-user: 0 mysql-default-max-group-connections-per-user: 0html

Now create a symbolic link Make sure the owner of this all the file for Tomcatis ''apache'' and the group is ''users''.{{Code| Code = sudo ln chown -s R apache:users /etcvar/guacamolehda/guacamole.properties /usrweb-apps/share/tomcat/.guacamole/}}

=== Starting Start Guacamole Server ===

{{Code| Code = sudo ​service ​systemctl restart tomcat restart​}}

{{Code| Code = sudo /etc/init.d/guacd start}}

{{Code systemctl enable tomcat chkconfig guacd on = Log In to Guacamole =You can access the web login screen for Guacamole from computers in the network via '''<nowiki>http://****:8080/guacamole</nowiki>''' (Where the ''****'' is the IP address of your Amahi server). The default user name/password is ''guacadmin''/''guacadmin''. You can change your password by editing your own user in the administration screen. = Access Outside the Network =If you want Guacamole's web interface to be accessible outside of your LAN you will have to forward a random, unused port (1111, for example) to port 8080 in your router.  Then when you access Guacamole from outside your LAN you will need to add ''/guacamole'' to the end of your url. (<nowiki>http://servername.yourhda.com:1111/guacamole</nowiki>). If you do not add ''/guacamole'' to your url, you will see a blank page since you did not specify which application in Tomcat you wanted to access. The safest and most secure method to access Guacamole is using [https://www.amahi.org/apps/openvpn OpenVPN] and an [[OpenVPN_clients| Code OpenVPN client]] from a smart phone, tablet, or computer. = Making Preset Connections in Guacamole = In Guacamole, an administrative User can create Connections that will be available to Guacamole users. == sudo chkconfig tomcat Enabling RDP in Windows Home and Basic Editions =="Remote Desktop Protocol (RDP) is a proprietary protocol developed by Microsoft, which provides a user with a graphical interface to connect to another computer over a network connection." ''1'' If you do not have Windows pro or ultimate versions you have to run a patch that activates RDP. RDP Wrapper Library is an option for enabling RDP features. (Use this at your own risk. Please read RDP Wrapper Library literature and follow directions to install. Any problems are to be addressed with RDP Wrapper Library support.) https://github.com/stascorp/rdpwrap/releases If you have Windows Professional or Ultimate, you will need to "Allow Remote Access to Your Computer." (A simple Internet search of this phrase with your Windows version offers many tutorials on this.) == Guacamole RDP Connections to Windows Computers ==After you have login to Guacamole click on your login name in the upper right . In the drop-down menu choose "Settings." Click on the Connections tab on the settings page. Click the "New Connection" button.  Below are some VERY basic settings for an RDP connection in Guacamole:  Name: whatever you want to call it (One can put "RDP" within the name so as to differentiate between connections types in the list) Location: ROOT Protocol: RDP  Maximum number of connections: 2 Maximum number of connections per user:2  Host Name: The fixed IP address of the computer to which you wished to connect. (For example ''192.168.1.10'') All the other settings are left either blank or as they were. Note: Using RDP, only one device at a time can be logged in under a specific user. If you are logging into a Windows computer by the user "Fred" by RDP using Guacamole, any other device signed in as "Fred" will be logged out. The side effect is that, when using RDP, a technician (using Guacamole) and client (on # chkconfig guacd their Window computer) cannot see the same active desktop simultaneously. As a workaround, one can set up a VNC and an RDP connection for each Windows computer. RDP can be quicker and more fluid so use RDP when working alone and VNC when one needs to see what is currently happening on}}a Users computer under their account.

=== Deploying Guacamole ===To deploy GuacamoleSpecial Note: Once settings are in place, you must make two symbolic links: one effectively copying users can click on their User Name in the web application (now located at /var/lib/guacamole/guacamole.war) into the directory Tomcat monitors for web application deployment, upper right corner and choose "Home" from the other effectively copying drop-down menu to return to the configuration file, guacamole.properties, into the Tomcat's classpath, such that Guacamole can find it once it runs. This must be done as root:{{Code|Code = # ln -s /var/lib/guacamole/guacamole.war /var/lib/tomcat6/webapps# ln home screen and use pre-s /etc/guacamole/guacamoleconfigured connections.properties /usr/share/tomcat6/lib}}

Start In order to connect through Guacamoleto a client device by VNC, one needs to install VNC client software on the device and configure it to the user's service{{Code|Code = service guacd start}}desired specifications. In this publication, we will use a Windows based client and UltraVNC software, though this is by no means prescriptive for everyone.

Now configure ===Guacamole VNC Connections to Windows Computers =======UltraVNC Settings for Windows====Be sure to install UltraVNC to run as a service on the client system. Once UltraVNC is installed on the Windows computer, right-click on the tomcat6 system tray icon and guacd services to run automaticallychoose "Admin Properties" from the menu that comes up. Set the following values:

== Configuring Guacamole Click "OK" and Amahi ==Create Symbolic links between guacamole in Tomcat and Amahi's webapp directorythen give permission for the program to make changes to your system.

{{Code| Code = sudo ln -s /var/lib/tomcat/webapps/guacamole/* /var/hda/web===Guacamole Settings to Connect to the Windows client====After logging in to Guacamole click on your login name in the upper right . In the drop-apps/guacamole/html}}down menu choose "Settings." Click on the Connections tab on the settings page. Click the "New Connection" button.

As root, create .htaccess file Below are some VERY basic settings for a VNC connection in /var/hda/web-apps/guacamole/html{{Code|Code = # vi /var/hda/web-apps/guacamole/html/.htaccess}}Guacamole:

This is Name: whatever you want to call it (One can put "VNC" within the text for name so as to differentiate between connections types in the .htaccess file:list) RewriteEngine OnLocation: ROOT RewriteCond %{SERVER_PORT} 80 RewriteRule (.*) http://%{HTTP_HOST}Protocol:8080/guacamole [R,L]VNC

Make sure the owner Maximum number of all the file is apache and the group is users.connections: 2{{Code|Code = sudo chown -R apache Maximum number of connections per user:users /var/hda/web-apps/guacamole}}2

In /etc/httpd/conf Host Name: The fixed IP address of the computer to which you wished to connect.d/####-guacamole(For example ''192.168.1.10'') Port: The Main port number which was set in the Windows UltraVNC client software (e.g. 5904). Password: The VNC Password set earlier in the Windows UltraVNC client software.conf, change "AllowOverride AuthConfig" to "AllowOverride FileInfo Limit Options Indexes"

== Logging In to Guacamole ==You can access All the web login screen for Guacamole from the server at http://127.0.0.1:8080/guacamoleFrom other computers in the network you can access Guacamole by http://****:8080/guacamole (Where the "****" is the ip address of your Amahi server)settings are left either blank or as they were.

The default user is "guacadmin"Special Note: Once settings are in place, with users can click on their User Name in the default password of upper right corner and choose "guacadminHome". You can change your password by editing your own user in from the drop-down menu to return to the administration home screenand use pre-configured connections.

With everything configured correctly you should be able to access the web login screen through Amahi at http== References ==''1'' https://guacamoleen.yourhdanamewikipedia.com:8080org/guacamolewiki/Remote_Desktop_Protocol

== Port Forwarding ==If you want Guacamole's web interface to be accessible outside of your LAN you will have to forward a random'2'' Richardson, T.; Stafford-Fraser, Q.; Wood, K. R.; Hopper, unused port A. (1111, for example1998) to port 8080 in your router. Then when you access Guacamole from outside your LAN you will need to add "/guacamoleVirtual network computing" to the end of your url(PDF). (serverblahblahIEEE Internet Computing.yourhda2: 33.comdoi:111110.1109/guacamole) If you do not add "/guacamole" to your url, you will see a blank page since you did not specify which application in Tomcat you wanted to access4236.656066.