[GUACAMOLE-382] Difficult to manage an install consisting of many users and connections

• Type: Improvement
• Status: Resolved
• Priority: Minor
• Resolution: Duplicate
• Affects Version/s: 0.9.13-incubating
• Component/s: guacamole-auth-jdbc, guacamole-auth-ldap
• Environment: Linux
• Assignee: Unassigned
• Reporter: Wake Board
• Created: 15/Sep/17 12:54
• Updated: 17/Sep/17 02:16
• Resolved: 17/Sep/17 02:16

Description

It is very difficult to use guacamole to manage a large install consisting of 40-60 users able to access 40-60 connections. Adding a new connection requires visiting each user profile separately to add the new host.

Would suggest one of two improvements:

1. Improve user management to allow defining roles. These roles (groups) could allow assigning specific permissions and then the roles are granted to users. For example, there could be roles for developers, testers, and customers. Each role unlocks specific connections. Then just the role is granted to individual ldap accounts. This would greatly reduce the effort to maintain.
2. Provide (or document) an interface to programmatically allow granting users-to-connections. This would allow external scripting/management of the connections available to a specific user. From the outside, a customer could automate assigning the connections that are needed for a specific user. Would need to be able to query, add, and remove connections per user and to be able to enumerate connections available. Perhaps it could be a REST interface or alternatively details of how to do this via the underlying database.

Our install consists of using the ldap module for login authentication and the jdbc module for connection information.

Issue Links

• duplicates: GUACAMOLE-220 Implement user groups