Guacamole Gerenciamento

Gerenciamento Utilizando Base de Dados

• Para uma melhor experiencia do Guacamole, uma boa é instalar um gerenciador de base de dados e base de dados para gerir as configurações.

• Abaixo segue os requerimentos e configurações.

Instalando o MariaDB 

• Instalar o SGBD e configurar.

# apt install mariadb-server libmariadb-java -y

# mariadb-secure-installation

NOTE: RUNNING ALL PARTS OF THIS SCRIPT IS RECOMMENDED FOR ALL MariaDB

      SERVERS IN PRODUCTION USE!  PLEASE READ EACH STEP CAREFULLY!

In order to log into MariaDB to secure it, we'll need the current

password for the root user. If you've just installed MariaDB, and

haven't set the root password yet, you should just press enter here.

Enter current password for root (enter for none):   <Enter>

OK, successfully used password, moving on...

Setting the root password or using the unix_socket ensures that nobody

can log into the MariaDB root user without the proper authorisation.

You already have your root account protected, so you can safely answer 'n'.

Switch to unix_socket authentication [Y/n]   <Enter>

Enabled successfully!

Reloading privilege tables..

 ... Success!

You already have your root account protected, so you can safely answer 'n'.

Change the root password? [Y/n]   <Enter>

New password:   <Insira o password>

Re-enter new password:   <Insira o password>

Password updated successfully!

Reloading privilege tables..

 ... Success!

By default, a MariaDB installation has an anonymous user, allowing anyone

to log into MariaDB without having to have a user account created for

them.  This is intended only for testing, and to make the installation

go a bit smoother.  You should remove them before moving into a

production environment.

Remove anonymous users? [Y/n]   <Enter>

 ... Success!

Normally, root should only be allowed to connect from 'localhost'.  This

ensures that someone cannot guess at the root password from the network.

Disallow root login remotely? [Y/n]   <Enter>

 ... Success!

By default, MariaDB comes with a database named 'test' that anyone can

access.  This is also intended only for testing, and should be removed

before moving into a production environment.

Remove test database and access to it? [Y/n]   <Enter>

 - Dropping test database...

 ... Success!

 - Removing privileges on test database...

 ... Success!

Reloading the privilege tables will ensure that all changes made so far

will take effect immediately.

Reload privilege tables now? [Y/n]   <Enter>

 ... Success!

Cleaning up...

All done!  If you've completed all of the above steps, your MariaDB

installation should now be secure.

Thanks for using MariaDB!

• Criar a base de dados.

# mariadb -u root -p 

> CREATE DATABASE guacamole;

> GRANT ALL PRIVILEGES ON guacamole.* to guacamole@'localhost' IDENTIFIED BY 'Guacamole123';

> FLUSH PRIVILEGES;

> EXIT

• Disponibilizar o connector java.

# cd /etc/guacamole/lib

# wget https://dev.mysql.com/get/Downloads/Connector-J/mysql-connector-j-8.4.0.tar.gz

# tar -xvzf mysql-connector-j-8.4.0.tar.gz

# mv mysql-connector-j-8.4.0/mysql-connector-j-8.4.0.jar .

### Não consegui executar com o conector do MariaDB - Avaliar

###### cd /etc/guacamole/lib

###### wget https://dlm.mariadb.com/3978472/Connectors/java/connector-java-3.5.1/mariadb-java-client-3.5.1.jar

###### ln -s /usr/share/java/mariadb-java-client-2.7.6.jar /etc/guacamole/lib/mariadb-java-client-2.7.6.jar

• Disponibilizar a extensão de conexão com a base de dados.

# cd /etc/guacamole/extensions/

# wget https://downloads.apache.org/guacamole/1.5.5/binary/guacamole-auth-jdbc-1.5.5.tar.gz

# tar -xvzf guacamole-auth-jdbc-1.5.5.tar.gz

# mv guacamole-auth-jdbc-1.5.5/mysql/guacamole-auth-jdbc-mysql-1.5.5.jar .

• Popular as tabelas da base de dados.

# cat guacamole-auth-jdbc-1.5.5/mysql/schema/*.sql | mariadb -u guacamole -p guacamole   <- Esta usando o usuário Guacamole

• Configurar a comunicação com a base de dados.

# vi /etc/guacamole/guacamole.properties

# CONFIG MARIADB

guacd-hostname: 127.0.0.1

guacd-port: 4822

#user-mapping:   /etc/guacamole/user-mapping.xml

#auth-provider:  net.sourceforge.guacamole.net.basic.BasicFileAuthenticationProvider

mysql-hostname: 127.0.0.1

mysql-port: 3306

mysql-database: guacamole

mysql-username: guacamole

mysql-password: Guacamole123

# systemctl restart tomcat9.service guacd.service mariadb.service