Kasm Integration

[OscarCy]

Kasm Integration

[jakob42]

Works fine for me. My settings:

search filter: (&(objectClass=person)(uid={0})(memberof=cn=kasm,ou=groups,dc=example,dc=com))
group membership filter: (&(member={0})(objectClass=groupOfUniqueNames))

I'll try to submit a pull request with documentation next week.

My problem was I missed the need to add the "domain" to the login. So I need to login with [email protected]. Otherwise it wont even query the ldap server.

Thanks for this neat software nitnelave!

[jakob42]

I guess we can close this? There is documentation now

[nitnelave]

Hi! I haven't tried myself to set up Kasm, but let me have a look at your config.

The group membership filter seems to be missing a member={0} (unless it cut in the screenshot?): my understanding is that it returns all the user's groups, so it has to be filtered on a specific user.
If you want to only get users from a specific group, you can add a memberOf=cn=my_group,ou=groups,dc=.. to the search filter (the user search filter).

Now, for the login error: to check if a given user's password is correct, typical LDAP clients will try to log in as that user (and that's the recommended way). That's why you see a login error for the user, and not for the admin.

To better understand what's going on, it would be helpful to provide the full verbose logs (verbose=true in the config or LLDAP_VERBOSE=true in the env): that will include the queries and responses.