You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@guacamole.apache.org by Arkaprabha Chakraborty <ch...@gmail.com> on 2022/06/11 09:24:38 UTC

LDAP authentication fail

I'm using guacamole 1.3.0 for ldap authentication and migration of users.
after configuration I get this in logs
ERROR o.a.g.a.l.AuthenticationProviderService - Unable to bind using search
DN "CN=guacldap,OU=IT,OU=DSCC,DC=dccil,DC=local"

my guacamole.properties file is:
# MySQL properties
mysql-hostname: 127.0.0.1
mysql-port: 3306
mysql-database: guacamole_db
mysql-username: guacamole_user
mysql-password: ****


# LDAP properties
ldap-hostname: 206.16.62.131
ldap-port: 389
ldap-user-base-dn: OU=IT,OU=DSCC,DC=dccil,DC=local
ldap-encryption-method: none
ldap-search-bind-dn: CN=guacldap,OU=IT,OU=DSCC,DC=dccil,DC=local
ldap-username-attribute: sAMAccountName
ldap-search-bind-password: ********

Re: LDAP authentication fail

Posted by Nick Couchman <vn...@apache.org>.
On Sat, Jun 11, 2022 at 5:24 AM Arkaprabha Chakraborty <
chakrabortyarkaprabha998@gmail.com> wrote:

> I'm using guacamole 1.3.0 for ldap authentication and migration of users.
> after configuration I get this in logs
> ERROR o.a.g.a.l.AuthenticationProviderService - Unable to bind using
> search DN "CN=guacldap,OU=IT,OU=DSCC,DC=dccil,DC=local"
>
>
There must be something incorrect about this particular bind DN or
password, or something on the LDAP side blocking it. Make sure that:
* You can access the specified host/port combination from the Guacamole
server (no firewalls blocking)
* You can use the bind DN and password to manually query the LDAP tree
(using ldapsearch, for example). Make sure to include testing the correct
encryption method.

-Nick