guacamole-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Michael Jumper (JIRA)" <j...@apache.org>
Subject [jira] [Updated] (GUACAMOLE-341) Make SSO Authentication work and pass through username to RDP session
Date Fri, 07 Jul 2017 14:40:00 GMT

     [ https://issues.apache.org/jira/browse/GUACAMOLE-341?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Michael Jumper updated GUACAMOLE-341:
-------------------------------------
    Description: 
To make tokenfilter work with auth-header -and noauth module.- (needed e.g. for Kerberos authentication
through an Apache/Nginx Reverse Proxy, that passes REMOTE_USER header), username must be set
in the credentials object, because it is added to the Tokenfilter only if username is not
null in the credentials object.

basically make $\{GUAC_USERNAME} be replaced with the credentials passed though the REMOTE_USER
variable.

See also:
https://github.com/glyptodon/guacamole-client/blob/b26a664d66fd14a22eb7300d29aa20390cf408ec/guacamole-ext/src/main/java/org/apache/guacamole/token/StandardTokens.java#L118

https://github.com/glyptodon/guacamole-client/blob/0.9.12-incubating/guacamole-ext/src/main/java/org/apache/guacamole/net/auth/simple/SimpleAuthenticationProvider.java#L170

  was:
To make tokenfilter work with auth-header and noauth module. (needed e.g. for Kerberos authentication
through an Apache/Nginx Reverse Proxy, that passes REMOTE_USER header), username must be set
in the credentials object, because it is added to the Tokenfilter only if username is not
null in the credentials object.

basically make ${GUAC_USERNAME} be replaced with the credentials passed though the REMOTE_USER
variable.

See also:
https://github.com/glyptodon/guacamole-client/blob/b26a664d66fd14a22eb7300d29aa20390cf408ec/guacamole-ext/src/main/java/org/apache/guacamole/token/StandardTokens.java#L118

https://github.com/glyptodon/guacamole-client/blob/0.9.12-incubating/guacamole-ext/src/main/java/org/apache/guacamole/net/auth/simple/SimpleAuthenticationProvider.java#L170


> Make SSO Authentication work and pass through username to RDP session 
> ----------------------------------------------------------------------
>
>                 Key: GUACAMOLE-341
>                 URL: https://issues.apache.org/jira/browse/GUACAMOLE-341
>             Project: Guacamole
>          Issue Type: Bug
>          Components: guacamole-auth-header
>    Affects Versions: 0.9.12-incubating
>            Reporter: Gregor S
>
> To make tokenfilter work with auth-header -and noauth module.- (needed e.g. for Kerberos
authentication through an Apache/Nginx Reverse Proxy, that passes REMOTE_USER header), username
must be set in the credentials object, because it is added to the Tokenfilter only if username
is not null in the credentials object.
> basically make $\{GUAC_USERNAME} be replaced with the credentials passed though the REMOTE_USER
variable.
> See also:
> https://github.com/glyptodon/guacamole-client/blob/b26a664d66fd14a22eb7300d29aa20390cf408ec/guacamole-ext/src/main/java/org/apache/guacamole/token/StandardTokens.java#L118
> https://github.com/glyptodon/guacamole-client/blob/0.9.12-incubating/guacamole-ext/src/main/java/org/apache/guacamole/net/auth/simple/SimpleAuthenticationProvider.java#L170



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Mime
View raw message