Bug #5414: LDAP + TLS is not LDAP + TLS but LDAP + SSL - Foreman

Bug #5414

LDAP + TLS is not LDAP + TLS but LDAP + SSL

Added by Yann Cezard almost 5 years ago. Updated 8 months ago.

Status:

Closed

Priority:

Low

Assignee:

Ori Rabin

Category:

Authentication

Target version:

1.6.0

Difficulty:

trivial

Triaged:

Bugzilla link:

Pull request:

Team Backlog:

Fixed in Releases:

Found in Releases:

1.4.3

Description

Hi,

Today I configured our OpenLDAP server as a login source for foreman.
I checked the TLS checkbox, and found out it wasn't working. Without it, all was working fine.
There was an SSL error : The problem was solved by changing the port to 636 instead of 389.
In fact the LDAP auth backend doesn't use TLS, but SSL (aka LDAPS) and not LDAP+TLS (the ruby net/ldap module does not seem to support real TLS : http://net-ldap.rubyforge.org/Net/LDAP.html#method-i-encryption)

I think that the label should be changed to "SSL" or "LDAPS", or perhaps should you use the ldap:// ldaps:// syntax to be more clear ?
No big deal, of course, but it could save some time for users who will check their config several times before understanding the problem.

Best regards,

Related issues