Default user not available after deploy

[ThaMattie]

Hi,

I managed to deploy this image on a raspberry pi with portainer, however, after it is up and running, I get an invalid login when using the default user and password.

My compose file:

version: "3.8"

services:
  guacamole:
    image: flcontainers/guacamole:latest
    container_name: guacamole
    environment:
      GUACAMOLE_HOME: /config
      # Optional timezone
      # TZ: 
    volumes:
      - ${config}/guacamole:/config
      - /etc/localtime:/etc/localtime:ro
    restart: unless-stopped
    ports:
      - 8080:8080

The log:

 Creating db password
 Running startup scripts
 Preparing Config Folder
 Init DB Check
 Post startup DB scripts
 Guacamole client waiting for DB
 The files belonging to this database system will be owned by user "postgres".
 This user must also own the server process.
 
 The database cluster will be initialized with locales
   COLLATE:  C
   CTYPE:    C.UTF-8
   MESSAGES: C
   MONETARY: C
   NUMERIC:  C
   TIME:     C
 The default database encoding has accordingly been set to "UTF8".
 The default text search configuration will be set to "english".
 
 Data page checksums are disabled.
 
 fixing permissions on existing directory /config/postgres ... ok
 creating subdirectories ... ok
 selecting dynamic shared memory implementation ... posix
 selecting default max_connections ... 100
 selecting default shared_buffers ... 128MB
 selecting default time zone ... ############
 creating configuration files ... ok
 running bootstrap script ... ok
 performing post-bootstrap initialization ... ok
 initdb: warning: enabling "trust" authentication for local connections
 You can change this by editing pg_hba.conf or using the option -A, or
 --auth-local and --auth-host, the next time you run initdb.
 syncing data to disk ... ok
 
 
 Success.
 
 waiting for server to start....2025-11-21 20:55:26.330 CET [63] LOG:  starting PostgreSQL 13.20 on aarch64-alpine-linux-musl, compiled by gcc (Alpine 12.2.1_git20220924-r10) 12.2.1 20220924, 64-bit
 2025-11-21 20:55:26.333 CET [63] LOG:  listening on Unix socket "/run/postgresql/.s.PGSQL.5432"
 2025-11-21 20:55:26.340 CET [64] LOG:  database system was shut down at 2025-11-21 20:55:25 CET
 2025-11-21 20:55:26.348 CET [63] LOG:  database system is ready to accept connections
  done
 server started
 CREATE DATABASE
 
 
 /usr/local/bin/_postgres.sh: ignoring /docker-entrypoint-initdb.d/*
 
 waiting for server to shut down....2025-11-21 20:55:26.641 CET [63] LOG:  received fast shutdown request
 2025-11-21 20:55:26.643 CET [63] LOG:  aborting any active transactions
 2025-11-21 20:55:26.657 CET [63] LOG:  background worker "logical replication launcher" (PID 70) exited with exit code 1
 2025-11-21 20:55:26.657 CET [65] LOG:  shutting down
 2025-11-21 20:55:26.678 CET [63] LOG:  database system is shut down
  done
 server stopped
 
 PostgreSQL init process complete; ready for start up.
 
 2025-11-21 20:55:26.789 CET [19] LOG:  starting PostgreSQL 13.20 on aarch64-alpine-linux-musl, compiled by gcc (Alpine 12.2.1_git20220924-r10) 12.2.1 20220924, 64-bit
 2025-11-21 20:55:26.789 CET [19] LOG:  listening on IPv6 address "::1", port 5432
 2025-11-21 20:55:26.789 CET [19] LOG:  listening on IPv4 address "127.0.0.1", port 5432
 2025-11-21 20:55:26.793 CET [19] LOG:  listening on Unix socket "/run/postgresql/.s.PGSQL.5432"
 2025-11-21 20:55:26.799 CET [78] LOG:  database system was shut down at 2025-11-21 20:55:26 CET
 2025-11-21 20:55:26.808 CET [19] LOG:  database system is ready to accept connections
 database port open... Finishing Configuration
 CREATE TYPE
 CREATE TYPE
 CREATE TYPE
 CREATE TYPE
 CREATE TYPE
 CREATE TABLE
 CREATE INDEX
 CREATE TABLE
 CREATE INDEX
 CREATE TABLE
 CREATE TABLE
 CREATE TABLE
 CREATE TABLE
 CREATE TABLE
 CREATE INDEX
 CREATE TABLE
 CREATE INDEX
 CREATE TABLE
 CREATE INDEX
 CREATE TABLE
 CREATE INDEX
 CREATE TABLE
 CREATE INDEX
 CREATE TABLE
 CREATE INDEX
 CREATE TABLE
 CREATE INDEX
 CREATE TABLE
 CREATE INDEX
 CREATE TABLE
 CREATE INDEX
 CREATE INDEX
 CREATE TABLE
 CREATE INDEX
 CREATE INDEX
 CREATE TABLE
 CREATE INDEX
 CREATE INDEX
 CREATE TABLE
 CREATE INDEX
 CREATE TABLE
 CREATE INDEX
 CREATE INDEX
 CREATE TABLE
 CREATE INDEX
 CREATE INDEX
 CREATE TABLE
 CREATE INDEX
 CREATE INDEX
 CREATE INDEX
 CREATE INDEX
 CREATE INDEX
 CREATE INDEX
 CREATE TABLE
 CREATE INDEX
 CREATE INDEX
 CREATE INDEX
 CREATE INDEX
 CREATE TABLE
 CREATE INDEX
 INSERT 0 1
 INSERT 0 1
 INSERT 0 6
 INSERT 0 3
 DB Preparation finished exiting for main processes...
 2025-11-21 20:55:28.760 CET [19] LOG:  received fast shutdown request
 2025-11-21 20:55:28.763 CET [19] LOG:  aborting any active transactions
 2025-11-21 20:55:28.767 CET [19] LOG:  background worker "logical replication launcher" (PID 84) exited with exit code 1
 2025-11-21 20:55:28.769 CET [79] LOG:  shutting down
 2025-11-21 20:55:28.843 CET [19] LOG:  database system is shut down
 waiting for server to shut down.... done
 server stopped
 2025-11-21 20:55:29,421 INFO Set uid to user 0 succeeded
 2025-11-21 20:55:29,427 INFO supervisord started with pid 1
 2025-11-21 20:55:30,438 INFO spawned: 'postgresql' with pid 96
 2025-11-21 20:55:30,443 INFO spawned: 'tomcat' with pid 97
 2025-11-21 20:55:30,448 INFO spawned: 'guacd' with pid 98
 2025-11-21 20:55:31,534 INFO success: postgresql entered RUNNING state, process has stayed up for > than 1 seconds (startsecs)
 2025-11-21 20:55:31,535 INFO success: tomcat entered RUNNING state, process has stayed up for > than 1 seconds (startsecs)
 2025-11-21 20:55:31,535 INFO success: guacd entered RUNNING state, process has stayed up for > than 1 seconds (startsecs)

I see there is an sql file to add the user, but somehow it does not work, any ideas?

[ThaMattie]

When I manually run the sql script I get some duplicate key errors, so I am assuming that the users were added...
In the container log it shows

[http-nio-8080-exec-5] WARN  o.a.g.event.EventLoggingListener - Authentication attempt from <IP> for user "guacadmin" failed: unknown error (no specific failure recorded)

(sql output)

/config/guacamole/schema # psql -U guacamole guacamole_db -a -f 002-create-admin-user.sql
--
-- Licensed to the Apache Software Foundation (ASF) under one
-- or more contributor license agreements.  See the NOTICE file
-- distributed with this work for additional information
-- regarding copyright ownership.  The ASF licenses this file
-- to you under the Apache License, Version 2.0 (the
-- "License"); you may not use this file except in compliance
-- with the License.  You may obtain a copy of the License at
--
--   http://www.apache.org/licenses/LICENSE-2.0
--
-- Unless required by applicable law or agreed to in writing,
-- software distributed under the License is distributed on an
-- "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-- KIND, either express or implied.  See the License for the
-- specific language governing permissions and limitations
-- under the License.
--
-- Create default user "guacadmin" with password "guacadmin"
INSERT INTO guacamole_entity (name, type) VALUES ('guacadmin', 'USER');
psql:002-create-admin-user.sql:21: ERROR:  duplicate key value violates unique constraint "guacamole_entity_name_scope"
DETAIL:  Key (type, name)=(USER, guacadmin) already exists.
INSERT INTO guacamole_user (entity_id, password_hash, password_salt, password_date)
SELECT
    entity_id,
    decode('CA458A7D494E3BE824F5E1E175A1556C0F8EEF2C2D7DF3633BEC4A29C4411960', 'hex'),  -- 'guacadmin'
    decode('FE24ADC5E11E2B25288D1704ABE67A79E342ECC26064CE69C5B3177795A82264', 'hex'),
    CURRENT_TIMESTAMP
FROM guacamole_entity WHERE name = 'guacadmin' AND guacamole_entity.type = 'USER';
psql:002-create-admin-user.sql:28: ERROR:  duplicate key value violates unique constraint "guacamole_user_single_entity"
DETAIL:  Key (entity_id)=(1) already exists.
-- Grant this user all system permissions
INSERT INTO guacamole_system_permission (entity_id, permission)
SELECT entity_id, permission::guacamole_system_permission_type
FROM (
    VALUES
        ('guacadmin', 'CREATE_CONNECTION'),
        ('guacadmin', 'CREATE_CONNECTION_GROUP'),
        ('guacadmin', 'CREATE_SHARING_PROFILE'),
        ('guacadmin', 'CREATE_USER'),
        ('guacadmin', 'CREATE_USER_GROUP'),
        ('guacadmin', 'ADMINISTER')
) permissions (username, permission)
JOIN guacamole_entity ON permissions.username = guacamole_entity.name AND guacamole_entity.type = 'USER';
psql:002-create-admin-user.sql:42: ERROR:  duplicate key value violates unique constraint "guacamole_system_permission_pkey"
DETAIL:  Key (entity_id, permission)=(1, CREATE_CONNECTION) already exists.
-- Grant admin permission to read/update/administer self
INSERT INTO guacamole_user_permission (entity_id, affected_user_id, permission)
SELECT guacamole_entity.entity_id, guacamole_user.user_id, permission::guacamole_object_permission_type
FROM (
    VALUES
        ('guacadmin', 'guacadmin', 'READ'),
        ('guacadmin', 'guacadmin', 'UPDATE'),
        ('guacadmin', 'guacadmin', 'ADMINISTER')
) permissions (username, affected_username, permission)
JOIN guacamole_entity          ON permissions.username = guacamole_entity.name AND guacamole_entity.type = 'USER'
JOIN guacamole_entity affected ON permissions.affected_username = affected.name AND guacamole_entity.type = 'USER'
JOIN guacamole_user            ON guacamole_user.entity_id = affected.entity_id;
psql:002-create-admin-user.sql:55: ERROR:  duplicate key value violates unique constraint "guacamole_user_permission_pkey"
DETAIL:  Key (entity_id, affected_user_id, permission)=(1, 1, READ) already exists.