instaclustr / cassandra-ldap

LDAP Authenticator for Apache Cassandra
Apache License 2.0
24 stars 16 forks source link

Skip SSL verification #47

Open nvlan opened 1 year ago

nvlan commented 1 year ago

Please answer these questions before submitting your issue. Thanks!

What version of Cassandra are you using?

4.0.10

What version of Cassandra LDAP are you using?

v4.0.7-1.0.0

What LDAP server you are using? Any specifics?

Windows AD

Hello, I'm trying to bind to an LDAP server that uses a self-signed certificate, I was wondering if there was any config option for the LDAP plugin to skip certificate verification, since everything works on plain-text port 389 but switching to port 636 the bind fails. Thank you!

smiklosovic commented 1 year ago

Hi @nvlan

there is no such parameter yet. We can definitely make it happen if you come up with a solution how to do this.

nvlan commented 1 year ago

Hello @smiklosovic

Unfortunately I lack the skills in java to contribute with code, I can only go as far as to tell that this would be the line that tries to connect (based solely on the error message that I receive). I did try to add this self-signed certificate to the truststore that I'm using, but still the LDAP connection fails to happen if I use SSL.