Github user necouchman commented on a diff in the pull request:
https://github.com/apache/guacamole-manual/pull/90#discussion_r200819086
--- Diff: src/chapters/ldap-auth.xml ---
@@ -356,6 +356,20 @@ dn: cn={4}guacConfigGroup,cn=schema,cn=config
"<systemitem>uid=user,ou=people,dc=example,dc=net</systemitem>".</para>
</listitem>
</varlistentry>
+ <varlistentry>
+ <term><property>ldap-user-attributes</property></term>
+ <listitem>
+ <para>The attribute or attributes to retrieve from
the LDAP directory
+ for the currently logged-in user. These
attributes are stored as
+ tokens with the prefix "GUAC_ATTR_" and the
name of the attribute appended
+ in uppercase letters. The value of the token
is the value of the attribute
+ in the LDAP directory for the currently
logged-in user. If the attribute
+ has no value in the LDAP directory then the
token is not saved.
+ If the attribute has multiple values in the
LDAP directory then the token
+ saves the first value of the attribute.
Multiple attributes can be
+ specified here, separated by commas.</para>
--- End diff --
As with above, might be good to add a short example, here, to guide them in
the right direction - something as simple as "if you set this to 'mail' then
the GUAC_ATTR_MAIL token..."
Also, probably a good idea to have a link here back to the section on
tokens in case someone reading through this page isn't familiar with tokens.
---