> > 08:29:44.881 [http-nio-8080-exec-2] INFO > o.a.g.a.l.AuthenticationProviderService - Unable to determine DN of user > "l.coelho" using LDAP server "192.168.87.20". Proceeding with next server...
The LDAP search has failed to locate this user account, which is why authentication is failing. > > # LDAP Connection > > LDAP_HOSTNAME: 192.168.87.20 > > LDAP_PORT: 389 > > LDAP_ENCRYPTION_METHOD: "none" > > > > # Mapping Guacamole usernames to LDAP DN’s > > LDAP_USER_BASE_DN: "dc=AMG,dc=LAN" > > > > # Indirect Username Mapping > > LDAP_SEARCH_BIND_DN: CN=admin,CN=Users,DC=AMG,DC=lan > > LDAP_SEARCH_BIND_PASSWORD: password > > LDAP-USERNAME-ATTRIBUTE: sAMAccountName > I'm not sure if this is exactly how it's configured in your file, or if this is from copying/pasting into an e-mail, but "LDAP-USERNAME-ATTRIBUTE" should be "LDAP_USERNAME_ATTRIBUTE" - it looks like you switched from underscores to dashes? If you still have trouble, you may want to bump up the log level (LOGBACK_LEVEL) and see what is actually happening in the LDAP conversation. Note that you will get a _LOT_ of log messages - the LDAP debugging is very verbose, and you'll probably want to change the level, try logging in once, and then change it back, else you'll end up with unmanageable levels of logs. -Nick --------------------------------------------------------------------- To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org For additional commands, e-mail: user-h...@guacamole.apache.org
