You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@guacamole.apache.org by "Michael Jumper (JIRA)" <ji...@apache.org> on 2017/09/27 17:35:00 UTC
[jira] [Resolved] (GUACAMOLE-341) GUAC_USERNAME token not defined
if using SSO
[ https://issues.apache.org/jira/browse/GUACAMOLE-341?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Michael Jumper resolved GUACAMOLE-341.
--------------------------------------
Resolution: Fixed
Fix Version/s: 0.9.14-incubating
Fixed in the general case by pulling the username from {{AuthenticatedUsed}} if not present within {{Credentials}}.
> GUAC_USERNAME token not defined if using SSO
> --------------------------------------------
>
> Key: GUACAMOLE-341
> URL: https://issues.apache.org/jira/browse/GUACAMOLE-341
> Project: Guacamole
> Issue Type: Bug
> Components: guacamole-auth-cas, guacamole-auth-header
> Affects Versions: 0.9.12-incubating
> Reporter: Gregor S
> Assignee: Michael Jumper
> Fix For: 0.9.14-incubating
>
>
> To make tokenfilter work with auth-header -and noauth module.- (needed e.g. for Kerberos authentication through an Apache/Nginx Reverse Proxy, that passes REMOTE_USER header), username must be set in the credentials object, because it is added to the Tokenfilter only if username is not null in the credentials object.
> basically make $\{GUAC_USERNAME} be replaced with the credentials passed though the REMOTE_USER variable.
> See also:
> https://github.com/glyptodon/guacamole-client/blob/b26a664d66fd14a22eb7300d29aa20390cf408ec/guacamole-ext/src/main/java/org/apache/guacamole/token/StandardTokens.java#L118
> https://github.com/glyptodon/guacamole-client/blob/0.9.12-incubating/guacamole-ext/src/main/java/org/apache/guacamole/net/auth/simple/SimpleAuthenticationProvider.java#L170
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)