If you have an LDAP-Directory where Users and Groups are in the same subtree and you don't use LDAP for Connection-Storage (guacConfigGroup) you get all objects under the DN configured as ldap-group-base-dn returned as groups.
Our directory looks like this:
As ldap-group-base-dn I have to configure OU=faculty,DC=AD,DC=company,dc=de
But then I get in the Web-UI all Groups and all Students as Group-Objects which makes no sense
I have a fix for me but as I am not a programmer, I don't know how to implement it the right way.
I changed in UserGroupService.java line 92 from:
return new PresenceNode("objectClass");
return new AndNode(new EqualityNode("objectClass","group"));
at line 34.
Thanks for making this great project!
- is duplicated by
GUACAMOLE-998 LDAP: Do not retrieve all groups from LDAP