adding requirement of disabled Network Level Authentication or username and password being stored in the connection

Ralf Becker
2020-04-20 19:11:43 +02:00
parent d53671c22d
commit dddc8bff67

@ -2,6 +2,8 @@ Guacamole makes RDP or VNC desktops available via html5 inside EGroupware.
EGroupware supplies account information, authentication via OpenID Connect
and allows to manage connections.
![GuacamoleWindows2016Server](https://user-images.githubusercontent.com/972180/79756536-0df90280-831b-11ea-97ff-b3043d7b31e4.png)
### EGroupware Guacamole app does the following:
* Installs all tables (or views) for Apache Guacamole
@ -38,6 +40,16 @@ HTTP_HOST=example.org apt install egroupware-guacamole
### Troubleshooting
* Guacamole can't connect to windows machine:
![NLA-error](https://user-images.githubusercontent.com/972180/79778713-7bb42700-8339-11ea-9dd9-eda38ee40966.png) ![NLA-error-german](https://user-images.githubusercontent.com/972180/79778716-7c4cbd80-8339-11ea-9bed-29d2808b3ec3.png)
> Remote Desktop Protocol need to be enabled AND Network Level Authentication need to be disabled (or username and password specified in the connection)
![NLA-Dialog](https://user-images.githubusercontent.com/972180/79756542-0f2a2f80-831b-11ea-801b-4acf9577db2e.png) ![NLA-Dialog-German](https://user-images.githubusercontent.com/972180/79756540-0e919900-831b-11ea-9732-0277ebbfc8f3.png)
Network Level Authentication is a security measure mitigating risks of RPD exposed to the Internet, which is not the case for Guacamole used to make desktops available via HTML5, using strong authentication mechanisms available in EGroupware like TwoFactorAuth or WebAuthn.
* check the log of the guacamole container (almost all of the problem below are reported there!)
```
docker logs -f guacamole