You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@guacamole.apache.org by "kaliko (Jira)" <ji...@apache.org> on 2020/06/12 10:23:00 UTC
[jira] [Updated] (GUACAMOLE-1100) LDAP authentication DNs encoding
[ https://issues.apache.org/jira/browse/GUACAMOLE-1100?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
kaliko updated GUACAMOLE-1100:
------------------------------
Description:
Guacamole can not authenticate against ldap if ldap-user-base-dn contains accentuated characters. Somebody already reported this on [jira.glyptodon.com|https://jira.glyptodon.com/browse/GUAC-1570]
For instance using docker config env:
{code:java}
LDAP_SEARCH_BIND_DN=CN=some_user,OU=Systeme,OU=Département X,OU=Sciences et Technologies,DC=example,DC=org{code}
I got:
{code:java}
ERROR o.a.g.a.l.AuthenticationProviderService - Unable to bind using search DN "CN=some_user,OU=Systeme,OU=Département X,OU=Sciences et Technologies,DC=example,DC=org"
{code}
And as mentioned in GUAC-1570 on jira.glyptodon.com:
{code:java}
docker-compose logs --tail=100 --no-color | grep 'Unable to bind using search DN' | iconv -f utf8 -t iso-8859-1
web | 10:03:47.792 [http-nio-8080-exec-10] ERROR o.a.g.a.l.AuthenticationProviderService - Unable to bind using search DN "CN=svc_dptmeca,OU=Systeme,OU=Département X,OU=Sciences et Technologies,DC=example,DC=org"
{code}
Using " {{LDAP_SEARCH_BIND_DN=some_user}} " with 1.0.0 is fine, but not possible with1.1.0 because of [944|https://issues.apache.org/jira/browse/GUACAMOLE-944].
was:
Guacamole can not authenticate against ldap if ldap-user-base-dn contains accentuated characters. Somebody already reported this on [jira.glyptodon.com|https://jira.glyptodon.com/browse/GUAC-1570]
For instance using docker config env:
{code:java}
LDAP_SEARCH_BIND_DN=CN=some_user,OU=Systeme,OU=Département X,OU=Sciences et Technologies,DC=example,DC=org{code}
I got:
{code:java}
ERROR o.a.g.a.l.AuthenticationProviderService - Unable to bind using search DN "CN=some_user,OU=Systeme,OU=Département X,OU=Sciences et Technologies,DC=example,DC=org"
{code}
And as mentioned in GUAC-1570 on jira.glyptodon.com:
{code:java}
docker-compose logs --tail=100 --no-color | grep 'Unable to bind using search DN' | iconv -f utf8 -t iso-8859-1
web | 10:03:47.792 [http-nio-8080-exec-10] ERROR o.a.g.a.l.AuthenticationProviderService - Unable to bind using search DN "CN=svc_dptmeca,OU=Systeme,OU=Département X,OU=Sciences et Technologies,DC=example,DC=org"
{code}
Using " {{LDAP_SEARCH_BIND_DN=some_user}} " with 1.0.0 is fine, but not possible with1.1.0 because of 944.
> LDAP authentication DNs encoding
> --------------------------------
>
> Key: GUACAMOLE-1100
> URL: https://issues.apache.org/jira/browse/GUACAMOLE-1100
> Project: Guacamole
> Issue Type: Bug
> Components: guacamole-auth-ldap
> Affects Versions: 1.0.0, 1.1.0
> Environment: Tested with docker images 1.0.0 and 1.1.0
> Reporter: kaliko
> Priority: Major
>
> Guacamole can not authenticate against ldap if ldap-user-base-dn contains accentuated characters. Somebody already reported this on [jira.glyptodon.com|https://jira.glyptodon.com/browse/GUAC-1570]
> For instance using docker config env:
> {code:java}
> LDAP_SEARCH_BIND_DN=CN=some_user,OU=Systeme,OU=Département X,OU=Sciences et Technologies,DC=example,DC=org{code}
> I got:
> {code:java}
> ERROR o.a.g.a.l.AuthenticationProviderService - Unable to bind using search DN "CN=some_user,OU=Systeme,OU=Département X,OU=Sciences et Technologies,DC=example,DC=org"
> {code}
> And as mentioned in GUAC-1570 on jira.glyptodon.com:
> {code:java}
> docker-compose logs --tail=100 --no-color | grep 'Unable to bind using search DN' | iconv -f utf8 -t iso-8859-1
> web | 10:03:47.792 [http-nio-8080-exec-10] ERROR o.a.g.a.l.AuthenticationProviderService - Unable to bind using search DN "CN=svc_dptmeca,OU=Systeme,OU=Département X,OU=Sciences et Technologies,DC=example,DC=org"
> {code}
> Using " {{LDAP_SEARCH_BIND_DN=some_user}} " with 1.0.0 is fine, but not possible with1.1.0 because of [944|https://issues.apache.org/jira/browse/GUACAMOLE-944].
>
--
This message was sent by Atlassian Jira
(v8.3.4#803005)