Re: LDAP+database - Credential duplication?

2018-05-12 Thread Felix Wolfheimer
Hi Jonathan, thanks a lot for your offering! If you like to share the script you use to create the database entries, this would be useful for me. For the workshop use-case I indeed create all the accounts in LDAP with random passwords using a script, the SQL part of this is still missing though

Re: LDAP+database - Credential duplication?

2018-05-11 Thread Nick Couchman
On Fri, May 11, 2018 at 3:26 PM, Chris Duncan wrote: > Thanks for the pointer, however, could you clarify where I make use of > these parameter tokens? When I configure a connection do I put the token > variables in the username and password fields? > Yes, exactly - so, in

Re: LDAP+database - Credential duplication?

2018-05-11 Thread Mike Jumper
On Thu, May 10, 2018 at 11:17 PM, Chris Duncan wrote: > ... > Is it possible to configure connections to use the LDAP password without > entering it in the database? I'm authenticating against Active Directory > for Guacamole user passwords but I can't work out how to pass

Re: LDAP+database - Credential duplication?

2018-05-11 Thread Chris Duncan
Sorry to piggyback on this topic but I have a related question. Is it possible to configure connections to use the LDAP password without entering it in the database? I'm authenticating against Active Directory for Guacamole user passwords but I can't work out how to pass that same password through

Re: LDAP+database - Credential duplication?

2018-05-10 Thread Jonathan Hankins
Felix, There are some examples of generating the salt and hashing the password correctly for postgres and mysql in the online docs, for various programming languages. My use case is similar to yours (postgres+LDAP.) I needed to create users via script with random passwords in postgres, and I did

Re: LDAP+database - Credential duplication?

2018-05-10 Thread Nick Couchman
On Thu, May 10, 2018 at 3:21 PM, Felix Wolfheimer < f.wolfhei...@googlemail.com> wrote: > I'm trying to set up guacamole with LDAP authentication and would like to > use postgresql as storage for the connection parameters. Looking at the > provided database schema files for postgresql

LDAP+database - Credential duplication?

2018-05-10 Thread Felix Wolfheimer
I'm trying to set up guacamole with LDAP authentication and would like to use postgresql as storage for the connection parameters. Looking at the provided database schema files for postgresql (001-create-schema.sql), the user information entered into the database requires a password. I'm wondering