CentOS Linux release 7.9

安裝依賴包

yum install cairo-devel libjpeg-turbo-devel libjpeg-devel libpng-devel libtool libuuid-devel uuid-devel

安裝可選依賴包

yum -y install epel-release
yum install --nogpgcheck https://download1.rpmfusion.org/free/el/rpmfusion-free-release-7.noarch.rpm
yum install ffmpeg-devel freerdp-devel pango-devel libssh2-devel libtelnet-devel libvncserver-devel libwebsockets-devel pulseaudio-libs-devel openssl-devel libvorbis-devel libwebp-devel

編譯安裝guacamole server

wget https://dlcdn.apache.org/guacamole/1.4.0/source/guacamole-server-1.4.0.tar.gz --no-check-certificat
tar xf guacamole-server-1.4.0.tar.gz
cd guacamole-server-1.4.0/
./configure --prefix=/usr/local/guacamole --with-init-dir=/etc/init.d
make
make install
ldconfig
echo “export GUACAMOLE_HOME=/etc/guacamole” >> /etc/bashrc
source /etc/bashrc

安裝guacamole client

yum install tomcat
wget https://dlcdn.apache.org/guacamole/1.4.0/binary/guacamole-1.4.0.war
cp guacamole-1.4.0.war /var/lib/tomcat/webapps/guacamole.war

默認認證(User-mapping.xml)

mkdir /etc/guacamole
vi /etc/guacamole/guacamole.properties

<user-mapping> <authorize username="guacadmin" password="guacadmin" ><connection name="rdp1"><protocol>rdp</protocol><param name="hostname">10.0.3.200</param><param name="port">3389</param><param name="username">test</param><param name="password">test.1</param></connection><connection name="vnc1"><protocol>vnc</protocol><param name="hostname">10.0.5.200</param><param name="port">5901</param><param name="password">test.1</param></connection><connection name="ssh1"><protocol>ssh</protocol><param name="hostname">10.0.5.200</param><param name="port">22</param><param name="username">test</param><param name="password">test.1</param><param name="color-scheme">white-black</param><param name="enable-sftp">true</param></connection> </authorize> </user-mapping>

systemctl start tomcat
systemctl start guacd

數據庫認證（mariadb）

yum -y install mariadb mariadb-devel mariadb-server
systemctl start mariadb
mkdir -p /etc/guacamole/extensions
mkdir -p /etc/guacamole/lib
wget https://apache.org/dyn/closer.lua/guacamole/1.4.0/binary/guacamole-auth-jdbc-1.4.0.tar.gz?action=download -O guacamole-auth-jdbc-1.4.0.tar.gz
tar xf guacamole-auth-jdbc-1.4.0.tar.gz
cp guacamole-auth-jdbc-1.4.0/mysql/guacamole-auth-jdbc-mysql-1.4.0.jar /etc/guacamole/extensions
wget http://ftp.ntu.edu.tw/MySQL/Downloads/Connector-J/mysql-connector-java-5.1.49.tar.gz
tar -zxvf mysql-connector-java-5.1.49.tar.gz
cp mysql-connector-java-5.1.49/mysql-connector-java-5.1.49-bin.jar /etc/guacamole/lib/
vi /etc/guacamole/guacamole.properties

# MySQL properties mysql-hostname: localhost mysql-database: guacamole_db mysql-port: 3306 mysql-username: guacamole_user mysql-password: some_password

mysql -u root

mysql> CREATE DATABASE guacamole_db; mysql> CREATE USER 'guacamole_user'@'localhost' IDENTIFIED BY 'some_password'; mysql> GRANT SELECT,INSERT,UPDATE,DELETE ON guacamole_db.* TO 'guacamole_user'@'localhost'; mysql> FLUSH PRIVILEGES; mysql> quit

cat guacamole-auth-jdbc-1.4.0/mysql/schema/*.sql | mysql -u root guacamole_db
mv /etc/guacamole/guacamole.properties /etc/guacamole/guacamole.properties.bak
systemctl restart tomcat

TOTP認證，授權碼從軟件“Authing令牌”獲取

wget https://apache.org/dyn/closer.lua/guacamole/1.4.0/binary/guacamole-auth-totp-1.4.0.tar.gz?action=download -O guacamole-auth-totp-1.4.0.tar.gz
tar xf guacamole-auth-totp-1.4.0.tar.gz
cp guacamole-auth-totp-1.4.0/guacamole-auth-totp-1.4.0.jar /etc/guacamole/extensions/
systemctl restart tomcat

OIDC安裝擴展步驟如下，配置后續補充

wget https://apache.org/dyn/closer.lua/guacamole/1.4.0/binary/guacamole-auth-sso-1.4.0.tar.gz?action=download -O guacamole-auth-sso-1.4.0.tar.gz
tar xf guacamole-auth-sso-1.4.0.tar.gz
cp guacamole-auth-sso-1.4.0/openid/guacamole-auth-sso-openid-1.4.0.jar /etc/guacamole/extensions/

測試中發現的問題

• 在外網可以遠程登錄，和內網中登錄使用無明顯差異感覺
• 內外網遠程登錄時偶有斷開連接情況，但可快速的手動再次連接登錄或15s后自動重連
• VNC分辨率固定為1024x768，可通過配置遠程用戶的~/.vnc/config文件中的geometry參數進行調整（需重起VNC服務）
• 剪貼板默認配置未修改時，遠程向本地可直接拷貝文字，反向不行
• 使用剪貼板可在遠程及本地間拷貝文字，但VNC遠程時對中文不支持
• 剪貼板和SFTP使用時需按“ctrl+alt+shift”三鍵，SFTP使用時相對而言不太方便(不能直接拖拉文件，而是窗口中上傳或下載)
• 使用ssh遠程時，輸入與執行命令時有卡頓，且字符“-”顯示時極像“_”,VNC或RDP時無此現象
• VNC和RDP的色彩深度選擇16色即可，滿足基本的需求，并減少帶寬使用
• 多用戶同時登錄使用場景暫未測試

總結

以上是生活随笔為你收集整理的CentOS7安装guacamole的全部內容，希望文章能夠幫你解決所遇到的問題。

如果覺得生活随笔網站內容還不錯，歡迎將生活随笔推薦給好友。