Re: About uknown trouble.

[Mike Jumper]

On Mon, Nov 8, 2021 at 3:48 AM takuya morita  wrote:

> Hi, I'm Takuya.
>
> I used docker to build guacamole.
> Authentication is linked to AD.
>
> As a result of installing client certificates this time, users other than
> guacadmin cannot be authenticated.
> I do not know the cause.


What do you see in the Guacamole logs via "docker logs"?

What specifically changed between when things worked and now? How did you
install the certificates?

Have you received any reports like this from people other than me?


Sure - accidentally misconfiguring LDAP is a fairly common sticking point.
The logs should be a good resource for determining what exactly is failing
and why. If you were able to authenticate via LDAP until setting up LDAP
over SSL, I would expect to see some SSL-related log messages regarding
things like PKIX chain building or host verification, possibly due to the
JVM vs. the way the certificate(s) were installed.

Michael Jumper
CEO, Lead Developer
Glyptodon Inc .

About uknown trouble.

[takuya morita]

Hi, I'm Takuya.

I used docker to build guacamole.
Authentication is linked to AD.

As a result of installing client certificates this time, users other than
guacadmin cannot be authenticated.
I do not know the cause.
Have you received any reports like this from people other than me?