[GUACAMOLE-768] SQL backed group doesn't work with LDAP auth

• Type: Bug
• Status: Closed
• Priority: Minor
• Resolution: Duplicate
• Affects Version/s: 1.0.0
• Component/s: guacamole-auth-ldap
• Assignee: Unassigned
• Reporter: Charlie Stamp
• Created: 29/Mar/19 16:55
• Updated: 29/Mar/19 22:48
• Resolved: 29/Mar/19 17:16

Description

If a user is created a SQL user (mysql in my case) then that user inherits group connections.  If a user exists in LDAP in doesn't inherit group connections, but it does inherit administrative permissions.  If there was a way to make a connection read-only that'd be great.  The issue regarding using database groups mentioned using proper ACL style permissions and was incorrectly mark as resolved (or that line was mistakenly left in since that was ignored).

 

Inheriting administrative permissions does give access to all connections to LDAP users.  It is a terrible work around only because I don't anyone editing connections except for IT staff.

Issue Links

• duplicates: GUACAMOLE-696 Apply database groups if authenticated user matches database user