Ubuntu 20.04 安装 Apache Guacamole 远程网关 mysql ldap
准备好文件
Apache Guacamole™: Release Archive
这里下载 1.4 这边计划采用ad统一认证的方案。
安装依赖文件
apt -y install libcairo2-dev libjpeg-turbo8-dev libpng-dev libtool-bin libossp-uuid-dev
安装可选依赖（这里全安装，如果有不用的具体可以参考官方）
apt -y install libavcodec-dev libavformat-dev libavutil-dev libswscale-dev freerdp2-dev libpango1.0-dev libssh2-1-dev libtelnet-dev libvncserver-dev libwebsockets-dev libpulse-dev libssl-dev libvorbis-dev libwebp-dev
安装支持组件
apt -y install default-jdk
apt -y install tomcat9 tomcat9-admin
apt -y install mysql-client
安装编译组件
apt-get -y install make gcc libelf-dev
安装服务器端
# 解压
tar -xzf guacamole-server-1.4.0.tar.gz
# 进入到源码文件夹
cd guacamole-server-1.4.0/
编译源码
首先做configure检查环境, 查看系统环境和依赖库是否满足编译要求.
./configure --with-init-dir=/etc/init.d
若环境正常会输出如下检查结果.
------------------------------------------------
guacamole-server version 1.4.0
------------------------------------------------
Library status:
freerdp2 ............ yes
pango ............... yes
libavcodec .......... yes
libavformat ......... yes
libavutil ........... yes
libssh2 ............. yes
libssl .............. yes
libswscale .......... yes
libtelnet ........... yes
libVNCServer ........ yes
libvorbis ........... yes
libpulse ............ yes
libwebsockets ....... yes
libwebp ............. yes
wsock32 ............. no
Protocol support:
Kubernetes .... yes
RDP ........... yes
SSH ........... yes
Telnet ........ yes
VNC ........... yes
Services / tools:
guacd ...... yes
guacenc .... yes
guaclog .... yes
Init scripts: /etc/init.d
Systemd units: no
Type "make" to compile guacamole-server.
编译安装源码并配置
# 编译
make
# 安装
make install
# 配置
ldconfig
至此, 服务端就安装完成了, 也会新增一个guacd的service.
部署客户端客户端
cp guacamole-1.4.0.war /var/lib/tomcat9/webapps/guacamole.war
环境变量设置
vi /etc/profile
如果jdk版本不一致, 则需要按实际版本填写路径
# 在/etc/profile文件末尾添加如下变量
#set java env
export JAVA_HOME=/usr/lib/jvm/java-11-openjdk-amd64
#set guacamole env
export GUACAMOLE_HOME=/etc/guacamole
设置完后需要运行如下命令立即生效.
source /etc/profile
创建配置文件夹
mkdir /etc/guacamole
mkdir /etc/guacamole/lib
mkdir /etc/guacamole/extensions
cp jar文件到目录
cp mysql-connector-java-8.0.30.jar /etc/guacamole/lib/
cp guacamole-auth-jdbc-mysql-1.4.0.jar /etc/guacamole/extensions/
cp guacamole-auth-ldap-1.4.0.jar /etc/guacamole/extensions/
配置配置文件
vim /etc/guacamole/guacamole.properties
根据自己的实际情况修改
# MySQL properties
mysql-hostname:
mysql-port: 3306
mysql-database: guacamole
mysql-username: root
mysql-password: password
mysql-default-max-connections-per-user: 0
mysql-default-max-group-connections-per-user: 0
# LDAP properties
ldap-hostname:
ldap-port: 389
ldap-user-base-dn: DC=vditest,DC=local
ldap-config-base-dn: dc=vditest,dc=local
ldap-search-bind-dn: [email protected]
ldap-search-bind-password: password
重新启动服务
systemctl restart tomcat9
service guacd restart
登录管理地址：http://ip:8080/guacamole/
初始用户名密码都是 guacadmin