Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

TLS support for LDAP (Active Directory) in Backend #893

Closed
jacobwod opened this issue Nov 5, 2021 · 2 comments
Closed

TLS support for LDAP (Active Directory) in Backend #893

jacobwod opened this issue Nov 5, 2021 · 2 comments
Assignees
@jacobwod
Labels
module:backend MapService stuff
Milestone
3.8

Comments

@jacobwod
Copy link
Member

jacobwod commented Nov 5, 2021

The current AD functionality is limited as it only works with the ldap:// protocol. The underlying libraries, however, do support secure connections.

Hajk's backend should be extended to make it possible to provide necessary TLS certificate files, read them, and establish a secure connection to LDAP via TLS.
@jacobwod jacobwod added the module:backend MapService stuff label Nov 5, 2021
@jacobwod jacobwod added this to the 3.8 milestone Nov 5, 2021
@jacobwod jacobwod self-assigned this Nov 5, 2021
jacobwod added a commit that referenced this issue Nov 5, 2021
@jacobwod
Added TLS support for LDAP (Active Director). Closes #893:
bae432a 
- No changes for current setups: if you're happy without TLS, you don't need to do anything.
- If you want to connect to an LDAPS service, you can now do that by providing the necessary certificates and/or passphrase.
- I've also added some checks that should've been there before: we check the connection to LDAP(S) service at startup and abort if it fails. Previously (without the check at startup) we'd run into problems when the first user's request came in. That's a bit late, as it's easier to detect and fix errors if the Backend service fails already at startup.
@jacobwod jacobwod closed this as completed Nov 5, 2021
jacobwod added a commit that referenced this issue Nov 11, 2021
@jacobwod
Addition to #893: more explicit error logging.
3d4952e
@larsam0524
Copy link

What TLS-version are supported from Node-backend? (maby OT)

@jacobwod
Copy link
Member Author

I think it depends on which version of NodeJS you're running, @larsam0524 . Please see the official documentation. Perhaps there is some more specific information there.

This issue was closed.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@jacobwod jacobwod

Labels
module:backend MapService stuff
Projects
None yet
Milestone
3.8
Development

No branches or pull requests
2 participants
@jacobwod @larsam0524