Congrats to the Guacamole team for an awesome 1.0.0 release

2019-01-22 Thread Aaron Newsome
Hey everyone involved on the Guacamole project, I just wanted to send a huge thanks for working at this awesome software and reaching the 1.0.0 milestone. I've been using Guacamole for quite some time now, and I've eventually figured out how to get upgrades installed quickly. Installing this

Re: Restricting access to Connections defined in MySQL using LDAP groups?

2019-01-22 Thread JoelB
ek1m92 wrote > Correct me > if I'm wrong here Joel, but what I expected to work based on the > documentation was the following: > > 1. Create user group in MySQL with the name of a corresponding user group > in > the LDAP directory > 2. Create connection in MySQL > 3. Grant connection permission

Re: Restricting access to Connections defined in MySQL using LDAP groups?

2019-01-22 Thread ek1m92
vnick wrote > I think it's probably already covered under this issue: > > https://issues.apache.org/jira/browse/GUACAMOLE-696 How so? You explicitly confirmed earlier that it should be possible to limit access to MySQL-defined connections using LDAP group membership. If that's the case, how is

Re: Restricting access to Connections defined in MySQL using LDAP groups?

2019-01-22 Thread Nick Couchman
On Tue, Jan 22, 2019 at 8:24 AM ek1m92 wrote: > JoelB wrote > > I'm now working on scripting an AD-to-MySQL synchronization tool. > > We've been using a custom tool for this internally for the last couple of > months to be able to manage connection permissions on a group level. We > were >

Re: Restricting access to Connections defined in MySQL using LDAP groups?

2019-01-22 Thread JoelB
Thanks, let me know when you've filed an issue and I'll add my experience if there is any difference. Interestingly in developing my tool I've found that if LDAP group support is configured, users have to be a member of BOTH the MySQL group and the LDAP group in order to see the connections.

Re: Restricting access to Connections defined in MySQL using LDAP groups?

2019-01-22 Thread ek1m92
JoelB wrote > I'm now working on scripting an AD-to-MySQL synchronization tool. We've been using a custom tool for this internally for the last couple of months to be able to manage connection permissions on a group level. We were hoping to be able to ditch that in favor of official LDAP group

Re: Restricting access to Connections defined in MySQL using LDAP groups?

2019-01-22 Thread ek1m92
JoelB wrote > vnick wrote > I've created a matching group in the JDBC extension but it still doesn't > work unless there is a matching JDBC user. Are you sure that establishing a connection actually works after creating a JDBC user? I'm running into LDAP group related issues as well and for me,