You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@guacamole.apache.org by maks <se...@carscats.ru> on 2018/02/13 07:31:20 UTC
Configuring GuacConfigGroup
Good afternoon.
There is a question for you.
We changed the AD schema.
Now we have a new TestGuacGroup object in AD.
The user who is in TestGuacGroup connects to the RDP server. It works.
But we have many users, about 2000. And we can not add them there.
How can I specify a group to connect to the RDP server?
--
Sent from: http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/
Re: Configuring GuacConfigGroup
Posted by maks <se...@carscats.ru>.
I added so.
DN: CN=TestGuacGroup,CN=Users,DC=test,DC=local
changetype: add
CN: TestGuacGroup
objectClass: guacConfigGroup
guacConfigProtocol: rdp
guacConfigParameter: hostname=192.168.50.113
guacConfigParameter: port=3389
member: CN=max,CN=Users,DC=test,DC=local
--
Sent from: http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/
Re: Configuring GuacConfigGroup
Posted by Mike Jumper <mi...@guac-dev.org>.
On Feb 13, 2018 04:38, "Nick Couchman" <vn...@apache.org> wrote:
On Tue, Feb 13, 2018 at 2:31 AM, maks <se...@carscats.ru> wrote:
> Good afternoon.
> There is a question for you.
> We changed the AD schema.
> Now we have a new TestGuacGroup object in AD.
> The user who is in TestGuacGroup connects to the RDP server. It works.
> But we have many users, about 2000. And we can not add them there.
> How can I specify a group to connect to the RDP server?
>
The guacConfigGroup object extends groupOfNames, IIRC, so you should be
able to add a group to the membership of the guacConfigGroup, and the
members of that group will have access to the config group.
Yep.
Group membership of other groups is indicated through the "seeAlso"
attribute. For this to work with Guacamole, the "ldap-group-base-dn"
property must be specified:
http://guacamole.apache.org/doc/gug/ldap-auth.html
- Mike
Re: Configuring GuacConfigGroup
Posted by Nick Couchman <vn...@apache.org>.
On Tue, Feb 13, 2018 at 2:31 AM, maks <se...@carscats.ru> wrote:
> Good afternoon.
> There is a question for you.
> We changed the AD schema.
> Now we have a new TestGuacGroup object in AD.
> The user who is in TestGuacGroup connects to the RDP server. It works.
> But we have many users, about 2000. And we can not add them there.
> How can I specify a group to connect to the RDP server?
>
The guacConfigGroup object extends groupOfNames, IIRC, so you should be
able to add a group to the membership of the guacConfigGroup, and the
members of that group will have access to the config group.
-Nick