On Wed, Oct 2, 2019 at 3:26 PM cgerochi <cgero...@cityofpleasantonca.gov> wrote:
> Hello everyone, > > I'm experiencing an issue authenticating LDAP users which seemed to be > common among other users here. > > Format used was the following which would fail when I logged in. > ldap-user-base-dn: DC=corp,DC=domain,DC=com > > If I changed to the following format I could login fine. > ldap-user-base-dn: OU=Dept,DC=corp,DC=domain,DC=com > > However that would only allow a small subset of users to get access to > guacamole since all users are organized in separate OUs under the root > domain. So a solution commonly recommended was to change the ldap port > from > 389 to 3268. Once I did that things kinda worked. > > This indicates that you are likely hitting a referral-following issue, which is pretty common with AD. What version of Guacamole Client are you using? -Nick