Configuration for Kasm

In Kasm, go to Admin -> Authentication -> LDAP and add a configuration.

Name: whatever you like
Url is your lldap host (or IP) and port, e.g. ldap://lldap.example.com:3890
Search Base is is your base dn, e.g dc=example,dc=com
Search Filter is (&(objectClass=person)(uid={0})(memberof=cn=kasm,ou=groups,dc=example,dc=com)). Replace cn=kasm,ou=groups,dc=example,dc=com with the dn to the group necessary to login to Kasm.
Group Membership Filter (&(objectClass=groupOfUniqueNames)(member={0}))
Email attribute mail
Service Account DN a lldap user, preferably not a admin but a member of the group lldap_strict readonly. Mine is called cn=query,ou=people,dc=example,dc=com
Service Account Password: querys password
Activate Search Subtree, Auto Create App User and Enabled
under Attribute Mapping you can map the following:
- Email -> mail
- First Name -> givenname
- Last Name -> sn
If you want to map groups from your lldap to Kasm, edit the group, scroll to SSO Group Mappings and add a new SSO mapping:
- select your lldap as provider
- Group Attributes is the full DN of your group, e.g. cn=kasm_moreaccess,ou=groups,dc=example,dc=com