{"action":"created","issue":{"url":"https://api.github.com/repos/opnsense/tools/issues/91","repository_url":"https://api.github.com/repos/opnsense/tools","labels_url":"https://api.github.com/repos/opnsense/tools/issues/91/labels{/name}","comments_url":"https://api.github.com/repos/opnsense/tools/issues/91/comments","events_url":"https://api.github.com/repos/opnsense/tools/issues/91/events","html_url":"https://github.com/opnsense/tools/issues/91","id":352832464,"node_id":"MDU6SXNzdWUzNTI4MzI0NjQ=","number":91,"title":"guacamole","user":{"login":"mimugmail","id":20438689,"node_id":"MDQ6VXNlcjIwNDM4Njg5","avatar_url":"https://avatars3.githubusercontent.com/u/20438689?v=4","gravatar_id":"","url":"https://api.github.com/users/mimugmail","html_url":"https://github.com/mimugmail","followers_url":"https://api.github.com/users/mimugmail/followers","following_url":"https://api.github.com/users/mimugmail/following{/other_user}","gists_url":"https://api.github.com/users/mimugmail/gists{/gist_id}","starred_url":"https://api.github.com/users/mimugmail/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mimugmail/subscriptions","organizations_url":"https://api.github.com/users/mimugmail/orgs","repos_url":"https://api.github.com/users/mimugmail/repos","events_url":"https://api.github.com/users/mimugmail/events{/privacy}","received_events_url":"https://api.github.com/users/mimugmail/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2018-08-22T07:23:25Z","updated_at":"2018-08-22T09:38:41Z","closed_at":null,"author_association":"MEMBER","body":"Some months ago I tested guacamole as a central mgmt tool for SSH access. \r\nIt could be used as a clientless HTML5 VPN but the dependencies are huge: java, tomcat, mysql.\r\n\r\nNonetheless .. we can use this as a start for a discussion to integrate it as a plugin?\r\n\r\n![image](https://user-images.githubusercontent.com/20438689/44448869-d3dad900-a5ec-11e8-996b-b79d035da840.png)\r\n\r\n\r\nAny opinions to this? "},"comment":{"url":"https://api.github.com/repos/opnsense/tools/issues/comments/414974242","html_url":"https://github.com/opnsense/tools/issues/91#issuecomment-414974242","issue_url":"https://api.github.com/repos/opnsense/tools/issues/91","id":414974242,"node_id":"MDEyOklzc3VlQ29tbWVudDQxNDk3NDI0Mg==","user":{"login":"ndejong","id":210474,"node_id":"MDQ6VXNlcjIxMDQ3NA==","avatar_url":"https://avatars2.githubusercontent.com/u/210474?v=4","gravatar_id":"","url":"https://api.github.com/users/ndejong","html_url":"https://github.com/ndejong","followers_url":"https://api.github.com/users/ndejong/followers","following_url":"https://api.github.com/users/ndejong/following{/other_user}","gists_url":"https://api.github.com/users/ndejong/gists{/gist_id}","starred_url":"https://api.github.com/users/ndejong/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ndejong/subscriptions","organizations_url":"https://api.github.com/users/ndejong/orgs","repos_url":"https://api.github.com/users/ndejong/repos","events_url":"https://api.github.com/users/ndejong/events{/privacy}","received_events_url":"https://api.github.com/users/ndejong/received_events","type":"User","site_admin":false},"created_at":"2018-08-22T09:38:41Z","updated_at":"2018-08-22T09:38:41Z","author_association":"NONE","body":"Had never heard of this, it's a remote-desktop gateway that provides a client interface via a HTML5 browser - for others that want to read up on it:-\r\n - https://guacamole.apache.org\r\n\r\nApparently it [builds on FreeBSD](https://guacamole.apache.org/releases/0.9.2/)\r\n> As of 0.9.2, Guacamole builds properly on FreeBSD and against the latest FreeRDP from git.\r\n\r\nThe documentation talks about a _lot_ of dependencies as @mimugmail mentioned:-\r\n - https://guacamole.apache.org/doc/gug/installing-guacamole.html\r\n\r\nTheir previous 0.9.1.x revision is available in the FreeBSD ports tree\r\n - https://www.freshports.org/net/guacamole-server/\r\n - https://www.freshports.org/www/guacamole-client/\r\n\r\nAs a network edge device, does the Guacamole functionality belong on OPNsense?  It does seem to fit into the definition of things some administrators might be willing to run at a network edge, but wow it is a heavy weight set of components to be adding on the firewall itself.\r\n\r\nPersonally I'd feel uncomfortable running this directly on a firewall via a publicly exposed port(s), I might consider it over an ssh-tunnel or VPN connection but if an ssh-tunnel or VPN connection is an option then why not just run the RDP session directly from my client machine?\r\n\r\nPerhaps you could describe scenarios where Guacamole provides access that is otherwise not possible?  I appreciate this question might sound silly or that the answer is \"obvious\" but there is something about your words \"tested guacamole as a central mgmt tool for SSH access\" that makes me believe there is another (much easier, and more secure) approach to addressing your remote-ssh access requirements.\r\n"}}
{"actor":{"display_login":"ndejong"}}