Настройка guacamole

14.11.2017

admin

Настройка guacamole

Исходная система: Distributor ID: Ubuntu Description: Ubuntu 16.04.3 LTS Release: 16.04 Codename: xenial

Установить зависимости

apt install fail2ban build-essential htop mc maven libcairo2-dev libjpeg62-dev libpng-dev libossp-uuid-dev tomcat8 openjdk-8-jdk openjdk-8-jre libfreerdp-dev libpango1.0-dev libssh-dev libssh2-1-dev libssl-dev libtelnet-dev libvorbis-dev libwebp-dev libavcodec-dev libavutil-dev libswscale-dev

1	apt install fail2ban build–essential htop mc maven libcairo2–dev libjpeg62–dev libpng–dev libossp–uuid–dev tomcat8 openjdk–8–jdk openjdk–8–jre libfreerdp–dev libpango1.0–dev libssh–dev libssh2–1–dev libssl–dev libtelnet–dev libvorbis–dev libwebp–dev libavcodec–dev libavutil–dev libswscale–dev

в зависимости от того какие сервисы должен поддерживать guacamole ставим или нет следующие зависимости: libfreerdp-dev libpango1.0-dev libssh-dev libssh2-1-dev libssl-dev libtelnet-dev libvorbis-dev libwebp-dev отсутствуют зависимости поддержки pulse и VNC.

Вот эти три не факт что нужны, но тестить лень: libavcodec-dev libavutil-dev libswscale-dev

Загрузить guacamole

wget http://sourceforge.net/projects/guacamole/files/current/source/guacamole-server-0.9.9.tar.gz
wget http://sourceforge.net/projects/guacamole/files/current/binary/guacamole-0.9.9.war
cp guacamole-0.9.9.war /var/lib/tomcat8/webapps/guacamole.war
wget http://sourceforge.net/projects/guacamole/files/current/source/guacamole-client-0.9.9.tar.gz
tar -xvf guacamole-*tar.gz

1

2

3

4

5

wget http://sourceforge.net/projects/guacamole/files/current/source/guacamole–server–0.9.9.tar.gz

wget http://sourceforge.net/projects/guacamole/files/current/binary/guacamole–0.9.9.war

cp guacamole–0.9.9.war /var/lib/tomcat8/webapps/guacamole.war

wget http://sourceforge.net/projects/guacamole/files/current/source/guacamole–client–0.9.9.tar.gz

tar –xvf guacamole–*tar.gz

Установить guacamole клиент

Shell

cd guacamole-client-0.9.9 mvn package

1
2

cd guacamole–client–0.9.9
mvn package

Установить guacamole сервер

cd ../guacamole-server-0.9.9
 ./configure –with-init-dir=/etc/init.d

1 2	cd ../guacamole–server–0.9.9 ./configure —with–init–dir=/etc/init.d

На выходе должны получить:

	————————————————
	guacamole-server version 0.9.9
	————————————————
	
	   Library status:
	
	     freerdp …………. yes
	     pango …………… yes
	     libssh2 …………. yes
	     libssl ………….. yes
	     libtelnet ……….. yes
	     libVNCServer …….. no
	     libvorbis ……….. yes
	     libpulse ………… no
	     libwebp …………. yes
	
	   Protocol support:
	
	      RDP ……. yes
	      SSH ……. yes
	      Telnet …. yes
	      VNC ……. no
	
	   Init scripts: /etc/init.d
	
	Type “make” to compile guacamole-server.

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

————————————————————————

guacamole–server version 0.9.9

————————————————————————

Library status:

freerdp ............. yes

pango ............... yes

libssh2 ............. yes

libssl .............. yes

libtelnet ........... yes

libVNCServer ........ no

libvorbis ........... yes

libpulse ............ no

libwebp ............. yes

Protocol support:

RDP ....... yes

SSH ....... yes

Telnet .... yes

VNC ....... no

Init scripts: /etc/init.d

Type “make” to compile guacamole–server.

Если либрари и протоколы устраивают компилируем:

 ./configure –with-init-dir=/etc/init.d && make && make install

1	./configure —with–init–dir=/etc/init.d && make && make install

Создать файлы конфигурации guacamole

mkdir /etc/guacamole/

1	mkdir /etc/guacamole/

nano /etc/guacamole/guacamole.properties

	#    Guacamole – Clientless Remote Desktop
	#    Copyright (C) 2010  Michael Jumper
	#
	#    This program is free software: you can redistribute it and/or modify
	#    it under the terms of the GNU Affero General Public License as published by
	#    the Free Software Foundation, either version 3 of the License, or
	#    (at your option) any later version.
	#
	#    This program is distributed in the hope that it will be useful,
	#    but WITHOUT ANY WARRANTY; without even the implied warranty of
	#    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
	#    GNU Affero General Public License for more details.
	#
	#    You should have received a copy of the GNU Affero General Public License
	#    along with this program.  If not, see .
	
	
	# Hostname and port of guacamole proxy
	guacd-hostname: localhost
	guacd-port:     4822
	
	# Auth provider class (authenticates user/pass combination, needed if using the provided login screen)
	auth-provider: net.sourceforge.guacamole.net.basic.BasicFileAuthenticationProvider
	basic-user-mapping: /etc/guacamole/user-mapping.xml

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

nano /etc/guacamole/guacamole.properties

# Guacamole – Clientless Remote Desktop

#

# This program is free software: you can redistribute it and/or modify

# it under the terms of the GNU Affero General Public License as published by

# the Free Software Foundation, either version 3 of the License, or

# (at your option) any later version.

#

# This program is distributed in the hope that it will be useful,

# but WITHOUT ANY WARRANTY; without even the implied warranty of

# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the

# GNU Affero General Public License for more details.

#

# You should have received a copy of the GNU Affero General Public License

# along with this program. If not, see .

# Hostname and port of guacamole proxy

guacd–hostname: localhost

guacd–port: 4822

# Auth provider class (authenticates user/pass combination, needed if using the provided login screen)

auth–provider: net.sourceforge.guacamole.net.basic.BasicFileAuthenticationProvider

basic–user–mapping: /etc/guacamole/user–mapping.xml

Ссылка на конфигурацию

ln -s /etc/guacamole/guacamole.properties /usr/share/tomcat8/lib/guacamole.properties

1	ln –s /etc/guacamole/guacamole.properties /usr/share/tomcat8/lib/guacamole.properties

Файл настроек проксирования

nano /etc/guacamole/user-mapping.xml

1	nano /etc/guacamole/user–mapping.xml

<user-mapping>
<authorize username=”admin” password=”********” encoding=”md5″>
        <connection name=”RDP-TS01″>
        <protocol>rdp</protocol>
        <param name=”hostname”>IP_ADDRESS</param>
        <param name=”username”></param>
        <param name=”password”></param>
        <param name=”domain”></param>
        <param name=”port”>3389</param>
        <param name=”security”>rdp</param>
        <param name=”ignore-cert”>true</param>
        </connection>
</authorize>
</user-mapping>

1

2

3

4

5

6

7

8

9

10

11

12

13

14

<user–mapping>

<param name=“hostname”>IP_ADDRESS</param>

</connection>

</authorize>

</user–mapping>

Перезапустить сервисы

ldconfig
/etc/init.d/tomcat8 restart
/etc/init.d/guacd restart

1

2

3

ldconfig

/etc/init.d/tomcat8 restart

/etc/init.d/guacd restart

Ссылка на сервис http://hostname|ip_address:8080/guacamole/#/

Используемые ссылки: http://guacamole.incubator.apache.org/doc/0.8.4/gug/installing-guacamole.html http://guacamole.incubator.apache.org/doc/gug/configuring-guacamole.html https://guacamole.incubator.apache.org/doc/gug/installing-guacamole.html

guacamole, proxy, rdp, ssh, tomcat, ubuntu, настройка, установка