[GUACAMOLE-1119] Unable to query list of objects from LDAP directory

• Type: Bug
• Status: Closed
• Priority: Minor
• Resolution: Invalid
• Affects Version/s: 1.2.0
• Component/s: guacamole, guacamole-auth-ldap
• Environment: guacamole 1.2.0, guacd 1.2.0 running in a docker container on Ubuntu Linux talking to Azure ADDS for secure LDAP
• Assignee: Unassigned
• Reporter: Ed Withers
• Created: 01/Jul/20 19:49
• Updated: 07/Jul/20 14:25
• Resolved: 07/Jul/20 14:25

Description

We run guacamole in a docker container on an Ubuntu Linux machine.  We use Postgres for the database and secure LDAP for authentication connecting to Azure Active Directory Domain Services.  We have been running this configuration with version 1.1.0 of guacamole and guac_d since at least last August.  The update to 1.2.0 broke that integration. 

Symptom: User attempts to log in, after entering username and password, there is a long delay and then the error "Unable to query list of objects from LDAP directory" appears at the top of the screen and the user remains at the login page.  

docker logs show that the user successfully authenticated.  

tcpdump shows traffic flowing between the guacamole container and the LDAP server.

Reverting back to version 1.1.0 "solved" the problem.

We suspect that the new LDAP configuration options changed a default behavior to something that is incompatible with the Azure ADDS schema.