For what it's worth, using ldap-username-attribute sAMAccountname never worked for me on 0.9.13-incubating (though it seemed to work for other people based on my googling), but CN worked fine.
-- Sent from: http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/