Create Guacamole users

Question

I have just set up Guacamole 0.9.9 with a MySQL user database and LDAP authentication and it all works flawlessly so far.

However, I want to be able to create new users and connections in the MySQL database from outside of Guacamole. Is there a way to use the API to perform these tasks?

All I'm reading about the API is creating a new web application which embeds remote connections.

Unfortunately not. We switched to a full VPN since additional requirements couldn't be satisfied by guacamole. — Mehrkat, Dec 05 '16 at 18:57
Anyone has come alright with this? I have the same question. I'm trying to implement that in asp.net core 2.1. Please help us! — PatsonLeaner, May 16 '19 at 10:58

score 2 · Answer 1 · answered Oct 14 '18 at 05:53

You can use the following MySQL commands in your code to create new users.

SET @salt = UNHEX(SHA2(UUID(), 256));
INSERT INTO guacamole_user (username, password_salt, password_hash, password_date) VALUES ('testuser', @salt, UNHEX(SHA2(CONCAT('testpass', HEX(@salt)), 256)), NOW());

score 1 · Answer 2 · answered Mar 12 '20 at 11:14

You can create users with Guacamole REST API.

Firstly you need create a token:

Endpoint:

POST {{baseURL}}/api/tokens

x-www-form-urlencoded:

username: guacadmin
password: guacadmin

Sample Response:

{
    "authToken": "8144B9B1EBAF73E8EDCE08EF5C145F49C1C9F563F13E21BF7A1CEC43E74011A4",
    "username": "guacadmin",
    "dataSource": "postgresql",
    "availableDataSources": [
        "postgresql",
        "postgresql-shared"
    ]
}

After then you can create a user with using the token.

Endpoint:

POST {{baseURL}}/api/session/data/{{dataSource}}/users?token={{authToken}}

Sample Request Body:

{
    "username": "testuser",
    "password": "password",
    "attributes":{
        "disabled":"",
        "expired":"",
        "access-window-start":"",
        "access-window-end":"",
        "valid-from":"",
        "valid-until":"",
        "timezone": ""
    }
}

I am not that into REST API and since our server is behind VPN I am stricted to Client based REST API TOOLs. I use httpie in WSL2 Ubuntu and was able to create a Token but have no Idea how second part has to be done. We are running guacamole 1.3 — MaKaNu, Oct 21 '21 at 15:32

Create Guacamole users

2 Answers2

Linked