Feature Request: Add LDAP startTLS option
See original GitHub issueMy LDAP server is configured to require startTLS on port 389. In the PowerDNS-Admin LDAP config i’m just using ldap://ldapserver.fqdn
and than the user logins are failing with:
ldap.CONFIDENTIALITY_REQUIRED: {'desc': 'Confidentiality required', 'info': 'confidentiality required'}
Is startTLS activated in user.py?
Issue Analytics
- State:
- Created 3 years ago
- Comments:7 (5 by maintainers)
Top Results From Across the Web
How To Encrypt OpenLDAP Connections Using STARTTLS
In this guide, we will demonstrate how to encrypt connections to OpenLDAP using STARTTLS to upgrade conventional connections to TLS.
Read more >LDAP over TLS (STARTTLS) and LDAP over SSL (LDAPS)
StartTLS in an extension to the LDAP protocol which uses the TLS protocol to encrypt communication. It works by establishing a normal -...
Read more >LDAP auth support StartTLS ? · Issue #2441 · grafana ... - GitHub
Upon further reading, go-ldap has a StartTLS function. We would want another boolean option, say use_starttls, which is mutually exclusive to ...
Read more >LDAP over SSL/TLS - Feature Requests - SolarWinds THWACK
Feature Request was submitted to the Dev Team about LDAPS, but no official word when it will be added to the Orion Core...
Read more >LDAP connection supports StartTLS | Confluence Server ... - Jira
StartTLS is a common option to encrypt communication between an LDAP client and the LDAP server. I know you support SSL but can...
Read more >
Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free
Top Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
There should be a new configuration option for ldap to enable TLS like this, rather than enforce it. Also, this does not take into account if the LDAP is using LDAPS in which case starttls is not necessary.
Hello,
This request is stale for too long. Regarding our policy to cleanup this project, we are closing it. As this is a Feature Request, it will be listed in #1178
Regards PowerDNS Admin Team See #1153 for the policy