googlecloudplatform / iap-desktop

IAP Desktop is a Windows application that provides zero-trust Remote Desktop and SSH access to Linux and Windows VMs on Google Cloud.

IAP Desktop

IAP Desktop is a Remote Desktop and SSH client that lets you connect to your Google Cloud VM instances from anywhere.

_{x86 (32-bit) | x64 (64-bit). For Windows 11/10/8.1. No admin rights required.}

Access Linux and Windows VMs from anywhere

IAP Desktop uses Identity-Aware-Proxy (IAP) to connect to VM instances so that you can:

• Connect to VM instances that don’t have a public IP address
• Connect from anywhere over the internet

Together, IAP Desktop and Identity-Aware-Proxy (IAP) let you apply zero-trust security to your VMs:

• Apply fine-grained access controls that define who can access which VM
• Use access levels to restrict access by time or location
• Use BeycondCorp Enterprise to limit access to trusted devices

The application automatically manages IAP TCP tunnels for you, and protects them so that no other users or programs can access them.

Connect to Windows VMs with Remote Desktop

IAP Desktop is a full-featured Remote Desktop client that lets you:

• Use multiple Remote Desktop sessions at the same time
• Switch between full-screen and tabbed Remote Desktop sessions
• Upload and download files over SFTP

To help you authenticate to Windows VMs, IAP Desktop can:

• Automatically generate Windows credentials by using the Compute Engine guest agent environment
• Encrypt and store your Windows credentials locally

▶️ Show screencast

Connect to Linux VMs with SSH

IAP Desktop includes an SSH client and terminal so that you can:

• Use multiple SSH sessions in parallel, and switch between them using tabs
• Upload and download files using SFTP

To help you authenticate to Linux VMs, IAP Desktop can:

• Automatically create and publish SSH keys to OS Login or metadata
• Use OS Login 2-factor authentication
• Store our SSH keys locally using Windows CNG

▶️ Show screencast

Manage VMs across projects

IAP Desktop gives you a consolidated view of your VMs and lets you:

• Connect to VMs across multiple projects and Google Cloud organizations
• View diagnostics information such as logs and serial port output
• Remotely join a VM to Active Directory
• Perform other common operations such as starting or stopping VMs

▶️ Show screencast

Connect to SQL Server and other server applications

You can use IAP Desktop to let client applications connect to your Google Cloud VMs through IAP: Right-click a VM, select the application to launch, and IAP Desktop automatically connects the application through an IAP TCP forwarding tunnel.

Supported client applications include:

• SQL Server Management Studio (supporting Windows authentication and SQL Server authentication)
• MySQL Shell
• Chrome (to connect to management portals and other internal websites)
• Custom applications

Learn more about IAP Desktop

Get started

• Install IAP Desktop
• Configure IAP in your project
• Connect to a Windows VM
• Connect to a Linux VM
• Connect to SQL Server
• Connect to VMs from within a web browser

Use the tool windows

• Instance properties
• Event log
• Serial port output

Customize IAP Desktop

• Create profiles

Administer IAP Desktop

• Use group policies
• Troubleshoot common issues

IAP Desktop is an open-source project developed and maintained by the Google Cloud Solutions Architects team. The project is not an officially supported Google product.

All files in this repository are under the Apache License, Version 2.0 unless noted otherwise.

iap-desktop's Issues

Customers RDP keeps kicking him off - unknown error code 3336

Expected behavior:

• Step 1
• Step 2
• ...

Observed behavior:

• Step 1
• Step 2
• ...

Installed version: 2.0.86.0
.NET Version: 4.0.30319.42000
OS Version: Microsoft Windows NT 6.2.9200.0

Feature request : record user's sessions

Hi,

For security reasons, one need to record the users's sessions.

It would be great if we could setup record sessions (.mp4 for Windows, text file for linux) on a GCS with the userID used to open the session as metadata or in the file name.

Combined with our Citrix platform, one can build a very effective bastion

Thanks for you consideration
Regards
MLD

Issue 40 follow up, MacOS native support

This is a follow up on Issue #40, which was addressed with a workaround and closed, but no real fix.

The workaround above is helpful, however this is far from ideal for non-technical users who are accessing VDI sessions over RDP from MacOS clients.

We do this at scale with hundreds of users, and hove clients now doing the same, and this is a significant pain point. [email protected] can speak to the scale of our deployment and the need for this to be addressed on both Intel and M1 based architectures.

IAP disconnects the VM on selecting Full Screen

Expected behavior:

• IAP connects to VM
• We select Full Screen using Desktop>Fullscreen
• IAP starts working in Full Screen Mode

Observed behavior:

• IAP connects to VM
• We select Full Screen using Desktop>Fullscreen
• IAP disconnects the VM everytime I have tried with different versions. Earlier I was using 2.21, tried installing 2.11 still the same error.
  

Installed version: 2.11.481.0
.NET Version: 4.8.4300.0
OS Version: Microsoft Windows NT 10.0.19042.0

IAP Desktop - Window Resize issue (Disconnection)

Expected behavior:
On open a virtual machine inside a project using IAP, if i want to resize the window of the VM, i'm facing a disconnection.

Observed behavior:
Every moment when i'm resizing any window.

Installed version: 2.0.86.0
.NET Version: 4.0.30319.42000
OS Version: Microsoft Windows NT 6.2.9200.0

How to install it on Linux?

I know it is not available for Linux but is there any workaround?

My VM does not have public IP address (and will not add public address).
Hence is there is a workaround for Linux to use VM which doesn't have public IP?

Custom RDP connection (feature request)

I understand if this is a bit out of scope for this project but as Remote Desktop Connection manager by Microsoft has been discontinued due to security issues, it would be quite nice if we could also add "standard" RDP connections in IAP Desktop to access servers that are not on GCP. thx

Multiple monitor support

I know this is possible with the RDP client, but does the library iap-desktop uses support it?

Not able to access any VM in a project

I am not able to access any of the VM in a project. The same is accessible via cloud SDK in command prompt. Getting error as

Installed version: 2.13.549.0
.NET Version: 4.8.4300.0
OS Version: Microsoft Windows NT 10.0.18363.0

Add support for OS Login MFA

Adding support for OS Login MFA would allow companies to use this tool as a standard way of accessing servers without the need to use gcloud or another method.
Currently when you try to access a server with MFA enabled, you get a "not supported message".

Support for xRDP

I was wondering if the use case for xRDP has been considered?

This would allow GUI access to Linux as well as Windows servers, assuming everything is set up correctly on the server side.

I am planning to test this scenario with various Linux distros with IAP desktop. I'll share the results when I am done.

IndexOutOfRangeException thrown in VtNetCore

When I was using IAP Desktop to connect to a GCE instance via SSH, the following error occurred.

System.IndexOutOfRangeException: Buffer does not contain enough data to process request
   場所 VtNetCore.XTermParser.XTermInputBuffer.PeekAhead(Int32 skip)
   場所 VtNetCore.XTermParser.DataConsumer.Push(Byte[] data)
   場所 Google.Solutions.IapDesktop.Extensions.Shell.Controls.VirtualTerminal.ReceiveData(String text)
   場所 Google.Solutions.IapDesktop.Extensions.Shell.Views.SshTerminal.SshTerminalPane.OnDataReceivedFromServerAsync(Object sender, DataReceivedEventArgs args)
   場所 Google.Solutions.IapDesktop.Extensions.Shell.Views.SshTerminal.SshTerminalPaneViewModel.<>c__DisplayClass38_1.<ConnectAsync>b__6()

https://github.com/darrenstarr/VtNetCore/blob/060a72f074aafb8f8720f41616727a69755dade7/VtNetCore/XTermParser/XTermInputBuffer.cs#L133

IAP Desktop Version 2.17.616.0
.NET 4.8.4300.0

From RDCMan I don't see compute engines that have been created using an old Windows image (guestOSFeatures are missing)

Hi, trying out the plugin I found that it only found one of my 10-20 servers in each project.
I suspect that the plugin matches the image name to "windows" or something like that, is that correct? I get the servers created from scratch but not the ones that have been created from a (custom) image not starting with the name "windows".

Can't Fullscreen, then crash

Expected behavior:

• Step 1: When I run RDP (windows server 2019) and start with the F11 function, then it crash
• Step 2
• ...

Observed behavior:

• Step 1: can enable Fullscreen function
• Step 2
• ...

Installed version: 2.8.352.0
.NET Version: 4.8.4250.0
OS Version: Microsoft Windows NT 10.0.19041.0

Return (Enter) does not work after sudo su - <other user>

Expected behavior:

• Step 1: Within the SSH session switch from own named user to another user. sudo su - wwdadm
• Step 2: Execute command, for example cd /usr/sap and hit Enter button. Command gets executed.
• ...

Observed behavior:

• Step 1: Within the SSH session switch from own named user to another user. sudo su - wwdadm
• Step 2: Execute command, for example cd /usr/sap and hit Enter button. Nothing happens.
• ...

Installed version: 2.15.579.0
.NET Version: 4.7.3740.0
OS Version: Microsoft Windows NT 10.0.17763.0

Windows resize in IAP on maximize

Love this utility - thank you!

When in IAP window if you restore down, then maximize IAP again, open windows on the VM are resized. Is there any way to prevent this from happening while in IAP (vs. maximizing to RDP)?

tmux displays only blank screen

When I log into a Debian 10 VM using SSH and run tmux, I see only a black screen with a cursor in the top left. Typing doesn't appear to have any effect, except for ctrl-d, which exits tmux and drops back to the command line.

Note that tmux on the same VM works well when using the browser based SSH tool in the cloud console.

Support for Outbound Proxy Authentication

Are there plans to support proxy authentication? In a scenario where outbound internet access is via a corporate outbound proxy, some proxies require authentication. When using IAP desktop, after the confirm your choices option from your Google account (For the permissions for IAP Desktop), IAP desktop then comes back with a 407 error stating:

An error occurred while sending this request:

WebException:
The remote server returned an error: (407) Proxy Authentication Required

Tests from other proxies not requiring authentication work without issue.

Unable to authenticate IAP

I am trying to use IAP Desktop to log into my GCP instances. However, when I am trying to log into the IAP desktop application using my Google account, it is not allowing me to authenticate at all. Ideally when you click on "Sign in with Google" it should pop open a browser window to authenticate. But in my case, it gives error as "Authorization Failed: network location cannot be reached". Just to be clear, the browser is not at all opening to complete the sign in steps.

Authentication error when trying to connect to a VM. Error code 519

Whenever I try to connect to a VM by IAP I'm getting the authentication error and saying that the credentials supplied to the package were not recognized (see the screenshots below).

I tried to create a TCP forwarding but with no success either. I disabled all firewalls in my local as well.
Other co-workers inside the same network+proxy and permissions are able to connect normally using their computers. It happens probably only inside my computer (we tried with different users on my computer and no success as well)

However, if I try to connect by Windows Remote Desktop Connection application with this tunnel then I manage to connect to the VM.
But with IAP Desktop I'm still getting the error.

Any insights on that?

Thank you!

Google cloud project giving null when I try to refresh

Hello,

I set up the project as a procedure and it worked for a few weeks. Then, when I needed to refresh the instances in the project, it gives me the following error

System.ArgumentNullException: Value cannot be null. Parameter name: source at System.Linq.Enumerable.Where[TSource](IEnumerable1 source, Func2 predicate) at Google.Solutions.CloudIap.Plugin.Integration.ComputeEngineAdapter.IsWindowsInstanceByGuestOsFeature(Instance instance) at Google.Solutions.CloudIap.Plugin.Gui.PluginEventHandler.<>c.<OnLoadServersClick>b__10_3(Instance i) at System.Linq.Enumerable.WhereSelectEnumerableIterator2.MoveNext()
at System.Collections.Generic.HashSet1.UnionWith(IEnumerable1 other)
at System.Collections.Generic.HashSet1..ctor(IEnumerable1 collection, IEqualityComparer1 comparer) at Google.Solutions.CloudIap.Plugin.Gui.PluginEventHandler.<>c__DisplayClass10_0.<OnLoadServersClick>b__2(IEnumerable1 allInstances)
at Google.Solutions.CloudIap.Plugin.Gui.WaitDialog.<>c__DisplayClass13_21.<Run>b__1()

I honestly have no idea what is causing this, so if you could explain it I would appreciate it.

IAP-Desktop 402 Error

We would like to use the IAP-Desktop to connect from a corporate network to Windows machines running on the GCP.
Currently we are still facing issues setting up a proper connection. Even after adding proxy configuration the following error message occurs:
"(402) Zahlung erforderlich" / (Payment required)

Do you know, what exactly causes this error message and how to fix it?

Extract from the serial port logging:
...
xxx GCEGuestAgent: GCE Agent Started (version 20200813.01)
xxx OSConfigAgent Info: OSConfig Agent (version 20200901.01) started.
xxx GCEMetadataScripts: Starting startup scripts (version 20200129.00).
xxx GCEMetadataScripts: No startup scripts to run.
... (the connection seems to be working somehow)

Crash message when trying to connect (but connect is successful)

We get this error when doing "Connect server via IAP Cloud". It still connects but there is a .net error dialog visible.
************* Exception Text *************
System.NullReferenceException: Object reference not set to an instance of an object.
at RdcMan.ClientPanel.RecordLastFocusedServerLabel(ServerLabel label)
at RdcMan.MainForm.RecordLastFocusedServerLabel(ServerLabel label)
at RdcMan.ServerLabel.OnLostFocus(EventArgs e)
at System.Windows.Forms.Control.WmKillFocus(Message& m)
at System.Windows.Forms.Control.WndProc(Message& m)
at System.Windows.Forms.ButtonBase.WndProc(Message& m)
at System.Windows.Forms.Button.WndProc(Message& m)
at System.Windows.Forms.NativeWindow.Callback(IntPtr hWnd, Int32 msg, IntPtr wparam, IntPtr lparam)

RDP session window crashes when minimising

Steps to reliably reproduce:

1. Full screen the RDP session (Desktop -> Full screen)
2. Restore window
3. Full screen again (Desktop -> Full screen)
4. Minimise again

The RDP window disappears and it is unrecoverable without disconnecting and reconnecting the RDP session.

Version: 2.0.86
Client OS: Windows 10

Add feature not to list all VM's in a project | TCP tunneling

Can this be done, that when I give a user or group permission to access certain VM, he is not seeing the other list of VM's in the project? I don't want to create new project and get this done.
Also, I can't remove, compute. list permission as this is must be needed to run the API. This shud apply to both User and group.

Project Explorer: Filter VM instances by name

Add a filter/search box to project explorer so that you can filter VM instances by name,

Not able to SSH FIPS enabled RHEL8 VM with RSA key

Getting error while connect FIPS enabled RHE 8 VMs from IAP Desktop. How can I use ECDSA key in IAP desktop ?

TIMESTAMP sshd[PID]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedKeyTypes [preauth]

VM window doesn't keep focus when clicked.

VM windows don't get proper focus when being clicked.

How to reproduce:

1. Connect to a VM
2. Select something in the project explorer
3. Click in the VM window to ensure it is focussed
4. Alt-tab to another window
5. Alt-tab back to IAP Desktop
6. Notice that the keyboard focus is now in the Project Explorer instead of the VM window (can tell because something like Alt+F opens the file menu rather than interacts with the VM)

What should happen:
The VM window should keep keyboard focus.

Workarounds:
If Project Explorer isn't selected after a connection is opened, the VM window will maintain focus.

IAP Desktop experienced an unrecoverable error

iap-desktop/sources/Google.Solutions.IapDesktop.Extensions.Shell.Test/Google.Solutions.IapDesktop.Extensions.Shell.Test.csproj

Line 117 in 08714c0

<Reference Include="WeifenLuo.WinFormsUI.Docking, Version=3.0.6.0, Culture=neutral, PublicKeyToken=5cded1a1a0a7b481, processorArchitecture=MSIL">

The application on several machines repeatedly gets this error and crashes on launch.
The details link to this particular library:

System.IO.FileNotFoundException: Could not load file or assembly 'WeifenLuo.WinFormsUI.Docking, Version=3.0.6.0, Culture=neutral, PublicKeyToken=5cded1a1a0a7b481' or one of its dependencies. The system cannot find the file specified.
File name: 'WeifenLuo.WinFormsUI.Docking, Version=3.0.6.0, Culture=neutral, PublicKeyToken=5cded1a1a0a7b481'
at Google.Solutions.IapDesktop.Program.HandleFirstInvocation(String[] args)
at Google.Solutions.IapDesktop.Application.Util.SingletonApplicationBase.Run(String[] args)
at Google.Solutions.IapDesktop.Program.Main(String[] args)
WRN: Assembly binding logging is turned OFF.

Allow minimizing full-screen view

Verry appreciate on the project,
When entering to full screen, it disconnected and have to wait a little bit to re-connect. Also no option to minimize the full screen.

IAP Plugin for Mac RDP Client

Do you have any plans to support IAP RDP connections for a Mac OS host operating system?

Are there any workarounds that I can implement to connect through IAP to my GCP Windows server from my Mac?

Thanks! Any info would be appreciated.

Are there plans for Linux?

For those of us running on Linux, this application seems like it would be a huge boon. We would not have to drop to a shell to setup an IAP proxy and then hop over to our RDP client of choice, plug in localhost and the port. It would be one step.

So, the question is: are there any plans to have a variant of iap-desktop for Linux? Theoretically, you could wrap a number of well-used RDP clients.

Numpad Keys are not wokring

Numpad numeric keys are not working. Initially i thought it would be a keyboard issue but tried with multiple keyboard and multiple system. Same issue in all combinations. Keyboards are working fine in all applications

Feature request: portable version

It would be useful to have a portable version of this tool.
Currently, the installer requires admin rights when running on Windows Server (because of https://serverfault.com/questions/580972/why-is-this-preventing-me-installing-an-msi-the-system-administrator-has-set-po).
That makes it troublesome to use it on some bastion and jump hosts.

Session disconnections

Observed behavior:
The Remote desktop connects fine but when ever I try to resize the window or change to full screen the connection drops and Reconnecting pop up window appears.

• ...

Expected the connection should not drop every time there is a window resize be it full screen or docked.

Installed version: 2.1.114.0
.NET Version: 4.0.30319.42000
OS Version: Microsoft Windows NT 6.2.9200.0

Restart required after `gcloud auth login`

• Use plugin without having authenticated
• Error message shown indicating that gcloud auth login needs to be run
• Open console, run gcloud auth login
• Retry operation (without restarting RDCMan)

Expected: works
Actual: Same error message appears until restarted

Add feature to connect to the VM without requiring compute.instances.list

If you connect to a VM either using IAP-Desktop or browser base integration, it looks like compute.instances.list role is required.
If the syntax for connection is iap-rdp:///my-project-123/us-central1-a/my-instance-1, I am already mentioning the instance name as long as IAP-secured Tunnel User is allowed for the user on the VM, it should connect.

On the IAP-Desktop a feature that allows the user to input my-project-123/us-central1-a/my-instance-1 and establish a RDP session without having to have compute.instances.list assigned to the user should help further restricting who sees what.

Vim unusable due to escape key not working

I can successfully use Vim in the browser based SSH connection from the Cloud Console, but it doesn't appear possible to use Vim in the IAP desktop SSH connection because the escape key is not correctly sent.

Bump TLS version to 1.3

It looks like iap-desktop just support TLS 1.2 according to https://github.com/GoogleCloudPlatform/iap-desktop/blob/master/sources/Google.Solutions.IapDesktop/Program.cs
My network logs show the same.
In contrast using IAP via gcloud uses TLS 1.3, also all google cloud services use TLS 1.3 afaik.
Since TLS 1.3 has been around for a while and is supported by each major OS could you consider to bump the version to TLS 1.3 and maybe also remove support for TLS 1.1 ?

Shows Restarting all the time.

Expected behavior:

• Step 1
• Step 2
• ...

Observed behavior:

• Step 1
• Step 2
• ...

Installed version: 2.18.631.0
.NET Version: 4.8.4341.0
OS Version: Microsoft Windows NT 10.0.18363.0

RDP session disconnects instantly after switching to Full Screen

The IAP-Desktop application connects to the required Windows GCE instance through RDP(over the IAP tunnel) normally.
There is no interruption whatsoever while working on the standard window size.

As soon as the View is switched to Full Screen, the RDP session disconnects instantly -

I have observed it for each time that I have tried to switch.

Please assist with the same.

Error when you press Sign In with Google

ERROR LOG:

See the end of this message for details on invoking
just-in-time (JIT) debugging instead of this dialog box.

************** Exception Text **************
System.PlatformNotSupportedException: Operation is not supported on this platform.
at System.Net.HttpListener..ctor()
at Google.Apis.Auth.OAuth2.LocalServerCodeReceiver.StartListener()
at Google.Apis.Auth.OAuth2.LocalServerCodeReceiver.d__16.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Google.Apis.Auth.OAuth2.AuthorizationCodeInstalledApp.d__8.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Google.Solutions.Compute.Auth.GoogleAuthAdapter.d__12.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Google.Solutions.Compute.Auth.OAuthAuthorization.d__9.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Google.Solutions.IapDesktop.Windows.AuthorizeDialog.<>c__DisplayClass3_1.<b__1>d.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.CompilerServices.AsyncMethodBuilderCore.<>c.b__6_0(Object state)

************** Loaded Assemblies **************
mscorlib
Assembly Version: 4.0.0.0
Win32 Version: 4.7.2563.0 built by: NET471REL1
CodeBase: file:///C:/Windows/Microsoft.NET/Framework/v4.0.30319/mscorlib.dll

IapDesktop
Assembly Version: 2.0.86.0
Win32 Version: 2.0.86.0
CodeBase: file:///C:/Users/Lyco%20Tatierra.ZED_NOTE_14I/AppData/Roaming/Google/IAP%20Desktop/IapDesktop.exe

System
Assembly Version: 4.0.0.0
Win32 Version: 4.7.2634.0 built by: NET471REL1LAST_C
CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System/v4.0_4.0.0.0__b77a5c561934e089/System.dll

Google.Solutions.IapDesktop.Application
Assembly Version: 2.0.86.0
Win32 Version: 2.0.86.0
CodeBase: file:///C:/Users/Lyco%20Tatierra.ZED_NOTE_14I/AppData/Roaming/Google/IAP%20Desktop/Google.Solutions.IapDesktop.Application.DLL

Google.Apis.Core
Assembly Version: 1.40.3.0
Win32 Version: 1.40.3.0
CodeBase: file:///C:/Users/Lyco%20Tatierra.ZED_NOTE_14I/AppData/Roaming/Google/IAP%20Desktop/Google.Apis.Core.DLL

System.Windows.Forms
Assembly Version: 4.0.0.0
Win32 Version: 4.7.2558.0 built by: NET471REL1
CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Windows.Forms/v4.0_4.0.0.0__b77a5c561934e089/System.Windows.Forms.dll

System.Drawing
Assembly Version: 4.0.0.0
Win32 Version: 4.7.2558.0 built by: NET471REL1
CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Drawing/v4.0_4.0.0.0__b03f5f7f11d50a3a/System.Drawing.dll

WeifenLuo.WinFormsUI.Docking
Assembly Version: 3.0.6.0
Win32 Version: 3.0.6.0
CodeBase: file:///C:/Users/Lyco%20Tatierra.ZED_NOTE_14I/AppData/Roaming/Google/IAP%20Desktop/WeifenLuo.WinFormsUI.Docking.DLL

Google.Solutions.Compute
Assembly Version: 2.0.86.0
Win32 Version: 2.0.86.0
CodeBase: file:///C:/Users/Lyco%20Tatierra.ZED_NOTE_14I/AppData/Roaming/Google/IAP%20Desktop/Google.Solutions.Compute.DLL

System.Core
Assembly Version: 4.0.0.0
Win32 Version: 4.7.2634.0 built by: NET471REL1LAST_C
CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Core/v4.0_4.0.0.0__b77a5c561934e089/System.Core.dll

System.Configuration
Assembly Version: 4.0.0.0
Win32 Version: 4.7.2558.0 built by: NET471REL1
CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Configuration/v4.0_4.0.0.0__b03f5f7f11d50a3a/System.Configuration.dll

System.Xml
Assembly Version: 4.0.0.0
Win32 Version: 4.7.2612.0 built by: NET471REL1LAST_B
CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Xml/v4.0_4.0.0.0__b77a5c561934e089/System.Xml.dll

WeifenLuo.WinFormsUI.Docking.ThemeVS2015
Assembly Version: 3.0.6.0
Win32 Version: 3.0.6.0
CodeBase: file:///C:/Users/Lyco%20Tatierra.ZED_NOTE_14I/AppData/Roaming/Google/IAP%20Desktop/WeifenLuo.WinFormsUI.Docking.ThemeVS2015.DLL

System.Xml.Linq
Assembly Version: 4.0.0.0
Win32 Version: 4.7.2558.0 built by: NET471REL1
CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Xml.Linq/v4.0_4.0.0.0__b77a5c561934e089/System.Xml.Linq.dll

Google.Apis.Auth
Assembly Version: 1.40.3.0
Win32 Version: 1.40.3.0
CodeBase: file:///C:/Users/Lyco%20Tatierra.ZED_NOTE_14I/AppData/Roaming/Google/IAP%20Desktop/Google.Apis.Auth.DLL

System.Net.Http
Assembly Version: 4.0.0.0
Win32 Version: 4.7.2634.0 built by: NET471REL1LAST_C
CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Net.Http/v4.0_4.0.0.0__b03f5f7f11d50a3a/System.Net.Http.dll

Newtonsoft.Json
Assembly Version: 12.0.0.0
Win32 Version: 12.0.2.23222
CodeBase: file:///C:/Users/Lyco%20Tatierra.ZED_NOTE_14I/AppData/Roaming/Google/IAP%20Desktop/Newtonsoft.Json.DLL

Accessibility
Assembly Version: 4.0.0.0
Win32 Version: 4.7.2558.0 built by: NET471REL1
CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/Accessibility/v4.0_4.0.0.0__b03f5f7f11d50a3a/Accessibility.dll

System.Security
Assembly Version: 4.0.0.0
Win32 Version: 4.7.2558.0 built by: NET471REL1
CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Security/v4.0_4.0.0.0__b03f5f7f11d50a3a/System.Security.dll

************** JIT Debugging **************
To enable just-in-time (JIT) debugging, the .config file for this
application or computer (machine.config) must have the
jitDebugging value set in the system.windows.forms section.
The application must also be compiled with debugging
enabled.

For example:

When JIT debugging is enabled, any unhandled exception
will be sent to the JIT debugger registered on the computer
rather than be handled by this dialog box.

Need PWA for Chromebooks

Please create a Progressive Web Apps version of this so it can be used on Chromebooks.

Thanks

How to build?

Hi,

I would like to contribute some things (because we are currently moving all of our DC systems to the Google Cloud), but I can't get this to build.

It took me a while to figure out that the dependencies have to built separately, but now I am stuck with a missing file Google.Solutions.IapDesktop\OAuthClient.cs.

It would be great if you could add a BUILD.md and explain how to build the source from a clean checkout :)

Best Regards, Felix

Multiple sessions to same host

Would it be possible to add a feature to allow multiple sessions to the same host?
We have a host which acts as a bastion host and would require to connect to this multiple times if working on multiple backend servers at the same time.

RDCManager has been deprecated

From: https://thehackernews.com/2020/03/microsoft-patch-tuesday-march-2020.html

One other bug worthy of note is CVE-2020-0765 impacting Remote Desktop Connection Manager (RDCMan), for which there is no fix. "Microsoft is not planning on fixing this vulnerability in RDCMan and has deprecated the application. Microsoft recommends using supported Remote Desktop clients and exercising caution when opening RDCMan configuration files (.rdg)," the disclosure reads.

Add support for RDS Gateways

Currently, the IAP Plugin only allows direct connection through IAP directly to a Host. We would like to configure an Connection Broker, and have the client connect to the broker via RDS Gateway. Configuration would need to specify that gateway connection should use IAP.

Creating windows credentials times out

Hi again,
I have tried to change RDP password from RDCMan, and it throws an error after a while with a "timeout".
However, it looks like in the serial logs that the operation was successful:
11/13/2019 9:27:51 AM UTC: Creating a new user account for xxx.
11/13/2019 9:27:51 AM UTC: Adding user...
11/13/2019 9:27:51 AM UTC: User accounts updated.

11/13/2019 9:29:23 AM UTC: Creating a new user account for xxx.
11/13/2019 9:29:23 AM UTC: Username already exists. Changing password...
11/13/2019 9:29:23 AM UTC: User accounts updated.

Nothing urgent, just to let you know.
-Johan

Problems Adding New Project

I am trying to connect to one of my projects. I have given a user the following IAM access rights for that project.

The user should not have access to any other project and I have around 5 in my GCP account. When the user tries to add a project a project browser window opens. Obviously, this user should not have access to browse my projects - they only need access to a specific one.

I thought in an earlier version, you could simply add the name of the project you wish to connect to - or am I mistaken?

Is there another IAM access right they require?

I am running version 2.19.634.0 with .NET 4.8.4300.0

Thanks.

Refuses to install despite Gcloud being installed.

The MSI installer exits with the message "Google Cloud SDK is not installed on this machine", despite running the msiexec /i CloudIap-Plugin-1.0.6.0.msi from the Google Cloud Shell.

gcloud --version
Google Cloud SDK 262.0.0
beta 2019.05.17
bq 2.0.47
core 2019.09.06
gsutil 4.42