LDAP_USER_BASE_DN pointing to an AD Security Group

2017-06-06 Thread Andy Pattrick
Hi, I have LDAP authentication working using a BASE_DN pointing to an OU in my Active Directory. However I would like to point the BASE_DN at a security group so that I can simply add users to the group if I want to allow them to access Guacamole without moving them to a different OU. When

Re: LDAP_USER_BASE_DN pointing to an AD Security Group

2017-06-06 Thread Der PCFreak
Hi Andy, maybe you just have to escape the spaces? Like shown here: http://www.linuxquestions.org/questions/linux-general-1/how-to-specify-space-in-ou-name-in-ldap-search-835175/ e.g. LDAP_USER_BASE_DN="CN=GUACAMOLE\ Group,OU=Security\ Groups,OU=MyBusiness,DC=mycompany,DC=com" Cheers

RE: LDAP_USER_BASE_DN pointing to an AD Security Group

2017-06-07 Thread Andy Pattrick
oup) is specified it doesn't work, with or without escaped spaces. Cheers Andy. From: Der PCFreak [mailingli...@pcfreak.de] Sent: 07 June 2017 06:23 To: user@guacamole.incubator.apache.org Subject: Re: LDAP_USER_BASE_DN pointing to an AD Security Group

Re: LDAP_USER_BASE_DN pointing to an AD Security Group

2017-06-07 Thread Marco Casavecchia Morganti
Hello, I developed a small patch for the guacamole-auth-ldap extension that allows you to specify in the guacamole.properties a new property: ldap-users-filter. Basically if you apply the patch, you can add an LDAP condition that must be satisfied by the users to become guacamole users. So if yo

RE: LDAP_USER_BASE_DN pointing to an AD Security Group

2017-06-07 Thread Andy Pattrick
Cheers Andy From: Marco Casavecchia Morganti [marco.casavecc...@ospedaliriuniti.marche.it] Sent: 07 June 2017 10:37 To: user@guacamole.incubator.apache.org Subject: Re: LDAP_USER_BASE_DN pointing to an AD Security Group Hello, I developed a small patch for the guacamole-auth-ldap extension that

Re: LDAP_USER_BASE_DN pointing to an AD Security Group

2017-06-07 Thread Marco Casavecchia Morganti
daliriuniti.marche.it<mailto:marco.casavecc...@ospedaliriuniti.marche.it>] Sent: 07 June 2017 10:37 To: user@guacamole.incubator.apache.org<mailto:user@guacamole.incubator.apache.org> Subject: Re: LDAP_USER_BASE_DN pointing to an AD Security Group Hello, I developed a small patch for the g

Re: LDAP_USER_BASE_DN pointing to an AD Security Group

2017-07-28 Thread Mariano Di Girolamo
Hi Marco, I installed your patch on guacamole 0.9.12 and now only members to the group I specified on ldap-user-filter can access to guacamole, but this is true only if users are in the OU configured on ldap-user-base-dn. What can I do to enable users in different OU? This is my configuration

Re: LDAP_USER_BASE_DN pointing to an AD Security Group

2017-07-28 Thread Nick Couchman
In order to accomplish what you're trying to do, you need to change your base DN to a higher-level.  So, the following line: ldap-user-base-dn: OU=guacamoleou,DC=test,DC=local would need to be changed to: ldap-user-base-dn: DC=test,DC=local Another option is to leave the base DN as you have it,

Re: LDAP_USER_BASE_DN pointing to an AD Security Group

2017-07-31 Thread Mariano Di Girolamo
nte e-mail, potrà essere perseguito ai sensi di legge. Da: "Nick Couchman" A: "user" Inviato: Venerdì, 28 luglio 2017 23:11:39 Oggetto: Re: LDAP_USER_BASE_DN pointing to an AD Security Group In order to accomplish what you're trying to do, you need to change your

Re: LDAP_USER_BASE_DN pointing to an AD Security Group

2017-07-31 Thread Nick Couchman
o ai sensi di legge. Da: "Nick Couchman" A: "user" Inviato: Venerdì, 28 luglio 2017 23:11:39 Oggetto: Re: LDAP_USER_BASE_DN pointing to an AD Security Group In order to accomplish what you're trying to do, you need to change your base DN to a higher-level.  So, the following l

Re: LDAP_USER_BASE_DN pointing to an AD Security Group

2017-08-02 Thread Mariano Di Girolamo
erze o comunque non indicate nella presente e-mail, potrà essere perseguito ai sensi di legge. Da: "Nick Couchman" A: "user" Inviato: Venerdì, 28 luglio 2017 23:11:39 Oggetto: Re: LDAP_USER_BASE_DN pointing to an AD Security Group In order to accomplish what you'r

RE: LDAP_USER_BASE_DN pointing to an AD Security Group

2017-08-13 Thread James Fraser
] Sent: Thursday, 3 August 2017 12:46 AM To: user Subject: Re: LDAP_USER_BASE_DN pointing to an AD Security Group The user used in bind is member of administrator. I installed the new version of guacamole (0.9.13) but I have the same problem. If I configure the base-dn like "DC=test,DC=local&qu

RE: LDAP_USER_BASE_DN pointing to an AD Security Group

2017-08-13 Thread James Fraser
ames Fraser [mailto:james.fra...@veritec.com.au] Sent: Monday, 14 August 2017 11:31 AM To: user@guacamole.incubator.apache.org Subject: RE: LDAP_USER_BASE_DN pointing to an AD Security Group Hi All I am currently experiencing the same issue here, if targeting a specific OU in Active Directory it works as requi