[GUACAMOLE-12] Allow LDAP role-based access control for guacConfigGroups

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Done
• Fix Version/s: 0.9.10-incubating
• Component/s: guacamole-auth-ldap
• External issue URL: https://glyptodon.org/jira/browse/GUAC-1388
• Assignee: Unassigned
• Reporter: Mike Jumper
• Created: 19/May/16 03:23
• Updated: 19/May/16 03:24
• Resolved: 19/May/16 03:24

Description

The description of this issue was copied from GUAC-1388, an issue in the JIRA instance used by the Guacamole project prior to its acceptance into the Apache Incubator.

Comments, attachments, related issues, and history from prior to acceptance have not been copied and can be found instead at the original issue.

guacConfigGroups currently only allow members of the group to have access to the connection. This change would support allowing the guacConfigGroup to point to additional LDAP groups for connection access (all members of that group would have access to the connection). The seeAlso attribute would be used to point to another LDAP group using its DN as the value of the attribute.