No, i'm not using ldaps.

Ah, I wonder if we're constructing this badly then and all of :encryption should be nil rather than just :method here: https://github.com/theforeman/foreman/blob/1.8.0-RC2/app/models/auth_sources/auth_source_ldap.rb#L83

Dominic Cleal wrote:

Ah, I wonder if we're constructing this badly then and all of :encryption should be nil rather than just :method here: https://github.com/theforeman/foreman/blob/1.8.0-RC2/app/models/auth_sources/auth_source_ldap.rb#L83

1. method = tls ? :simple_tls : nil
2. { :method => method, :tls_options => { :verify_mode => OpenSSL::SSL::VERIFY_PEER } }
   end

def encryption_config

My LDAP w/o SSL is working again.

  def encryption_config
#    method = tls ? :simple_tls : nil
#    { :method => method, :tls_options => { :verify_mode => OpenSSL::SSL::VERIFY_PEER } }
  end

Oh, the hash is used only for simple_tls and start_tls, otherwise encryption is set to nil, I missed this. Alex, could you please test the patch in https://github.com/theforeman/foreman/pull/2271? It should fix it for you but keep SSL working.

Marek Hulán wrote:

Oh, the hash is used only for simple_tls and start_tls, otherwise encryption is set to nil, I missed this. Alex, could you please test the patch in https://github.com/theforeman/foreman/pull/2271? It should fix it for you but keep SSL working.

That seems to be working. Also note, I use LDAP with out SSL. So I can't test if LDAPS is working still or not.