Does Review Board 3.0.17 support LDAP-SSL integration?

[Srinivas B.L.]

Does RB 3.0.17 support LDAP-SSL integration, 

If yes could you please explain the configuration steps.

[Srinivas B.L.]

Hi Christian ,

Any update on this?

[Christian Hammond]

Hi Srinivas,

I'm sorry, I meant to get back to you a long time ago. I was trying to set things up to verify working LDAP-SSL support, and other things came up that took me away from that.

Basically, it should work, but you're probably going to hit issues with self-signed certificates. We don't have any support for that at the moment, and we'd need to add that in to make it work.

Otherwise, it should be a matter of specifying a ldaps:// URL and choosing "Use TLS for authentication" in the LDAP Authentication settings.

If you've tried that already, what problems did you run into?

Christian

On Thu, Jun 25, 2020 at 2:30 PM Srinivas B.L. <luckyyo...@gmail.com> wrote:

Hi Christian ,

Any update on this?

--

---
You received this message because you are subscribed to the Google Groups "Review Board Development" group.
To unsubscribe from this group and stop receiving emails from it, send an email to reviewboard-d...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/reviewboard-dev/62088fad-40ef-4c26-a171-81d6a9120b21o%40googlegroups.com.

--

Christian Hammond

President/CEO of Beanbag

Makers of Review Board

[Stephen Gallagher]

On Fri, Jul 3, 2020 at 6:56 PM Christian Hammond <chri...@beanbaginc.com> wrote:

Hi Srinivas,

I'm sorry, I meant to get back to you a long time ago. I was trying to set things up to verify working LDAP-SSL support, and other things came up that took me away from that.

Basically, it should work, but you're probably going to hit issues with self-signed certificates. We don't have any support for that at the moment, and we'd need to add that in to make it work.

Otherwise, it should be a matter of specifying a ldaps:// URL and choosing "Use TLS for authentication" in the LDAP Authentication settings.

If you've tried that already, what problems did you run into?

A useful workaround for self-signed certificates: https://github.com/sgallagher/sscg

It creates a certificate authority and the service certificate. You just need to import the CA certificate into your trust store (using whatever OS-specific mechanism is appropriate).