[GUACAMOLE-1933] Support AES + Kerberos authentication to AD

• Type: Improvement
• Status: Open
• Priority: Trivial
• Resolution: Unresolved
• Component/s: guacamole-auth-ldap
• Environment: Debian 12 + docker + Windows 2019 + Active Directory 2016
• Assignee: Unassigned
• Reporter: Hubert Cornet
• Created: 20/Mar/24 07:01
• Updated: 20/Mar/24 11:49

Description

Hello everyone,

I'm looking to use Guacamole with LDAP (Active Directory) authentication.

With a simple configuration, there's no problem.

However, as soon as I start using the "Protected Users" group in LDAP (Active Directory), all the users in this group can no longer connect because their protocol is more restrictive.

If you remove them from this group, everything works again.

The problem is that a good administrator will prefer to leave users in the group.

Has anyone encountered this problem and found a workable solution?
Is there any way of modifying the environment variables to take this into account?

Translated with DeepL.com (free version)