From c563fa43b4f2572d6ef78083bb741716e2fea8ec Mon Sep 17 00:00:00 2001
From: Michael Jumper <mike.jumper@guac-dev.org>
Date: Tue, 20 Oct 2015 15:24:26 -0700
Subject: [PATCH] GUAC-1115: Warn if we need to directly derive the user DN,
 but can't because multiple username attributes were provided.

---
 .../guacamole/auth/ldap/AuthenticationProviderService.java    | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/extensions/guacamole-auth-ldap/src/main/java/org/glyptodon/guacamole/auth/ldap/AuthenticationProviderService.java b/extensions/guacamole-auth-ldap/src/main/java/org/glyptodon/guacamole/auth/ldap/AuthenticationProviderService.java
index cae0f9030..d2b56c080 100644
--- a/extensions/guacamole-auth-ldap/src/main/java/org/glyptodon/guacamole/auth/ldap/AuthenticationProviderService.java
+++ b/extensions/guacamole-auth-ldap/src/main/java/org/glyptodon/guacamole/auth/ldap/AuthenticationProviderService.java
@@ -97,8 +97,10 @@ public class AuthenticationProviderService {
         List<String> usernameAttributes = confService.getUsernameAttributes();
 
         // We need exactly one base DN to derive the user DN
-        if (usernameAttributes.size() != 1)
+        if (usernameAttributes.size() != 1) {
+            logger.warn("Cannot directly derive user DN when multiple username attributes are specified");
             return null;
+        }
 
         // Derive user DN from base DN
         return