Greetings to everyone,
I am using a UCS system (Univention Corporate Server) and would like to link Apache Guacamole 1.3.0 to my LDAP database so that I can control access rights. When individual users are assigned to a Guacamole configuration, they can see and use the assigned configurations as intended. However, when a group is assigned to a configuration, no configurations are visible to the users in the group. The problem here is with the search filter, which cannot find configurations assigned to user groups. The search filter continues to search with the uid of the user and not with associated group CNs, despite passing the ldap-member-attribute. The user groups only appear in the logs if the values for a groupOfNames scheme are applied to the ldap-member-attribute-type, which does not apply to UCS, since posix groups are used there. I would be very grateful for any suggestions or hints on how to solve this problem.
Kind regards
Jonas Einnolf
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
I am using a UCS system (Univention Corporate Server) and would like to link Apache Guacamole 1.3.0 to my LDAP database so that I can control access rights. When individual users are assigned to a Guacamole configuration, they can see and use the assigned configurations as intended. However, when a group is assigned to a configuration, no configurations are visible to the users in the group. The problem here is with the search filter, which cannot find configurations assigned to user groups. The search filter continues to search with the uid of the user and not with associated group CNs, despite passing the ldap-member-attribute. The user groups only appear in the logs if the values for a groupOfNames scheme are applied to the ldap-member-attribute-type, which does not apply to UCS, since posix groups are used there. I would be very grateful for any suggestions or hints on how to solve this problem.
Kind regards
Jonas Einnolf
