Authentication with LDAP over startTLS

[lme...@gmail.com]

Hi Everyone,

Does RunDeck support authentication using LDAP over startTLS? If so, how do I set up the configuration?

I've been playing around with the docker-zoo ldap_combined example to try to get it to work (https://github.com/rundeck/docker-zoo/blob/master/ldap-combined/docker-compose.yml).

Logging in as ldap user with username="build" password="build" works out of the box. 

Then I can force the ldap container to require TLS by setting environment variable LDAP_TLS_ENFORCE="true":

    ldap:

        hostname: ldap

        image: osixia/openldap:1.2.1

        environment:

          - LDAP_ORGANISATION=RD Test

          - LDAP_DOMAIN=rdtest.com

          - LDAP_ADMIN_PASSWORD=AdminPass123

          - LDAP_TLS_ENFORCE=true

        volumes:

          - ./ldif:/container/service/slapd/assets/config/bootstrap/ldif/custom:rw

        ports:

          - "389:389"

        command: --copy-service

But now I can no longer log in as the LDAP user.

Any help would be appreciated! Thanks,

Lee

[rac...@rundeck.com]

Hi Lee,

A couple of years ago, I did a test and it worked, please take a look at this thread. I have used this guide to set up an LDAP environment (not using the osixia docker image).

Greetings!