On Mon, Mar 30, 2020, 17:29 Nick Couchman <[email protected]> wrote: > On Mon, Mar 30, 2020 at 8:04 PM Jason Keltz <[email protected]> wrote: > >> Hi. >> >> I was finally successful in getting my Samba AD users to work in >> Guacamole along with the MySQL DB for storing additional information. I >> would like for the Samba AD groups to be imported into Guacamole as well >> so that I can assign access to users based on user groups without even >> having to modify the LDAP schema. I can't seem to find any examples of >> this online ... can anyone help? Does Guacamole allow me to specify >> certain groups which should not be imported? >> >> > Guacamole does not "import" LDAP users or groups into the database. You > can create the matching users and/or groups on the JDBC side such that > permissions will match up, but at this point, you have to create those JDBC > entries manually - there is no automated import. >
The interface is designed to streamline this creation, though. So long as you log in as your Guacamole administrative user using LDAP credentials, you should automatically see LDAP users in the user list, and attempting to grant access to those users (or groups) will inherently result in their creation. Things should generally be as simple as locating the user, selecting the connections, and clicking "Save". - Mike
