Bug #1171
TLS not working with LDAP authentication
Status: | Closed | Start date: | 03/16/2012 | |
---|---|---|---|---|
Priority: | Normal | Due date: | ||
Assignee: | Javi Fontan | % Done: | 0% | |
Category: | Drivers - Auth | |||
Target version: | Release 4.0 | |||
Resolution: | fixed | Pull request: | ||
Affected Versions: | OpenNebula 3.2 |
Description
When using
:auth_method: :simple_tlsin /etc/one/auth/ldap_auth.conf, the connection to the LDAP server fail with the following exception :
/usr/lib/ruby/gems/1.8/gems/net-ldap-0.3.1/lib/net/ldap.rb:1215:in `bind': Unsupported auth method (simple_tls) (Net::LDAP::LdapError)
Associated revisions
bug #1171: add support for tls in ldap auth
Patch provided by Nicolas Agius <nicolas.agius@lps-it.fr>
bug #1171: add support for tls in ldap auth
Patch provided by Nicolas Agius <nicolas.agius@lps-it.fr>
History
#1 Updated by Nicolas AGIUS over 9 years ago
- File ldap_auth.rb-issue1171.patch added
- File ldap_auth.conf-issue1171.patch added
As described in http://net-ldap.rubyforge.org/Net/LDAP.html#method-i-encryption, a solution is to pass the following parameters to net-ldap :
:encryption => { :method => :simple_tls } :auth => { :method => :simple }
Here is a proposed patch for the files :
src/authm_mad/remotes/ldap/ldap_auth.rb src/authm_mad/remotes/ldap/ldap_auth.conf
#2 Updated by Ruben S. Montero over 9 years ago
- Assignee set to Javi Fontan
- Target version set to Release 3.4
#3 Updated by Javi Fontan about 9 years ago
- Target version deleted (
Release 3.4)
#4 Updated by Ruben S. Montero about 9 years ago
- Target version set to Release 3.6
#5 Updated by Ruben S. Montero about 9 years ago
- Target version changed from Release 3.6 to Release 3.8
#6 Updated by Ruben S. Montero almost 9 years ago
- Status changed from New to Assigned
#7 Updated by Ruben S. Montero over 8 years ago
- Target version changed from Release 3.8 to Release 4.0
#8 Updated by Javi Fontan over 8 years ago
- Status changed from Assigned to Closed
- Resolution set to fixed
I've applied the patch mostly verbatim. Thanks!