Ahhhh that was it! Thank you Nick, I'm now an Admin with my OIDC
authenticated user.

I have one last question around connections and SSH. The systems that I'm
trying to connect to leverage SSH Certificates and not traditional SSH
keys. I wonder if you know whether this is supported? Information about SSH
Certificates in case you aren't familiar can be found here:
https://smallstep.com/blog/use-ssh-certificates/

Each server is configured to trust our CA, we are issued with a certificate
after authenticating to our IDP which is then used to authenticate to our
servers! I believe the encryption is ssh-rsa-cert-v01

Thanks


On Fri, Jul 30, 2021 at 2:45 PM Nick Couchman <[email protected]> wrote:

> On Fri, Jul 30, 2021 at 8:53 AM Daniel Harris
> <[email protected]> wrote:
>
>> Hi Nick!
>>
>> Thanks for the information;
>>
>> To confirm, auto-create-users is working perfectly.
>>
>> I've just tried to run the DB query to set a user as an admin however, I
>> keep getting the following error;
>>
>> guacamole_db=# INSERT INTO
>> guacamole_system_permission(permission,entity_id) VALUES(ADMINISTER,2);
>> ERROR:  column "administer" does not exist
>> LINE 1: ...le_system_permission(permission,entity_id) VALUES(ADMINISTER...
>>
>>
> Possible I typo'd the query:
>
> INSERT INTO guacamole_system_permission(permission,entity_id) VALUES
> ('ADMINISTER',2);
>
> Might be that the ADMINISTER enum needs the single-quotes around it, like
> a string value. I rarely do any work directly in the DB, so I was just
> taking a guess at it.
>
> I confirmed using TABLE guacamole_system_permission; that ADMINISTER does
>> exist, so I'm not sure what is missing.
>>
>> The reason for doing it this way is if I remove the OIDC authentication
>> mechanism I get no login prompt so I'm trying to set the administrator role
>> directly in the DB so I can do the rest.
>>
>>
> Yep, makes sense.
>
> -Nick
>
>>

Reply via email to