I have 6 different instances of Guacamole setup connected to MS Active
Directory with a Postgres background DB.

They all have a similar guacamole.properties and when I verify my group and
user search filter strings with ldapsearch I get consistent and expected
results.

Problem:
  In the catalina.out I can see LDAP search results showing the users and
AD groups that are expected but they sometimes update in Guacamole,
sometimes not.  If I sign into guacamole with an AD user the user can
authenticate and the user does show up in the Guacamole Gui BUT at the top
of the page they don't have the tabs that reflect that they are LDAP /
Postgres users.

At the same time the AD groups don't populate the groups list.

postgresql-auto-create-accounts is set to true.

Sometimes if I manually create a random user then all of a sudden the lists
populate on the next user login but not always.  And then any future
updates do not show.  Restarting the application does not seem to make a
difference.

Instance 1
[image: image.png]
vs

Instance2:
[image: image.png]

My logback is setup to debug so I get a lot of log activity but is there
something I can add to the logback to focus on the LDAP process.

I have spent a lot of time on this and could use help.  I really need the
AD groups to import correctly so that we can tie connections to them
Thanks,
Kevin

Reply via email to