freeipa

Clone
Source Code
GIT

#7366 RFE: ipa client should setup openldap for GSSAPI
Closed: fixed 6 years ago Opened 6 years ago by rcritten.

Closed: fixed
Reopen Issue

Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 7): Bug 1527215

Description of problem:

The IPA client installer currently edits /etc/openldap/ldap.conf, setting up
the client to consume LDAP data from IPA.  It currently sets:

URI
BASE
TLS_CACERT

It really should also add:

SASL_MECH GSSAPI
TLS_REQCERT demand


The IPA client installer assumes the client will only be speaking LDAP to IPA,
so might as well secure that connection as much as possible by default.

Metadata Update from @rcritten:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1527215
6 years ago

Metadata Update from @rcritten:
- Issue priority set to: important
6 years ago

master:

  • 07be330 RFE: ipa client should setup openldap for GSSAPI

Metadata Update from @cheimes:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)
6 years ago

ipa-4-6:

  • d4f1406 RFE: ipa client should setup openldap for GSSAPI

Login to comment on this ticket.

Metadata
None
None
None
None
important
None
None
None
None
None
None
None
None
None
None
None
None
None
None
https://bugzilla.redhat.com/show_bug.cgi?id=1527215
None
None
None
Powered by Pagure 5.13.3
Documentation • File an Issue • About • SSH Hostkey/Fingerprint
© Red Hat, Inc. and others.