On Thu, Sep 19, 2024 at 3:49 PM Ravikumar J (EXT-Nokia) <ravikumar.j....@nokia.com.invalid> wrote:
> Hello, > > How to configure a user as a System Administrator when using LDAP > authentication? > > Of course, I can create user and enable system admin permission in > Guacamole, but I should be able to configure it in LDAP itself. Is it > possible? > > > No, there is currently no way to enable admin access for an LDAP account directly in LDAP, for a couple of reasons: * If you're using only the LDAP extension (no JDBC) in Guacamole, there's actually no admin interface at all - the connections are managed via LDAP and not via the admin interface, so there's not any concept of an admin user for the LDAP extension. * If you're using the LDAP extension in combination with the JDBC extension, storing connections in a database and authenticating with LDAP, you still have to map the LDAP users to the database users, which means that the users need to match ones that exist in the database, and permissions need to be assigned to those users/groups in the database extension. There are some ways to ease this - like enabling automatic user creation in the JDBC module and using user groups to map the permissions. -Nick >
