Skip to content

Implement LDAP CA certs support#1985

Draft
adamlazik1 wants to merge 2 commits into
theforeman:developfrom
adamlazik1:ldap-cacert
Draft

Implement LDAP CA certs support#1985
adamlazik1 wants to merge 2 commits into
theforeman:developfrom
adamlazik1:ldap-cacert

Conversation

@adamlazik1

Copy link
Copy Markdown
Contributor

Made with Cursor.

Requires theforeman/foreman#11107

Comment thread plugins/modules/auth_source_ldap.py Outdated
Comment on lines +102 to +103
- PEM-encoded CA certificate(s) used to verify the LDAP server when LDAPS is enabled.
- Leave empty to use the system trust store.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This sort of reads like it is either-or, while the foreman-side code seems to be additive.

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

You mean, system trust store is used even when adidtional cacerts are provided via param?

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yes and that's fine, but we should be clear about it

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Fixed.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants