[GUACAMOLE-641] Support storage of sensitive data within key vaults

• Type: New Feature
• Status: Closed
• Priority: Minor
• Resolution: Done
• Fix Version/s: 1.5.0
• Component/s: Documentation, guacamole-client
• Assignee: Mike Jumper
• Reporter: Mike Jumper
• Created: 08/Oct/18 01:28
• Updated: 13/Feb/23 21:43
• Resolved: 13/Feb/23 21:43

Description

Guacamole currently provides multiple storage mechanisms for connection data, but generally relies on the security of the server(s) hosting those mechanisms to guard sensitive data. The same goes for the contents of guacamole.properties. With the widespread availability of vault services providing secure storage and retrieval of sensitive data, it would be useful if Guacamole could dynamically retrieve sensitive data from these vaults, including:

• Sensitive connection data that may otherwise be stored directly in a database.
• Sensitive configuration information that may otherwise need to be stored directly in guacamole.properties.

Issue Links

• is duplicated by: GUACAMOLE-1244 Provide secure way to add MySQL password in guacamole configuration file
• is duplicated by: GUACAMOLE-1162 security in guacamole_user_attribute
• is related to: GUACAMOLE-581 Implement Credential Profiles
• is related to: GUACAMOLE-558 Password encryption
• relates to: GUACAMOLE-524 Allow LDAP attributes to be used as token