Kleines Update … bin wieder drinnen (vergessen in die Domäne zu joinen auf der Webgui).
Wieder altes Problem:
Keine aktiven Verbindungen.
Ich versuche mein Glück einmal irgendwie diesbezüglich 3 Gruppen (RDP VNC SSH ) anzulegen.
Einen Versuch mit der “alten” “best solutions” guacamole Version 
Wenn es klappt, wil ich das hier mal niederschreiben für die Nachwelt.
Hab ich noch vergessen
univention-install univention-guacamole-schema
dann sind auch die blätter für die grupe da.
root@ucs:/usr/share/doc/univention-guacamole-schema# find / -name guacConfigGroup.schema
/var/lib/univention-ldap/local-schema/guacConfigGroup.schema
/var/lib/docker/overlay/704c000f0be29ff52bd973bc99ebaab4f9d870e44909a0f7905c7db70f456cf0/root/tmp/guacamole-docker-BUILD/extensions/guacamole-auth-ldap/schema/guacConfigGroup.schema
root@ucs:/usr/share/doc/univention-guacamole-schema# vi /etc/ldap
ldap/ ldap-backup.secret ldap.secret
root@ucs:/usr/share/doc/univention-guacamole-schema# vi /etc/ldap/slapd.
slapd.conf slapd.d/
root@ucs:/usr/share/doc/univention-guacamole-schema# vi /etc/ldap/slapd.conf
root@ucs:/usr/share/doc/univention-guacamole-schema# /etc/init.d/slapd restart
[ ok ] Restarting slapd (via systemctl): slapd.service.
root@ucs:/usr/share/doc/univention-guacamole-schema# cat /etc/ldap/slapd.conf | grep guacConfigGroup
include /var/lib/univention-ldap/local-schema/guacConfigGroup.schema
root@ucs:/usr/share/doc/univention-guacamole-schema#
root@ucs:/usr/share/guacamole# find / -name guacConfigGroup.ldif
/var/lib/docker/overlay/704c000f0be29ff52bd973bc99ebaab4f9d870e44909a0f7905c7db70f456cf0/root/tmp/guacamole-docker-BUILD/extensions/guacamole-auth-ldap/schema/guacConfigGroup.ldif
/var/lib/docker/overlay/12d36ec485a12a30242c3a1d37a081939636e8b95ecfbb7929a8d50ac792d2b8/root/opt/guacamole/ldap/guacConfigGroup.ldif
/var/lib/docker/overlay/1462440b5f66c7e7a22899e3adfdbf962cc5949428378698d1e5598b2ea3d975/root/opt/guacamole/ldap/guacConfigGroup.ldif
/var/lib/docker/overlay/13cd2113ec3f04b55146c0262f6444d34b63c86acb5f8652a0c2280efab16464/root/opt/guacamole/ldap/guacConfigGroup.ldif
/var/lib/docker/overlay/502196ef91a7c7156162f650c31cfba3a986e85fa53d8d9f07ccefb97f8093ce/merged/opt/guacamole/ldap/guacConfigGroup.ldif
root@ucs:/usr/share/guacamole# cp /var/lib/docker/overlay/704c000f0be29ff52bd973bc99ebaab4f9d870e44909a0f7905c7db70f456cf0/root/tmp/guacamole-docker-BUILD/extensions/guacamole-auth-ldap/schema/guacConfigGroup.ldif /etc/guacamole/
root@ucs:/usr/share/guacamole# ls -la /etc/guacamole/
guacamole.properties guacConfigGroup.ldif user-mapping.xml
root@ucs:/usr/share/guacamole# ls -la /etc/guacamole/
insgesamt 28
drwxr-xr-x 2 root root 4096 Feb 26 11:05 .
drwxr-xr-x 152 root root 12288 Feb 26 10:07 ..
-rw-r--r-- 1 root root 1099 Sep 20 2013 guacamole.properties
-rw-r--r-- 1 root root 1289 Feb 26 11:05 guacConfigGroup.ldif
-rw-r----- 1 root guacamole-web 1030 Sep 20 2013 user-mapping.xml
root@ucs:/usr/share/guacamole# cd /etc/guacamole/
root@ucs:/etc/guacamole# ldapadd -Q -Y EXTERNAL -H ldapi:/// -f guacConfigGroup.ldif
adding new entry "cn=guacConfigGroup,cn=schema,cn=config"
ldap_add: Other (e.g., implementation specific) error (80)
additional info: olcAttributeTypes: Duplicate attributeType: "1.3.6.1.4.1.38971.1.1.1"
root@ucs:/etc/guacamole#
root@ucs:/etc/guacamole# ldapsearch -Q -LLL -Y EXTERNAL -H ldapi:/// -b cn=schema,cn=config dn | grep guac
dn: cn={51}guacconfiggroup,cn=schema,cn=config
slapcat | grep -i guac
5c75107d /etc/ldap/slapd.conf: line 215: rootdn is always granted unlimited privileges.
uniqueMember: uid=guacamole,cn=users,dc=win,dc=xxx,dc=info
memberUid: guacamole
usw…
NOCH SCHNELL CHECKEN; OB DAS JAR FILE DA IST
/usr/share/guacamole/guacamole-auth-ldap-0.9.13-incubating.jar
/usr/share/guacamole/guacamole-auth-ldap-0.9.13-incubating.jar
root@ucs:/usr/share/doc/univention-guacamole-schema# mkdir /etc/guacamole/extensions/
root@ucs:/usr/share/doc/univention-guacamole-schema# cp /usr/share/guacamole/guacamole-auth-ldap-0.9.13-incubating.jar /etc/guacamole/extensions/
root@ucs:/usr/share/doc/univention-guacamole-schema# ls -la /etc/guacamole/extensions/
insgesamt 1200
drwxr-xr-x 2 root root 4096 Feb 26 11:43 .
drwxr-xr-x 3 root root 4096 Feb 26 11:43 ..
-rw-r--r-- 1 root root 1217303 Feb 26 11:43 guacamole-auth-ldap-0.9.13-incubating.jar
root@ucs:/usr/share/doc/univention-guacamole-schema#
root@ucs:/usr/share/doc/univention-guacamole-schema# mkdir /etc/guacamole/lib
root@ucs:/usr/share/doc/univention-guacamole-schema# ls -la /etc/guacamole/
insgesamt 36
drwxr-xr-x 4 root root 4096 Feb 26 11:45 .
drwxr-xr-x 152 root root 12288 Feb 26 11:08 ..
drwxr-xr-x 2 root root 4096 Feb 26 11:43 extensions
-rw-r--r-- 1 root root 1099 Sep 20 2013 guacamole.properties
-rw-r--r-- 1 root root 1289 Feb 26 11:05 guacConfigGroup.ldif
drwxr-xr-x 2 root root 4096 Feb 26 11:45 lib
-rw-r----- 1 root guacamole-web 1030 Sep 20 2013 user-mapping.xml
root@ucs:/usr/share/doc/univention-guacamole-schema# mkdir /etc/guacamole/schema
root@ucs:/usr/share/doc/univention-guacamole-schema# cd /etc/guacamole/schema/
root@ucs:/etc/guacamole/schema# cp /var/lib/univention-ldap/local-schema/guacConfigGroup.schema /etc/guacamole/schema/
root@ucs:/etc/guacamole/schema# find / -name guacamole.schema
/usr/share/univention-appcenter/apps/guacamole/guacamole.schema
root@ucs:/etc/guacamole/schema# cp /usr/share/univention-appcenter/apps/guacamole/guacamole.schema /etc/guacamole/schema/
root@ucs:/etc/guacamole/schema# find / -name guacamole.ldif
root@ucs:/etc/guacamole/schema# find / -name guacConfigGroup.ldif
/etc/guacamole/guacConfigGroup.ldif
root@ucs:/etc/guacamole/schema# cp /etc/guacamole/guacConfigGroup.ldif /etc/guacamole/schema/
root@ucs:/etc/guacamole/schema# ls -la /etc/guacamole/schema/
insgesamt 20
drwxr-xr-x 2 root root 4096 Feb 26 12:05 .
drwxr-xr-x 5 root root 4096 Feb 26 12:01 ..
-rw-r--r-- 1 root root 953 Feb 26 12:03 guacamole.schema
-rw-r--r-- 1 root root 1289 Feb 26 12:05 guacConfigGroup.ldif
-rw-r--r-- 1 root root 1392 Feb 26 12:03 guacConfigGroup.schema
Kakke doku von guacamole gelesen und vergessen das guacamole.schema bereits besteht und guacConfigGroup.schema minimaler ist also tauschen
root@ucs:/etc/guacamole/schema# vi /etc/ldap/slapd.conf
root@ucs:/etc/guacamole/schema# cat /etc/ldap/slapd.conf | grep guacamole
include /var/lib/univention-ldap/local-schema/guacamole.schema
root@ucs:/etc/guacamole/schema# /etc/init.d/slapd restart
[....] Restarting slapd (via systemctl): slapd.serviceJob for slapd.service failed because the control process exited with error code.
See "systemctl status slapd.service" and "journalctl -xe" for details.
failed!
root@ucs:/etc/guacamole/schema# vi /etc/ldap/slapd.conf
root@ucs:/etc/guacamole/schema# find /-name guacamole.schema
find: ‘/-name’: Datei oder Verzeichnis nicht gefunden
guacamole.schema
root@ucs:/etc/guacamole/schema# find / -name guacamole.schema
/usr/share/univention-appcenter/apps/guacamole/guacamole.schema
/etc/guacamole/schema/guacamole.schema
root@ucs:/etc/guacamole/schema# cat /etc/ldap/slapd.conf | grep guacamole
include /var/lib/univention-ldap/local-schema/guacamole.schema
root@ucs:/etc/guacamole/schema# cp /usr/share/univention-appcenter/apps/guacamole/guacamole.schema /var/lib/univention-ldap/local-schema/
root@ucs:/etc/guacamole/schema# /etc/init.d/slapd restart
[ ok ] Restarting slapd (via systemctl): slapd.service.
läuf jetzt
root@ucs:/etc/guacamole/schema# ldapsearch -Q -LLL -Y EXTERNAL -H ldapi:/// -b cn=schema,cn=config dn | grep guac
dn: cn={51}guacamole,cn=schema,cn=config
und geladen
…
Gruss
Angelo
