zsalazar
Contributor
Contributor

Horizon running on Linux is not attaching groups from active directory to user profiles after login.

Howdy team, wanted to post a solution to a problem I found today.

Symptoms: Permissions appear to be missing or dropped, users cannot access folders that they have permissions to access. This was specific to Red Hat Enterprise Linux v7.

After updating the horizon agent from 8.4 to 8.7 for our Linux RHEL 7 systems we found that users could connect to the pools with single sign on without an issue however once they started navigating folders on the network they had found that they did not have permissions to access folders where they previously had access to before the agent update.

This could be seen by going to the terminal and typing in id then hitting return which would show the currently assigned groups from Active Directory. In our case no groups were being linked to the user that was logged in. 

Once we rolled back to 8.4 view agent, we ran id in terminal and miraculously all the groups from Active Directory were displayed in the terminal.

This could be related to an improper Horizon Agent install that was incompatible with RHEL7 or maybe a deeper issue.

Have a good one!

For now we'll stay on Connection Server version 8.6 build 20099816 and the older version of View Agent 8.4 

 

Hope this helps someone

0 Kudos
0 Replies