#50870 Ticket 50859 - support running only with ldaps socket
Closed by spichugi. Opened by firstyear.
firstyear/389-ds-base 50859-ldaps-only  into  master

Download 50870.patch

Bug Description: As plaintext protocols have shown they are
unable to be effectively secured, we should have the choice to
be able to run the server only as LDAPS for high assurance
environments.

Fix Description: Add a test to assert we can move to ldaps only
and back to ldap/ldaps. Add a command to help make this easier for
admins to find and discover.

https://pagure.io/389-ds-base/issue/50859

Author: William Brown william@blackhats.net.au

Review by: ???

This comment should be "...server to provide...". Otherwise ack

Actually, I might make the help/warning also say "to undo this, run command X" as well. Thanks for the fast review!

rebased onto ccc03bfd179c038da1c51d553fe501780ae1e49a

Hey @mreynolds It's only a minor change, but I thought I'd let you check again, I added the "undo command" into the success message.

Thanks, ack!

rebased onto 5afacd39d3eb87f29a810f7434a27ac1dcf9edd2

Pull-Request has been merged by firstyear

389-ds-base is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in 389-ds-base's github repository.

This pull request has been cloned to Github as issue and is available here:
- https://github.com/389ds/389-ds-base/issues/3923

If you want to continue to work on the PR, please navigate to the github issue,
download the patch from the attachments and file a new pull request.

Thank you for understanding. We apologize for all inconvenience.

Pull-Request has been closed by spichugi

Metadata