This code is terrible, but it works with Guacamole 1.3.0.
This is not a "python project" structured repo, it's just the guacamole file I created to get the job done, that sits within our local private repo that handles this stuff.
FYI, you should take a look at: https://github.com/pschmitt/guacapy if it meets your needs, it will almost certainly be maintained better than this code.
STATUS: we are using it internally for a development project, we are unlikely to make this a proper "python project" @ pypi ourselves. That said, PR's are very welcome and if you create that stuff, we are probably happy to use it. :)
There are docstring docs for basically everything, there are bound to be bugs and issues.
To use this code, just copy the guacamole.py file into your project, and then start a Guac() object, and call guac with information as needed.
This requires the requests library(https://docs.python-requests.org/en/master/) and python3 (tested against Python 3.6.9).
The user permissions required in Guacamole for the 'apiuser':
Administer system:
Create new users:
Create new user groups:
Create new connections:
Create new connection groups:
example, check for and then add a connection and user if not found. Note, this example needs formatting, but I am too lazy at the moment. send a PR.
from guacamole import Guac
import pprint
guac = Guac(url='https://127.0.0.1:8080/guacamole/')
#authenticate to Guacamole and get a token.
guac.auth('apiuser','apipassword')
# setup user information.
user = 'tootie'
user_password = 'SUPERSECRETPASSWORDHERE'
first_name = 'Tootie'
last_name = 'Jones'
user_id = '1234'
guac_user = guac.userDetails(user)
if not guac_user:
# Guac user does not exist, add it
connectionData = {
'parentIdentifier': 'ROOT',
'name': user,
'protocol': 'rdp',
'parameters': {
'port': '3389',
'ignore-cert': 'true',
'hostname': '127.0.0.1',
'password': user_password,
'username': user,
'security': 'rdp'
},
'attributes': {
'guacd-encryption': None,
'failover-only': None,
'weight': None,
'max-connections': None,
'guacd-hostname': None,
'guacd-port': None,
'max-connections-per-user': None
}
}
# add connection first.
connectionData = guac.newConnection(connectionData)
pprint.pprint(connectionData)
#get connection ID so we can give permissions to connection after we create user.
connectionID = connectionData['identifier']
userData = {
"username":user,
"password":user_password,
"attributes":{
"disabled":"",
"expired":"",
"access-window-start":"",
"access-window-end":"",
"valid-from":"",
"valid-until":"",
"timezone":None,
"guac-full-name":"%s %s" % (first_name, last_name),
"guac-email-address":user_email,
"guac-organizational-role":user_id
}
}
pprint.pprint(userData))
userData = guac.addUser(userData)
print("giving %s permission to %s" % (user,connectionID))
assert guac.givePermissionToConnection(user,connectionID)
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent