search

nbeguier / cassh

SSH CA administration via CLI and GUI
https://medium.com/leboncoin-engineering-blog/cassh-ssh-key-signing-tool-39fd3b8e4de7
Apache License 2.0
73 stars 20 forks source link

Do you support startTLS connections to LDAP? #103

Closed tparkercbn closed 2 years ago

tparkercbn commented 2 years ago

Is it possible to use startTLS with LDAP authentication? My LDAP server has an SSF of 256 and requires secure connections.

nbeguier commented 2 years ago

Does the v2.3.0 is responding to your need (put ldaps in the protocol) ?

tparkercbn commented 2 years ago

Let me try and I will let you know! 😊

Thank you

Tom

From: Nicolas Béguier @.> Sent: March 3, 2022 12:29 PM To: nbeguier/cassh @.> Cc: Tom Parker @.>; Author @.> Subject: Re: [nbeguier/cassh] Do you support startTLS connections to LDAP? (Issue #103)

CAUTION: This email originated from outside your organization. Exercise caution when opening attachments or on clicking links from unknown senders.

Does the v2.3.0 is responding to your need (put ldaps in the protocol) ?

— Reply to this email directly, view it on GitHubhttps://github.com/nbeguier/cassh/issues/103#issuecomment-1058299816, or unsubscribehttps://github.com/notifications/unsubscribe-auth/ABJYF5Q4SZUWFCKYDABKFKLU6DZE7ANCNFSM5OFAGCTA. Triage notifications on the go with GitHub Mobile for iOShttps://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675 or Androidhttps://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub. You are receiving this because you authored the thread.Message ID: @.**@.>>

tparkercbn commented 2 years ago

Ldaps is not the same as starttls. ldaps:// is deprecated in favor of Start TLS [RFC2830].

My Ldap servers do not support ldaps (but do support StartTLS)

Thank

From: Nicolas Béguier @.> Sent: March 3, 2022 12:29 PM To: nbeguier/cassh @.> Cc: Tom Parker @.>; Author @.> Subject: Re: [nbeguier/cassh] Do you support startTLS connections to LDAP? (Issue #103)

CAUTION: This email originated from outside your organization. Exercise caution when opening attachments or on clicking links from unknown senders.

Does the v2.3.0 is responding to your need (put ldaps in the protocol) ?

— Reply to this email directly, view it on GitHubhttps://github.com/nbeguier/cassh/issues/103#issuecomment-1058299816, or unsubscribehttps://github.com/notifications/unsubscribe-auth/ABJYF5Q4SZUWFCKYDABKFKLU6DZE7ANCNFSM5OFAGCTA. Triage notifications on the go with GitHub Mobile for iOShttps://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675 or Androidhttps://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub. You are receiving this because you authored the thread.Message ID: @.**@.>>

nbeguier commented 2 years ago

Indeed, let me check the LDAP lib documentation

nbeguier commented 2 years ago

Hi again, I finally managed to make my tests work on ldaps, so I will be able to support starttls very quickly. Probably a PR tomorrow ;)

nbeguier commented 2 years ago

https://github.com/nbeguier/cassh/commit/5a69d7ea6e5dd4ed1e46ba343a8e67224be37357 Done

tparkercbn commented 2 years ago

Wow. Awesome! We will test it out tomorrow 😊

Thank you!

From: Nicolas Béguier @.> Sent: March 6, 2022 7:45 AM To: nbeguier/cassh @.> Cc: Tom Parker @.>; Author @.> Subject: Re: [nbeguier/cassh] Do you support startTLS connections to LDAP? (Issue #103)

CAUTION: This email originated from outside your organization. Exercise caution when opening attachments or on clicking links from unknown senders.

5a69d7ehttps://github.com/nbeguier/cassh/commit/5a69d7ea6e5dd4ed1e46ba343a8e67224be37357 Done

— Reply to this email directly, view it on GitHubhttps://github.com/nbeguier/cassh/issues/103#issuecomment-1059956384, or unsubscribehttps://github.com/notifications/unsubscribe-auth/ABJYF5WM2FJLBGSBOMUEWDLU6SSF7ANCNFSM5OFAGCTA. Triage notifications on the go with GitHub Mobile for iOShttps://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675 or Androidhttps://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub. You are receiving this because you authored the thread.Message ID: @.**@.>>