Comments on: CentOS: Apache Guacamole – Remote Desktop Gateway

By: Kliment Andreev

Kliment Andreev — Sat, 11 Jan 2020 12:42:38 +0000

In reply to Fernando Schroeder. Check if SELinux is enabled. Also, if you are running a newer version, it might not work.

By: Fernando Schroeder

Fernando Schroeder — Fri, 10 Jan 2020 15:29:51 +0000

I’m getting this error, can you tell me what it can be?
“/guacamole/api/tokens error 500”

The screen goes blank.

By: Alessandro Sironi

Alessandro Sironi — Fri, 26 Jul 2019 14:09:50 +0000

In reply to Kliment Andreev.

SElinux was already set on permissive, setenforce 0 is the way!
Now I can access it via https://my.domain.com
Thankyou very very much!
Best regards,
Alessandro.

By: Kliment Andreev

Kliment Andreev — Fri, 26 Jul 2019 14:03:57 +0000

In reply to Alessandro Sironi. Looks like a SElinux issue to me. See if this helps. Disable SELinux by editing /etc/selinux/config and change SELINUX=enforcing to SELINUX=permissive. Also, type setenforce 0.

By: Alessandro Sironi

Alessandro Sironi — Fri, 26 Jul 2019 13:35:55 +0000

Hi, I have installed NGINX to use it as a reverse proxy with guacamole on SSL, I have follow your tutorial step by step and I have create guacamole.conf under /etc/nginx/conf.d/ I have a valid certificate and it is correctly loaded by NGINX (I can see the green padlock into browser addressbar) but I still have 502 Bad Gateway. If I point my browser to http://my.domain.com:8080/guacamole it work like a charm, I got the login screen, I can login and do all the stuff. How can I fix it?
In /var/log/nginx/error.log I got this (part of the message I think is relevant):
[crit] 14183#0: *1 connect() to 127.0.0.1:8080 failed (13: Permission denied) while connecting to upstream,
Thanks for your reply, bests,
Alessandro

By: Kliment Andreev

Kliment Andreev — Mon, 25 Mar 2019 01:11:24 +0000

In reply to JF Alex.

Check out this guy. He had something similar with port 3306 and SELinux.
https://www.doyler.net/security-not-included/guacamole-installation-homelab

By: JF Alex

JF Alex — Sun, 24 Mar 2019 20:24:50 +0000

Hi so yeah, i did put setenforce at 0. It’s all the same, just at the :guacamole.properties , that i did not included the line 1 and 13. Even if i included it, it give me the same. That’s all before the nginx setup that i haven’t done yet. but i should log over http://test.domain.com:8080/guacamole/ I did try permission with chown tomcat:tomcat on the guacamo..war file. but still blank.
try the semodule -l |grep guac … still. I find the pid 30088 related to 3306 is denied. I try to install semanage and now i can’t get it as it look i lost all package manager.. said no mirror find.. maybe it was because of the main change of the rpm package ?

By: Kliment Andreev

Kliment Andreev — Sun, 24 Mar 2019 13:17:06 +0000

In reply to JF Alex. I've seen this behavior if iptables is running. Try disabling temporarily SELinux and firewalld/iptables if you have them enabled. See if that helps.

By: JF Alex

JF Alex — Sun, 24 Mar 2019 01:16:38 +0000

Hi Thanks for your tutorial, very well made. But.. before the ssl section, i still only get a blank page. cannot get the login screen. I do see the favicon of guacamole.. I don’t see error present and system are started, port look open. try : setsebool -P httpd_can_network_relay , ss tupln show port.. So i don’t know ..
Thanks in advance