[GUACAMOLE-341] GUAC_USERNAME token not defined if using SSO

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.9.12-incubating
• Fix Version/s: 0.9.14
• Component/s: guacamole-auth-cas, guacamole-auth-header
• Assignee: Mike Jumper
• Reporter: Gregor S
• Created: 07/Jul/17 12:27
• Updated: 27/Sep/17 17:34
• Resolved: 27/Sep/17 17:34

Description

To make tokenfilter work with auth-header and noauth module. (needed e.g. for Kerberos authentication through an Apache/Nginx Reverse Proxy, that passes REMOTE_USER header), username must be set in the credentials object, because it is added to the Tokenfilter only if username is not null in the credentials object.

basically make ${GUAC_USERNAME} be replaced with the credentials passed though the REMOTE_USER variable.

See also:
https://github.com/glyptodon/guacamole-client/blob/b26a664d66fd14a22eb7300d29aa20390cf408ec/guacamole-ext/src/main/java/org/apache/guacamole/token/StandardTokens.java#L118

https://github.com/glyptodon/guacamole-client/blob/0.9.12-incubating/guacamole-ext/src/main/java/org/apache/guacamole/net/auth/simple/SimpleAuthenticationProvider.java#L170