guacamole-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From nicoschottelius <nico.schottel...@ungleich.ch>
Subject Re: LDAP authentication failtures & success at the same time
Date Thu, 25 Apr 2019 18:34:40 GMT
Hey Nick,

the full log around the trial is below at [0].
The configuration file is as follows:

ldap-search-bind-dn: PRIVATE
ldap-search-bind-password: PRIVATE
ldap-user-base-dn: PRIVATE
ldap-hostname: PRIVATE
ldap-port: 636
ldap-encryption-method: ssl
ldap-follow-referrals: true
ldap-username-attribute: uid

ldap-user-search-filter: PRIVATE
ldap-max-search-results: 500000


guacd-hostname: localhost
guacd-port: 4822
mysql-hostname: localhost
mysql-username: guacamole
mysql-database: guacamole
mysql-password: xyz


I tried values 50/1000/50000/500000 for ldap-max-search-results, all with
the same result.
I tried using and not using ldap-user-search-filter with (ou=XZY) which
shrinks the result to 143 users.
Without the filter it returns > 60k users.

Best regards,

Nico

[0]
 INFO: Starting service Catalina
 Apr 25, 2019 2:21:58 PM org.apache.catalina.core.StandardEngine
startInternal
 INFO: Starting Servlet Engine: Apache Tomcat/7.0.76
 Apr 25, 2019 2:21:58 PM org.apache.catalina.startup.HostConfig deployWAR
 INFO: Deploying web application archive
/var/lib/tomcat/webapps/guacamole.war
 Apr 25, 2019 2:21:59 PM org.apache.catalina.startup.TldConfig execute
 INFO: At least one JAR was scanned for TLDs yet contained no TLDs. Enable
debug logging for this logger for a complete list of JARs that were scanned
but no TLDs were found in them. Skipping unneeded JA
compilation time.
 14:21:59.869 [localhost-startStop-1] INFO 
o.a.g.environment.LocalEnvironment - GUACAMOLE_HOME is
"/usr/share/tomcat/.guacamole".
 14:21:59.931 [localhost-startStop-1] INFO 
o.a.g.rest.auth.HashTokenSessionMap - Sessions will expire after 60 minutes
of inactivity.
 14:22:00.040 [localhost-startStop-1] INFO 
o.a.g.environment.LocalEnvironment - GUACAMOLE_HOME is
"/usr/share/tomcat/.guacamole".
 14:22:01.097 [localhost-startStop-1] INFO  o.a.g.extension.ExtensionModule
- Extension "MySQL Authentication" loaded.
 14:22:01.099 [localhost-startStop-1] INFO 
o.a.g.environment.LocalEnvironment - GUACAMOLE_HOME is
"/usr/share/tomcat/.guacamole".
 14:22:01.220 [localhost-startStop-1] INFO  o.a.g.extension.ExtensionModule
- Extension "LDAP Authentication" loaded.
 14:22:01.222 [localhost-startStop-1] INFO 
o.a.g.environment.LocalEnvironment - GUACAMOLE_HOME is
"/usr/share/tomcat/.guacamole".
 14:22:01.334 [localhost-startStop-1] INFO  o.a.g.extension.ExtensionModule
- Extension "TOTP TFA Authentication Backend" loaded.
 14:22:01.336 [localhost-startStop-1] INFO 
o.a.g.environment.LocalEnvironment - GUACAMOLE_HOME is
"/usr/share/tomcat/.guacamole".
 14:22:01.399 [localhost-startStop-1] INFO  o.a.g.t.w.WebSocketTunnelModule
- Loading JSR-356 WebSocket support...
: Started Session 368 of user root.
-logind: New session 368 of user root.
 Apr 25, 2019 2:24:51 PM org.apache.catalina.util.SessionIdGeneratorBase
createSecureRandom
 INFO: Creation of SecureRandom instance for session ID generation using
[SHA1PRNG] took [169,611] milliseconds.
 Apr 25, 2019 2:24:51 PM
com.sun.jersey.guice.spi.container.GuiceComponentProviderFactory register
 INFO: Registering org.apache.guacamole.rest.RESTExceptionMapper as a
provider class
 Apr 25, 2019 2:24:51 PM
com.sun.jersey.guice.spi.container.GuiceComponentProviderFactory register
 INFO: Registering org.apache.guacamole.rest.extension.ExtensionRESTService
as a root resource class
 Apr 25, 2019 2:24:51 PM
com.sun.jersey.guice.spi.container.GuiceComponentProviderFactory register
 INFO: Registering org.apache.guacamole.rest.language.LanguageRESTService as
a root resource class
 Apr 25, 2019 2:24:51 PM
com.sun.jersey.guice.spi.container.GuiceComponentProviderFactory register
 INFO: Registering org.apache.guacamole.rest.patch.PatchRESTService as a
root resource class
 Apr 25, 2019 2:24:51 PM
com.sun.jersey.guice.spi.container.GuiceComponentProviderFactory register
 INFO: Registering org.apache.guacamole.rest.auth.TokenRESTService as a root
resource class
 Apr 25, 2019 2:24:51 PM
com.sun.jersey.guice.spi.container.GuiceComponentProviderFactory register
 INFO: Registering org.apache.guacamole.rest.session.SessionRESTService as a
root resource class
 Apr 25, 2019 2:24:51 PM
com.sun.jersey.guice.spi.container.GuiceComponentProviderFactory register
 INFO: Registering org.codehaus.jackson.jaxrs.JacksonJsonProvider as a
provider class
 Apr 25, 2019 2:24:51 PM
com.sun.jersey.server.impl.application.WebApplicationImpl _initiate
 INFO: Initiating Jersey application, version 'Jersey: 1.17.1 02/28/2013
12:47 PM'
 Apr 25, 2019 2:24:51 PM
com.sun.jersey.guice.spi.container.GuiceComponentProviderFactory
getComponentProvider
 INFO: Binding org.apache.guacamole.rest.RESTExceptionMapper to
GuiceManagedComponentProvider with the scope "Singleton"
 Apr 25, 2019 2:24:51 PM
com.sun.jersey.guice.spi.container.GuiceComponentProviderFactory
getComponentProvider
 INFO: Binding org.codehaus.jackson.jaxrs.JacksonJsonProvider to
GuiceManagedComponentProvider with the scope "Singleton"
 Apr 25, 2019 2:24:51 PM
com.sun.jersey.guice.spi.container.GuiceComponentProviderFactory
getComponentProvider
 INFO: Binding org.apache.guacamole.rest.extension.ExtensionRESTService to
GuiceManagedComponentProvider with the scope "PerRequest"
 Apr 25, 2019 2:24:51 PM
com.sun.jersey.guice.spi.container.GuiceComponentProviderFactory
getComponentProvider
 INFO: Binding org.apache.guacamole.rest.language.LanguageRESTService to
GuiceManagedComponentProvider with the scope "PerRequest"
 Apr 25, 2019 2:24:51 PM
com.sun.jersey.guice.spi.container.GuiceComponentProviderFactory
getComponentProvider
 INFO: Binding org.apache.guacamole.rest.patch.PatchRESTService to
GuiceManagedComponentProvider with the scope "PerRequest"
 Apr 25, 2019 2:24:51 PM
com.sun.jersey.guice.spi.container.GuiceComponentProviderFactory
getComponentProvider
 INFO: Binding org.apache.guacamole.rest.auth.TokenRESTService to
GuiceManagedComponentProvider with the scope "PerRequest"
 Apr 25, 2019 2:24:51 PM
com.sun.jersey.guice.spi.container.GuiceComponentProviderFactory
getComponentProvider
 INFO: Binding org.apache.guacamole.rest.session.SessionRESTService to
GuiceManagedComponentProvider with the scope "PerRequest"
 Apr 25, 2019 2:24:51 PM org.webjars.servlet.WebjarsServlet init
 INFO: WebjarsServlet initialization completed
 Apr 25, 2019 2:24:52 PM org.apache.catalina.startup.HostConfig deployWAR
 INFO: Deployment of web application archive
/var/lib/tomcat/webapps/guacamole.war has finished in 173,239 ms
 Apr 25, 2019 2:24:52 PM org.apache.coyote.AbstractProtocol start
 INFO: Starting ProtocolHandler ["http-bio-8080"]
 Apr 25, 2019 2:24:52 PM org.apache.coyote.AbstractProtocol start
 INFO: Starting ProtocolHandler ["ajp-bio-8009"]
 Apr 25, 2019 2:24:52 PM org.apache.catalina.startup.Catalina start
 INFO: Server startup in 173300 ms
 14:26:02.912 [http-bio-8080-exec-1] INFO 
o.a.g.r.auth.AuthenticationService - User "nico" successfully authenticated
from 10.204.X.X



--
Sent from: http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

Mime
View raw message