[GUACAMOLE-529] Despite the fact user account is disabled, user account can access to a welcome blank screen

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.9.14, 1.0.0
• Fix Version/s: 1.0.0
• Environment: Ubuntu 16.04.3, mysql, git version guacamole 1.0.0 ; CentOS 7, PostgreSQL, Guacamole Client 0.9.14 ; CentOS 7, SQL Server, Guacamole Client 1.0.0 (git)
• Assignee: Mike Jumper
• Reporter: emma
• Created: 20/Mar/18 10:29
• Updated: 03/Apr/18 12:39
• Resolved: 02/Apr/18 18:25

Description

Hi,

I've made an upgrade from 0.9.12 to 1.0.0 git version (dev) and also an upgrade from 0.9.14 to 1.0.0 git version (dev) everything works fine without any issues then i realized than despite my users account were disabled i can logon to Guacamole and access to a welcome blank screen.

I've also checked in mysql database and users account are Disabled '1'.

So far when a user account was disabled, it was unable to logon and access to any screen. User got a message onto the logon screen like "invalid credential" or something similar.

Guess that "issue" is probably due to developpement version but quite strange for that module managing credential and logon.

Thank you

Issue Links

• is caused by: GUACAMOLE-284 Database "Account Restrictions" not applied when using LDAP