Cabé

Just update your instance, Peter. I see errors related to Authentik, yesterday I installed it for the first time and worked fine in the same internal network not tested through cloudflared. You must install other instance off guacamole for testing porposes using other 'AppData Config Path', test acess in the internal network without cloudflare and with and without authentik, test the last problem too with the fresh database...

New docker update 1.0.5/latest: New variable in guacamole.properties: openid-username-claim-type: preferred_username The claim type within any valid JWT that contains the authenticated user’s username. By default, the “email” claim type is used Minor code refinements Apache Tomcat 9.0.118 (2026-05-10) Mai/2026 client and server official docker images Mysql connector 9.6.0 -> 9.7.0 Postgresql connector 42.7.10 -> 42.7.11 MSSQL connector 13.2.1 -> 13.4.0

I cannot reproduce your 2nd problem, pheraps theres someting wrong in the database? Try to create other docker with other name and diferent paths in the option 'Show more settings' of the template to test a fresh install

I could reproduce your problem and yes its resolved with the email that must exist in the database, tomorrow i will think in the change to use the variable openid-username-claim-type: sub , to login from Authentik with user instead of email, thank's for the help to make this docker better!

Well it seams something related to Authentik and docker, have you use the same network in the vm? I'm going to try to reproduce your problem with Authentik as soon as i have time.

Hello Peter, pheraps you are using the template from jasonbean, add the application from unraid store and give it other name, i think it will pull the correct template

Is the one you copy manualy?: In line 261 i test if no postgresql extension exists , its the same of testing the connector because the two must be present

I can't reproduce your problem, you say there is no postresql-42.7.10.jar file in /config/guacamole/lib of the docker? Try to change 'AppData Config Path' (edit docker and Show more settings)

If vnc client can, you can with guacd , but i can't help you with that, logs inside the contentor, check apache Guacamole doc's...

Hi enabler, thanks for use unraid docker image and for the feedback, if you use an external postgres database you don’t need to manualy place the jar-library to the lib folder, just write 'postgresql' in the variable: External authentication provider(s) and restart the aplication and the file will be automatically in the lib folder (it's not the last version but tomorrow i'l release a new version with last updates) you can confirm in the log

Hello Austin, this docker includes the server (guacd) and client (guacamole) incorporated, inclusively an database server (mariadb) to , just to simplify. The only parameters you need are the required: port (web gui) and the hidden: path, nothing more. If the connection you are talking is inside the running guacamole, than the ip and connection port is the same in the rdp client you use in your local computer See: https://guacamole.apache.org/doc/1.6.0/gug/using-guacamole.html

Hello Cambelot, pheraps you are using the template from jasonbean, add the application and give it other name, i think it will pull the correct template, then it's not an Y , its the word totp in the correct variable

Release 1.0.3 of project out. Code changes , latest Guac docker build (1.6.0) , Tomcat 9, java connector's: mysql:9.5.0 , potgresql:42.7.8 , mssql:13.2.1 The template is changed to v1.0.3

Hello altruismo, thank's for using my contentor, For wath i see you use an existing template and pheraps an existing exported path from other guacamole app. You must remove the app (the image must be deleted) and add it again from community apps, atention to the hidden option: AppData Config Path , you are using an external database (declaring mysql in option: EXTENSION_PRIORITY) please confirm that the path does not exist. Dont forget to fill the options for access the external database. This confirm a new deploy, because i see in your post the template is not the last nor the file guacamole.properties is not the one deployed with the app

Glad i'ts working! You don't disturb 😀 I'm doing the best I can with pleasure, it's the first release and after some tests there is allways something to update With your help I will launch v1.0.1 today with some corrections like: never delete the internal database in any situation and don't need the '*' in the EXTENSION_PRIORITY , ',mysql' will be added in last

Hello, Nonoss Thank's for using my container, The option EXTENSION_PRIORITY like I said in the first post "you can add comma-separated list of external database server (mysql, sqlserver or postgresql) and authentication providers (ldap, duo, totp, cas, openid, saml, ssl, json, header, quickconnect) that should be acessed in specific order. Use internal (MariaDB) if any external database chosen. Ex: mysql,ldap" - Thath means if you don't specify any database server than the internal will be used (data is in /config/databases of the container) Pheraps you where using the internal database, than you must fill this option with just: openid,* and remove the line you added in guacamole.properties because it's automaticly filled For the previous settings, if you ever specify one external database server (mysql, sqlserver or postgresql) in the option EXTENSION_PRIORITY than the internal data is removed and the solution is to recover the path declared in the option AppData Config Path from backup or reconfigure all

I invite you to use my new container: https://forums.unraid.net/topic/193091-apache-guacamole/ For who is using cleao/guacamole you must remove the container and add the new app (guacamole) because the template is different, i will remove the last one by now

This docker is not built on top of a standard Tomcat 9.x image, its Alpine and the WEBAPP_CONTEXT environment variable is not present, for now Guacamole will be accessible athttp://[ip]:[port]

Apache Guacamole is a clientless remote desktop gateway. It supports standard protocols like VNC, RDP, SSH, and Telnet. This docker primarily has a MariaDB (MySQL) database built-in for authentication and configuration. It also has support for external database server (mysql, sqlserver or postgresql) and authentication providers: ldap, duo, totp, cas, openid, saml, ssl, json, header, quickconnect. Thanks to HTML5, once Guacamole is installed on a server, all you need to access your desktops is a web browser. For general usage of Apache Guacamole the full manual is located here: https://guacamole.apache.org/doc/gug/⁠ The project is based on the work of Zuhkov [email protected]⁠⁠, aptalca and Jason Bean, updated by cleao to latest version of guacamole. All the required configuration for the authentication methods is provided by the template/environment variables. Internal MariaDB is the default authentication and configuration method if no external database server is specifyed in the EXTENSION_PRIORITY environment variable. You can add additional configuration editing guacamole config file (/config/guacamole/guacamole.properties) but don't change the required parameters (see in manual) for authentication, they are automaticly filled by the docker template options/environment variables. If using an external database server (Mysql/MariaDB, Postgresql or MSSQLserver) you must provide it with guacamole schema and an user, more info: https://guacamole.apache.org/doc/gug/jdbc-auth.html⁠ In the option EXTENSION_PRIORITY you can add comma-separated list of external database server (mysql, sqlserver or postgresql) and authentication providers (ldap, duo, totp, cas, openid, saml, ssl, json, header, quickconnect) that should be acessed in specific order (don't specify "*" here) - INTERNAL (MariaDB) IS USED IF ANY DATABASE SERVER IS SPECIFYED! All other options are self explained or you can use the manual located here: https://guacamole.apache.org/doc/gug⁠ Docker run example: docker run -d --name='Guacamole' --net='bridge' -e 'EXTENSION_PRIORITY'='' -e 'PUID'='99' -e 'PGID'='100' -p '8080:8080/tcp' -v 'watheverpathyouwant':'/config':'rw' 'cleao/guacamole' Session recordings when properly configured in GUI will be stored in the configurable Environment Path to be accessible outside docker. Once the Guacamole image is running, will be accessible at: http://your-host-ip:8080⁠ and login with user and password: guacadmin Apache Guacamole copyright The Apache Software Foundation, Licenced under the Apache License, Version 9 .................. Environment variables:EXTENSION_PRIORITY: Comma-separated list of external database server (mysql, sqlserver or postgresql) and authentication providers (ldap, duo, totp, cas, openid, saml, ssl, json, header, quickconnect) that should be acessed in specific order. Use internal (MariaDB) if any external database chosen, DATABASE_HOSTNAME: External database server name or IP adress:port, DATABASE_NAME: External database name, DATABASE_USERNAME: External database user name, DATABASE_PASSWORD: External database password, LDAP_HOSTNAME: External LDAP server name or IP adress, and port, LDAP_USER_BASE_DN: External LDAP user base dn, DUO_API_HOSTNAME: External duo api hostname, DUO_CLIENT_ID: External duo client id, DUO_CLIENT_SECRET: External duo client secret, DUO_REDIRECT_URI: External duo client uri, CAS_AUTHORIZATION_ENDPOINT: CAS authorization endpoint, CAS_REDIRECT_URI: CAS redirect uri, OPENID_AUTHORIZATION_ENDPOINT: OPENID authorization endpoint, OPENID_JWKS_ENDPOINT: OPENID jwks endpoint, OPENID_ISSUER: OPENID issuer, OPENID_CLIENT_ID: OPENID client id, OPENID_REDIRECT_URI: OPENID redirect uri, SSL_AUTH_URI: SSL auth uri, SSL_AUTH_PRIMARY_URI: SSL auth primary uri, JSON_SECRET_KEY: JSON secret key Container Path: /config: AppData Config Path Container Path: /var/lib/guacamole/recordings Internal port: 8080

Thank you! 😀 As you wish, if database is internal and 'AppData Config Path' is the same than all data is kept and database wil be upgraded to 1.6.0 I'm waiting for aproval to offer the application in community apps then will open a forum thread to support it.

I have forked Jason project and upgrade to version 1.6.0, you can try using the same template changing the name to create a new application and in the field: Repository replace the word jasonbean to cleao, if database is external, must update or create a new one with 1.6.0 schema

Huuummm, i think it's Mariadb last version , related... Changing Mariadb docker to version 10.11 and... It works!

I'm having the same problem (using external mysql): 12:11:00.743 [http-nio-8080-exec-6] WARN o.a.g.e.AuthenticationProviderFacade - The "mysql" authentication provider has encountered an internal error which will halt the authentication process. If this is unexpected or you are the developer of this authentication provider, you may wish to enable debug-level logging. If this is expected and you wish to ignore such failures in the future, please set "skip-if-unavailable: mysql" within your guacamole.properties. 12:11:00.746 [http-nio-8080-exec-6] ERROR o.a.g.rest.RESTExceptionMapper - Unexpected internal error: ### Error querying database. Cause: java.sql.SQLException: Unknown system variable 'transaction_isolation' ### The error may exist in org/apache/guacamole/auth/jdbc/user/UserMapper.xml ### The error may involve org.apache.guacamole.auth.jdbc.user.UserMapper.selectOne ### The error occurred while executing a query ### Cause: java.sql.SQLException: Unknown system variable 'transaction_isolation'

Integrate all the interface or even a button to show virt-manager interface in menu VMS :

If stoping the array and then start in the MAIN Gui page, virtual machines wont start but docker's all start, all with auto-start ON. Is this normal?