You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@guacamole.apache.org by "Nick Couchman (Jira)" <ji...@apache.org> on 2019/10/11 17:56:00 UTC
[jira] [Resolved] (GUACAMOLE-893) New LDAP API building wrong
filter
[ https://issues.apache.org/jira/browse/GUACAMOLE-893?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Nick Couchman resolved GUACAMOLE-893.
-------------------------------------
Resolution: Fixed
Fix has been merged
> New LDAP API building wrong filter
> ----------------------------------
>
> Key: GUACAMOLE-893
> URL: https://issues.apache.org/jira/browse/GUACAMOLE-893
> Project: Guacamole
> Issue Type: Bug
> Components: guacamole-auth-ldap
> Affects Versions: 1.1.0
> Environment: Debian Buster
> Reporter: Alberto Gonzalez Iniesta
> Assignee: Nick Couchman
> Priority: Major
> Fix For: 1.1.0
>
>
> Hi,
> While trying the 1.1.0 guacamole(-auth-ldap) I always get an empty user list. Capturing traffic to the LDAP server (Oracle) I can see the filter sent gets an extra entry for "uid".
> With this guacamole.properties:
> {code:java}
> ldap-user-base-dn: cn=users,dc=foobar,dc=es{code}
> This filter gets sent to the server:
> {code:java}
> Filter: (&(objectClass=*)(uid=[NULL])){code}
>
> If I try this guacamole.properties:
> {code:java}
> ldap-user-base-dn: cn=users,dc=foobar,dc=es
> ldap-user-search-filter: (objectClass=person){code}
> This filter is generated:
> {code:java}
> Filter: (&(objectClass=person)(uid=person)){code}
>
> Or if I try this:
> {code:java}
> ldap-user-base-dn: cn=users,dc=foobar,dc=es
> ldap-user-search-filter: (uid=*){code}
> Filter becomes:
> {code:java}
> Filter: (&(uid=*)(uid=[NULL])){code}
> Or this:
> {code:java}
> ldap-user-base-dn: cn=users,dc=foobar,dc=es
> ldap-user-search-filter: (&(objectClass=organizationalperson)(uidnumber<=20000)){code}
> Will send this:
> {code:java}
> Filter: (&(&(objectClass=organizationalperson)(uidnumber<=20000))(uid=20000)){code}
> I build commit 344e6c1b46914c59fa7fcdd622f10be0aa057e98 with maven in Debian Buster.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)