Return-Path: X-Original-To: archive-asf-public-internal@cust-asf2.ponee.io Delivered-To: archive-asf-public-internal@cust-asf2.ponee.io Received: from cust-asf.ponee.io (cust-asf.ponee.io [163.172.22.183]) by cust-asf2.ponee.io (Postfix) with ESMTP id 00BFC200BD0 for ; Wed, 30 Nov 2016 18:35:51 +0100 (CET) Received: by cust-asf.ponee.io (Postfix) id F37F6160B13; Wed, 30 Nov 2016 17:35:50 +0000 (UTC) Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by cust-asf.ponee.io (Postfix) with SMTP id 47C9C160B06 for ; Wed, 30 Nov 2016 18:35:50 +0100 (CET) Received: (qmail 16486 invoked by uid 500); 30 Nov 2016 17:35:49 -0000 Mailing-List: contact user-help@guacamole.incubator.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: user@guacamole.incubator.apache.org Delivered-To: mailing list user@guacamole.incubator.apache.org Received: (qmail 16471 invoked by uid 99); 30 Nov 2016 17:35:49 -0000 Received: from pnap-us-west-generic-nat.apache.org (HELO spamd3-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 30 Nov 2016 17:35:49 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd3-us-west.apache.org (ASF Mail Server at spamd3-us-west.apache.org) with ESMTP id DDC3B18002D for ; Wed, 30 Nov 2016 17:35:48 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd3-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: 1.98 X-Spam-Level: * X-Spam-Status: No, score=1.98 tagged_above=-999 required=6.31 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=2, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=disabled Authentication-Results: spamd3-us-west.apache.org (amavisd-new); dkim=pass (2048-bit key) header.d=guac-dev-org.20150623.gappssmtp.com Received: from mx1-lw-us.apache.org ([10.40.0.8]) by localhost (spamd3-us-west.apache.org [10.40.0.10]) (amavisd-new, port 10024) with ESMTP id XI2UaP_NVAfY for ; Wed, 30 Nov 2016 17:35:44 +0000 (UTC) Received: from mail-vk0-f50.google.com (mail-vk0-f50.google.com [209.85.213.50]) by mx1-lw-us.apache.org (ASF Mail Server at mx1-lw-us.apache.org) with ESMTPS id 4BC995F5F8 for ; Wed, 30 Nov 2016 17:35:44 +0000 (UTC) Received: by mail-vk0-f50.google.com with SMTP id x186so114133895vkd.1 for ; Wed, 30 Nov 2016 09:35:44 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=guac-dev-org.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:from:date:message-id:subject:to; bh=afdvTUhGnN3uwlHV9vrlOcgha3qp66o09HgJGjEGC7w=; b=DNFfp5HiPtsEzkvilidKZcaECo4s8EjVtp6IApbyGNNYfXoYG7UaHEXbuD2LdvUskW 9MiaJHgSXMFvit8rTeGvMaVaovrsd6ZKLwgRGQ/XEoAKQr6U45Hdmfb03FxYBmnIe86n le0wVPabNO9Cofos266BGrpvMzjWbIVWpX991+jIJkm92TH9G5+iTWRJtnN23sLrtMl4 8YQwlOEK+ioAFsBleuW4r21SulS5YfQ/tMU3SDUh0cHYPA6mTMn8hTRntbTAR1pNPgEv vLupsj6ajlP2+Qvv4V5K6nmfhkcgRvolq2UaYEw6M7eIS9f9/OwwqhYu4YoRFx69BL9Y IZPQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to; bh=afdvTUhGnN3uwlHV9vrlOcgha3qp66o09HgJGjEGC7w=; b=b0CQoS8pwHUlSytZNEVKJuOJAsSziSSzP7r8yn+rBHxOh3042jIDt8zemb1fUGGfXA NltLPdiA9Xe6O6wNVrKhNBfhllDAAdg0PDHtC4PNW9Kc+M3HwMAfcBFM9kyYveIwXy9A SanCkwU8pfIVMtA2j8iYzIozUFSwK5Sf+uafAdFhOXN/ke9n6gP5rd344ehaqMVs5cij OsNZzfNF/U9n72hW++6xJ6H14aSaZEZY7s8Z0/i4y2Vj7q4L5ctjgiLnTxESrpBH448b r3t7nm/4F0lrMU/87hAGXRH9tESWqzhjpOR5xa/O4xq5b1YQG+/fzkXYkmWrdzQzIbLc bCMQ== X-Gm-Message-State: AKaTC03envjdTF8w5L7IGE7Y9QuYLFe4HHrW5wBTHyxx9fIXLsctG9tIOQ4dDV2VLJjGG0uiTuiaPcinVsImKQ== X-Received: by 10.31.178.66 with SMTP id b63mr12251135vkf.70.1480527343730; Wed, 30 Nov 2016 09:35:43 -0800 (PST) MIME-Version: 1.0 Received: by 10.159.36.105 with HTTP; Wed, 30 Nov 2016 09:35:42 -0800 (PST) X-Originating-IP: [67.164.58.106] Received: by 10.159.36.105 with HTTP; Wed, 30 Nov 2016 09:35:42 -0800 (PST) In-Reply-To: <1480498619048-66.post@n4.nabble.com> References: <1479929964487-34.post@n4.nabble.com> <1480492126405-65.post@n4.nabble.com> <1480498619048-66.post@n4.nabble.com> From: Mike Jumper Date: Wed, 30 Nov 2016 09:35:42 -0800 Message-ID: Subject: Re: RDP connection problems with Windows Server 2008 R2 - No NLA To: user@guacamole.incubator.apache.org Content-Type: multipart/alternative; boundary=001a114392326783aa05428822c2 archived-at: Wed, 30 Nov 2016 17:35:51 -0000 --001a114392326783aa05428822c2 Content-Type: text/plain; charset=UTF-8 On Nov 30, 2016 01:50, "stewe" wrote: > > ... > > As far as I see providing username and password is only possible when > configuring the connection(!), so all users who are allowed to use this > connection with authenticate with the same username and password, a security > issue I think. Or you configure a special connection for each host/user. But > this means, the connection has to be reconfigured if the user changes his > password. > You can dynamically vary parameters by the username/password provided to Guacamole at login using parameter tokens: http://guacamole.incubator.apache.org/doc/gug/configuring-guacamole.html#parameter-tokens - Mike --001a114392326783aa05428822c2 Content-Type: text/html; charset=UTF-8

On Nov 30, 2016 01:50, "stewe" <stefan.witzel@zvw.uni-goettingen.de> wrote:
>
> ...
>
> As far as I see providing username and password is only possible when
> configuring the connection(!), so all users who are allowed to use this
> connection with authenticate with the same username and password, a security
> issue I think. Or you configure a special connection for each host/user. But
> this means, the connection has to be reconfigured if the user changes his
> password.
>

You can dynamically vary parameters by the username/password provided to Guacamole at login using parameter tokens:

http://guacamole.incubator.apache.org/doc/gug/configuring-guacamole.html#parameter-tokens

- Mike

--001a114392326783aa05428822c2--