I have managed to setup ldap authentication with my active directory server running server 2016. I can authenticate to guacamole perfectly with AD accounts.
Now comes assigning the AD users desktops. We are using RDP on all of the connections. What I would like to do is present each user with their own work desktop. I have managed to use the user-mappings.xml file to map a desktop to an Ldap user. But I have to add the plaintext password into the file, which isn't great from a security standpoint or if the user changes their password.
This is an example of what my user-mappings.xml looks like for an LDAP user:
<authorize username="USERNAME" password="PASSWORD">
<protocol>rdp</protocol>
<param name="hostname">x.x.x.x</param>
<param name="port">3389</param>
<param name="security">tls</param>
</authorize>
The problem is the USERNAME and PASSWORD part at the top. Is there any way that I can do this without specifying the username and password for the user?
Please could someone explain to me how I can assign ldap users domain joined desktops. I tired using a Google docs tutorial but when it came to editing the schema on Active Directory I got a load of errors. Does anyone have an up to date tutorial?