On Sun, Jan 13, 2019 at 11:23 AM Nick Couchman <[email protected]> wrote:
> On Sun, Jan 13, 2019 at 7:43 AM Philip Herbert <[email protected]> wrote: > >> as it seems impossible to change the structure of an ldap, because a >> single application expects users and groups >> >> In different parts oft the ldap directory, I would like to try to find >> out why this config is failing >> > > We certainly do not try to design the LDAP authentication extension with > the notion of having you reorganize your entire tree to suite the needs of > Guacamole. The Guacamole extension does not expect users and groups to be > in different parts of the tree - it simply gives you different options for > searching for users, groups, and connections, and leaving them out allows > you to disable items that you don't use. For example, I use Guacamole, > with Active Directory, but don't care about having either LDAP groups or > connections pulled in from AD - I'm only interested in authentication and > users. Hopefully this helps explain why it is structured the way it is. > > It sounds like we should provide a group filter option like we already do for users. - Mike
