Details
-
Type:
Story
-
Status: Done
-
Priority:
Critical
-
Resolution: Done
-
Affects Version/s: None
-
Fix Version/s: 0.9.9
-
Component/s: guacamole-auth-ldap
-
Labels:
-
Sprint:DEV 2015-10-30
-
Story Points:5
Description
The current LDAP authentication module in Guacamole is very basic. It takes the username and adds the LDAP base DN. This is not sufficient for a directory where users are scattered across multiple distinct OUs under the base DN.
The LDAP module should instead:
- Perform a search for the parameter which identifies the user (uid/samaccountname) under the ENTIRE subtree from the base DN
- Use just the uid/samaccountname to identify the user