The ungleich VNC console¶

1. System Architecture¶

2. set guacamole server¶

- run cdist

cd ~/.cdist; git pull; cdist config -bj7 -p9 -vv desktop.ungleich.ch

- in manifest

……
desktop.ungleich.ch)
        __guacamole_centos  --ldap-hostname 'ldap1.ungleich.ch' \
          --ldap-port '636' \
          --ldap-encryption-method 'ssl' \
          --ldap-user-base-dn 'ou=users,dc=ungleich,dc=ch' \
          --ldap-search-bind-password ‘refer to pass' \
          --ldap-search-bind-dn 'cn=manager,dc=ungleich,dc=ch' \
          --ldap-username-attribute 'uid' \
          --postgresql-hostname 'localhost' \
          --postgresql-username 'guacamole' \
          --postgresql-database 'guacamole' \
          --postgresql-port     '5432' \
          --postgresql-password 'guacamole' \
          --TOTP \
          --guacd-db 'postgresql'

3. create connection¶

- set postgresql client on opennebul server

1) install postgresql on opennebual server¶

apt install postgresql-client

2) config postgresql for accessing from external¶

vi /var/lib/pgsql/data/postgresql.conf on guacamole server(desktop)

listen_addresses = '*'

vi /var/lib/pgsql/data/pg_hba.conf on guacamole server(desktop)

host    all         all            opennbula server address trust

restart postgresql

systemctl restart postgresql

- set vnc connection automatically on opennebula server

1) create script¶

vm_list_dual_uid : create VM list file(uid, email, VM Number, host, VNC port) (https://code.ungleich.ch/ungleich-public/ungleich-tools/blob/master/vm_list_dual_uid)
--> get VM info (uid, email, host, port) from ldap and opennebula , it takes about 5~6 minustes now.
--> there are only ldap's accounts made by dashboard

create-guacamole-session-ldap-db : create VNC connection on desktop (https://code.ungleich.ch/ungleich-public/ungleich-tools/blob/master/create-guacamole-session-ldap-DB)
--> there is no function of removing user.(The ldap's account remains even if the customer is deleted from the dashboard.)
--> It takes about 1~2 minutes.

2) create crontab¶

every hour <-- it need some time to run script

crontab -e

15 0,2,4,6,8,10,12,14,16,18,20,22 * * * ./vm_list_dual_uid #create vm_list
45 0,2,4,6,8,10,12,14,16,18,20,22 * * * ./create-guacamole-session-ldap-db vm_vnc_list #create vm_list