0ct0pu5
/
tutorials


			
				
					
						
						
							12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061
							    <!DOCTYPE html>
    <html lang="en" xmlns="http://www.w3.org/1999/xhtml">
      <head>
        <title>Enabling LDAP/Active Directory Authentication in Apache Guacamole</title>
        <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
        <meta charset="UTF-8">
        <meta name="keywords" content="How To,Tutorial,i12bretro,Guacamole,Apache,LDAP,Active Directory,Microsoft,Linux,Authentication">
        <meta name="author" content="i12bretro">
        <meta name="description" content="Enabling LDAP/Active Directory Authentication in Apache Guacamole">
        <meta name="viewport" content="width=device-width, initial-scale=1.0">
								  <script type="text/javascript" src="https://code.jquery.com/jquery-3.5.1.min.js"></script>
				        <script type="text/javascript" src="includes/js/steps.js"></script>
        <link href="css/steps.css" rel="stylesheet" type="text/css" />
      </head>
      <body>
        <div id="gridContainer">
          <div class="topMargin"></div>
          <div id="listName" class="topMargin">
            <h1>Enabling LDAP/Active Directory Authentication in Apache Guacamole</h1>
          </div>
          <div></div>
          <div id="content">
          <ol>
	<li>Open a terminal and run the following commands:
	<div class="codeBlock">wget http://mirror.metrocast.net/apache/guacamole/1.2.0/binary/guacamole-auth-ldap-1.2.0.tar.gz<br />
	<b>tar</b> -xzf guacamole-auth-ldap-1.2.0.tar.gz<br />
	sudo mkdir /etc/guacamole/extensions<br />
	sudo cp ~/guacamole-auth-ldap-1.2.0/guacamole-auth-ldap-1.2.0.jar /etc/guacamole/extensions<br />
	sudo nano /etc/guacamole/guacamole.properties</div>
	</li>
	<li>Edit the guacamole.properties file adding the following values:
	<p>### LDAP SETTINGS<br />
	ldap-hostname:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; i12bretrodc.i12bretro.local<br />
	ldap-port:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 389<br />
	ldap-encryption-method: none</p>

	<p>ldap-user-base-dn:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; DC=i12bretro,DC=local<br />
	ldap-username-attribute: sAMAccountName</p>

	<p>ldap-search-bind-dn:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; CN=readonly_svc,CN=Users,DC=i12bretro,DC=local<br />
	ldap-search-bind-password: Read0nly!!<br />
	<br />
	ldap-user-search-filter: (&amp;(objectClass=user)(memberOf:1.2.840.113556.1.4.1941:=CN=GuacamoleUsers,CN=Users,DC=i12bretro,DC=local))</p>
	</li>
	<li>Press CTRL+O, Enter, CTRL+X to save the changes and exit</li>
	<li>Back in the terminal, run the following command to restart Tomcat
	<div class="codeBlock">sudo systemctl restart tomcat9</div>
	</li>
	<li>Open a web browser and navigate to Guacamole</li>
	<li>Test logging in with a valid Active Directory username and password
	<p>Note: to use an Active Directory account in Guacamole as a Guacamole administrator you must manually create the User in Guacamole &gt; Settings &gt; Users. After logging in with the account it will see Active Directory and Guacamole specific users simultaneously</p>
	</li>
</ol>

<p>https://enterprise.glyptodon.com/doc/latest/authenticating-users-with-ldap-12812314.html<br />
https://guacamole.apache.org/doc/gug/ldap-auth.html#ldap-downloading</p>
          </div>
        </div>
      </body>
    </html>