bitnami / containers

Bitnami container images
https://bitnami.com
Other
3.41k stars 4.87k forks source link

SASL gssapi #53345

Closed Sarevok933219 closed 10 months ago

Sarevok933219 commented 11 months ago

Name and Version

bitnami/ldap:2.6

What architecture are you using?

amd64

What steps will reproduce the bug?

  1. Good day. We are using ldap service from your image. And It is necessary to add gssapi support in supportedSASLmechanisms to the container to authenticate using kerberos. By default this method is not accepted. Command: ldapsearch -H ldaps://fqdn:636 -D cn=config -w <passwd> -x -b "" -LLL -s "base" supportedSASLMechanisms returns:
    supportedSASLMechanisms: PLAIN
    supportedSASLMechanisms: ANONYMOUS

    Please give any working example how we can add this feature in container. Is it even possible? We also try to use python libs (ldap3) to operate with ldap server, but also have no idea. Thank you in advance!!!

What is the expected behavior?

supportedSASLMechanisms: gssapi
supportedSASLMechanisms: PLAIN
supportedSASLMechanisms: ANONYMOUS

What do you see instead?

supportedSASLMechanisms: PLAIN
supportedSASLMechanisms: ANONYMOUS

Additional information

No response

rafariossaa commented 11 months ago

Hi, I am not an openldap/kerberos expert. The provided openldap server is a basic one, so you would need to enabled the desired modules and set the configuration accordingly. If you have a configuration procedure for this maybe I could provide some guidance on how to use it with this container image. Do you have any instructions on how to configure this in a regular openldap service ?

github-actions[bot] commented 10 months ago

This Issue has been automatically marked as "stale" because it has not had recent activity (for 15 days). It will be closed if no further activity occurs. Thanks for the feedback.

github-actions[bot] commented 10 months ago

Due to the lack of activity in the last 5 days since it was marked as "stale", we proceed to close this Issue. Do not hesitate to reopen it later if necessary.