Guacamole¶

What is it?¶

Guacamole is a clientless remote desktop gateway. It supports standard protocols like VNC, RDP, and SSH.

We call it clientless because no plugins or client software are required.

Thanks to HTML5, once Guacamole is installed on a server, all you need to access your desktops is a web browser.

Details
Project home	Docs	Github	Docker

1. Installation¶

sb install sandbox-guacamole

2. URL¶

To access Guacamole, visit https://guacamole._yourdomain.com_

3. Setup¶

Log in with user and password guacadmin. Change the default user and password immediately.
Documentation: Guacamole Docs

4. Enable Extensions (Optional)¶

Guacamole supports various authentication extensions that can be enabled through your Inventory. Add any of the following options to enable specific extensions:

TOTP (Two-Factor Authentication)LDAPRADIUSDuo SecurityCASOpenID ConnectSAMLHeader Authentication

Enable time-based one-time passwords for enhanced security:

guacamole_docker_envs_custom:
  OPT_TOTP: "Y"

Enable LDAP authentication:

guacamole_docker_envs_custom:
  OPT_LDAP: "Y"

Enable RADIUS authentication:

guacamole_docker_envs_custom:
  OPT_RADIUS: "Y"

Enable Duo two-factor authentication:

guacamole_docker_envs_custom:
  OPT_DUO: "Y"

Enable Central Authentication Service:

guacamole_docker_envs_custom:
  OPT_CAS: "Y"

Enable OpenID Connect authentication:

guacamole_docker_envs_custom:
  OPT_OPENID: "Y"

Enable SAML authentication:

guacamole_docker_envs_custom:
  OPT_SAML: "Y"

Enable HTTP header-based authentication:

guacamole_docker_envs_custom:
  OPT_HEADER: "Y"

After adding any extension options, run sb install sandbox-guacamole to apply changes.