[GUACAMOLE-944] Non-DN usernames can no longer be used for search bind DN

• Type: Bug
• Status: Closed
• Priority: Trivial
• Resolution: Fixed
• Affects Version/s: 1.1.0
• Fix Version/s: 1.4.0
• Component/s: guacamole-auth-ldap
• Environment: Active Directory
• Assignee: Nick Couchman
• Reporter: Ross
• Created: 04/Feb/20 01:45
• Updated: 22/Aug/21 01:09
• Resolved: 22/Aug/21 01:09

Description

On upgrading our Guacamole container from 1.0.0 to 1.1.0, it fails to authenticate. Error message in logs is:

03-Feb-2020 13:37:15.136 INFO [main] org.apache.catalina.startup.Catalina.start Server startup in 3675 ms13:38:12.579 [http-nio-8080-exec-9] WARN o.a.g.e.AuthenticationProviderFacade - The "ldap" authentication provider has encountered an internal error which will halt the authentication process. If this is unexpected or you are the developer of this authentication provider, you may wish to enable debug-level logging. If this is expected and you wish to ignore such failures in the future, please set "skip-if-unavailable: ldap" within your guacamole.properties.13:38:12.579 [http-nio-8080-exec-9] WARN o.a.g.r.auth.AuthenticationService - Authentication attempt from [1.20.211.22, 10.42.4.0] for user "rossg" failed.

Workaround is to switch back to 1.0.0.

Issue Links

• is caused by: GUACAMOLE-234 Migrate from JLDAP to Apache Directory LDAP API