Hi Vincent,

This happened to me when I was connecting with the mysql guacadmin user and
not the LDAP guacadmin

I had to differentiate passwords to realize this preference for guacamole
in authenticating with mysql first.

Try this test.

Att,
Henri.

Em seg., 10 de ago. de 2020 às 07:40, Vincent Goubert <[email protected]>
escreveu:

> Hi All,
>
>
>
> I am requesting here some help :
>
>
>
> I have a guacamole instance set-up on Debian 10, and connected using LDAP
> plugin with AD.
>
>
>
> The authentication phase works like a charm, users list (AD) are showing
> in the Admin UI, but then (and for an unknown reason), all (AD) users
> disappear … only assigned users stays, and there is no more “LDAP” tab when
> editing targeted user.
>
>
>
> I already tried to check configuration and logs, there is no error, maybe
> someone already saw such issue …
>
>
>
> To confirm, I am using an admin account, and this account is also an AD
> admin (full rights).
>
>
>
> Here is my conf example of guacamole.properties :
>
>
>
> guacd-hostname: 127.0.0.1
>
> guacd-pot: 4822
>
>
>
> auth-provider:
> net.sourceforge.guacamole.net.auth.ldap.LDAPAuthenticationProvider
>
>
>
> #ldap-hostname: 192.168.1.1
>
> ldap-hostname: myserver.local
>
> ldap-port: 389
>
> ldap-user-base-dn: CN=Users,DC=myserver,DC=local
>
> ldap-username-attribute: sAMaccountName
>
> ldap-config-base-dn: DC=myserver,DC=local
>
> ldap-group-base-dn: CN=Users,DC=myserver,DC=local
>
> ldap-encryption-method: none
>
> ldap-search-bind-dn: CN=svc-guacusr,CN=Users,DC=myserver,DC=local
>
> ldap-search-bind-password: mypassword-ad
>
> ldap-follow-referrals: false
>
>
>
> mysql-hostname: localhost
>
> mysql-port: 3306
>
> mysql-database: guacamole_db
>
> mysql-username: guacamole_user
>
> mysql-password: mypassword-mysql
>
>
>
> Thanks in advance for your great help,
>
> Cheers,
>
> Vincent.
>
>
>


-- 
-- 
Henri Alves Godoy
Tecnologia da Informação e Comunicação
Faculdade de Ciências Aplicadas - FCA
Universidade Estadual de Campinas - UNICAMP
Fone: (19) 3701-6682

Reply via email to