Guacamole MySQL issue with LDAP and TOTP without database entry

[dashfe <ma...@t-online.de>]

Hello,We have a Guacamole setup with LDAP which works, today I enabled TOTP
as additional authentication.Unfortunatly when I try to login with an user
account that doesn't exist in the mysql database I get an error message.If I
login into the web-administration and create a user, I can login (followed
by the enrollment/setup of totp)If I disable TOTP again, it also works.I'm
running on guacamole 1.2 via the offical docker images. Here is the
docker-compose-file that I use:Output from docker logs
docker_guacamole1-guacamole_1 -ft --detailsI'm unsure why this is happening
in my setup but I hope someone here can help me with this.Help would be
greatly appreciatedThanks



--
Sent from: http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

Re: Guacamole MySQL issue with LDAP and TOTP without database entry

[dashfe <ma...@t-online.de>]

Hi again,

I think I found the script that does the enviorment-variables and it seems
as it isn't implemented yet.
I've your suggested parameter into the guacamole.properties file and it
works!

<http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/file/t1629/screenshot1.png> 
Is there a way to suppress this message? (only appears once per created
user)

Not important...
Anyway thank You for your help.

-Max



--
Sent from: http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org

Re: Guacamole MySQL issue with LDAP and TOTP without database entry

[dashfe <ma...@t-online.de>]

Thank you for the fast response.

I'm sorry I have overlooked this, makes a lot of sense actually...

One followup question regarding this: is there a environment variable for
"mysql-auto-create-accounts: true" (docker)?
I tried:
mysql-auto-create-accounts: true
MYSQL_AUTO_CREATE_ACCOUNTS: "true"
But without any success

Thanks in advance

-Max





--
Sent from: http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org

Re: Guacamole MySQL issue with LDAP and TOTP without database entry

[Nick Couchman <vn...@apache.org>]

On Thu, Dec 17, 2020 at 11:00 AM dashfe <ma...@t-online.de> wrote:

> Hello, We have a Guacamole setup with LDAP which works, today I enabled
> TOTP as additional authentication. Unfortunatly when I try to login with an
> user account that doesn't exist in the mysql database I get an error
> message. If I login into the web-administration and create a user, I can
> login (followed by the enrollment/setup of totp) If I disable TOTP again,
> it also works. I'm running on guacamole 1.2 via the offical docker images.
> Here is the docker-compose-file that I use:


The user needs to exist in the database for TOTP to work. You can either
create them manually or enable auto-creation:

http://guacamole.apache.org/doc/gug/jdbc-auth.html#jdbc-auth-auto-create

-Nick