Trusted, Bureaucrats, Administrators
12,424
edits
Changes
From Amahi Wiki
→Load Guacamole Data
{{MessageBox|backgroundcolor = #faa|image =Warning.png|heading =WARNING|message =This is recommended only for advanced users, proceed with caution.}}= What is Guacamole? == [https://guacamole.incubator.apache.org/ Guacamole ] is an HTML5 remote desktop gatewaythat can be installed on Amahi 9 (Fedora 23). This guidance may work with other Amahi versions with some modification.
Guacamole provides access to desktop environments using remote desktop protocols like VNC and RDP. A centralized server acts as a tunnel and proxy, allowing access to multiple desktops through a web browser.
No browser plugins are needed, and no client software needs to be installed. The client requires nothing more than a web browser supporting HTML5 and AJAX.
Now select the "Apps" tab.
Click on "Webapps" and on the page that comes up choose the "New Web App" button at the bottom.
Fill in the name (guacamole) and leave everything else as it is.
==Configure MySQL Authentication ==== Installing = Install MySQL Authentication Module ====
Create a working directory and move there
mkdir -p /var/hda/web-apps/guacamole/sqlauth && cd /var/hda/web-apps/guacamole/sqlauth
Restart MariaDB
systemctl restart mariadb === Create the Database === hda-create-db-and-user guacdb === Configure Database Settings ===Create a directory for the configuration file.service mkdir -p /etc/guacamole/
Create a file called "guacamole.properties" in that directory vi /etc/guacamole/guacamole.properties Press the <i>i</i> key to begin inserting text into the guacamole.properties file and include the following contents: # MySQL properties mysql-hostname: localhost mysql-port: 3306 mysql-database: guacdb mysql-username: guacdb mysql-password: guacdb # Additional settings mysql-default-max-connections-per-user: 0 mysql-default-max-group-connections-per-user: 0 If you use vi for creating this file, press the <i>Esc</i> key to get back in command mode and <i>:wq</i> to write the changes and quit vi. Now create a symbolic link of this file for Tomcat ln -s /etc/guacamole/guacamole.properties /usr/share/tomcat/.guacamole/ ==== Loading Load Guacamole's schema into the MySQL Tables =Data ===
The schema for MySQL was downloaded in the previous process.
Just change directories to the files location
cd /var/hda/web-apps/guacamole/sqlauth/guacamole-auth-jdbc-0.9.9/mysql/schema/
and run the following command:
cat ./*.sql | mysql -uroot -phda p guacdb
::'''WARNING:''' Please see [[Database Root Password]] for the appropriate login password. === Installing Install Guacamole Server ===
Guacamole uses "guacd", a Guacamole server and a Guacamole Client for users to connect to the "guacd" server. We first install Guacamole Server.
ldconfig
=== Installing Install Guacamole Client ===
Create a new directory and move to it.
mkdir -p /var/lib/guacamole && cd /var/lib/guacamole/
ln -s /var/lib/guacamole/guacamole.war /var/lib/tomcat/webapps/
=== Guacamole's Configuration File =Update Amahi Web App Files ==Create a Symbolic links between guacamole in Tomcat and Amahi's web app directory for the configuration file. mkdir ln -p s /var/lib/etctomcat/webapps/guacamole/* /var/hda/web-apps/guacamole/html
=== Starting Start Guacamole Server ===
Restart Tomcat.
systemctl restart tomcat
Configure Guacamole Server to start at boot.
=Log In to Guacamole = Configuring You can access the web login screen for Guacamole and from computers in the network via '''<nowiki>http://****:8080/guacamole</nowiki>''' (Where the ''****'' is the IP address of your Amahi server). The default user name/password is ''guacadmin''/''guacadmin''. You can change your password by editing your own user in the administration screen. =Access Outside the Network =Create Symbolic links between guacamole in Tomcat and AmahiIf you want Guacamole's webapp directoryweb interface to be accessible outside of your LAN you will have to forward a random, unused port (1111, for example) to port 8080 in your router. ln -s Then when you access Guacamole from outside your LAN you will need to add ''/guacamole'' to the end of your url. (<nowiki>http:/var/libservername.yourhda.com:1111/tomcatguacamole</webappsnowiki>). If you do not add ''/guacamole'' to your url, you will see a blank page since you did not specify which application in Tomcat you wanted to access. The safest and most secure method to access Guacamole is using [https://www.amahi.org/apps/* openvpn OpenVPN] and an [[OpenVPN_clients|OpenVPN client]] from a smart phone, tablet, or computer. = Making Preset Connections in Guacamole = In Guacamole, an administrative User can create Connections that will be available to Guacamole users. == Enabling RDP in Windows Home and Basic Editions =="Remote Desktop Protocol (RDP) is a proprietary protocol developed by Microsoft, which provides a user with a graphical interface to connect to another computer over a network connection." ''1'' If you do not have Windows pro or ultimate versions you have to run a patch that activates RDP. RDP Wrapper Library is an option for enabling RDP features. (Use this at your own risk. Please read RDP Wrapper Library literature and follow directions to install. Any problems are to be addressed with RDP Wrapper Library support.) https:/var/hdagithub.com/web-appsstascorp/guacamolerdpwrap/htmlreleases If you have Windows Professional or Ultimate, you will need to "Allow Remote Access to Your Computer." (A simple Internet search of this phrase with your Windows version offers many tutorials on this.) == Guacamole RDP Connections to Windows Computers ==After you have login to Guacamole click on your login name in the upper right . In the drop-down menu choose "Settings." Click on the Connections tab on the settings page. Click the "New Connection" button. Below are some VERY basic settings for an RDP connection in Guacamole: Name: whatever you want to call it (One can put "RDP" within the name so as to differentiate between connections types in the list) Location: ROOT Protocol: RDP Maximum number of connections: 2 Maximum number of connections per user:2 Host Name: The fixed IP address of the computer to which you wished to connect. (For example ''192.168.1.10'') All the other settings are left either blank or as they were. Note: Using RDP, only one device at a time can be logged in under a specific user. If you are logging into a Windows computer by the user "Fred" by RDP using Guacamole, any other device signed in as "Fred" will be logged out. The side effect is that, when using RDP, a technician (using Guacamole) and client (on their Window computer) cannot see the same active desktop simultaneously. As a workaround, one can set up a VNC and an RDP connection for each Windows computer. RDP can be quicker and more fluid so use RDP when working alone and VNC when one needs to see what is currently happening on a Users computer under their account. Special Note: Once settings are in place, users can click on their User Name in the upper right corner and choose "Home" from the drop-down menu to return to the home screen and use pre-configured connections. == Guacamole VNC Connections to Computers =="In computing, Virtual Network Computing (VNC) is a graphical desktop sharing system that uses the Remote Frame Buffer protocol (RFB) to remotely control another computer. It transmits the keyboard and mouse events from one computer to another, relaying the graphical screen updates back in the other direction, over a network."''2'' In order to connect through Guacamole to a client device by VNC, one needs to install VNC client software on the device and configure it to the user's desired specifications. In this publication, we will use a Windows based client and UltraVNC software, though this is by no means prescriptive for everyone. ===Guacamole VNC Connections to Windows Computers =======UltraVNC Settings for Windows====Be sure to install UltraVNC to run as a service on the client system. Once UltraVNC is installed on the Windows computer, right-click on the system tray icon and choose "Admin Properties" from the menu that comes up. Set the following values: Display Number or Ports to use: Select Ports and set Main and Http so something specific (e.g. 5904, 5804) Authentication: Set both the VNC Password and the View-Only Password. (Write them down. You will need it later.)
