On Tue, Jul 12, 2022, 12:36 Luciano Oliveira <[email protected]> wrote:
> Hello, > > How do you allow access to guacamole? > > I configured the integration with Active Directory by groups, in this > point everything is fine. > > My issue is that every time I need to release a new user, I put him in one > of these groups, and in order for him to be released in guacamole I have to > restart the servlet, knocking everybody out. > > Is there a sync tool? > Users/groups from LDAP are not imported in Guacamole; they are queried on-demand when a user logs in. Unless you are making changes to guacamole.properties, there is no need to restart anything, and restarting will have no effect except to kick out established sessions. If you make a change to a user's group memberships within LDAP, that change will affect the user the next time they log into Guacamole. It will not affect any of their existing Guacamole sessions - they would need to log out and back in. - Mike
