[GUACAMOLE-1211] LDAP + TOTP + MySQL: User already exists

• Type: Bug
• Status: Closed
• Priority: Minor
• Resolution: Invalid
• Affects Version/s: 1.2.0
• Component/s: guacamole, guacamole-auth-jdbc-mysql, guacamole-auth-ldap, guacamole-auth-totp
• Assignee: Unassigned
• Reporter: Fabian I
• Created: 13/Nov/20 11:08
• Updated: 28/Dec/20 23:53
• Resolved: 28/Dec/20 23:53

Description

Versions in use:

• guacamole-auth-totp-1.2.0.jar
• guacamole-auth-ldap-1.2.0.jar
• guacamole-auth-jdbc-mysql-1.2.jar
• guacamole 1.2
• Tomcat9
• MariaDB 10.3.25
• Ubuntu Server 20.04.1

 

Issue description:

User 1 does his first login on Guacamole over LDAPS. After entering the correct credentials Guacamole says that the user already exists and aborts the logon. User 1 does his second login on Guacamole over LDAPS and gets successfully redirected to TOTP setup. Authentication is against Active Directory,

 

Content of guacamole.properties:

#
# MySQL properties
#
mysql-hostname: server
mysql-port: port
mysql-database: database
mysql-username: user
mysql-password: password
mysql-auto-create-accounts: true
#
# TOTP properties
#
totp-issuer name
totp-digits 6
totp-period 30
totp-mode sha1
#
# LDAP properties
#
auth-provider: net.sourceforge.guacamole.net.auth.ldap.LDAPAuthenticationProvider
ldap-hostname: hostname
ldap-port: 636
ldap-encryption-method: ssl
ldap-max-search-results: 100
ldap-search-bind-dn: bind-dn
ldap-search-bind-password: bind-password
ldap-user-base-dn: base-dn
ldap-username-attribute: sAMAccountName
ldap-member-attribute: member
#ldap-member-attribute-type: dn
#ldap-user-attributes:
ldap-user-search-filter: (search-filter)
#ldap-config-base-dn:
#ldap-group-base-dn:
#ldap-group-name-attribute:
#ldap-dereference-aliases:
ldap-follow-referrals: false
#ldap-max-referral-hops:
ldap-operation-timeout: 10