On 12/27/24 4:21 PM, Yumi chan wrote:
I updated the domain controller certificate and now ldap stops working on guacamole. How do I update the domain controller certificate in guacamole?

It will depend on your Linux distribution and how things were installed, but ultimately: you will need to perform the same operations you performed when you originally added the certificate of your domain controller to your system's truststore, but this time using the updated certificate.

The LDAP authentication uses the JVM-wide truststore, which is typically managed by distribution-specific tooling. For example:

https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/8/html/securing_networks/using-shared-system-certificates_securing-networks

https://ubuntu.com/server/docs/install-a-root-ca-certificate-in-the-trust-store

Once your system trusts your domain controller's certificate, Guacamole's LDAP authentication should trust it, too. You would just need to restart Tomcat after the certificate is trusted by your system.

- Mike

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to