ra6r2015 (Chapter 10, Administration Chapter 10. Administration Users, connections, and active sessions can be administered from within the web interface if the underlying authentication module supports this. The only officially-supported authentication modules supporting this are the MySQL and PostgreSQL extensions, which are documented in Chapter 6, Database authentication. If you are using the default authentication mechanism, or another authentication extension, this chapter probably does not apply to you, and the management options will not be visible in the Guacamole interface. If, on the other hand, you are using one of the database authentication providers, and you are logged in as a user with sufficient privileges, you will see management sections listed within the settings screen: SETTINGS Active Sessions Users Connections Preferences Sections within the Guacamole settings screen, Clicking any of these options will take you to a corresponding management section where you can perform administrative tasks. Managing sessions Clicking "Active Sessions” navigates to the session management screen. The session management screen displays all active sessions and allows system administrators to kill hem as needed. ‘When any user accesses a particular remote desktop connection, a unique session is created and will appear in the list of active sessions in the session management screen, Each active session is displayed in a sortable table, showing the corresponding user's username, how long the session has been active, the IP address of the machine from which the user is connecting, and the name of the connection being used Fipiiguac-devcrgidclguafadministration hi!raer2005 Chapter 10, Administration SETTINGS & suacadmin ~ ‘Active Sessions Users Connections __Preterences All currently-active Guacamole sessions are listed here. If you ish to kl one oF mare sessions, check the box next to those sessions and cick "Kil Sessions. King a session will immediately disconnect the user from the associated connection Username ~ ‘ative since Remote host Connection name demo 2015-03-30 11:03:34 10.0.8 88H (DSA, no passphrase) emo 2015-03-90 11:03:37 10.088 S9H IRSA, passphrase) guacadin 2015-03-30 1101:21 soos wwe uacadmin 2015-03-20 1101:91 1008 ssi rmjumper 2015-03-20 1100285 10088 Cred test test 2015-03-20 11.0244 100. ssi test 2015-08-30 11:02:51 10028 Telnet test 2015-03-90 11.0808 10.08 Windows 7 ‘Session management interface To kill one or more sessions, select the sessions by clicking their checkboxes. Once all desired sessions have been selected, clicking "Kill Sessions” will immediately disconnect those users from the associated connection. Filtering and sorting The table can be resorted by clicking on the column headers. Clicking any column will resort the table by the values within that column, while clicking a column which is already sorted will toggle between ascending and descending order. The content of the table can be limited through search terms specified in the "Filter" field. Entering search terms will limit the table to only sessions containing those terms. For example, to list only connections by the user "guacadmin" which have been active since March, 2015, you would enter: "guacadmin 2015-0: Beware that if a search term needs to contain spaces, it must be enclosed in double quotes to avoid b interpreted as multiple terms. quacadnip 2015-03 “wiodws 7 Ifyou wish to narrow the content of the table to only those connections which originate from a particular block of IP addresses, you can do this by specifying the block in standard CIOR notation, such "10.0.0.0/8" or "2001:db8:1234::/48", This will work with both IPv4 and IPv6 addresses. Imjumpet 20.0.0.0°8 Fipiiguac-devcrgidclguafadministration hi!raean15 Canter 10. Rarinstaten User management Clicking "Users" within the list of settings sections will take you to the user management screen. Here you can add new users or edit the properties and privileges of existing users. To add a new user, type the username of the new user within the text box inside the user management screen, and click the "New User" button. The new user will be added and made available. The new user will have no access to any existing connections, nor any administrative privileges, and you will need to manually set the user's password before they will be able to log in SETTINGS 2 guacadmin ~~ Active Sessions | Users Connections Preferences Click or tap on a user below to manage that user. Depending on your access level, users can be added ancl deleted, and thelr passwords can be changed. User 2 cemo 2 rjumper 2 test User management interface To edit a user, just click on the user you wish to edit. You will be taken to a screen which allows you to change the user's password, expire their password (such that it must be changed at next login), add or remove administrative permissions, and add or remove read access to specific connections or groups. If you have delete permission on the user, you will also see a "Delete" button. Clicking this button will permanently delete the user. Alternatively, if you only wish to temporarily disable the account, checking “Login disabled” will achieve the same effect while not removing the user entirely. If they attempt to log in, the attempt will be rejected as if their account did not exist at all Fipiiguac-devcrgidclguafadministration hi!raer2005 Chapter 10, Aainitration EDIT USER Username: jumper Password dd Re-enter Password ACCOUNT RESTRICTIONS Login eisable Password expired PERMISSIONS ‘Administer system: Create new users: Create new connections: Create new connection groups: Change own password: a CONNECTIONS @ © Balancing Group 2. Credtest @ © Organizational Group >. SSH 4 SSH (DSA, no passphrase) 24 SSH (DSA, passphrase) 2.) SSH (RSA, no passphrase) 22 SSH IRSA, passphrase) >a SSH? >. G Telnet De we Do WiNz008-WordPad [lo winzoi-vev-rns Do Windows 7 To Windows xP >. the@dev-zhe Eating a user Connections and groups Clicking "Connections" within the list of settings sections will take you to the connection management screen, The connection management screen allows administrators to create and edit connections and connection groups. To add a new connection or group, click the "New Connection” or "New Group” screen where you will be allowed to enter the details of the new object, such as its location, parameters, and Fipiiguac-devcrgidclguafadministration hi! coco & suacadmin uutton, This will take you to araer2015 (Chapter 10, Administration name. This name should be descriptive, but must also be unique with respect to other connections or groups in the same location, Once you click "Save", the new object will be added, but will initialy only be usable by administrators and your current user. To grant another user access to the new connection or group, you must edit that user, checking the box corresponding to the connection or group you created. SETTINGS & suacadmin ~ ‘Active Sessions Users | Connections Preferences Click o tap on a connection below to manage that connection. Depending on your access level, connections can be added and dleted, ane their properties (protocol, hostname, port, et.) can be changed. & Balancing Group Do Cred test Organizational Group do SSH ‘SSH (DSA, no passphrase) >. SSH (DSA, passpvase) >= SSH (RSA, no passphrase) Do SSH (RSA, passphrase) >. ssh >. Telnet we 1B w2000-woraPac © win2012-Dev-RDs Windows 7 1D Windows xP de mhaeeewane ‘Connection management interface Editing connections and groups works identically to editing a user. Click on the object you wish to edit, and you will be taken to screen which allows you to edit it. The screen will display all properties of the object, including its usage history, if applicable. If you have delete permission on the object, you will also see a "Delete" button. Clicking this button will permanently delete the object being edited. Fipiiguac-devcrgidclguafadministration hi! a7raer2005 (Chapter 10, Administration Name [ie Protocol: [ye PARAMETERS Hostname: Port: Password Read-only Cursor: Color depth: Enable aucio: ‘Swap red/blue components: Repeater destination host: Repeater destination port: EDIT CONNECTION Location: [moor ———SC*d pratotese [sao _————}s (local (Tus cor @ei5 © ‘Audio server name: [ oo USAGE HISTORY Username Start Time guacadmin 2015.02.24 14.2811 guacadmin 2015-02-24 11:12:12 guacadmin 2015-02-24 14:14:55, guacadmin 2015-02-23 12:07:20 jumper 2015-02-16 16:42:98 guacadmin 2015-02-16 16:34:02 jumper 2015-02-16 16:92:46 jumper 2015-02-16 16:32:28 jumper 2015-02-16 16:18:19 jumper 2015-02-16 14:20:08 LO Duration 21 seconds 49 seconds 14 seconds 7A minutes 29 seconds 25 seconds, 5 seconds 20 seconds 19 seconds 1.5 minutes 12345678910 > >» & suacadmin Ealing a connection Connection organization and balancing Connection groups can be either "organizational" or “balancing”. Each group can contain any number of other connections or groups, but the semantics of the group change depending on the type. ‘An organizational group behaves exactly as a folder or directory in a file system. It simply contains connections and other groups, but provides no other behavior. Clicking on an orgat connection list will expand the group, revealing its contents. Avbalancing group behaves as a connection. It dynamically balances load across the connections it contains, choosing the connection with the fewest number of active users. Unlike organizational groups, clicking on a balancing group causes a new connection to be opened. The actual underlying connection used depends on which connection has the least load at the time the group was clicked. Fipiiguac-devcrgidclguafadministration hi! jonal group within araer2005 (Chapter 10, Administration EDIT CONNECTION GROUP Name: [Sigesatona Geir | Location: [moor ——S—*d Type: [oigasizational | coco & suacadmin Fipiiguac-devcrgidclguafadministration hi! Eating a connection group "