Mailing-List: contact commits-help@guacamole.incubator.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@guacamole.incubator.apache.org
Date: Thu, 19 May 2016 03:23:12 +0000 (UTC)
From: "Michael Jumper (JIRA)" <jira@apache.org>
To: commits@guacamole.incubator.apache.org
Message-ID: <JIRA.12971002.1463628190000.231960.1463628192853@Atlassian.JIRA>
In-Reply-To: <JIRA.12971002.1463628190000@Atlassian.JIRA>
References: <JIRA.12971002.1463628190000@Atlassian.JIRA> <JIRA.12971002.1463628190919@arcas>
Subject: [jira] [Created] (GUACAMOLE-12) Allow LDAP role-based access
 control for guacConfigGroups
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
archived-at: Thu, 19 May 2016 03:23:19 -0000

Michael Jumper created GUACAMOLE-12:
---------------------------------------

             Summary: Allow LDAP role-based access control for guacConfigGroups
                 Key: GUACAMOLE-12
                 URL: https://issues.apache.org/jira/browse/GUACAMOLE-12
             Project: Guacamole
          Issue Type: Improvement
          Components: guacamole-auth-ldap
            Reporter: Michael Jumper
             Fix For: 0.9.10-incubating


{panel:bgColor=#FFFFEE}
*The description of this issue was copied from [GUAC-1388|https://glyptodon.org/jira/browse/GUAC-1388], an issue in the JIRA instance used by the Guacamole project prior to its acceptance into the Apache Incubator.*

Comments, attachments, related issues, and history from prior to acceptance *have not been copied* and can be found instead at the original issue.
{panel}

guacConfigGroups currently only allow members of the group to have access to the connection. This change would support allowing the guacConfigGroup to point to additional LDAP groups for connection access (all members of that group would have access to the connection). The seeAlso attribute would be used to point to another LDAP group using its DN as the value of the attribute.


--
This message was sent by Atlassian JIRA
(v6.3.4#6332)