You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@guacamole.apache.org by Rajesh Mohan <Ra...@infosys.com> on 2018/08/01 06:26:15 UTC

RE: LDAP Authentication was not working in Guacamole 0.9.14

Hi Nick,

Thanks you so much for the comments which you have provided. ☺

And atlast it was found that the GUACAMOLE_HOME path was mistakenly set as my home path instead of /etc/guacamole/

As of now the Guacamole was working fine with  the LDAP Authentication by pasting the guacamole-auth-ldap in my home path extensions directory .“ONCE AGAIN THANK YOU SO MUCH FOR YOUR COMMENTS NICK ☺”

But I need an Additional Information in  this same case .

Can we enable both the LDAP Authentication and  BasicFileAuthentication in a guacamole.properties file. In Such a case I have to login to the Guacamole UI using the LDAP AD account and once logged in to use the Linux and windows servers using the local account and also AD Account .

DO WE HAVE ANY OPTION TO ENABLE IT LIKE SO , ?

Regards,
Rajesh Mohan

From: vnick [via Apache Guacamole - General/User Mailing List] <ml...@n4.nabble.com>
Sent: Tuesday, July 31, 2018 10:59 PM
To: Rajesh Mohan <Ra...@infosys.com>
Subject: Re: LDAP Authentication was not working in Guacamole 0.9.14

On Tue, Jul 31, 2018 at 1:22 PM Anburaj Palraj <[hidden email]</user/SendEmail.jtp?type=node&node=3752&i=0>> wrote:
Hi Rajesh,

In modern versions of AD, to search from the root DN, you need to use port 3268 so you can use the global catalogue.


You can do this, but there is no requirement to do so.  There was a bug in Guacamole that prevented LDAP queries from succeeding when pointed at AD trees where Referrals existed (non-GC port 389 in the case of Active Directory), but that was resolved in 0.9.14 and should work perfectly fine, now.

-Nick

________________________________
If you reply to this email, your message will be added to the discussion below:
http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/LDAP-Authentication-was-not-working-in-Guacamole-0-9-14-tp3745p3752.html<https://apac01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fapache-guacamole-general-user-mailing-list.2363388.n4.nabble.com%2FLDAP-Authentication-was-not-working-in-Guacamole-0-9-14-tp3745p3752.html&data=01%7C01%7CRajesh.Mohan%40infosys.com%7C1ef41930285f43c9539708d5f70b4acc%7C63ce7d592f3e42cda8ccbe764cff5eb6%7C1&sdata=W3KGJXo12dgNkUXwsqegiWBQcFcNsyREgSjVFCWkR%2Fk%3D&reserved=0>
To start a new topic under Apache Guacamole - General/User Mailing List, email ml+s2363388n1h0@n4.nabble.com<ma...@n4.nabble.com>
To unsubscribe from Apache Guacamole - General/User Mailing List, click here<https://apac01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fapache-guacamole-general-user-mailing-list.2363388.n4.nabble.com%2Ftemplate%2FNamlServlet.jtp%3Fmacro%3Dunsubscribe_by_code%26node%3D1%26code%3DUmFqZXNoLk1vaGFuQGluZm9zeXMuY29tfDF8OTgyNjE1MzY2&data=01%7C01%7CRajesh.Mohan%40infosys.com%7C1ef41930285f43c9539708d5f70b4acc%7C63ce7d592f3e42cda8ccbe764cff5eb6%7C1&sdata=d1MeLJFQzTlU7zect5C%2BEnnymz0essSpQt%2F1oWLqJTo%3D&reserved=0>.
NAML<https://apac01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fapache-guacamole-general-user-mailing-list.2363388.n4.nabble.com%2Ftemplate%2FNamlServlet.jtp%3Fmacro%3Dmacro_viewer%26id%3Dinstant_html%2521nabble%253Aemail.naml%26base%3Dnabble.naml.namespaces.BasicNamespace-nabble.view.web.template.NabbleNamespace-nabble.view.web.template.NodeNamespace%26breadcrumbs%3Dnotify_subscribers%2521nabble%253Aemail.naml-instant_emails%2521nabble%253Aemail.naml-send_instant_email%2521nabble%253Aemail.naml&data=01%7C01%7CRajesh.Mohan%40infosys.com%7C1ef41930285f43c9539708d5f70b4acc%7C63ce7d592f3e42cda8ccbe764cff5eb6%7C1&sdata=Y2R7CoYdyawBF4QWHKaGKTgSGz9YGna2hKWzW7Ju4fw%3D&reserved=0>

Re: LDAP Authentication was not working in Guacamole 0.9.14

Posted by Nick Couchman <vn...@apache.org>.
On Wed, Aug 1, 2018 at 2:26 AM Rajesh Mohan <Ra...@infosys.com>
wrote:

>
>
> *But I need an Additional Information in  this same case .*
>
>
>
> Can we enable both the LDAP Authentication and  BasicFileAuthentication in
> a guacamole.properties file. In Such a case I have to login to the
> Guacamole UI using the LDAP AD account and once logged in to use the Linux
> and windows servers using the local account and also AD Account .
>
>
>
> DO WE HAVE ANY OPTION TO ENABLE IT LIKE SO , ?
>
>
>

I can't remember, but I don't think the BasicFileAuthentication module
works with LDAP authentication.  If you're wanting to "layer" the LDAP
authentication module such that you can store connections somewhere outside
of the LDAP tree, I highly suggest you use the JDBC module with one of the
supported databases.  See the following page:

http://guacamole.apache.org/doc/gug/ldap-auth.html#ldap-and-database

-Nick