Taddeusz

Not sure if anyone has worked this out but apparently QEMU has a problem in it's SMC emulation that is not compatible with 10.12.4: https://github.com/kholia/OSX-KVM/issues/64 If you're using Chameleon Enoch as your bootloader and depending on QEMU for SMC either you use FakeSMC.kext or need a newer version of QEMU.

I've been testing nmap from the command-line and it appears to give different results during different runs. Not sure what would be causing that to happen?

Also, does it exclude computers from showing in the scan that are already in the Wake On Lan list?

Ok, this is weird. I have my own Windows domain controller at my house to do DNS and I also have my own domain. I have a manual DNS entry for my unRAID server pointing to its static address. I also have a CNAME for my domain pointing to the local IP on my network. The results from the scan are different depending on how I connect to my server on my local network. Also, the list of available computers is also different if I connect using just the hostname (http://unraid), not fqdn (http://unraid.bean.local). Another thing I notice is that the enumeration of hostnames is different between ways of connecting.

Interestingly after my Duo trial expired and reverted to Duo Free my Guacamole is still able to authenticate through Duo.

I'm not sure I mentioned it before but last week network scanning appeared to be working but it was pulling the same list every time and computers that I knew were active on the network were not on the list. It's as if it was pulling a cached list from somewhere. I use a static address but my system also has dual NIC's. The second is not attached. The one that is attached is eth0.

No, network scanning is not working. Last week it was giving me results but I don't believe it was working correctly as it was giving me the same results each time and there were computers active on the network that weren't showing in the results.

Using the latest 6.3.3. Somehow I got it modified but it required manually changing the wakeonlan.xml file and rebooting unRAID. I wonder if it's a file permissions issue but I'm not really sure.

Maybe it was foolish to update to 10.12.4 but I did. It appears they changed the way the SMC is read and it's now getting a KP related to reading the OSK.

I'm having an issue where I cannot make changes to the plugin settings. I'm trying to modify one of the MAC addresses and it just reverts back to the original. Trying to outright delete the entry also has no effect. It just returns when I go back to the plugin. Removing and reinstalling the plugin does nothing. Where are the settings stored and why can't they be changed? Also, as has already been mentioned the network scan function no longer seems to be working.

I could only get it to work if the location was the same as the base URL of guacamole. So these are the entries I use that work great for me: location ^~ /guacamole/ { proxy_pass http://<ip>:<port>/guacamole/; } location ^~ /guacamole/websocket-tunnel { proxy_pass http://<ip>:<port>/guacamole/websocket-tunnel; proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; } The websocket portion is important so that Guacamole can use websockets rather than standard http for two-way communication.

I'm glad you got it working. I'm sorry I couldn't help you out better.

I just did a little testing with my Nginx by disabling the websocket proxy and got similar, but not the same, errors. You might double check to make sure your proxy_wstunnel mod is enabled. When I was running Apache I was using the linuxserver.io docker. It had that module available but not enabled. With that docker I had to create a symbolic link from mods-available to mods-enabled for it to work. In fact, I believe I was getting your very same error when the proxy_wstunnel module was not enabled on my Apache.

In Chrome's developer mode there's a Network tab. It will tell you each connection request being made and the response. You can do the same in IE and compare. Same F12 to open developer mode.

The target-densitydpi is not a problem since I assume you're not connecting on a mobile device. What I do see, though, is the URL path appears to be wrong. It should be "ws://remote.mydomain.de/guacamole/websocket-tunnel". Not sure why that would be happening since it appears that you're not doing any rewriting.

If you go into developer mode in Chrome (F12) do you see any errors in the console?

What are the errors you are seeing?

I'm now using the letsencrypt docker which uses Nginx and, IMHO, it works better than Apache. However, for Guacamole to be used at its full potential you need to also forward web sockets. I had this set up when I was using Apache. Here is the snippet I used and I have obfuscated my vital information. Keep in mind this requires the proxy_wstunnel module: <VirtualHost *:443 *:8443> ServerName <external_hostname> SSLEngine On SSLProxyEngine On SSLCertificateFile /etc/apache2/ssl/guacamole.crt SSLCertificateKeyFile /etc/apache2/ssl/guacamole.pem ProxyPass / http://<Internal_IP>:<port>/ ProxyPassReverse / http://<Internal_IP>:<port>/ <Location /guacamole/websocket-tunnel> Order allow,deny Allow from all ProxyPass ws://<Internal_IP>:<port>/guacamole/websocket-tunnel ProxyPassReverse ws://<Internal_IP>:<port>/guacamole/websocket-tunnel </Location> </VirtualHost> FYI, the reason I say Nginx works better is that using Apache I would get odd errors when disconnecting from remote computers. Using Nginx I get none of those errors and seems to work as is intended.

Well that stinks.

Interesting. I just noticed the my Duo account is on a trial for a month. What are the limitations of the Duo Free that make it unworkable for Guacamole?

This template can be found at: https://github.com/jason-bean/template-mongodb This is a template for the official MongoDB docker container. This template exposes port 27017 so that remote connections are possible. What is MongoDB? MongoDB (from "humongous") is a cross-platform document-oriented database. Classified as a NoSQL database, MongoDB eschews the traditional table-based relational database structure in favor of JSON-like documents with dynamic schemas (MongoDB calls the format BSON), making the integration of data in certain types of applications easier and faster. Released under a combination of the GNU Affero General Public License and the Apache License, MongoDB is free and open-source software.

Apache Guacamole is a clientless remote desktop gateway. It supports standard protocols like VNC, RDP, SSH, and Telnet. This docker primarily has a MariaDB (MySQL) database built-in for authentication and configuration. It also has support for LDAP authentication and configuration as well as Duo two-factor authentication. For general usage of Apache Guacamole the full manual is located here: https://guacamole.apache.org/doc/gug/ The different authentication methods can be enabled or disabled through the template. MySQL is the default authentication and configuration method. Template Options OPT_MYSQL: Y(default) / N OPT_MYSQL_EXTENSION: Y / N(default) OPT_SQLSERVER: Y / N(default) OPT_LDAP: Y / N(default) OPT_DUO: Y / N(default) OPT_CAS: Y / N(default) OPT_OPENID: Y / N(default) OPT_TOTP: Y / N(default) OPT_QUICKCONNECT: Y / N(default) Note: MySQL, SQL Server, and LDAP cannot be used at the same time. Duo two-factor can be used with MySQL, SQL Server, or LDAP authentication. Microsoft SQL Server Authentication/Configuration For SQL Server support modify your guacamole.properties file as follows: Create a database on your SQL Server Execute the SQL scripts found in the sqlserver-schema folder on the new database you created. Comment the MySQL properties. Uncomment the SQL Server properties. Modify SQL Server properties to match your configuration. Further instructions can be found here: https://guacamole.apache.org/doc/gug/jdbc-auth.html#jdbc-auth-sqlserver LDAP Authentication/Configuration For LDAP authentication modify your guacamole.properties file as follows: Comment the MySQL properties. Uncomment the LDAP properties. Modify LDAP properties to match your configuration. Further instructions can be found here: https://guacamole.apache.org/doc/gug/ldap-auth.html Duo Two-Factor Authentication For Duo two-factor authentication uncomment the Duo properties in your guacamole.properties and follow these instructions: https://guacamole.apache.org/doc/gug/duo-auth.html#guac-duo-config 4/4/2017 Upgraded to Apache Guacamole 0.9.12-incubating. Upgraded MySQL Java Connector to 5.1.41. 8/2/2017 Upgraded to Apache Guacamole 0.9.13-incubating. Upgraded MySQL Java Connector to 5.1.43. Database schema upgrades to 0.9.13. 8/4/2017 Added all optional libraries for guacd to enable all features. Got rid of log warning by moving the offending symbolic link creation from firstrun.sh to Dockerfile. 8/7/2017 Upgraded to phusion/baseimage 0.9.22. Upgraded to MariaDB 10.2. Upgraded to Tomcat 8. 12/16/2017 Added Powerline fonts to support Oh My Zsh agnoster theme. 1/24/2018 Upgraded to Apache Guacamole 0.9.14. Upgraded MySQL Java Connector to 5.1.45 Added Microsoft SQL Server JDBC 6.2.2 driver. Converted to multi-stage Docker to reduce size. Ability to downgrade using a tag (e.g. jasonbean/guacamole:0.9.13) 6/7/2018 Added GhostScript to allow remote printing. 6/8/2018 Changed location of Tomcat catalina.out log file /config/guacamole/log to improve troubleshooting. Attempt to mitigate a file permissions problem by always setting 755 permissions on container start. 6/11/2018 Fixed creation of /config/guacamole/log folder so that it will exist when Tomcat is started. Corrected a regression error introduced when switching to a multi-stage build. 6/12/2018 Modified unRAID template to make this a privileged container so that Tomcat will run correctly. Added more logging messages and ensure that the database doesn't get created when the guacamole.properties file doesn't exist. Modified so that all Tomcat logs get placed in guacamole/log directory. 8/18/2018 tyler43636 submitted pull request to add the tzdata package to correct for the RTC being set to the local time rather than UTC. 9/24/2018 Modified the firstrun.sh script so that the MySQL schema files are copied to /config when OPT_MYSQL is set "Y" in case someone wants to use an external MySQL or MariaDB database. 1/10/2019 Upgraded to Apache Guacamole 1.0.0. BIG UPGRADE! Thanks to the Guacamole team my build process has been greatly improved. Now uses the Debian base container just like the guacd Docker container from Apache. Retooled entire run process to use tini/supervisor to manage services. Added version that comes without MariaDB so that container size is halved if you have an external database source or use the default authentication. 2/23/2020 Upgraded to Apache Guacamole 1.1.0. Changed to debian:stable-slim base container to shave off some size. No database schema changes. 7/5/2020 Upgraded to Apache Guacamole 1.2.0. Fixed problem with OpenID extension so that it would load before all other auth extensions. No database schema changes. 11/29/2020 Added -s argument to tini to make sure it can subreap if not PID 1. 12/6/2020 Implemented PUID and PGID environment variables to run tasks in non-root and match nobody user in file system. Cleaned up code to improve maintainability. 12/14/2020 Fixed regression to restore OPT_MYSQL_EXTENSION. 1/9/2021 Upgraded to Apache Guacamole 1.3.0. 5/30/2021 Merged changes from Sean to add logrotate to prevent Catalina log from growing forever. 1/12/2022 Upgraded to Apache Guacamole 1.4.0. Changed to install latest version of Tomcat directly from Apache since the Debian Buster repository contains an old version. 11/11/2022 Updated MariaDB install process. Cleaned up code. New build to update Tomcat. 3/18/2023 Correct how mysqld loads so that it shuts down correctly. 3/21/2023 Upgraded to Apache Guacamole 1.5.0. 3/24/2023 Added missing dependency for guacd. 4/14/2023 Upgraded to Apache Guacamole 1.5.1. Removed privileged from template. Changed to OpenJDK 11 to fix OpenID. 5/26/2023 Upgraded to Apache Guacamole 1.5.2. Implmented client log level. Simplified Dockerfile. 8/4/2023 Upgraded to Apache Guacamole 1.5.3. 1/10/2023 Upgrade to Apache Guacamole 1.5.4. Simplify versioning.

I have all that set up. I can get to the web interface to download a profile to my iPhone. My problem is that the generated profiles try to connect to my private IP address, not my public dyndns hostname. I tried putting "remote myhostname.dyndns.org 1194" like I have in the client profile I use to connect to my Ubuntu Server OpenVPN but that didn't work. The generated profiles will use the address or hostname you set up Server Network Settings. See 2nd screenshot here Thank you very much. I didn't see that setting. All is well now.

I have all that set up. I can get to the web interface to download a profile to my iPhone. My problem is that the generated profiles try to connect to my private IP address, not my public dyndns hostname. I tried putting "remote myhostname.dyndns.org 1194" like I have in the client profile I use to connect to my Ubuntu Server OpenVPN but that didn't work.

I'm sorry my question wasn't very detailed. I followed the posted instructions and now it's working. My problem now is that I am doing port forwarding from my router to unRAID. I can connect to the web login and use my Active Directory credentials to login but the profile that is generated uses the private IP address of my unRAID server. How do I set OpenVPN AS so that the auto generated client profiles are set to my public DynDNS hostname?