# Enabling LDAP/Active Directory Authentication in Apache Guacamole
Author: i12bretro
Keywords: Guacamole,Apache,LDAP,Active Directory,Microsoft,Linux,Authentication,Debian,Web Based RDP,Web Based VNC,Web Based SSH,System Administration,Home Lab,Home Lab Ideas,Install Guide,Browser Based,Web Based,Web Based Tools,Self-Hosted,Apache Guacamole,Apache Guacamole LDAP Authentication,RDP,SSH,VNC,Terminal,Browser Based Administration,Browser Based RDP,Browser Based VNC,Free Software,Freeware,System Administrator,How To,Tutorial,i12bretro

1. Open a terminal and run the following commands:
   wget http://mirror.metrocast.net/apache/guacamole/1.2.0/binary/guacamole-auth-ldap-1.2.0.tar.gz
   tar -xzf guacamole-auth-ldap-1.2.0.tar.gz
   sudo mkdir /etc/guacamole/extensions
   sudo cp ~/guacamole-auth-ldap-1.2.0/guacamole-auth-ldap-1.2.0.jar /etc/guacamole/extensions
   sudo nano /etc/guacamole/guacamole.properties
2. Edit the guacamole.properties file adding the following values:

   ### LDAP SETTINGS
   ldap-hostname: i12bretrodc.i12bretro.local
   ldap-port: 389
   ldap-encryption-method: none

   ldap-user-base-dn: DC=i12bretro,DC=local
   ldap-username-attribute: sAMAccountName

   ldap-search-bind-dn: CN=readonly_svc,CN=Users,DC=i12bretro,DC=local
   ldap-search-bind-password: Read0nly!!
   ldap-user-search-filter: (&(objectClass=user)(memberOf:1.2.840.113556.1.4.1941:=CN=GuacamoleUsers,CN=Users,DC=i12bretro,DC=local))

3. Press CTRL+O, Enter, CTRL+X to save the changes and exit
4. Back in the terminal, run the following command to restart Tomcat
   sudo systemctl restart tomcat9
5. Open a web browser and navigate to Guacamole
6. Test logging in with a valid Active Directory username and password

   Note: to use an Active Directory account in Guacamole as a Guacamole administrator you must manually create the User in Guacamole > Settings > Users. After logging in with the account it will see Active Directory and Guacamole specific users simultaneously

https://enterprise.glyptodon.com/doc/latest/authenticating-users-with-ldap-12812314.html
https://guacamole.apache.org/doc/gug/ldap-auth.html#ldap-downloading