Details

      Description

      Currently, there is no way to filter LDAP login other than "ldap-username-attribute" and "ldap-user-base-dn". We need a way to filter LDAP authentication base on arbitrary criteria like group membership, thus the option will need to support arbitrary LDAP search filters.

        Activity

        Hide
        mike.jumper Michael Jumper added a comment -

        In fact ... perhaps the LDAP support should be expanded to support multiple directories / base DNs. There's been recent interest in this on the mailing lists, and it's pretty clear that having only one derived filter for one directory under one base DN is insufficient:

        http://apache-guacamole-incubating-users.2363388.n4.nabble.com/Ldap-amp-password-change-td319.html

        Show
        mike.jumper Michael Jumper added a comment - In fact ... perhaps the LDAP support should be expanded to support multiple directories / base DNs. There's been recent interest in this on the mailing lists, and it's pretty clear that having only one derived filter for one directory under one base DN is insufficient: http://apache-guacamole-incubating-users.2363388.n4.nabble.com/Ldap-amp-password-change-td319.html

          People

          • Assignee:
            mike.jumper Michael Jumper
            Reporter:
            aweng@hotmail.com annie weng
          • Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved:

              Development