Apache Guacamole managed by EGroupware

Guacamole makes RDP or VNC desktops available via html5 inside EGroupware. EGroupware supplies account information, authentication via OpenID Connect and allows to manage connections.

EGroupware Guacamole app does the following:

• Installs all tables (or views) for Apache Guacamole
• Everything account-related is a view, not a table
• EGroupware UI to create connections (Admin >> Guacamole >> Connections)
• One has to use EGroupware to assign permissions to connections
• Guacamole UI can be used to set advanced connection options

The app requires accounts stored in SQL. A workaround for using LDAP or ActiveDirectory for account storage (not just authentication), is to regularly use setup to migrate users and groups to SQL.

Installation instructions via your package manager

Installation requirements (please check before attempting an installation!)

• Installation must happen on same physical machine as EGroupware itself
• You already installed EGroupware itself AND secured the installation with https / a certificate under it's final domain-name eg. https://example.org/egroupware
• MariaDB/MySQL can be used by user root without entering a password, create a /root/my.cnf file with following content:

[client]
password = my secret root password

Installation (as user root replacing example.org with your actual domain)

apt update
HTTP_HOST=example.org apt install egroupware-guacamole

List of resources / further reading:

• Apache Guacamole website
• Using Guacamole section of Guacamole manual
• Administration section of Guacamole manual (keep in mind to use EGroupware UI to assign connection permissions!)
• Frequently Asked Questions from Guacamole
• Guacamole installation instructions for EGroupware
• Guacamole category in our forum (German)
• Guacamole EGroupware application repo on GitHub

Troubleshooting

• check MariaDB/MySQL is not bound on localhost (package tries to change that to docker0 address 172.17.0.1)

netstat -ln | grep 3306
tcp        0      0 172.17.0.1:3306         0.0.0.0:*               LISTEN

• check the log of the guacamole container

docker logs -f guacamole

• enable OpenID Connect request log in EGroupware (Administration > Applications > OpenID Connect / OAuth > Request log)