#!/bin/bash
    set -x
    exec 2> ~/.rsclient/connect_error.log
    exec 1> ~/.rsclient/connect.log

    connect_timeout=30

    ipraw=$RSC_VM_IP
    user=$RSC_USER
    pass=$RSC_PASSWORD
    vncm_admx=$RSC_GROUP_POLICY_TEMP_PATH
    web_admx=$RSC_ALLOWED_URLS_TEMP_PATH

    echo 1 > ~/.vnc/.vncm_progress
    echo "# Запуск подключения ..." > ~/.vnc/.vncm_status

    connect() {
    echo 20 > ~/.vnc/.vncm_progress
    echo "# Запуск подключения к виртуальной машине" > ~/.vnc/.vncm_status
    if [[ ! -z $(ps -aux | grep vncviewer | grep -v grep) ]]; then
        /bin/sh -c "zenity --info --text='vnc уже запущен'"
        exit 0
    fi

    ip=$(nslookup "$ipraw" | grep "name = " | sed 's|.name = ||g')

    if [[ ! "$@" =~ 'magic_number_for_sso_mode' ]]; then
        ip=$ipraw
        # check if pass need change
        passexp=$(sshpass -v -p "$pass" ssh -o StrictHostKeyChecking=no "$user@$ip" 'whoami' 2>&1)
        if [[ $passexp =~ expired ]]; then
        zenity --error \
        --text="Необходимо сменить пароль"
        echo 100 > ~/.vnc/.vncm_progress
        echo "# Завершение подключения" > ~/.vnc/.vncm_status
        off-client.sh
        exit 0
        fi
        ssh_con="sshpass -p '$pass' ssh -tt -o StrictHostKeyChecking=no"
    else
        ssh_con="ssh -tt -o StrictHostKeyChecking=no"
    fi

    myip=$(sshpass -p "$pass" ssh -o StrictHostKeyChecking=no "$user@$ip" "echo \$SSH_CLIENT | sed 's| .||g'")

    userhome=$(eval $ssh_con "$user@$ip" env | grep HOME | sed 's|HOME=||g')
    userhome=$(echo "$userhome" | rev | cut -c 2- | rev)

    echo 50 > ~/.vnc/.vncm_progress
    echo "# Запуск vnc подключения" > ~/.vnc/.vncm_status

    eval $ssh_con "$user@$ip" "loginctl enable-linger $user"
    eval $ssh_con "$user@$ip" "systemctl --user daemon-reload"

    if [[ $(cat $HOME/.vnc/default.tigervnc | grep LocalhostForSSH=1 | grep -v -E "^ *#") ]]
    then
        eval $ssh_con $user@$ip "systemctl --user stop vncserver"
        eval $ssh_con $user@$ip "systemctl --user start vncserver_sock"
    else
        eval $ssh_con $user@$ip "systemctl --user stop vncserver_sock"
        eval $ssh_con $user@$ip "systemctl --user start vncserver"
    fi

    try=0
    while [[ ! $ok ]]; do
        ok=$(eval $ssh_con "$user@$ip" 'ps -aux | grep /usr/bin/Xvnc | grep -v grep')
        sleep 1
        try=$(expr $try + 1)
        if [ "$try" = $connect_timeout ]; then
        zenity --error \
        --text="Не удалось подключиться к виртуальной машине. Повторите попытку подключения или обратитесь к системному администратору"
        echo 100 > ~/.vnc/.vncm_progress
        echo "# Завершение подключения" > ~/.vnc/.vncm_status
        off-client.sh
        exit 0
        fi
    done

    loginctl enable-linger "$USER"
    systemctl --user daemon-reload

    sshpass -p $pass scp -o StrictHostKeyChecking=no $vncm_admx $user@$ip:/var/tmp/.vncm/VNCm.admx
    sshpass -p $pass scp -o StrictHostKeyChecking=no $web_admx $user@$ip:/var/tmp/.vncm/WEBfwd.admx
    eval $ssh_con $user@$ip 'chmod 666 /var/tmp/.vncm/*.admx'

    eval $ssh_con $user@$ip 'mkdir -p /tmp/share/'
    eval $ssh_con $user@$ip 'chmod 777 /tmp/share/'

    # wait for agent to start
    unset ok
    while [[ ! $ok =~ "OK" ]]
    do
        eval $ssh_con -q $user@$ip [[ -S /tmp/vnc.sock ]] && ok="OK" || ok="NO";
        sleep 1
    done

    if [[ $(cat $HOME/.vnc/default.tigervnc | grep LocalhostForSSH=1 | grep -v -E "^ *#") ]]
    then
        passes=$passes" -L 127.0.0.1:33333:$userhome/.vnc/vncm.sock"
    fi

    eval $ssh_con -R $userhome/.pcscd.comm:/var/run/pcscd/pcscd.comm $user@$ip &
    eval $ssh_con -R $userhome/.cups.sock:/var/run/cups/cups.sock $user@$ip &

    echo 100 > ~/.vnc/.vncm_progress
    echo "# vnc подключено ..." > ~/.vnc/.vncm_status
    if [[ "$@" =~ '--use-quictun' ]]; then
        if [[ $(cat "$HOME/.vnc/default.tigervnc" | grep LocalhostForSSH=1 | grep -v -E "^ *#") ]]; then
        systemctl --user start vncm-quic-server@$myip.service
        systemctl --user start vncm-socat-client.service
        eval $ssh_con "$user@$ip" "systemctl --user start vncm-quic-client@$myip.service"
        eval $ssh_con "$user@$ip" "systemctl --user start vncm-socat-server.service"
        unset ok
        while [[ ! $ok ]]; do
            ok=$(eval $ssh_con "$user@$ip" 'ps -aux | grep tcp:localhost:2322 | grep -v grep')
            sleep 1
        done
        eval $ssh_con "$passes" "$user@$ip" &
        unset ok
        while [[ ! $ok =~ '127.0.0.1:33333' ]]
        do
            ok=$(ps -aux | grep 127.0.0.1:33333 | grep -v grep)
            sleep 1
        done
        /usr/bin/vncviewer $HOME/.vnc/default.tigervnc localhost:33333
        else
        echo "ERROR: --use-quictun need LocalhostForSSH=1"
        fi
    else
        if [[ $(cat "$HOME/.vnc/default.tigervnc" | grep LocalhostForSSH=1 | grep -v -E "^ *#") ]]; then
        systemctl --user start vncm-socat-client.service
        passes="$passes -R 3240:localhost:3240 -R 5005:localhost:5005 -R 5007:localhost:5007 -R 5008:localhost:5008 -R 6566:localhost:6566 -R 2322:localhost:22"
        eval $ssh_con "$passes" "$user@$ip" &
        eval $ssh_con "$user@$ip" 'systemctl --user start vncm-socat-server.service'
        unset ok
        while [[ ! $ok =~ '2322:localhost:22' ]]; do
            ok=$(ps -aux | grep 2322:localhost:22 | grep -v grep)
            sleep 1
        done
        /usr/bin/vncviewer $HOME/.vnc/default.tigervnc localhost:33333
        else
        /usr/bin/vncviewer "$HOME/.vnc/default.tigervnc" "$ip:1"
        fi
    fi
    }

    (
    (
    while [[ $progress != 100 ]]; do
        progress=$(cat ~/.vnc/.vncm_progress)
        status=$(cat ~/.vnc/.vncm_status)
        echo "$progress"
        echo "$status"
        sleep 1
    done
    ) | zenity --progress \
        --title="VNCM" \
        --text="Запуск подключения ..." \
        --percentage=0 \
        --auto-close \
        --no-cancel || pkill connect.sh
    ) & connect "$@"

---
# политики
policy:
scanner: true
printer: false
netfs: false
webcam: true
audio: true
microphone: true
smartcard: false
usb:
- device_1:
    vid: 0
    pid: 0
...

$RSC_CLIENT_IP|{
    "rules": [
        {
        "active": true,
        "conditions": [
            {
            "id": 1739955810043,
            "request": {
                "redirect": "http://$RSC_CLIENT_IP/v1/urls/[example.com$1]",
                "search": "REGEX",
                "value": "https?://example.com(.*)"
            }
            }
        ],
        "description": "Redirect с example.com",
        "enableNotifications": true,
        "id": 1739955654113,
        "name": "example.com"
        }
    ]
}

#sshpass -p "$pass" scp "$RSC_ALLOWED_URLS_TEMP_PATH" "$user@$ipraw:/var/tmp/.vncm/WEBfwd.admx"