Thanks a lot, Nick. It works. There is left pending a way to make a massive update of the Database accounts so that their password is the same as that of Tacacs.
I will take care of it. -Gabriel -----Mensaje original----- De: Nick Couchman <[email protected]> Enviado el: domingo, 16 de abril de 2023 02:03 p. m. Para: [email protected] Asunto: Re: Change to the way of authenticating provided by Guacamole On Sat, Apr 15, 2023 at 9:17 PM Gabriel Huerta Araujo <[email protected]> wrote: > > I did a test and It does not work > > I put mysql-auto-create-accounts (guacamole properties) with true value. > > In fact Tacacs user is same to DB user, but why when I enter with DB user and > its password as is saved in this repository, I can see Active Sessions? The likely explanation for why this works is because the database module gets evaluated, first, and, if the password is the same, the authentication to Guacamole is done by the database module and *not* by the TACACS module. I'd bet that, once the passwords are the same between DB and TACACS, the Guacamole logins will stop showing up in your TACACS system. -Nick --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
