Ok I understand now. In essence, it is the same as the groups which have to be 
created in Guacamole first.

Thanks

From: Nick Couchman <[email protected]>
Sent: Wednesday, November 18, 2020 5:02 PM
To: [email protected]
Subject: [EXTERNAL] Re: Is it possible to add LDAP users to connections without 
groups?

WARNING: This email originated outside the Hostos campus. Do not click links or 
open attachments unless you recognize the sender and know the content is safe. 
Never provide login credentials, financial or sensitive details in response to 
an email or by clicking on a link. Report suspicious emails to: 
[email protected]<mailto:[email protected]>

On Wed, Nov 18, 2020 at 4:43 PM MARTINEZ, ARIEL 
<[email protected]<mailto:[email protected]>> wrote:
Hello,

We currently have LDAP groups working fine and the users in the group show up 
in the Guacamole admin page. However, we are now trying to assign an indiviudal 
users to a specific connection. Is it possible to do this? I was thinking that 
the user would show up in the list of users based upon syncing from an existing 
Guacamole group that matches the LDAP group name.


Yes, this is perfectly possible; however, Guacamole does not "sync" users 
between, for example, the LDAP module and the JDBC module. If users exist in 
both modules the permissions will match, but if you're using LDAP users you 
have to create the matching JDBC user in order to assign permissions. This can 
be automated using the auto-creation feature introduced in 1.2.0:

http://guacamole.apache.org/doc/gug/jdbc-auth.html#jdbc-auth-auto-create

-Nick

Reply via email to