On Wed, Oct 2, 2019 at 3:26 PM cgerochi <cgero...@cityofpleasantonca.gov>
wrote:

> Hello everyone,
>
> I'm experiencing an issue authenticating LDAP users which seemed to be
> common among other users here.
>
> Format used was the following which would fail when I logged in.
> ldap-user-base-dn: DC=corp,DC=domain,DC=com
>
> If I changed to the following format I could login fine.
> ldap-user-base-dn: OU=Dept,DC=corp,DC=domain,DC=com
>
> However that would only allow a small subset of users to get access to
> guacamole since all users are organized in separate OUs under the root
> domain.  So a solution commonly recommended was to change the ldap port
> from
> 389 to 3268.  Once I did that things kinda worked.
>
>
This indicates that you are likely hitting a referral-following issue,
which is pretty common with AD.  What version of Guacamole Client are you
using?

-Nick

Reply via email to