Hi,

I'm trying to connect to an RDP server that is set up with both TLS and NLA.  I
want the RDP connection to take place using the username of the guacamole user
who has logged in.  (guacamole has been linked with LDAP.)  Unfortunately, this
doesn't work: the RDP server disconnects the client immediately (according to
the guacamole web GUI).  docker logs guacd merely reports:

    guacd[41]: ERROR:       Error connecting to RDP server
    guacd[41]: INFO:        Connection did not succeed

My connection username is set to ${GUAC_USERNAME}.  Password is set to
${GUAC_PASSWORD}.  Domain box is left blank, security mode set to NLA, and
Ignore server certificate has been checked to work around the issue in my last
e-mail.  Everything is left at defaults.

Guacamole is integrated with Active Directory using LDAP, with a PostgreSQL
back-end for configuration.  I set up docker to use the userPrincipalName LDAP
attribute for usernames.  So e.g. I login to guacamole as "u...@mydomain.com".

Note that I am using latest docker images for both guacd and guacamole.

I have verified that logging in with regular Microsoft Remote Desktop client
using the UPN works.  So that's not the problem...  On the other hand, if I
manually type the UPN into the username box instead of using ${GUAC_USERNAME},
it still doesn't work.

How do I get ${GUAC_USERNAME} to work for logging in to RDP with a UPN?

Best regards,

James Johnston


Reply via email to