CentOS 安裝 Apache Guacamole 實施居家辦公 輕鬆又容易
疫情的影響許多公司開始進行居家辦公演練避免爆發整個公司停擺，Apache Guacamole 這套安裝可以透過線上WEB 進行RDP、VNC、SSH 進行統一遠端遙控公司電腦，對很多操作困難的使用者很方便，只需要網址並登入帳號密碼 就可以直接登入公司電腦不須而外相關設定。
手機、平板、筆電 只要有安裝Google Chrome瀏覽器就可以直接遠端遙控電腦速度操作上相當快速方便
操作畫面
1.安裝完CentOS-7-x86_64-DVD-1611 版本
2.安裝 OpenSSH Server 方便遠端安裝
sudo yum install openssh openssh-server sudo systemctl enable sshd.service sudo firewall-cmd --permanent --zone=public --add-port=22/tcp (設定防火牆允許此port) sudo firewall-cmd --reload 重新載入防火牆設定
3.下載安裝相關套件
mkdir /workdir && cd /workdir 建立一個workdir資料夾yum -y install wget libpng-devel libjpeg-turbo-devel cairo-devel uuid-devel epel-release maven tomcatyum -y install freerdp-devel pango-devel libssh2-devel libtelnet-devel libvncserver-devel yum -y install pulseaudio-libs-devel openssl-devel libvorbis-devel libwebp-devel terminus-fontssystemctl enable tomcatCentos沒有FFmpeg套件，需要第三方的yum下載安裝
rpm --import http://li.nux.ro/download/nux/RPM-GPG-KEY-nux.rorpm -Uvh http://li.nux.ro/download/nux/dextop/el7/x86_64/nux-dextop-release-0-5.el7.nux.noarch.rpmyum -y install ffmpeg-devel
yum -y groupinstall "Development Tools" 下載安裝編譯工具----------------------------------------------------------------------------------
---------------------------------------------------------------------------------
4.下載&安裝guacamole-server-1.1.0
wget http://archive.apache.org/dist/guacamole/1.1.0/source/guacamole-server-1.1.0.tar.gz
tar xzvf guacamole-server-1.1.0.tar.gzcd guacamole-server-1.1.0./configure --with-init-dir=/etc/init.d
要確認紅框處是否套件都安裝成功
如果遇到不成功表示版本落差關係 建議搭配guacamole 1.1.0
5.編譯並安裝
makemake installldconfigsystemctl enable guacd
7.下載&安裝guacamole-client-1.1.0
wget http://ftp.mirror.tw/pub/apache/guacamole/1.1.0/binary/guacamole-1.1.0.war
cp guacamole-1.1.0.war /var/lib/tomcat/webapps/guacamole.war 將WAR文件複製到Tomcat下
------------------------------------------------------------------------------ 8.安裝 MySQL server
yum -y install mariadb-serversystemctl enable mariadbsystemctl start mariadb
Set root password? [Y/n] Y New password: Re-enter new password: Remove anonymous users? [Y/n] Y Disallow root login remotely? [Y/n] Y Remove test database and access to it? [Y/n] Y Reload privilege tables now? [Y/n] Y 10.進入MySQL 設定建立資料庫 mysql -u root -p Enter password:(輸入自行密碼) MariaDB [(none)]> CREATE DATABASE guacamole_db; MariaDB [(none)]> CREATE USER 'guacamole_user'@'localhost' IDENTIFIED BY 'guacamole_password'; MariaDB [(none)]> GRANT SELECT,INSERT,UPDATE,DELETE ON guacamole_db.* TO 'guacamole_user'@'localhost'; MariaDB [(none)]> FLUSH PRIVILEGES; MariaDB [(none)]> quit
cd /workdir
wget http://archive.apache.org/dist/guacamole/1.1.0/binary/guacamole-auth-jdbc-1.1.0.tar.gz
tar xzvf guacamole-auth-jdbc-1.1.0.tar.gz
cd guacamole-auth-jdbc-1.1.0/mysql/schema/
cat *.sql | mysql -u root -p guacamole_db
cd /workdirmkdir -p /etc/guacamole/{extensions,lib}cat <<EOF > /etc/guacamole/guacamole.properties # Hostname and port of guacamole proxy guacd-hostname: localhost guacd-port: 4822 # MySQL properties mysql-hostname: localhost mysql-port: 3306 mysql-database: guacamole_db mysql-username: root mysql-password: XXXXXXXXX mysql-default-max-connections-per-user: 0 mysql-default-max-group-connections-per-user: 0 EOF
不使用資料庫方式--配置Guacamole-client
14.Guacamole & tomcat啟用自動啟動Guacamole預設認證方式由user-mapping.xml配置決定，可以使用資料庫、LDAP等其他方式進行驗證
預設配置目錄在/etc/guacamole，該目錄需要手動建立
mkdir /etc/guacamole
建立guacamole.properties文件
vi /etc/guacamole/guacamole.properties
內容如下:
# Hostname and port of guacamole proxy
guacd-hostname: localhost
guacd-port: 4822
enable-clipboard-integration: true
建立user-mapping.xml文件
vi /etc/guacamole/user-mapping.xml
內容如下:
<user-mapping>
<authorize username="guacadmin" password="guacadmin" >
<connection name="rdp1">
<protocol>rdp</protocol>
<param name="hostname">192.168.2.100</param>
<param name="port">3389</param>
<param name="username">user1</param>
<param name="password">12345678</param>
</connection>
<connection name="ssh1">
<protocol>ssh</protocol>
<param name="hostname">192.168.2.150</param>
<param name="port">22</param>
<param name="username">root</param>
<param name="password">blog.whsir.com</param>
<param name="color-scheme">white-black</param>
<param name="enable-sftp">true</param>
</connection>
</authorize>
</user-mapping>
重啟tomcat
systemctl restart tomcat
systemctl start guacd systemctl start tomcat 15.設定防火牆 開啟8080 firewall-cmd --zone=public --add-port=8080/tcp --permanent firewall-cmd --reload setsebool -P httpd_can_network_connect 1 16.完成安裝 登入系統 http://guacamole_ip:8080/guacamole
帳號&密碼都是guacadmin 記得要改密碼!!!!
1人可控制多台遠端桌面
後台有歷史紀錄追蹤 以便稽核使用
RDP主機 設置方式
SSH 設置方式
後台還有很多相關設置方式 包括遠端錄製紀錄等等.....
CentOS-7-x86_64-DVD-1611 版本
guacamole 1.1.0
關鍵字:
#居家辦公遠端桌面 #Apache Guacamole #VPN辦公 #遠端連線軟體# CentOS #新冠病毒 #COVID-19 #武漢肺炎#Googl remote desktop #AnyDesk #TeamViewer 
留言
張貼留言