Customize Amazon WorkSpaces Login - amazon-web-services

Need suggestions how to automate user login to Amazon WorkSpaces from Ubuntu 18.04 desktops.
We're a small Engineering shop of 20 users all using Ubuntu 18.04 desktops to connect to Amazon WorkSpaces (mix of Windows and Linux). Since there isn't a WorkSpaces client yet for Linux, we use the Windows version over WINE.
Our Intranet portal allows for somewhat automated login process where clicking a Connect button does 4 things:
Use the URI syntax workspaces://username#registrationcode to launch WorkSpaces Client.
Display the username, registration code, and disposable password in the Intranet page.
Populate Username and Registration Code in the WorkSpaces Client.
Copy password to clipboard.
Details in https://docs.aws.amazon.com/workspaces/latest/adminguide/customize-workspaces-user-login.html
User would still need to copy password from Intranet page and paste to WorkSpaces Client to complete login. We're trying to eliminate this step as users are in & out of WorkSpaces multiple times a day.
I'm considering zenity but unsure if this is the correct approach.
Please suggest options in Ubuntu 18.04 to automate auto-pasting password to WorkSpaces Client.

There is a native Linux Client https://clients.amazonworkspaces.com/linux-install.html and it looks promising. I'm just trying to get it going myself and can log in but I'm getting an error connecting to the desktop. It might be the Ubuntu image we're using.

Related

Rstudio server on Google Cloud without adding another user?

I am trying to run the Rstudio Server on a virtual Instance running Ubuntu on Google Cloud. Given that by default, a user on google cloud does not have a sudo password on Google Cloud, connecting to the server with username/password is not directly available.
Several tutorials (see tuto 1, tuto2 and tuto 3) suggest creating a new user, which will come with username/password, hence allowing to use standard username/password with Rstudio Server. This solution raises however several issues, like access/write permission, different R package folder, difficulties to connect to new user, etc.
Is there a way to connect to the Rstudio server without creating a new user? I guess a possible way would be to add a password to the default user in Google Cloud, although this seems also difficult per se (old thread on this)?
Thanks!

avoiding two step verification to https://sellercentral.amazon.com

I have a Selenium-python script which automatically logs in to https://sellercentral.amazon.com and downloads the report.
Tools used:
Ubuntu Server 14.04 LTS (Azure VM)
Xvfb(To run the firefox in headless mode)
Firefox 51.0.0
Selenium
This script was running perfectly as I have to provide only username and password to log in to Amazon Seller Central website.
From 1st Nov 2017, Amazon Seller Central has introduced two step verification where we get a code text on registered device after log in which we have to enter in given text box.
Here, we have option to add the device as trusted device so from next login we don't have to verify using verification code.
I have added this machine as trusted device by manually login to Amazon Seller central so my script will not have to ask for verification code.
But, I can see when I run the script after login I get the verification code notification.
So, Amazon Seller Central is treating it as a new device and asking for verify the login. But when I try to login to Amazon Seller Central website manually it is not asking to verify the login.
I am not sure what is going wrong. Any suggestion would be appreciated. Thanks.

Unable to install apps in mobile using WSO2 Iot Server 3.1.0

I have installed WSO2 IoT server 3.1.0. The server is running successfully. I am able to log in. I have created few apps in publisher and published them. When I access the app store from my android device. I am not able to install these apps.
Picture 1:
Picture 2:
Problem :
When I click on the "NEXT" button , nothing happens. And app is not downloaded.
CheckList:
User have access to installing the apps.
Device is successfully enrolled with the IoT server.
Same credentials are being used to accessing the app store as for enrolling the device.
Questions:
Do WSo2 APP manager and devicemgt solution are pre integrated in IoT server or do I have to do it manually?
If these services are pre-configured then how can I make sure that it is correctly configured?
Will a list of enrolled devices is shown, when a user clicks on install?
IF someone can give some insights that would be much helpful.

XenApp on VirtualBox?

I would like to deploy an Application using XenApp on a linux server. Is it possible to do this via virtual box on a remote linux machine?
So far I have installed virtual box on a centos based linux machine.
I installed a Windows 2008 R2 Server virtual machine.
I then tried to install XenApp on the windows 2008 server.
After updating the windows 2008 server with the latest stuff and adding .net 3.5 and sql server express I got XenApp installed.
I am stuck at the point of deploying the Single Sign-On service. It wants a "UNC path to the central store of the citricl signle sign on". Does anyone know how to set that up?
I don't have a domain controller, nor do I have active directory installed. Do I need those things? I was really hoping to avoid that.
What does XenApp require? I kind of figured it would be plug and play but it doesn't appear that way and the installation instructions are very vague about system requirements.
Thanks
Single Sign-On is not required for XenApp.
From the documentation
Citrix Single Sign-on (formerly Citrix Password Manager) provides password security and single sign-on access to Windows, Web, and terminal emulator applications running in the Citrix environment as well as applications running on the desktop. Users authenticate once and Single Sign-on does the rest, automatically logging on to password-protected information systems, enforcing password policies, monitoring all password-related events, and even automating user tasks, including password changes.
Basically: SSO needs a place to put the Central Password Store.
Just give it a path to a network share that all XenApp servers can access. If you're using a single machine; create a local network share and point to it using UNC
\\localhost\SSO_Store

How to pass login and password data for a web app to a desktop application without causing any security risks

So I want to do the following:
A person registers online and selects their login and password for a desktop and web application (same login and password for both applications)
They then download the desktop application (written in C++ with Qt as it's cross platform)
Then the login and password is automatically passed to the desktop application without the person needing to enter this data. The login and password is used to authenticate with the server.
Each version of the desktop application needs to be individually coded with the person's login and password based on the fact that they signed up on the web page.
So here is a more simple explanation:
1. The user signs up on the web site and choose login\password
2. The user download desktop client on his computer
3. The user runs desktop client (C++ binary) and it asks for a login/password from the step
I would like that software fill in login/password automatically on step 3 for the first time. Is it possible? How would it be done without security risks?
The main problem is, that anyone could execute the program and gain access to a user account. I would suggest using a one-time login for first authentification with random tokens and after the first start, get the user/password information through an ssl-connection. After that delete your one-time login token and replace it with the actual login.
I don't really know whether you're asking for precise code examples or just want to have a basic concept... But anyway, storing login-data in the application itself is a security risk.
Have you look at HTTP Authentication?
I do not fully understand the download process of the QT app, but, if you use a Basic/Digest Authentication on your web server, propagating the authenticate token will be easy and safe.
Basic use a 64 base encoding, Digest a MD5 hashing. A lot of library implements those steps out there (Spring Security and Shiro in the Java world).
I saw two ways:
the server can provide a user with unique link for downloading installation package. The server patches that package by unique one-time password. So client will be able to login for a first time
the browser collects some information about a user's computer. For example, IP, MAC, OS Version, etc. Then it calulate digital sign of the computer based on these data. The C++ binary do the same. You can use that digital sign as one-time password.