You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@guacamole.apache.org by "Nick Couchman (Jira)" <ji...@apache.org> on 2020/04/19 17:56:00 UTC

[jira] [Updated] (GUACAMOLE-1030) LDAP and Database does not allow LDAP only users to create connections

     [ https://issues.apache.org/jira/browse/GUACAMOLE-1030?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Nick Couchman updated GUACAMOLE-1030:
-------------------------------------
    Priority: Minor  (was: Major)

> LDAP and Database does not allow LDAP only users to create connections
> ----------------------------------------------------------------------
>
>                 Key: GUACAMOLE-1030
>                 URL: https://issues.apache.org/jira/browse/GUACAMOLE-1030
>             Project: Guacamole
>          Issue Type: Bug
>    Affects Versions: 1.1.0
>            Reporter: Roman Bäriswyl
>            Priority: Minor
>
> Following Scenario:
> I have LDAP authentication and database enabled.
> I have created a group "MyGroup" in the DB and assigned it create connections/create connection groups rights.
> The group "MyGroup" exists in LDAP and "user_a" is inside it.
> Now when the "user_a" logs in into guacamole, it correctly seems to have rights to create groups / connection groups.
> Uppon creating a connection or a connection group,  guacamole shows "Unexpected internal error". In the log, I see:
> "ERROR: null value in column "entity_id" violates not-null constrait" in a query that seems to insert permissions into "guacamole_connection_group_permission".
> I suspect the entity_id is the id of the user which does not exist for users that are only in LDAP.
> Does this mean that I manually have to add all users to the DB that should be able to create connections or connection groups? Wouldn't it be possible for guacamole to automatically create users (without a password) for LDAP users in the database?



--
This message was sent by Atlassian Jira
(v8.3.4#803005)