Lucian, The only thing in my guacamole.properties file is: guacd-hostname: 127.0.0.1 guacd-port: 4822
# MySQL properties mysql-hostname: 127.0.0.1 mysql-database: guacamole_db mysql-username: redacted mysql-password: redacted #LDAPS properties #commented out properties for testing The only difference I see between our ldap-servers.yml files are you're using a search filter and I'm not. Unless there's some weird formatting with yml files that I'm just missing... From: Luciano Oliveira <[email protected]> Sent: Thursday, July 18, 2024 8:12 AM To: [email protected] Subject: RE: ldap-servers.yml not working EXTERNAL EMAIL: Do not click any links or open any attachments unless you trust the sender and know the content is safe. Look, my ldap-servers.yml - hostname: ldap.domain.local port: 636 encryption-method: ssl user-base-dn: dc=domain,dc=local match-usernames: - LOCAL\\(.*) - (.*)@domain\.local username-attribute: sAMAccountName search-bind-dn: cn=srv_gcd,ou=ServicesAuth,dc=domain,dc=local search-bind-password: passwordXsds224e user-search-filter: (&(&(objectClass=user)(objectCategory=person))(memberof=cn=acess_guacd,ou=Groups,dc=domain,dc=local)) - hostname: ldap.sub.domain.local port: 636 encryption-method: ssl user-base-dn: dc=sub,dc=domain,dc=local match-usernames: - SUB\\(.*) - (.*)@sub\.domain\.local username-attribute: sAMAccountName search-bind-dn: cn=srv_sub_gcd,ou=ServicesAuth,dc=sub,dc=domain,dc=local search-bind-password: passwordXX5485 user-search-filter: (&(&(objectClass=user)(objectCategory=person))(memberof=cn=accesso_guaca_sub,ou=Groups,dc=sub,dc=domain,dc=local)) Remember that the guacamole.properties file should only contain the configuration: "auth-provider: net.sourceforge.guacamole.net.auth.ldap.LDAPAuthenticationProvider" and others. The LDAP parameters should only be in the ldap-servers.yml file. At.te, Luciano! ________________________________ De: Michael Jumper <[email protected]<mailto:[email protected]>> Enviado: quarta-feira, 17 de julho de 2024 15:23 Para: [email protected]<mailto:[email protected]> <[email protected]<mailto:[email protected]>> Assunto: Re: ldap-servers.yml not working On 7/17/24 10:18 AM, Nic Fargo wrote: > I'm trying to use the multiple LDAP servers settings discussed in the > Apache Guacamole Manual v1.5.5. I'm not sure if there's a flag that > needs to be in /etc/guacamole/guacamole.properties to use the > ldap-servers.yml file, or if it uses it automatically when present. It's automatically read and used when present and readable. > My ldap-servers.yml has the following data: ... What are the permissions on this file? What do you see in your Guacamole logs? - Mike --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected]<mailto:[email protected]> For additional commands, e-mail: [email protected]<mailto:[email protected]>
