------------------------------------------------------------------------------
To reply, visit https://hellosplat.com/s/beanbag/tickets/5023/
------------------------------------------------------------------------------

New ticket #5023 by fmiedniak-abb
For Beanbag, Inc. > Review Board

Status: New
Tags: Priority:Medium, Type:Defect


------------------------------------------------------------------------------
Verification of LDAPS servers with non-public certificates not possible anymore 
with docker image beanbag/reviewboard:6.0 and above
==============================================================================

# What version are you running?
6.0.2

# What's the URL of the page containing the problem?
n/a

# What steps will reproduce the problem?
1. Configure LDAP auth to a server that uses a non-public certificate 
2. Add certificate to system-wide certificate store
3. Try to login


# What is the expected output? What do you see instead?
Expected: Login successful.
Seen: Error in RB log output: Error authenticating with LDAP: {'result': -1, 
'desc': "Can't contact LDAP server", 'ctrls': [], 'info': '(unknown error 
code)'}

# What operating system are you using? What browser?
Docker image beanbag/reviewboard:6.0.2

# Please provide any additional information below.
see https://groups.google.com/g/reviewboard/c/nMsySlScboY/m/3NlyJw4wAwAJ

# Solution proposal
Add apt-get install libldap-common to Dockerfile, so the package gets installed 
explicitly and LDAP client uses system-wide certificate store again.
Note: https://hellosplat.com/s/beanbag/tickets/1919 may be then closed as well.

------------------------------------------------------------------------------

-- 
You received this message because you are subscribed to the Google Groups 
"reviewboard-issues" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/reviewboard-issues/20240305144726.1736.41216%40ip-10-1-54-209.ec2.internal.

Reply via email to