Central Management - Add Support For Setting Up CCM LDAP Authentication Using LDAPS

chocolatey / chocolatey-licensed-issues

Issues for Licensed Editions of Chocolatey

19 stars 13 forks source link

Central Management - Add Support For Setting Up CCM LDAP Authentication Using LDAPS #275

Open ryanrichter94 opened 3 years ago

ryanrichter94 commented 3 years ago

Enhancement Description

Received a ticket asking if CCM can run over LDAPS as a more secure alternative to the current LDAP in place as of CCM 0.6.3

References:

┆Issue is synchronized with this Gitlab issue by Unito

ryanrichter94 commented 1 year ago

Bumping this another customers request for this feature. Also for context CCM is 0.10.1 as of writing this.

ZenDesk Ticket 2

ryanrichter94 commented 1 year ago

Adding ZenDesk Ticket 3 from duplicate issue to this one.

mkevenaar commented 6 months ago

Sorry for chiming in here. There are two (2) ways of communicating with LDAP securely.

LDAP with StartTLS (Default port 389, like normal)
- Uses the same protocol but adds an encryption layer using "Extended Operation" (part of LDAP)
LDAPS or LDAP over SSL (Default port 636)
- Basically, the equivalent of HTTP vs HTTPS.

Both are very different and have different implementations. Some configurations support both, and some only the StartTLS version.

I suggest implementing both, increasing the compatibility with different LDAP configurations.

ryanrichter94 commented 3 months ago

Added ZenDesk Ticket 5 to issue after having support call with organization. They are currently in the process of phasing out legacy LDAP for LDAPS and Okta as their authentication solutions going forward.