[GUACAMOLE-1030] LDAP and Database does not allow LDAP only users to create connections

• Type: Bug
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 1.1.0
• Assignee: Unassigned
• Reporter: Roman Bäriswyl
• Created: 16/Apr/20 08:14
• Updated: 07/Jul/20 13:19
• Resolved: 04/Jul/20 21:06

Description

Following Scenario:

I have LDAP authentication and database enabled.

I have created a group "MyGroup" in the DB and assigned it create connections/create connection groups rights.

The group "MyGroup" exists in LDAP and "user_a" is inside it.

Now when the "user_a" logs in into guacamole, it correctly seems to have rights to create groups / connection groups.

Uppon creating a connection or a connection group,  guacamole shows "Unexpected internal error". In the log, I see:

"ERROR: null value in column "entity_id" violates not-null constrait" in a query that seems to insert permissions into "guacamole_connection_group_permission".
I suspect the entity_id is the id of the user which does not exist for users that are only in LDAP.

Does this mean that I manually have to add all users to the DB that should be able to create connections or connection groups? Wouldn't it be possible for guacamole to automatically create users (without a password) for LDAP users in the database?

Issue Links

• is fixed by: GUACAMOLE-708 Allow database storage of arbitrary attributes for non-database users