• Andrew's avatar
    NAS-103051 / 11.3 / Fix ldaps configuration in AD and LDAP enviornments (#3544) · c1d31ab3
    Andrew authored
    Affects python ldap config, nslcd.conf, and ldap.conf.
    Ensure ca-root-nss.crt is included in ldap CACERTFILE if no custom CAs are on system, otherwise use user-provided ones.
    Use cert provided in 'Certificate' dropdown for certificate-based authentication.
    Add new parameter "validate_certificates" to Active Directory and LDAP.
    Default to using GSSAPI bind in AD environments to meet Samba DC requirement of "strong auth".
    Remove unused fields from LDAP model.
    Raise validation error in crypto plugin if deleting cert used by AD or LDAP services.
    Clean up API documentation
    c1d31ab3
directoryservice.rst 10.1 KB