I've found the solution !

I have to enter into container : docker exec -u root -it guacamole_compose 
/bin/bash

After create certificate, I have to import with : keytool -import -trustcacerts 
-alias ldapcert -file /tmp/ldap.pem -keystore 
/opt/java/openjdk/jre/lib/security/cacerts

Restart docker container, all is OK !

Sylvain

De : Joachim Lindenberg <[email protected]>
Envoyé : jeudi 5 octobre 2023 15:28
À : [email protected]
Objet : AW: Guacamole with Docker, LDAPS and Self-Signed certificate

Afaik there are three options:

  *   update the Java keystore to include the root certificate used to sign the 
certificate used by LDAP
  *   change your LDAP to use a certificate by one of the standard root 
certification authorities like Letsencrypt
  *   set up a proxy next to guacamole (same host) that proxies the ldap 
connection to ldaps.
Regards,
Joachim

Von: BLANCHOUIN Sylvain 
<[email protected]<mailto:[email protected]>>
Gesendet: Donnerstag, 5. Oktober 2023 13:11
An: [email protected]<mailto:[email protected]>
Betreff: Guacamole with Docker, LDAPS and Self-Signed certificate

Hello everyone,

I deployed Guacamole with Docker and LDAP authentication. Everything works 
perfectly. I want to switch to LDAPS, but I can't. I have an error message:

"unable to find valid certification path to requested target"

My authentication is done on Windows AD, and my certificate is issued by ADCS. 
How do I add my certificate to the trusted certificates?

I've been stuck on this for several days...

Thanks for your help,

Sylvain

Reply via email to