Uploaded image for project: 'Guacamole'
  1. Guacamole
  2. GUACAMOLE-341

GUAC_USERNAME token not defined if using SSO

    XMLWordPrintableJSON

Details

    Description

      To make tokenfilter work with auth-header and noauth module. (needed e.g. for Kerberos authentication through an Apache/Nginx Reverse Proxy, that passes REMOTE_USER header), username must be set in the credentials object, because it is added to the Tokenfilter only if username is not null in the credentials object.

      basically make ${GUAC_USERNAME} be replaced with the credentials passed though the REMOTE_USER variable.

      See also:
      https://github.com/glyptodon/guacamole-client/blob/b26a664d66fd14a22eb7300d29aa20390cf408ec/guacamole-ext/src/main/java/org/apache/guacamole/token/StandardTokens.java#L118

      https://github.com/glyptodon/guacamole-client/blob/0.9.12-incubating/guacamole-ext/src/main/java/org/apache/guacamole/net/auth/simple/SimpleAuthenticationProvider.java#L170

      Attachments

        Activity

          People

            mjumper Mike Jumper
            dotmaster Gregor S
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: