--- Notes for GUACAMOLE ---
---ReStart httpd, tomcat, guacd ---
/etc/init.d/guacd stop
/etc/init.d/init.tomcat stop
systemctl stop httpd
systemctl stop mysqld
ps -ef |egrep 'guacd|httpd|tomcat|mysqld'  |egrep -v grep
   
   
systemctl start mysqld
systemctl status mysqld
   
systemctl start httpd
systemctl status httpd.service
  
/etc/init.d/init.tomcat start
  
/etc/init.d/guacd start
/etc/init.d/guacd status
  
 netstat -tupan|grep 22   ### SSH
 netstat -tupan|grep 443  ### HTTPS
 netstat -tupan|grep 3306 ### MYSQL
 netstat -tupan|grep 3389 ### RDP
 netstat -tupan|grep 5901 ### VNC
 netstat -tupan|grep 4822 ### GUACD
 netstat -tupan|grep 8080 ### TOMCAT
 netstat -tupan|grep 8443 ### TOMCATS

/var/log/tomcat/localhost_access_log.<date>
/var/log/messages 
   
LOG Entries  for TOMCAT
/etc/tomcat/logging.properties

http://guacamole.apache.org/doc/0.8.3/gug/mysql-auth.html

Check Links:
http://guacamole.binghamton.edu
https://guacamole.binghamton.edu:8080
https://guacamole.binghamton.edu:8080/guacamole-0.9.14/#/

--- Make a hash  for user-mapping.xml ---
  1.  keytool -genkey -v -alias binghamton -keystore binghamton.p12
echo -n cjlis9a1 | md5sum
1184f81c6c24b3ce7a0559dc64645daf  -


--- KEYSTORE for GUACAMOLE ---
  1.  keytool -genkey -v -alias binghamton -keystore binghamton.p12
  2.  keytool -delete -alias binghamton -keystore binghamton.p12
  3.  keytool -list -v -keystore  binghamton.p12
  4.  cat binghamton.crt binghamton.key DigiCertCA.crt  > binghamton.pem
  5.  openssl pkcs12 -export -in binghamton.pem -inkey binghamton.key -out binghamton.p12
  6.  keytool -importkeystore -srckeystore binghamton.p12 -srcstoretype PKCS12 -destkeystore binghamton.jks -deststoretype JKS
  7.  keytool -importkeystore -srckeystore binghamton.jks -destkeystore binghamton.jks -deststoretype pkcs12


ONE
keytool -genkey -v -alias binghamton -keystore binghamton.p12
Enter keystore password:  
Re-enter new password: 
What is your first and last name?
  [Unknown]:  Craig Houck
What is the name of your organizational unit?
  [Unknown]:  Systems
What is the name of your organization?
  [Unknown]:  Binghamton University
What is the name of your City or Locality?
  [Unknown]:  Binghamton    
What is the name of your State or Province?
  [Unknown]:  NY
What is the two-letter country code for this unit?
  [Unknown]:  US
Is CN=Craig Houck, OU=Systems, O=Binghamton University, L=Binghamton, ST=NY, C=US correct?
  [no]:  yes

Generating 2,048 bit DSA key pair and self-signed certificate (SHA256withDSA) with a validity of 90 days
	for: CN=Craig Houck, OU=Systems, O=Binghamton University, L=Binghamton, ST=NY, C=US
Enter key password for 
	(RETURN if same as keystore password):  
[Storing binghamton.p12]

Warning:
The JKS keystore uses a proprietary format. It is recommended to migrate to PKCS12 which is an industry standard format using "keytool -importkeystore -srckeystore binghamton.p12 -destkeystore binghamton.p12 -deststoretype pkcs12".
TWO
keytool -delete -alias binghamton -keystore binghamton.p12
Enter keystore password:  
keytool error: java.io.IOException: Keystore was tampered with, or password was incorrect
[root@guacamole ssl]# keytool -delete -alias binghamton -keystore binghamton.p12
Enter keystore password:  
THREE
keytool -list -v -keystore  binghamton.p12
Enter keystore password:  
Keystore type: jks
Keystore provider: SUN

Your keystore contains 0 entries
FOUR
cat binghamton.crt binghamton.key DigiCertCA.crt  > binghamton.pem
FIVE
openssl pkcs12 -export -in binghamton.pem -inkey binghamton.key -out binghamton.p12
Enter Export Password:
Verifying - Enter Export Password:
SIX
keytool -importkeystore -srckeystore binghamton.p12 -srcstoretype PKCS12 -destkeystore binghamton.jks -deststoretype JKS
Importing keystore binghamton.p12 to binghamton.jks...
Enter destination keystore password:  
Re-enter new password: 
Enter source keystore password:  
Entry for alias 1 successfully imported.
Import command completed:  1 entries successfully imported, 0 entries failed or cancelled

Warning:
The JKS keystore uses a proprietary format. It is recommended to migrate to PKCS12 which is an industry standard format using "keytool -importkeystore -srckeystore binghamton.jks -destkeystore binghamton.jks -deststoretype pkcs12".
SEVEN
keytool -importkeystore -srckeystore binghamton.p12 -srcstoretype PKCS12 -destkeystore binghamton.jks -deststoretype JKS
Importing keystore binghamton.p12 to binghamton.jks...
Enter destination keystore password:  
Re-enter new password: 
Enter source keystore password:  
Entry for alias 1 successfully imported.
Import command completed:  1 entries successfully imported, 0 entries failed or cancelled

Warning:
The JKS keystore uses a proprietary format. It is recommended to migrate to PKCS12 which is an industry standard format using "keytool -importkeystore -srckeystore binghamton.jks -destkeystore binghamton.jks -deststoretype pkcs12".
[root@guacamole ssl]# keytool -importkeystore -srckeystore binghamton.jks -destkeystore binghamton.jks -deststoretype pkcs12
Enter source keystore password:  
Entry for alias 1 successfully imported.
Import command completed:  1 entries successfully imported, 0 entries failed or cancelled

Warning:
Migrated "binghamton.jks" to Non JKS/JCEKS. The JKS keystore is backed up as "binghamton.jks.old2".



--- Entries in /etc/tomcat/server.xml for GUACAMOLE ---
    <Connector port="8080" protocol="org.apache.coyote.http11.Http11Protocol"
               connectionTimeout="20000"
               SSLEnabled="true" scheme="https"
               keystoreFile="/usr/share/tomcat/ssl/binghamton.jks" keystorePass="********" clientAuth="false" sslProtocol="TLS"
               Server=" "
               redirectPort="8443"/>
               
--- /etc/guacamole ---
restartboth
statusboth
cat URL


--- /usr/share/tomcat/ssl ---
check-8443
Check-Key

 netstat -tupan|grep 8080
 netstat -tupan|grep 443
 netstat -tupan|grep 8443
 netstat -tupan|grep 3306
 netstat -tupan|grep 4822