You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@guacamole.apache.org by Östh Mikael <Mi...@tillvaxtanalys.se> on 2016/11/03 13:42:07 UTC
LDAP Groups not working in latest GIT-version
Hi
Does anyone got the LDAP groups working by adding the groups to the attribute of "seeAlso" ?
According to Mike, this is implemented in GIT-version.
But for me its not working, only when I add user account to member attribute, the connection is available.
I have build Guacamole Server and client, LDAP, Mysql extensions from GIT.
Mikael Osth
Growth Analysis
IT-support
Studentplan 3, SE-831 40 Ostersund
Tel: +46 10 447 44 19
email: mikael.osth@tillvaxtanalys.se<ma...@tillvaxtanalys.se>
www.tillvaxtanalys.se<http://www.tillvaxtanalys.se>
RE: LDAP Groups not working in latest GIT-version
Posted by Östh Mikael <Mi...@tillvaxtanalys.se>.
Also, I know the connection is working because when I add a user to “member” attribute, the connection is available in guacamole for that user
Med vänlig hälsning
Mikael Östh
From: Östh Mikael [mailto:Mikael.Osth@tillvaxtanalys.se]
Sent: den 8 november 2016 08:38
To: user@guacamole.incubator.apache.org
Subject: RE: LDAP Groups not working in latest GIT-version
Thanks!
The attribute in whole is “CN=MTUA Admins,OU=Groups,OU=MTUA,DC=xxxx,DC=xxxx,DC=se”
Also I have added the default group “Domain admins” just for test, but neither are working.
[cid:image002.png@01D2399C.1B0ACDE0]
Med vänlig hälsning
Mikael Östh
From: Mike Jumper [mailto:mike.jumper@guac-dev.org]
Sent: den 8 november 2016 08:24
To: user@guacamole.incubator.apache.org<ma...@guacamole.incubator.apache.org>
Subject: Re: LDAP Groups not working in latest GIT-version
On Sun, Nov 6, 2016 at 11:11 PM, Östh Mikael <Mi...@tillvaxtanalys.se>> wrote:
Hi
This is my file. I have replace my DN with example.se<http://example.se> . I can browse all LDAP user with an LDAP-account that guacadmin has enabled to do so.
All LDAP users that are member of my connection guacConfigGroup in my AD can connect.
[cid:image003.png@01D2399C.1B0ACDE0]
This configuration looks good in general. Beware that the "auth-provider" property is deprecated - recent releases would have logged a warning in the Tomcat logs, but it now simply has no effect.
Can you provide an example value of the "seeAlso" attributes of one of your guacConfigGroups?
- Mike
RE: LDAP Groups not working in latest GIT-version
Posted by Östh Mikael <Mi...@tillvaxtanalys.se>.
Thanks!
The attribute in whole is “CN=MTUA Admins,OU=Groups,OU=MTUA,DC=xxxx,DC=xxxx,DC=se”
Also I have added the default group “Domain admins” just for test, but neither are working.
[cid:image002.png@01D2399A.8C36BCB0]
Med vänlig hälsning
Mikael Östh
From: Mike Jumper [mailto:mike.jumper@guac-dev.org]
Sent: den 8 november 2016 08:24
To: user@guacamole.incubator.apache.org
Subject: Re: LDAP Groups not working in latest GIT-version
On Sun, Nov 6, 2016 at 11:11 PM, Östh Mikael <Mi...@tillvaxtanalys.se>> wrote:
Hi
This is my file. I have replace my DN with example.se<http://example.se> . I can browse all LDAP user with an LDAP-account that guacadmin has enabled to do so.
All LDAP users that are member of my connection guacConfigGroup in my AD can connect.
[cid:image001.png@01D2399A.23BE0C10]
This configuration looks good in general. Beware that the "auth-provider" property is deprecated - recent releases would have logged a warning in the Tomcat logs, but it now simply has no effect.
Can you provide an example value of the "seeAlso" attributes of one of your guacConfigGroups?
- Mike
Re: LDAP Groups not working in latest GIT-version
Posted by Mike Jumper <mi...@guac-dev.org>.
On Sun, Nov 6, 2016 at 11:11 PM, Östh Mikael <Mi...@tillvaxtanalys.se>
wrote:
> Hi
>
>
>
> This is my file. I have replace my DN with example.se . I can browse all
> LDAP user with an LDAP-account that guacadmin has enabled to do so.
>
> All LDAP users that are member of my connection guacConfigGroup in my AD
> can connect.
>
>
>
>
>
>
This configuration looks good in general. Beware that the "auth-provider"
property is deprecated - recent releases would have logged a warning in the
Tomcat logs, but it now simply has no effect.
Can you provide an example value of the "seeAlso" attributes of one of your
guacConfigGroups?
- Mike
RE: LDAP Groups not working in latest GIT-version
Posted by Östh Mikael <Mi...@tillvaxtanalys.se>.
Sorry, I do not understand your question?
I have installed latest version from GIT.
Med vänlig hälsning
Mikael Östh
From: Amin Joodaki [mailto:judaki1364@yahoo.com]
Sent: den 7 november 2016 11:42
To: user@guacamole.incubator.apache.org
Subject: Re: LDAP Groups not working in latest GIT-version
Hi
this is not work with active directory
and would you please describe version of your guacamole ?
best
On Monday, November 7, 2016 10:42 AM, Östh Mikael <Mi...@tillvaxtanalys.se>> wrote:
Hi
This is my file. I have replace my DN with example.se . I can browse all LDAP user with an LDAP-account that guacadmin has enabled to do so.
All LDAP users that are member of my connection guacConfigGroup in my AD can connect.
[cid:image001.png@01D238F5.336C3C40]
Med vänlig hälsning
Mikael Östh
From: Mike Jumper [mailto:mike.jumper@guac-dev.org]
Sent: den 5 november 2016 07:02
To: user@guacamole.incubator.apache.org<ma...@guacamole.incubator.apache.org>
Subject: Re: LDAP Groups not working in latest GIT-version
On Thu, Nov 3, 2016 at 6:42 AM, Östh Mikael <Mi...@tillvaxtanalys.se>> wrote:
Hi
Does anyone got the LDAP groups working by adding the groups to the attribute of ”seeAlso” ?
According to Mike, this is implemented in GIT-version.
But for me its not working, only when I add user account to member attribute, the connection is available.
I have build Guacamole Server and client, LDAP, Mysql extensions from GIT.
Hi Mikael,
What does your LDAP configuration look like in guacamole.properties?
- Mike
Re: LDAP Groups not working in latest GIT-version
Posted by Amin Joodaki <ju...@yahoo.com>.
Hi
this is not work with active directory
and would you please describe version of your guacamole ?best
On Monday, November 7, 2016 10:42 AM, Östh Mikael <Mi...@tillvaxtanalys.se> wrote:
#yiv5095944208 #yiv5095944208 -- _filtered #yiv5095944208 {font-family:PMingLiU;panose-1:2 2 5 0 0 0 0 0 0 0;} _filtered #yiv5095944208 {font-family:PMingLiU;panose-1:2 2 5 0 0 0 0 0 0 0;} _filtered #yiv5095944208 {font-family:Calibri;panose-1:2 15 5 2 2 2 4 3 2 4;} _filtered #yiv5095944208 {font-family:Tahoma;panose-1:2 11 6 4 3 5 4 4 2 4;} _filtered #yiv5095944208 {panose-1:2 2 5 0 0 0 0 0 0 0;}#yiv5095944208 #yiv5095944208 p.yiv5095944208MsoNormal, #yiv5095944208 li.yiv5095944208MsoNormal, #yiv5095944208 div.yiv5095944208MsoNormal {margin:0cm;margin-bottom:.0001pt;font-size:12.0pt;}#yiv5095944208 a:link, #yiv5095944208 span.yiv5095944208MsoHyperlink {color:blue;text-decoration:underline;}#yiv5095944208 a:visited, #yiv5095944208 span.yiv5095944208MsoHyperlinkFollowed {color:purple;text-decoration:underline;}#yiv5095944208 p.yiv5095944208MsoAcetate, #yiv5095944208 li.yiv5095944208MsoAcetate, #yiv5095944208 div.yiv5095944208MsoAcetate {margin:0cm;margin-bottom:.0001pt;font-size:8.0pt;}#yiv5095944208 span.yiv5095944208EmailStyle17 {color:#1F497D;}#yiv5095944208 span.yiv5095944208BalloonTextChar {}#yiv5095944208 .yiv5095944208MsoChpDefault {} _filtered #yiv5095944208 {margin:70.85pt 70.85pt 70.85pt 70.85pt;}#yiv5095944208 div.yiv5095944208WordSection1 {}#yiv5095944208 Hi This is my file. I have replace my DN with example.se . I can browse all LDAP user with an LDAP-account that guacadmin has enabled to do so. All LDAP users that are member of my connection guacConfigGroup in my AD can connect. Med vänlig hälsning Mikael Östh From: Mike Jumper [mailto:mike.jumper@guac-dev.org]
Sent: den 5 november 2016 07:02
To: user@guacamole.incubator.apache.org
Subject: Re: LDAP Groups not working in latest GIT-version On Thu, Nov 3, 2016 at 6:42 AM, Östh Mikael <Mi...@tillvaxtanalys.se> wrote: Hi Does anyone got the LDAP groups working by adding the groups to the attribute of ”seeAlso” ? According to Mike, this is implemented in GIT-version. But for me its not working, only when I add user account to member attribute, the connection is available. I have build Guacamole Server and client, LDAP, Mysql extensions from GIT. Hi Mikael, What does your LDAP configuration look like in guacamole.properties? - Mike
RE: LDAP Groups not working in latest GIT-version
Posted by Östh Mikael <Mi...@tillvaxtanalys.se>.
Hi
This is my file. I have replace my DN with example.se . I can browse all LDAP user with an LDAP-account that guacadmin has enabled to do so.
All LDAP users that are member of my connection guacConfigGroup in my AD can connect.
[cid:image001.png@01D238CD.92C634C0]
Med vänlig hälsning
Mikael Östh
From: Mike Jumper [mailto:mike.jumper@guac-dev.org]
Sent: den 5 november 2016 07:02
To: user@guacamole.incubator.apache.org
Subject: Re: LDAP Groups not working in latest GIT-version
On Thu, Nov 3, 2016 at 6:42 AM, Östh Mikael <Mi...@tillvaxtanalys.se>> wrote:
Hi
Does anyone got the LDAP groups working by adding the groups to the attribute of ”seeAlso” ?
According to Mike, this is implemented in GIT-version.
But for me its not working, only when I add user account to member attribute, the connection is available.
I have build Guacamole Server and client, LDAP, Mysql extensions from GIT.
Hi Mikael,
What does your LDAP configuration look like in guacamole.properties?
- Mike
Re: LDAP Groups not working in latest GIT-version
Posted by Mike Jumper <mi...@guac-dev.org>.
On Thu, Nov 3, 2016 at 6:42 AM, Östh Mikael <Mi...@tillvaxtanalys.se>
wrote:
> Hi
>
> Does anyone got the LDAP groups working by adding the groups to the
> attribute of ”seeAlso” ?
>
>
>
> According to Mike, this is implemented in GIT-version.
>
> But for me its not working, only when I add user account to member
> attribute, the connection is available.
>
> I have build Guacamole Server and client, LDAP, Mysql extensions from GIT.
>
Hi Mikael,
What does your LDAP configuration look like in guacamole.properties?
- Mike