Github user jaredfrees commented on a diff in the pull request:
https://github.com/apache/guacamole-manual/pull/90#discussion_r200389622
--- Diff: src/chapters/ldap-auth.xml ---
@@ -356,6 +356,17 @@ dn: cn={4}guacConfigGroup,cn=schema,cn=config
"<systemitem>uid=user,ou=people,dc=example,dc=net</systemitem>".</para>
</listitem>
</varlistentry>
+ <varlistentry>
+ <term><property>ldap-user-attributes</property></term>
+ <listitem>
+ <para>The attribute or attributes to retrieve from
the LDAP directory.
+ These attributes are stored as tokens with the
prefix "GUAC_ATTR_"
+ and the name of the attribute appended in
uppercase letters.
+ The value of the token is the value of the
attribute in the LDAP directory.
+ If the attribute has no value in the directory
then the token is not saved.
+ Multiple attributes can be specified here,
separated by commas.</para>
--- End diff --
If the LDAP attribute has multiple values then the token would get all of
the values together. I would assume someone using this feature wouldn't use a
attribute with multiple values? If they did, I'm not sure what we could change
to help them pick which value to use. Do you have an idea?
---