yum install guacd libguac-client-rdp libguac-client-vnc libguac-client-ssh guacamole liberation-mono-fonts

echo "export GUACAMOLE_HOME=/etc/guacamole" > /etc/profile.d/guacamole.sh
echo "setenv GUACAMOLE_HOME /etc/guacamole" > /etc/profile.d/guacamole.csh

http://sourceforge.net/projects/guacamole/files/current/extensions/guacamole-auth-ldap-0.8.0.tar.gz/download extract and copy the jar files from the lib directory in /var/lib/tomcat/webapps/guacamole/WEB-INF/classes

cd /var/lib/tomcat/webapps/guacamole/WEB-INF/classes
ln -s /etc/guacamole/guacamole.properties .

/etc/guacamole/guacamole.properties

lib-directory: /var/lib/tomcat/webapps/guacamole/WEB-INF/classes

# Auth provider class (authenticates user/pass combination, needed if using the provided login screen)
#auth-provider: net.sourceforge.guacamole.net.basic.BasicFileAuthenticationProvider
#basic-user-mapping: /etc/guacamole/user-mapping.xml

# Auth provider class
auth-provider: net.sourceforge.guacamole.net.auth.ldap.LDAPAuthenticationProvider

# LDAP properties
ldap-hostname:           ldap.mngt.bh.helux.nl
ldap-port:               389
ldap-user-base-dn:       ou=people,dc=helux,dc=nl
ldap-username-attribute: cn
ldap-config-base-dn:     ou=guacamole,dc=helux,dc=nl

Allow access from web-server to the Tomcat server

firewall-cmd --permanent --zone=dmz --add-rich-rule="rule family="ipv4" \
source address="46.44.183.184" service name="tomcat" accept"
firewall-cmd --permanent --zone=dmz --add-rich-rule="rule family="ipv6" \
source address="2a02:22a0:bbb7:400::184" service name="tomcat" accept"