From user-return-3394-archive-asf-public=cust-asf.ponee.io@guacamole.apache.org Wed Feb 28 21:29:09 2018 Return-Path: X-Original-To: archive-asf-public@cust-asf.ponee.io Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by mx-eu-01.ponee.io (Postfix) with SMTP id 98228180657 for ; Wed, 28 Feb 2018 21:29:08 +0100 (CET) Received: (qmail 56948 invoked by uid 500); 28 Feb 2018 20:29:07 -0000 Mailing-List: contact user-help@guacamole.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: user@guacamole.apache.org Delivered-To: mailing list user@guacamole.apache.org Received: (qmail 56939 invoked by uid 99); 28 Feb 2018 20:29:07 -0000 Received: from mail-relay.apache.org (HELO mailrelay1-lw-us.apache.org) (207.244.88.152) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 28 Feb 2018 20:29:07 +0000 Received: from mail-lf0-f49.google.com (mail-lf0-f49.google.com [209.85.215.49]) by mailrelay1-lw-us.apache.org (ASF Mail Server at mailrelay1-lw-us.apache.org) with ESMTPSA id 618A1A9B for ; Wed, 28 Feb 2018 20:29:06 +0000 (UTC) Received: by mail-lf0-f49.google.com with SMTP id l191so5488845lfe.1 for ; Wed, 28 Feb 2018 12:29:05 -0800 (PST) X-Gm-Message-State: AElRT7GtO5hnFTFDvxuTx4CsTXFMoE1Y74lFiwRuWnZiYyQhw5rukeuF 4xCQtzHXm/XsXU0ebi+upfO99mBCpNRxhd/gg44= X-Google-Smtp-Source: AG47ELu6x2faB1O7NgQytyDFmjbmOszFkSxfte9z5lUwZcEqulzlvc8stV1wU8nLl6NIOCpHwySG35vwdOYZoBNYkG0= X-Received: by 10.25.213.194 with SMTP id m185mr822451lfg.5.1519849745015; Wed, 28 Feb 2018 12:29:05 -0800 (PST) MIME-Version: 1.0 Received: by 10.25.202.89 with HTTP; Wed, 28 Feb 2018 12:29:04 -0800 (PST) In-Reply-To: References: From: Nick Couchman Date: Wed, 28 Feb 2018 15:29:04 -0500 X-Gmail-Original-Message-ID: Message-ID: Subject: Re: Installation question To: user@guacamole.apache.org Content-Type: multipart/alternative; boundary="001a1142125e29ea3d05664b98cf" --001a1142125e29ea3d05664b98cf Content-Type: text/plain; charset="UTF-8" On Wed, Feb 28, 2018 at 3:19 PM, Erik Berndt wrote: > I would double-check the syntax of the proxypass location in your virtual > host, especially the opening and closing location tags and the trailing > slash at the end of guacamole. > In this case he's going directly to Tomcat, so ProxyPass isn't really an issue, since it isn't actually going through httpd or Nginx. > > I could be wrong, but I think proxypass requires using http, regardless if > the site is served over https. > You can definitely proxy https connections. If you're using ProxyPass, that would be Apache httpd, and it requires a little extra configuration - making sure https support is loaded for the mod_proxy module, and that certificates are trusted and configured correctly - but it's definitely doable. I haven't configured it with Nginx, but I've no doubt it can also proxy https connections in addition to plain http. > > It's been a while since I've configured a guacamole server, but I recall > having a hard time using the ip address as the proxypass location, but it > worked fine using http://localhost:8080/guacamole/ or http:// > :8080/guacamole/ > If you're using Apache and the IP does not work but hostname does, it is likely an issue with the Apache httpd configuration, probably a virtual host issue (missing virtual host mapping for the IP, missing /etc/hosts entry for IP<->hostname, etc.). There's no reason that accessing the IP can't work, but it highly depends on how you have things configured. -Nick --001a1142125e29ea3d05664b98cf Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
On W= ed, Feb 28, 2018 at 3:19 PM, Erik Berndt <erikberndt@superiorp= aving.net> wrote:
I would double-check the syntax of the proxypass location in = your virtual host, especially the opening and closing location tags and the= trailing slash at the end of guacamole.

<= /div>
In this case he's going directly to Tomcat, so ProxyPass isn&= #39;t really an issue, since it isn't actually going through httpd or N= ginx.
=C2=A0

I could be wrong, but I think proxypass requires usin= g http, regardless if the site is served over https.

You can definitely proxy https connections.=C2=A0= If you're using ProxyPass, that would be Apache httpd, and it requires= a little extra configuration - making sure https support is loaded for the= mod_proxy module, and that certificates are trusted and configured correct= ly - but it's definitely doable.=C2=A0 I haven't configured it with= Nginx, but I've no doubt it can also proxy https connections in additi= on to plain http.
=C2=A0

It's been a while since I&#= 39;ve configured a guacamole server, but I recall having a hard time using = the ip address as the proxypass location, but it worked fine using http://localhost:80= 80/guacamole/ or http://<fqdn>:8080/guacamole/

If you're using Apache and the IP do= es not work but hostname does, it is likely an issue with the Apache httpd = configuration, probably a virtual host issue (missing virtual host mapping = for the IP, missing /etc/hosts entry for IP<->hostname, etc.).=C2=A0 = There's no reason that accessing the IP can't work, but it highly d= epends on how you have things configured.

-Nick
--001a1142125e29ea3d05664b98cf--