Can't get Apache Guacamole to work. Error after initial login
reddit / selfhosted

----------------------------------------------------------------------
xrscx · 2023-10-26 00:21

I am trying to play around with Apache Guacamole but, for the life of
me, I cannot get it to work. I have been trying to deploy it with
docker-compose and have tried numerous online guides with no luck. I
always end up with the same issue.

**Issue:** i log into the web portal, i am presented with the initial
login screen, i input the default guacadmin/guacadmin and then I am
met with an error page. This has happened on numerous browsers. Images
are below.

**Note:**  i am just trying to test this out so no proxy right now.
Literally just trying to play with the interface.

**Instructions last used:** [**https://theko2fi.medium.com/apache-
guacamole-manual-installation-with-docker-
compose-222cef1894e3**](https://theko2fi.medium.com/apache-guacamole-
manual-installation-with-docker-compose-222cef1894e3)

I am doing all of this on a fresh AlmaLinux8. Below is what I have
done. Any ideas?

    curl -fsSL https://get.docker.com -o get-docker.sh
    sh get-docker.sh | grep -qE "ERROR: Unsupported distribution
'rocky'|ERROR: Unsupported distribution 'almalinux'" && sudo dnf
config-manager --add-repo
https://download.docker.com/linux/centos/docker-ce.repo && sudo dnf -y
install docker-ce docker-ce-cli containerd.io docker-compose-plugin

    sudo systemctl start docker
    sudo systemctl enable docker

    sudo usermod -a ${USER} -G docker
    newgrp docker

    mkdir ${HOME}/docker-stack
    cd ${HOME}/docker-stack

    mkdir -p ${HOME}/docker-stack/guacamole/init
    chmod -R +x ${HOME}/docker-stack/guacamole/init

    docker run --rm guacamole/guacamole:1.5.0
/opt/guacamole/bin/initdb.sh --postgres > ${HOME}/docker-
stack/guacamole/init/initdb.sql

    sudo cat > ${HOME}/docker-stack/guacamole/docker-compose.yml <<EOF
    version: '3.9'

    networks:
      guacamole_net:
        driver: bridge

    services:
      guacd:
        container_name: guacamole_backend
        image: guacamole/guacd:1.5.0
        networks:
          - guacamole_net
        restart: always
        volumes:
          - ./drive:/drive:rw
          - ./record:/record:rw

      postgres:
        container_name: guacamole_database
        environment:
          PGDATA: /var/lib/postgresql/data/guacamole
          POSTGRES_DB: guacamole_db
          POSTGRES_PASSWORD: 'test'
          POSTGRES_USER: 'test'
        image: postgres:13.4
        networks:
          - guacamole_net
        restart: always
        volumes:
          - ./init:/docker-entrypoint-initdb.d:ro
          - ./data:/var/lib/postgresql/data:rw

      guacamole:
        container_name: guacamole_frontend
        depends_on:
          - guacd
          - postgres
        environment:
          GUACD_HOSTNAME: guacd
          POSTGRES_DATABASE: guacamole_db
          POSTGRES_HOSTNAME: postgres
          POSTGRES_PASSWORD: 'test'
          POSTGRES_USER: 'test'
          POSTGRESQL_AUTO_CREATE_ACCOUNTS: 'true'
        image: guacamole/guacamole:1.5.0
        networks:
          - guacamole_net
        restart: always
        volumes:
          - ./drive:/drive:rw
        ports:
          - "8080:8080"
    EOF

    docker compose -f ${HOME}/docker-stack/guacamole/docker-
compose.yml up -d


​

https://preview.redd.it/o75gktoqwfwb1.png?width=465&format=png&auto=we
bp&s=e4973f5fd897709a8fe0d44fc8becf419a07efc3

​

https://preview.redd.it/bja4x5wmwfwb1.png?width=478&format=png&auto=we
bp&s=3c7d2f97a92f828676709094c05ebd4168ce6bc1

----------------------------------------------------------------------
ozjd · 2023-10-26 00:49

I'm not familiar with Guacamole 🥑 but adding container logs may help
someone who is familiar assist you.

----------------------------------------------------------------------
roomabuzzy · 2023-10-26 00:59

I've been using this one for a couple of years now without issue:
[https://github.com/boschkundendienst/guacamole-docker-
compose](https://github.com/boschkundendienst/guacamole-docker-
compose)


Note that the guacd container takes a while to be ready, so make sure
all containers are good to go before you try logging in. Also take a
look at your logs, you might find some clues in there.

----------------------------------------------------------------------
xrscx · 2023-10-26 01:15

Container logs below:


**docker logs guacamole\_frontend**

    25-Oct-2023 23:49:41.884 INFO [main]
org.apache.catalina.startup.VersionLoggerListener.log Server version
name:   Apache Tomcat/8.5.85
25-Oct-2023 23:49:41.886 INFO [main]
org.apache.catalina.startup.VersionLoggerListener.log Server built:
Jan 11 2023 00:09:15 UTC
25-Oct-2023 23:49:41.887 INFO [main]
org.apache.catalina.startup.VersionLoggerListener.log Server version
number: 8.5.85.0
25-Oct-2023 23:49:41.887 INFO [main]
org.apache.catalina.startup.VersionLoggerListener.log OS Name:
Linux
25-Oct-2023 23:49:41.887 INFO [main]
org.apache.catalina.startup.VersionLoggerListener.log OS Version:
5.14.0-284.11.1.el9_2.x86_64
25-Oct-2023 23:49:41.887 INFO [main]
org.apache.catalina.startup.VersionLoggerListener.log Architecture:
amd64
25-Oct-2023 23:49:41.887 INFO [main]
org.apache.catalina.startup.VersionLoggerListener.log Java Home:
/opt/java/openjdk/jre
25-Oct-2023 23:49:41.887 INFO [main]
org.apache.catalina.startup.VersionLoggerListener.log JVM Version:
1.8.0_362-b09
25-Oct-2023 23:49:41.887 INFO [main]
org.apache.catalina.startup.VersionLoggerListener.log JVM Vendor:
Temurin
25-Oct-2023 23:49:41.888 INFO [main]
org.apache.catalina.startup.VersionLoggerListener.log CATALINA_BASE:
/home/guacamole/tomcat
25-Oct-2023 23:49:41.888 INFO [main]
org.apache.catalina.startup.VersionLoggerListener.log CATALINA_HOME:
/usr/local/tomcat
25-Oct-2023 23:49:41.888 INFO [main]
org.apache.catalina.startup.VersionLoggerListener.log Command line
argument: -Djava.util.logging.config.file=/home/guacamole/tomcat/conf/
logging.properties
25-Oct-2023 23:49:41.888 INFO [main]
org.apache.catalina.startup.VersionLoggerListener.log Command line
argument:
-Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager
25-Oct-2023 23:49:41.888 INFO [main]
org.apache.catalina.startup.VersionLoggerListener.log Command line
argument: -Djdk.tls.ephemeralDHKeySize=2048
25-Oct-2023 23:49:41.888 INFO [main]
org.apache.catalina.startup.VersionLoggerListener.log Command line
argument:
-Djava.protocol.handler.pkgs=org.apache.catalina.webresources
25-Oct-2023 23:49:41.888 INFO [main]
org.apache.catalina.startup.VersionLoggerListener.log Command line
argument: -Dorg.apache.catalina.security.SecurityListener.UMASK=0027
25-Oct-2023 23:49:41.888 INFO [main]
org.apache.catalina.startup.VersionLoggerListener.log Command line
argument: -Dignore.endorsed.dirs=
25-Oct-2023 23:49:41.889 INFO [main]
org.apache.catalina.startup.VersionLoggerListener.log Command line
argument: -Dcatalina.base=/home/guacamole/tomcat
25-Oct-2023 23:49:41.889 INFO [main]
org.apache.catalina.startup.VersionLoggerListener.log Command line
argument: -Dcatalina.home=/usr/local/tomcat
25-Oct-2023 23:49:41.889 INFO [main]
org.apache.catalina.startup.VersionLoggerListener.log Command line
argument: -Djava.io.tmpdir=/home/guacamole/tomcat/temp
25-Oct-2023 23:49:41.889 INFO [main]
org.apache.catalina.core.AprLifecycleListener.lifecycleEvent Loaded
Apache Tomcat Native library [1.2.35] using APR version [1.7.0].
25-Oct-2023 23:49:41.889 INFO [main]
org.apache.catalina.core.AprLifecycleListener.lifecycleEvent APR
capabilities: IPv6 [true], sendfile [true], accept filters [false],
random [true], UDS [{4}].
25-Oct-2023 23:49:41.889 INFO [main]
org.apache.catalina.core.AprLifecycleListener.lifecycleEvent
APR/OpenSSL configuration: useAprConnector [false], useOpenSSL [true]
25-Oct-2023 23:49:41.893 INFO [main]
org.apache.catalina.core.AprLifecycleListener.initializeSSL OpenSSL
successfully initialized [OpenSSL 3.0.2 15 Mar 2022]
25-Oct-2023 23:49:41.959 INFO [main]
org.apache.coyote.AbstractProtocol.init Initializing ProtocolHandler
["http-nio-8080"]
25-Oct-2023 23:49:41.974 INFO [main]
org.apache.catalina.startup.Catalina.load Initialization processed in
459 ms
25-Oct-2023 23:49:41.997 INFO [main]
org.apache.catalina.core.StandardService.startInternal Starting
service [Catalina]
25-Oct-2023 23:49:41.997 INFO [main]
org.apache.catalina.core.StandardEngine.startInternal Starting Servlet
engine: [Apache Tomcat/8.5.85]
25-Oct-2023 23:49:42.012 INFO [localhost-startStop-1]
org.apache.catalina.startup.HostConfig.deployWAR Deploying web
application archive [/home/guacamole/tomcat/webapps/guacamole.war]
25-Oct-2023 23:49:43.516 INFO [localhost-startStop-1]
org.apache.jasper.servlet.TldScanner.scanJars At least one JAR was
scanned for TLDs yet contained no TLDs. Enable debug logging for this
logger for a complete list of JARs that were scanned but no TLDs were
found in them. Skipping unneeded JARs during scanning can improve
startup time and JSP compilation time.
23:49:43.940 [localhost-startStop-1] INFO
o.a.g.environment.LocalEnvironment - GUACAMOLE_HOME is
"/home/guacamole/.guacamole".
23:49:44.029 [localhost-startStop-1] INFO
o.a.g.GuacamoleServletContextListener - Read configuration parameters
from "/home/guacamole/.guacamole/guacamole.properties".
23:49:44.031 [localhost-startStop-1] INFO
o.a.g.rest.auth.HashTokenSessionMap - Sessions will expire after 60
minutes of inactivity.
23:49:45.042 [localhost-startStop-1] INFO
o.a.g.extension.ExtensionModule - Extension "PostgreSQL
Authentication" (postgresql) loaded.
23:49:45.148 [localhost-startStop-1] INFO
o.a.g.t.w.WebSocketTunnelModule - Loading JSR-356 WebSocket support...
25-Oct-2023 23:49:46.047 INFO [localhost-startStop-1]
org.apache.catalina.startup.HostConfig.deployWAR Deployment of web
application archive [/home/guacamole/tomcat/webapps/guacamole.war] has
finished in [4,035] ms
25-Oct-2023 23:49:46.049 INFO [main]
org.apache.coyote.AbstractProtocol.start Starting ProtocolHandler
["http-nio-8080"]
25-Oct-2023 23:49:46.058 INFO [main]
org.apache.catalina.startup.Catalina.start Server startup in 4084 ms

**docker logs guacamole\_backend**

    guacd[7]: INFO: Guacamole proxy daemon (guacd) version 1.4.0
started
guacd[7]: INFO: Listening on host 0.0.0.0, port 4822
guacd[7]: INFO: Guacamole proxy daemon (guacd) version 1.4.0 started
guacd[7]: INFO: Listening on host 0.0.0.0, port 4822

----------------------------------------------------------------------
xrscx · 2023-10-26 01:16

**docker logs guacamole\_database**


The files belonging to this database system will be owned by user
"postgres".
This user must also own the server process.
The database cluster will be initialized with locale "en\_US.utf8".
The default database encoding has accordingly been set to "UTF8".
The default text search configuration will be set to "english".
Data page checksums are disabled.
fixing permissions on existing directory
/var/lib/postgresql/data/guacamole ... ok
creating subdirectories ... ok
selecting dynamic shared memory implementation ... posix
selecting default max\_connections ... 100
selecting default shared\_buffers ... 128MB
selecting default time zone ... Etc/UTC
creating configuration files ... ok
running bootstrap script ... ok
performing post-bootstrap initialization ... ok
syncing data to disk ... ok
Success. You can now start the database server using:
pg\_ctl -D /var/lib/postgresql/data/guacamole -l logfile start
initdb: warning: enabling "trust" authentication for local connections
You can change this by editing pg\_hba.conf or using the option -A, or
\--auth-local and --auth-host, the next time you run initdb.
waiting for server to start....2023-10-25 23:49:42.318 UTC \[48\] LOG:
starting PostgreSQL 13.4 (Debian 13.4-4.pgdg110+1) on x86\_64-pc-
linux-gnu, compiled by gcc (Debian 10.2.1-6) 10.2.1 20210110, 64-bit
2023-10-25 23:49:42.320 UTC \[48\] LOG:  listening on Unix socket
"/var/run/postgresql/.s.PGSQL.5432"
2023-10-25 23:49:42.325 UTC \[49\] LOG:  database system was shut down
at 2023-10-25 23:49:42 UTC
2023-10-25 23:49:42.330 UTC \[48\] LOG:  database system is ready to
accept connections
 done
server started
CREATE DATABASE
/usr/local/bin/docker-entrypoint.sh: running /docker-entrypoint-
initdb.d/initdb.sql
CREATE TYPE
CREATE TYPE
CREATE TYPE
CREATE TYPE
CREATE TYPE
CREATE TABLE
CREATE INDEX
CREATE TABLE
CREATE INDEX
CREATE TABLE
CREATE TABLE
CREATE TABLE
CREATE TABLE
CREATE TABLE
CREATE INDEX
CREATE TABLE
CREATE INDEX
CREATE TABLE
CREATE INDEX
CREATE TABLE
CREATE INDEX
CREATE TABLE
CREATE INDEX
CREATE TABLE
CREATE INDEX
CREATE TABLE
CREATE INDEX
CREATE TABLE
CREATE INDEX
CREATE TABLE
CREATE INDEX
CREATE INDEX
CREATE TABLE
CREATE INDEX
CREATE INDEX
CREATE TABLE
CREATE INDEX
CREATE INDEX
CREATE TABLE
CREATE INDEX
CREATE TABLE
CREATE INDEX
CREATE INDEX
CREATE TABLE
CREATE INDEX
CREATE INDEX
CREATE TABLE
CREATE INDEX
CREATE INDEX
CREATE INDEX
CREATE INDEX
CREATE INDEX
CREATE INDEX
CREATE TABLE
CREATE INDEX
CREATE INDEX
CREATE INDEX
CREATE INDEX
CREATE TABLE
CREATE INDEX
INSERT 0 1
INSERT 0 1
INSERT 0 6
INSERT 0 3
waiting for server to shut down...2023-10-25 23:49:42.835 UTC \[48\]
LOG:  received fast shutdown request
.2023-10-25 23:49:42.836 UTC \[48\] LOG:  aborting any active
transactions
2023-10-25 23:49:42.837 UTC \[48\] LOG:  background worker "logical
replication launcher" (PID 55) exited with exit code 1
2023-10-25 23:49:42.847 UTC \[50\] LOG:  shutting down
2023-10-25 23:49:42.889 UTC \[48\] LOG:  database system is shut down
 done
server stopped
PostgreSQL init process complete; ready for start up.
2023-10-25 23:49:42.961 UTC \[1\] LOG:  starting PostgreSQL 13.4
(Debian 13.4-4.pgdg110+1) on x86\_64-pc-linux-gnu, compiled by gcc
(Debian 10.2.1-6) 10.2.1 20210110, 64-bit
2023-10-25 23:49:42.961 UTC \[1\] LOG:  listening on IPv4 address
"0.0.0.0", port 5432
2023-10-25 23:49:42.961 UTC \[1\] LOG:  listening on IPv6 address
"::", port 5432
2023-10-25 23:49:42.963 UTC \[1\] LOG:  listening on Unix socket
"/var/run/postgresql/.s.PGSQL.5432"
2023-10-25 23:49:42.967 UTC \[64\] LOG:  database system was shut down
at 2023-10-25 23:49:42 UTC
2023-10-25 23:49:42.971 UTC \[1\] LOG:  database system is ready to
accept connections

----------------------------------------------------------------------
xrscx · 2023-10-26 01:17

fair point. added them as a comment to this post

----------------------------------------------------------------------
xrscx · 2023-10-26 02:05

so, i actually tried the above previously with the same result as
above. However, i was always removing the proxy/tls aspect. I decided
to include it and yep it works.

I would think it would work without using the proxy but i guess not.

----------------------------------------------------------------------
amcco1 · 2023-10-26 03:09

You do not need all of that in your docker-compose.


Here is my docker-compose.

​

>version: "3.7"
networks:
  docknet:
external: true
services:
  guacamole:
image: jwetzell/guacamole
container\_name: guacamole
volumes:
\- postgres:/config
ports:
\- 8080:8080
networks:
docknet:
ipv4\_address: 192.168.1.8
restart: unless-stopped
volumes:
  postgres:
driver: local
\#default login is guacadmin/guacadmin

----------------------------------------------------------------------
[deleted] · 2023-10-26 03:11

[deleted]

----------------------------------------------------------------------
[deleted] · 2023-10-26 03:13

[deleted]

----------------------------------------------------------------------
[deleted] · 2023-10-26 03:14

[deleted]

----------------------------------------------------------------------
[deleted] · 2023-10-26 03:15

[deleted]

----------------------------------------------------------------------
amcco1 · 2023-10-26 03:15

Your docker-compose looks overly complicated..

Here is mine.

        version: "3.7"
        networks:
          docknet:
                external: true
        services:
          guacamole:
                image: jwetzell/guacamole
                container_name: guacamole
                volumes:
                  - postgres:/config
                ports:
                  - 8080:8080
                networks:
                  docknet:
                        ipv4_address: 192.168.1.8
                restart: unless-stopped
        volumes:
          postgres:
                driver: local
        #default login is guacadmin/guacadmin

----------------------------------------------------------------------
lunakoa · 2023-10-26 04:00

I see others are trying to assist you, but if you decide to go native
instead of container, I may be able to assist.

I had problems with the contents in /etc/guacamole it was missing
stuff in extensions and lib