From user-return-5280-archive-asf-public=cust-asf.ponee.io@guacamole.apache.org Wed Feb 20 21:53:14 2019 Return-Path: X-Original-To: archive-asf-public@cust-asf.ponee.io Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by mx-eu-01.ponee.io (Postfix) with SMTP id 0617018077A for ; Wed, 20 Feb 2019 22:53:13 +0100 (CET) Received: (qmail 73628 invoked by uid 500); 20 Feb 2019 21:53:12 -0000 Mailing-List: contact user-help@guacamole.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: user@guacamole.apache.org Delivered-To: mailing list user@guacamole.apache.org Received: (qmail 73619 invoked by uid 99); 20 Feb 2019 21:53:12 -0000 Received: from mail-relay.apache.org (HELO mailrelay1-lw-us.apache.org) (207.244.88.152) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 20 Feb 2019 21:53:12 +0000 Received: from mail-ed1-f43.google.com (mail-ed1-f43.google.com [209.85.208.43]) by mailrelay1-lw-us.apache.org (ASF Mail Server at mailrelay1-lw-us.apache.org) with ESMTPSA id BB18F1225 for ; Wed, 20 Feb 2019 21:53:11 +0000 (UTC) Received: by mail-ed1-f43.google.com with SMTP id g9so10793050eds.3 for ; Wed, 20 Feb 2019 13:53:11 -0800 (PST) X-Gm-Message-State: AHQUAuakSfa8HLCmX5H8A9vzeq2Cx5FlRC0m2gXE4hZ+tsLNQS0jMKlo GPyIe5zh+j6cNmEoairTaqMyTZ5PCGUuoZsY3bk= X-Google-Smtp-Source: AHgI3IZnO1bQcd7XnIPzYbgb3eeDa0G5nXpG25P3Rvsy2Jd4PwFAwCqD7be0SEAQulhn201Uv8HRoRK25MAww/94v8c= X-Received: by 2002:a50:b8e2:: with SMTP id l89mr17450751ede.140.1550699590632; Wed, 20 Feb 2019 13:53:10 -0800 (PST) MIME-Version: 1.0 References: <1550619613318-0.post@n4.nabble.com> <1550639035200-0.post@n4.nabble.com> <1550694876911-0.post@n4.nabble.com> In-Reply-To: <1550694876911-0.post@n4.nabble.com> From: Nick Couchman Date: Wed, 20 Feb 2019 16:52:58 -0500 X-Gmail-Original-Message-ID: Message-ID: Subject: Re: Guacamole 1.0.0 with Radius and MySQL: Step-by-step for Linux newbies To: user@guacamole.apache.org Content-Type: multipart/alternative; boundary="00000000000040ce5b05825a6287" --00000000000040ce5b05825a6287 Content-Type: text/plain; charset="UTF-8" On Wed, Feb 20, 2019 at 3:44 PM drhy wrote: > Hi, > If you look at the script you'll see that it changes the name of the > Authentication Providers slightly. The Providers are loaded and executed by > Guacamole in alphanumeric sequence, so renaming is needed to ensure Radius > is loaded before MySQL. > -David > > Yes, because of how modules are loaded and how authentication errors are handled, if you're using RADIUS to do 2-Factor authentication (Challenge/Response), you'll need to make sure that module is loaded and evaluated, first, so that authentication succeeds before the JDBC module is queried. You should still be able to assign permissions from the JDBC module to RADIUS-authenticated users. -Nick --00000000000040ce5b05825a6287 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
On Wed, Feb 20, 2019 at 3:44 PM drhy <= dyoung@huntergroup.co.nz>= ; wrote:
Hi,
If you look at the script you'll see that it changes the name of the Authentication Providers slightly. The Providers are loaded and executed by=
Guacamole in alphanumeric sequence, so renaming is needed to ensure Radius<= br> is loaded before MySQL.
-David


Yes, because of how modules = are loaded and how authentication errors are handled, if you're using R= ADIUS to do 2-Factor authentication (Challenge/Response), you'll need t= o make sure that module is loaded and evaluated, first, so that authenticat= ion succeeds before the JDBC module is queried.=C2=A0 You should still be a= ble to assign permissions from the JDBC module to RADIUS-authenticated user= s.

-Nick=C2=A0
--00000000000040ce5b05825a6287--