Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add replica_transport support for LDAPS and StartTLS #7

Merged
merged 1 commit into from
Aug 8, 2023

Conversation

cruelsmith
Copy link

SSL and TLS has been replaced with LDAPS and StartTLS on some newer dsconf utils.

# man dsconf
[...]
COMMAND 'dsconf repl-agmt create'
       usage: dsconf instance repl-agmt create [-h] --suffix SUFFIX --host HOST
                                               --port PORT --conn-protocol
                                               CONN_PROTOCOL [--bind-dn BIND_DN]
                                               [--bind-passwd BIND_PASSWD]
                                               --bind-method BIND_METHOD
                                               [--frac-list FRAC_LIST]
                                               [--frac-list-total FRAC_LIST_TOTAL]
                                               [--strip-list STRIP_LIST]
                                               [--schedule SCHEDULE]
                                               [--conn-timeout CONN_TIMEOUT]
                                               [--protocol-timeout PROTOCOL_TIMEOUT]
                                               [--wait-async-results WAIT_ASYNC_RESULTS]
                                               [--busy-wait-time BUSY_WAIT_TIME]
                                               [--session-pause-time SESSION_PAUSE_TIME]
                                               [--flow-control-window FLOW_CONTROL_WINDOW]
                                               [--flow-control-pause FLOW_CONTROL_PAUSE]
                                               [--bootstrap-bind-dn BOOTSTRAP_BIND_DN]
                                               [--bootstrap-bind-passwd BOOTSTRAP_BIND_PASSWD]
                                               [--bootstrap-conn-protocol BOOTSTRAP_CONN_PROTOCOL]
                                               [--bootstrap-bind-method BOOTSTRAP_BIND_METHOD]
                                               [--init]
                                               AGMT_NAME

       AGMT_NAME
              The name of the replication agreement

OPTIONS 'dsconf repl-agmt create'
       --suffix SUFFIX
              Sets the DN of the replication suffix

       --host HOST
              Sets the hostname of the remote replica

       --port PORT
              Sets the port number of the remote replica

       --conn-protocol CONN_PROTOCOL
              Sets the replication connection protocol: LDAP, LDAPS, or StartTLS

[...]

See also https://manpages.ubuntu.com/manpages/focal/en/man8/dsconf.8.html#options%20'dsconf%20repl-agmt%20create' or https://man.archlinux.org/man/extra/389-ds-base/dsconf.8.en#conn~10

SSL and TLS has been replaced with LDAPS and StartTLS on some newer
dsconf utils.
@fraenki fraenki self-assigned this Aug 8, 2023
@fraenki fraenki added the enhancement New feature or request label Aug 8, 2023
@fraenki
Copy link
Member

fraenki commented Aug 8, 2023

Thanks for submitting this PR! And sorry that it took so long to review.

I would really like to know which 389-ds release introduced this change, but I can't find an answer. It looks like this was introduced back in 1.4.0 or 1.4.0.17, but documentation for these old releases is sparse. Given that 2.4.3 is the current version, let's just move on...

@fraenki fraenki merged commit abae8c0 into markt-de:master Aug 8, 2023
@fraenki
Copy link
Member

fraenki commented Aug 8, 2023

I've opened issue #8 to investigate if there is more breakage in new (major) releases of 389-ds.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants