Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support for adding Certificate Authorities for LDAP Authentication #340

Closed
exedore6 opened this issue Oct 2, 2020 · 2 comments
Closed
Labels
enhancement The issue describes an enhancement that we would like to implement in the future.
Milestone

Comments

@exedore6
Copy link

exedore6 commented Oct 2, 2020

Desired Behavior

To be able to add an internal certificate authority's certificate to the netbox container. Additionally it would be awful nice to tell the ldap code to support a client side certificate (in order to connect to something like GSuite's LDAP backend)
...

Contrast to Current Behavior

If ldap authentication is configured in the netbox container, and the ldap server is using a certificate that isn't signed by an official CA, the validation fails, and therefore, the login fails.

At the moment, the only documented, supported option is to set the LDAP_IGNORE_CERT_ERRORS environment variable in the docker-compose.override.yml to "true"
...

Changes Required

A volume mapping from the project directory to create the appropriate certificate file, and possibly an environment variable to specify the TLS_CACERT string to the appropriate location. Additionally a change to ldap_config.py to pass the variable to django.
...

Discussion: Benefits and Drawbacks

People who are running netbox internally can enjoy actual host validation when using LDAP authentication.
...

@cimnine cimnine added the enhancement The issue describes an enhancement that we would like to implement in the future. label Oct 26, 2020
@cimnine cimnine added this to the 0.26.0 milestone Oct 26, 2020
@cimnine
Copy link
Collaborator

cimnine commented Oct 26, 2020

You will be able to implement this on your own by leveraging #343 .

@cimnine
Copy link
Collaborator

cimnine commented Oct 26, 2020

Netbox Docker 0.26.0 was just released which addresses this issue.

@cimnine cimnine closed this as completed Oct 26, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement The issue describes an enhancement that we would like to implement in the future.
Projects
None yet
Development

No branches or pull requests

2 participants