[GUACAMOLE-1287] LDAP groups from AD without members

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Invalid
• Affects Version/s: 1.3.0
• Component/s: guacamole-auth-ldap
• Labels: client extension ldap
• Environment: Ubuntu 20.0.4, MySQL 8.0.23, PHP7.4, Guacamole 1.3.0
• Assignee: Unassigned
• Reporter: Daniele
• Created: 14/Feb/21 15:03
• Updated: 14/Feb/21 17:18
• Resolved: 14/Feb/21 17:18

Description

Once LDAP authentication has been configured against AD, LDAP groups are empty, i.e. without members.

This is my configuration:

 

#LDAP properties
ldap-hostname a.b.c.d
ldap-port 389
ldap-encryption-method none
ldap-search-bind-dn CN=Ldap_int,OU=Services,DC=contoso,DC=com
ldap-search-bind-password XXXXXXXXXXXXXXXXXXXX
ldap-user-base-dn OU=Users,DC=contoso,DC=com
ldap-username-attribute sAMAccountName
ldap-user-search-filter (objectClass=user)
ldap-group-base-dn OU=Groups,DC=contoso,DC=com
ldap-group-name-attribute cn
ldap-dereference-aliases always
ldap-follow-referrals true
ldap-member-attribute member
ldap-member-attribute-type dn