ldap utils doesn't use _ldaps._tcp SRV entry when connecting using ldaps:///
- First Post
- Replies
- Stats
-
Go to
- ----- 2023 -----
- June
- May
- April
- March
- February
- January
- ----- 2022 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2021 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2020 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2019 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2018 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2017 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2016 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2015 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2014 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2013 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2012 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2011 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2010 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2009 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2008 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2007 -----
- December
Hi,
I've configured correctly my DNS to provide SRV records for my ldap servers.
If I use ldap:/// , it would correctly use the entry corresponding to
_ldap._tcp to
make the connection:
ldapsearch -H ldap:///dc%3Dexample%2Cdc%3Dcom -v
ldap_initialize( ldap://ldap.example.com:389 )
But if I use ldaps it would try to use _ldap entry instead of _ldaps. Is there
a way I can avoid this?
--
Braiam
--On Friday, June 5, 2020 7:26 PM -0400 Braiam <braiamp(a)gmail.com> wrote:
But if I use ldaps it would try to use _ldap entry instead of _ldaps.
Is
there a way I can avoid this?
Following up for posterity, but as you already found there is no standard
describing how this would work, and in particular how it would guard
against MITM attacks (<https://bugs.openldap.org/show_bug.cgi?id=8610>)
Regards,
Quanah
--
Quanah Gibson-Mount
Product Architect
Symas Corporation
Packaged, certified, and supported LDAP solutions powered by OpenLDAP:
<http://www.symas.com>
1096
days inactive
1099
days old
openldap-technical@openldap.org
1 comments
2 participants
tags (0)
participants (2)
-
Braiam -
Quanah Gibson-Mount