Enabling TLS for LDAP Authentication
PreviousConfiguring LDAP AuthenticationNextManual Kubernetes Secret for LDAP Authentication Bind User
Last updated
Was this helpful?
Connectware 1.10.2
Last updated
Was this helpful?
Helm version 3 is installed on your system.
The Kubernetes command line tool kubectl is configured and has access to the target installation.
You know the name and namespace of your Connectware installation. See .
The values.yaml file is available.
.
To use TLS for LDAP you only need to set a valid ldaps:// URL for the Helm value url in the global.authentication.ldap context. Remember to also adjust the TCP port number. By default LDAPS uses port 636.
Connectware will verify that the LDAP server presents a valid certificate before using it as authentication backend. Unless you have a certificate for your LDAP server that is signed by a valid root CA, you will need to provide the CA certificate that signed your LDAP server’s certificate. Alternatively you can disable certificate validation.
You can simply provide the CA certificate in the Helm value caChain.cert in the global.authentication.ldap context. Provide the complete certificate chain necessary to validate the LDAP server’s certificate.
Example
As an alternative, you can provide the CA certificate through a manually create Kubernetes ConfigMap.
To provide the CA certificate necessary to validate the certificate used by your LDAP server, you can manually create a Kubernetes ConfigMap that contains the certificate as a file named ca.crt. You will then provide the name of that ConfigMap in the Helm value caChain.existingConfigMap in the global.authentication.ldap context.
Example
Create the Kubernetes ConfigMap from a file named ca.crt in your current directory:
Specify the name of the ConfigMap:
While we do not recommend skipping certificate validation for production use, it is possible to tell Connectware to accept any certificate the LDAP server presents. To do so, simply set the Helm value caChain.trustAllCertificates in the global.authentication.ldap context to true.
Example
Related Links
.