Use STARTTLS with LDAP

[Denny Fuchs]

hi,

LDAPS is deprecated so we want to use STARTTLS with our LDAP server. Is there a way, to force StartTLS for authentication in Rundeck ?

cu denny

[Reiner Acuña]

Hi Denny,

Right now Rundeck supports LDAP+SSL like this:

https://docs.rundeck.com/docs/administration/security/authenticating-users.html#communicating-over-secure-ldap-ldaps

In this thread, you can see some problems to force use LDAP+STARTTLS on Rundeck:

https://groups.google.com/forum/#!topic/rundeck-discuss/IGnkrTRS5zk/discussion

Maybe the Rundeck authentication deserves an enhancement to support LDAP+STARTTLS natively, you can suggest it here to follow up:

https://github.com/rundeck/rundeck/issues

Greetings!

[Reiner Acuña]

Hey Denny,

I did some test and it's possible config LDAP+STARTTLS with Rundeck. You only need to configure Rundeck in the same way that using regular OpenLDAP following this:

https://docs.rundeck.com/docs/administration/security/authenticating-users.html#configuration

You can test in some secure environment following this guide to LDAP+STARTTLS side:

https://www.digitalocean.com/community/tutorials/how-to-encrypt-openldap-connections-using-starttls

Hope it helps!

On Tuesday, May 21, 2019 at 8:39:16 AM UTC-4, Denny Fuchs wrote: