[GUACAMOLE-1100] LDAP authentication DNs encoding

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 1.0.0, 1.1.0, 1.2.0
• Component/s: guacamole-auth-ldap
• Environment: Tested with docker images 1.0.0 and 1.1.0
• External issue URL: https://jira.glyptodon.com/browse/GUAC-1570
• Assignee: Unassigned
• Reporter: kaliko
• Created: 12/Jun/20 10:21
• Updated: 04/Nov/20 08:24

Description

Guacamole can not authenticate against ldap if ldap-user-base-dn contains accentuated characters. Somebody already reported this on jira.glyptodon.com

For instance using docker config env:

LDAP_SEARCH_BIND_DN=CN=some_user,OU=Systeme,OU=Département X,OU=Sciences et Technologies,DC=example,DC=org

I got:

ERROR o.a.g.a.l.AuthenticationProviderService - Unable to bind using search DN "CN=some_user,OU=Systeme,OU=Département X,OU=Sciences et Technologies,DC=example,DC=org"

And as mentioned in GUAC-1570 on jira.glyptodon.com:

docker-compose logs --tail=100 --no-color | grep 'Unable to bind using search DN' | iconv -f utf8 -t iso-8859-1
web | 10:03:47.792 [http-nio-8080-exec-10] ERROR o.a.g.a.l.AuthenticationProviderService - Unable to bind using search DN "CN=some_user,OU=Systeme,OU=Département X,OU=Sciences et Technologies,DC=example,DC=org"

 Using " LDAP_SEARCH_BIND_DN=some_user " with 1.0.0 is fine, but not possible with1.1.0 because of 944.