#2 — ldapconfig use_ssl=1 ignored in LDAPServer_Configuration

by Siegfried Koch last modified Feb 21, 2009 08:21 PM
State Resolved
Version: 0.1
Area Functionality
Issue type Feature
Severity Medium
Submitted by Siegfried Koch
Submitted on Jun 06, 2008
Responsible Jean-Paul Ladage
Target release:
I'm Using Plone 3. with LDAPMultipluguins 2.8 and LDAPUserfolder 1.5
and managed to setup an appropriate ldapconfig.py file after applying the patches to LDAPMultiPlugins

I decided to chekc out ldapconfig beacuse I have to "Add PloneSite" for appr. 120 diferent sites with same LDAP-authentication-sources; we use LDAPS
 
Even though I specified use_sll = 1 in ldapconfig.py the procedure adding the LDAP-Servers selects LDAP and and Port 389

Looking into the source of ../ldapconfig/Extensions/install.py I could figure out that in calling

for ldap_host in ldaphosts:
        ldapFolder.manage_addServer(host=ldap_host,
                                    conn_timeout=ldapConfig['LDAP_CONN_TIMEOUT'],
                                    op_timeout=ldapConfig['LDAP_OP_TIMEOUT'])

    #

at lines 103++ the attributes use_ssl and port are not provided.


I did a tiny modification -- just to chekc the impact --- and it worked :-)))

for ldap_host in ldaphosts:
        ldapFolder.manage_addServer(host=ldap_host,
                                    use_ssl = 1, ###### FOR TEsting ONLY
                                    port=636, ###### FOR TESTING ONLY
                                    conn_timeout=ldapConfig['LDAP_CONN_TIMEOUT'],
                                    op_timeout=ldapConfig['LDAP_OP_TIMEOUT'])

    #


Questions:

I' highy appreciate if you might check, what I've figured out and give an info whether support for the attributes "use_ssl" and "port" might get provided in future releases.

And it would be great to get assistance in moving th "dirty fix" described above into a quality-fix, useful for others to.

Many thanks

Siegfried

PS: Guess my contribution is closer to Issue Type Feature than Bug or Patch
Added by Jean-Paul Ladage on Jun 06, 2008 03:23 PM
Issue state: unconfirmedresolved
Responsible manager: (UNASSIGNED)jladage
Hi Siegfreid,

I added the proposed options and created a new tag 0.2
Could you please try that and see if it works? I set the default to NOT use SSL btw.

Jean-Paul
Added by Siegfried Koch on Jun 09, 2008 02:15 PM
Thanks Jean-Paul,

I studied the modified sources and did a short testing ...

Works fine for me :-)

Siegfried

No responses can be added.