question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Feature Request: Add LDAP startTLS option

See original GitHub issue

My LDAP server is configured to require startTLS on port 389. In the PowerDNS-Admin LDAP config i’m just using ldap://ldapserver.fqdn and than the user logins are failing with:

ldap.CONFIDENTIALITY_REQUIRED: {'desc': 'Confidentiality required', 'info': 'confidentiality required'}

Is startTLS activated in user.py?

Issue Analytics

  • State:closed
  • Created 3 years ago
  • Comments:7 (5 by maintainers)

github_iconTop GitHub Comments

1reaction
sshipwaycommented, May 13, 2020

There should be a new configuration option for ldap to enable TLS like this, rather than enforce it. Also, this does not take into account if the LDAP is using LDAPS in which case starttls is not necessary.

0reactions
jbe-dwcommented, May 6, 2022

Hello,

This request is stale for too long. Regarding our policy to cleanup this project, we are closing it. As this is a Feature Request, it will be listed in #1178

Regards PowerDNS Admin Team See #1153 for the policy

Read more comments on GitHub >

github_iconTop Results From Across the Web

How To Encrypt OpenLDAP Connections Using STARTTLS
In this guide, we will demonstrate how to encrypt connections to OpenLDAP using STARTTLS to upgrade conventional connections to TLS.
Read more >
LDAP over TLS (STARTTLS) and LDAP over SSL (LDAPS)
StartTLS in an extension to the LDAP protocol which uses the TLS protocol to encrypt communication. It works by establishing a normal -...
Read more >
LDAP auth support StartTLS ? · Issue #2441 · grafana ... - GitHub
Upon further reading, go-ldap has a StartTLS function. We would want another boolean option, say use_starttls, which is mutually exclusive to ...
Read more >
LDAP over SSL/TLS - Feature Requests - SolarWinds THWACK
Feature Request was submitted to the Dev Team about LDAPS, but no official word when it will be added to the Orion Core...
Read more >
LDAP connection supports StartTLS | Confluence Server ... - Jira
StartTLS is a common option to encrypt communication between an LDAP client and the LDAP server. I know you support SSL but can...
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found