LDAP Connections

[Carter Sema <CS...@acschools.org>]

After some help from someone, was able to get LDAP up and running. Now I’m looking for advice on how to add connections for these LDAP accounts. We are looking to not extend the Schema on our MS AD. I know you can control the connections via a mysql database, which I have been looking into now, but haven’t had any luck finding a good forum/instructions to find.

Anyone have any suggestions?

Thanks!
Carter

Re: LDAP Connections

[Mike Jumper <mi...@guac-dev.org>]

On Tue, Nov 8, 2016 at 6:45 AM, Carter Sema <CS...@acschools.org> wrote:

> Mike,
>
>
>
> Thanks for the reply! Is there any way to do a mass upload to the MYSQL
> database?
>

There isn't a user interface for this, but you can definitely mass import
via SQL. The schema used by Guacamole is fully documented:

http://guacamole.incubator.apache.org/doc/gug/jdbc-auth.html#jdbc-auth-schema


> Our SIS system uses a similar backend and we already have scripts to pull
> the data for other services.
>

If you already have services or a database from which this data can be
pulled directly, it may be worth looking into developing a Guacamole
extension of your own. That way connection data, etc. can be derived
directly, without using yet another database as the middle man.

- Mike

Re: LDAP Connections

[Carter Sema <CS...@acschools.org>]

Mike,

Thanks for the reply! Is there any way to do a mass upload to the MYSQL database? Our SIS system uses a similar backend and we already have scripts to pull the data for other services.

Thanks!

Carter


From: Mike Jumper <mi...@guac-dev.org>
Reply-To: "user@guacamole.incubator.apache.org" <us...@guacamole.incubator.apache.org>
Date: Saturday, November 5, 2016 at 2:08 AM
To: "user@guacamole.incubator.apache.org" <us...@guacamole.incubator.apache.org>
Subject: Re: LDAP Connections

On Tue, Nov 1, 2016 at 7:13 AM, Carter Sema <CS...@acschools.org>> wrote:
After some help from someone, was able to get LDAP up and running. Now I’m looking for advice on how to add connections for these LDAP accounts. We are looking to not extend the Schema on our MS AD. I know you can control the connections via a mysql database, which I have been looking into now, but haven’t had any luck finding a good forum/instructions to find.

Anyone have any suggestions?

The first thing you'll want to do is get the database authentication working independently of LDAP:

http://guacamole.incubator.apache.org/doc/gug/jdbc-auth.html

Once you have both the database authentication and LDAP working (you can log in to Guacamole as either database or LDAP users), the section in the manual describing how to tie them together is here:

http://guacamole.incubator.apache.org/doc/gug/ldap-auth.html#ldap-and-database

Thanks,

- Mike

Re: LDAP Connections

[Mike Jumper <mi...@guac-dev.org>]

On Tue, Nov 1, 2016 at 7:13 AM, Carter Sema <CS...@acschools.org> wrote:

> After some help from someone, was able to get LDAP up and running. Now I’m
> looking for advice on how to add connections for these LDAP accounts. We
> are looking to not extend the Schema on our MS AD. I know you can control
> the connections via a mysql database, which I have been looking into now,
> but haven’t had any luck finding a good forum/instructions to find.
>
>
>
> Anyone have any suggestions?
>
>
The first thing you'll want to do is get the database authentication
working independently of LDAP:

http://guacamole.incubator.apache.org/doc/gug/jdbc-auth.html

Once you have both the database authentication and LDAP working (you can
log in to Guacamole as either database or LDAP users), the section in the
manual describing how to tie them together is here:

http://guacamole.incubator.apache.org/doc/gug/ldap-auth.html#ldap-and-database

Thanks,

- Mike