itiligent / Guacamole-Installer

Automated install of Gucamole with options for HTTPS reverse proxy, Active Directory integration, MFA, LetsEncrypt, dark theme, MySQL backup, email alerts & more.
GNU Affero General Public License v3.0
270 stars 49 forks source link

Script 1-setup.sh do not work (without sudo installed) #22

Closed RoSky7791 closed 1 year ago

RoSky7791 commented 1 year ago

I want to use your script in Debian 12. I also wanta reverse proxy using Let's Encrypt.

I added my user to sudo group with "usermod -aG sudo"

I made a tar -xf on https://github.com/itiligent/Guacamole-Install/archive/refs/tags/1.5.3.2.tar.gz

I made chmod +x 1-setup.sh && chmod +x 2-install-guacamole.sh && chmod +x 3-install-nginx.sh && chmod +x 4a-install-tls-self-signed-nginx.sh && chmod +x 4b-install-tls-letsencrypt-nginx.sh

When I configure let's Encrypt, after adding the email address, the script crashes

image

image It Does not find the commande.

Is it normal ?

RoSky7791 commented 1 year ago

To complete my issue, at the begenning of executing 1-setup.sh, i have some missing commands image

itiligent commented 1 year ago

The script installs Guacamole with Lets Encrypt just fine on a fresh Debian 12 install... see my below test output.

The script lines referenced in your errors seem to relate to a problems with sudo at your end.

image

RoSky7791 commented 1 year ago

Thanks for your reply !

I am using a fresh ISO of Debian 12 last version (in a VM using a bridge network adaptator). Moreover, even if I keep default parameters when using your script (without using a reverse proxy, Let's encrypt, etc.), your script still crashes.

I do have sudo up-to-date

RoSky7791 commented 1 year ago

May can you tell me every commands you used before executing your script please ?

Thank you very much

itiligent commented 1 year ago

There are no commands to issue other than running the script from the pasted link. The only requirement is to be logged in with a user that has sudo rights (In order to make a one-step installer, the script has to install in a number of security contexts and keep many shell enviroment variables common between all scripts - so we install as a $SUDO_USER

confirm that the sudo package is installed. create a brand new user, then add that user to the sudoers group. In a FRESH shell, login as the new user and run the script from the paste link again. https://phoenixnap.com/kb/how-to-create-sudo-user-on-ubuntu

RoSky7791 commented 1 year ago

The script worked and installed everything. But I have a new Issue : image It seems that I have missing tomcat 9 packets. When I want to go on my https://..... or http://1.2.3.4:8080/guacamole, it does not work

itiligent commented 1 year ago

For you new issue I also need to know the install choices you made... for example the http(s) links you reference wont work if you set up self signed TLS, LetsEncrypt or just Nginx on port 80. This is by design as the firewall locks this side channel down so gucamole cant be accessed witout the proxy. Another possibiltiy is to check if your firewall requires NAT reflection configured to reach the guac website from your network location.

If you installed Nginx with Letsencrypt, the URL is the public DNS name you assigned it (your firewall also needs to support nat traversal if you are accssing a public ip address on your router from a NAT private IP behind the same firewall) If you installed Nginx without any TLS, the url is just http://1.2.3.4 If you installed Ngonx with self signed, the url is https://1.2.3.4

A public IP in use will likely mean NAT reflection issues.

Look to descriptions on screen or in script comments to undertand what you are running . I suspect it is all working fine but you dont fully understand how the the Guac application is assembled and operates with a proxy/NAT network setup