canonical / candid

Identity Manager Service
GNU Affero General Public License v3.0
41 stars 29 forks source link

Missing LDAPS support #168

Open ethanmye-rs opened 1 year ago

ethanmye-rs commented 1 year ago

When trying to set the LDAP identity provider, the LDAPS protocol is not supported and fails to parse.

$ sudo snap logs candid 2023-02-23T00:01:51Z systemd[1]: Started Service for snap application candid.candidsrv. 2023-02-23T00:01:51Z candid.candidsrv[809084]: STOP cannot read configuration: cannot parse "/var/snap/candid/799/config.yaml": cannot unmarshal ldap configuration: unsupported scheme "ldaps" 2023-02-23T00:01:51Z systemd[1]: snap.candid.candidsrv.service: Main process exited, code=exited, status=2/INVALIDARGUMENT 2023-02-23T00:01:51Z systemd[1]: snap.candid.candidsrv.service: Failed with result 'exit-code'. 2023-02-23T00:01:51Z systemd[1]: snap.candid.candidsrv.service: Scheduled restart job, restart counter is at 5. 2023-02-23T00:01:51Z systemd[1]: Stopped Service for snap application candid.candidsrv. 2023-02-23T00:01:51Z systemd[1]: snap.candid.candidsrv.service: Start request repeated too quickly. 2023-02-23T00:01:51Z systemd[1]: snap.candid.candidsrv.service: Failed with result 'exit-code'. 2023-02-23T00:01:51Z systemd[1]: Failed to start Service for snap application candid.candidsrv.

This results in the app quickly hitting the restart counter and needing to manually start and stop the application to get candid working again after editing the config.

To reproduce, copy the default LDAP config from here and replace ldap:// with ldaps://