You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@guacamole.apache.org by "Nick Couchman (Jira)" <ji...@apache.org> on 2025/11/01 13:45:00 UTC
[jira] [Reopened] (GUACAMOLE-954) Add LDAP support for nested user groups
[ https://issues.apache.org/jira/browse/GUACAMOLE-954?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Nick Couchman reopened GUACAMOLE-954:
-------------------------------------
Assignee: Nick Couchman
Reopening to fix static variable.
> Add LDAP support for nested user groups
> ---------------------------------------
>
> Key: GUACAMOLE-954
> URL: https://issues.apache.org/jira/browse/GUACAMOLE-954
> Project: Guacamole
> Issue Type: New Feature
> Components: guacamole-auth-ldap
> Reporter: Nils
> Assignee: Nick Couchman
> Priority: Minor
> Fix For: 1.7.0
>
>
> As described below, the current LDAP support will query user group membership, but only immediate membership. Unlike the database auth, nested user groups are not supported. Support for nested user groups should be added.
> Note that while Active Directory supports a specific filter for retrieving recursive group memberships, leveraging that would need to be done carefully. Other LDAP servers may not support that filter, and an alternative, standards-conforming mechanism would need to be used by default. If it is possible to automatically detect that the LDAP server supports this, that would be ideal. Another option might be to provide some mechanism for overriding the filter that Guacamole will use to determine membership.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)