Re: LDAP Questions

2019-03-19 Thread Nick Couchman
On Tue, Mar 19, 2019 at 8:45 PM Fertig, Brian wrote: > Thanks Nick. I ended up creating a service account and letting it roll. > I vaguely remember this config a year ago when I set it up before. I’ve > got TOTP, MySQL, and LDAP setup. Its humming. Thanks! > > > Yeah, service account is what

RE: LDAP Questions

2019-03-19 Thread Fertig, Brian
@guacamole.apache.org Subject: Re: LDAP Questions On Tue, Mar 19, 2019 at 12:01 PM Fertig, Brian mailto:brian.fer...@philips.com>> wrote: Nico, I am trying to latter. When a user is trying to log into Guac I want that users credentials presented to AD to see if they can. If they can then allow them to

Re: LDAP Questions

2019-03-19 Thread Nick Couchman
On Tue, Mar 19, 2019 at 12:01 PM Fertig, Brian wrote: > Nico, > > I am trying to latter. When a user is trying to log into Guac I want that > users credentials presented to AD to see if they can. If they can then > allow them to login. At least based on the documentation I assume this is >

RE: LDAP Questions

2019-03-19 Thread Fertig, Brian
: Nico Schottelius Sent: Tuesday, March 19, 2019 11:57 AM To: user@guacamole.apache.org Cc: Fertig, Brian Subject: Re: LDAP Questions Hey Brion, you usually have two different methods for LDAP authentication: - binding with a specfic system user - binding (login) with the user that wants

Re: LDAP Questions

2019-03-19 Thread Nico Schottelius
Hey Brion, you usually have two different methods for LDAP authentication: - binding with a specfic system user - binding (login) with the user that wants to login I am not fluent on how AD works, but in case of OpenLDAP, you will need to grant the binding access to the user(s) that you want

LDAP Questions

2019-03-19 Thread Fertig, Brian
Greetings! I just setup ldap integration with Guac.. I try to login and it keeps telling me it can't bind. The configuration I am using is below. This is against Active Directory. ldap-user-base-dn: OU=Users,OU=code2,DC=code2,DC=philips,DC=com ldap-username-attribute: sAMAccountName