[
https://issues.apache.org/jira/browse/AIRFLOW-3164?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16700487#comment-16700487
]
Maciej Bryński commented on AIRFLOW-3164:
-----------------------------------------
OK. But why we don't give option to use LDAP without TLS ?
Creating of copy of authentication backend just for this is IMHO not the best
programming practice.
And I'm pretty sure that this will break in following releases (because I will
need to follow changes in auth_ldap)
> verify certificate of LDAP server
> ---------------------------------
>
> Key: AIRFLOW-3164
> URL: https://issues.apache.org/jira/browse/AIRFLOW-3164
> Project: Apache Airflow
> Issue Type: Bug
> Reporter: Bolke de Bruin
> Priority: Blocker
> Fix For: 1.10.1
>
>
> Currently we dont verify the certificate of the Ldap server this can lead to
> security incidents.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
