Look, my ldap-servers.yml

- hostname: ldap.domain.local
  port: 636
  encryption-method: ssl
  user-base-dn: dc=domain,dc=local
  match-usernames:
    - LOCAL\\(.*)
    - (.*)@domain\.local
  username-attribute: sAMAccountName
  search-bind-dn: cn=srv_gcd,ou=ServicesAuth,dc=domain,dc=local
  search-bind-password: passwordXsds224e
  user-search-filter: 
(&(&(objectClass=user)(objectCategory=person))(memberof=cn=acess_guacd,ou=Groups,dc=domain,dc=local))

- hostname: ldap.sub.domain.local
  port: 636
  encryption-method: ssl
  user-base-dn: dc=sub,dc=domain,dc=local
  match-usernames:
    - SUB\\(.*)
    - (.*)@sub\.domain\.local
  username-attribute: sAMAccountName
  search-bind-dn: cn=srv_sub_gcd,ou=ServicesAuth,dc=sub,dc=domain,dc=local
  search-bind-password: passwordXX5485
  user-search-filter: 
(&(&(objectClass=user)(objectCategory=person))(memberof=cn=accesso_guaca_sub,ou=Groups,dc=sub,dc=domain,dc=local))

Remember that the guacamole.properties file should only contain the 
configuration:
"auth-provider: 
net.sourceforge.guacamole.net.auth.ldap.LDAPAuthenticationProvider" and others.

The LDAP parameters should only be in the ldap-servers.yml file.

At.te,

Luciano!


________________________________
De: Michael Jumper <mjum...@apache.org>
Enviado: quarta-feira, 17 de julho de 2024 15:23
Para: user@guacamole.apache.org <user@guacamole.apache.org>
Assunto: Re: ldap-servers.yml not working

On 7/17/24 10:18 AM, Nic Fargo wrote:
> I’m trying to use the multiple LDAP servers settings discussed in the
> Apache Guacamole Manual v1.5.5.  I’m not sure if there’s a flag that
> needs to be in /etc/guacamole/guacamole.properties to use the
> ldap-servers.yml file, or if it uses it automatically when present.

It's automatically read and used when present and readable.

> My ldap-servers.yml has the following data: ...

What are the permissions on this file?

What do you see in your Guacamole logs?

- Mike

---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscr...@guacamole.apache.org
For additional commands, e-mail: user-h...@guacamole.apache.org

Reply via email to