Details
-
Bug
-
Status: Closed
-
Critical
-
Resolution: Fixed
-
6.6.0
-
Untriaged
-
1
-
Unknown
Description
We need to add a note to the UI that client cert auth for LDAP currently only works for GSuite Secure LDAP and not all LDAPs. (The plan is to fix this for 6.6.1).
Attachments
Activity
| Field | Original Value | New Value |
|---|---|---|
| Assignee | Dave Finlay [ dfinlay ] | Rob Ashcom [ rob.ashcom ] |
| Labels | approved-for-6.6.0 |
| Link | This issue blocks MB-38724 [ MB-38724 ] |
| Assignee | Rob Ashcom [ rob.ashcom ] | Dave Finlay [ dfinlay ] |
| Resolution | Fixed [ 1 ] | |
| Status | Open [ 1 ] | Resolved [ 5 ] |
| Description |
We need to add a note to the UI that client cert auth for LDAP currently only works for GSuite Secure LDAP and not all LDAPs. (The plan is to fix this for 6.6.1).
Something like this: !image-2020-07-30-09-55-44-074.png|thumbnail! |
We need to add a note to the UI that client cert auth for LDAP currently only works for GSuite Secure LDAP and not all LDAPs. (The plan is to fix this for 6.6.1). |
| Attachment | Screen Shot 2020-07-30 at 1.28.39 PM.png [ 102690 ] | |
| Attachment | Screen Shot 2020-07-30 at 1.28.24 PM.png [ 102691 ] | |
| Attachment | Screen Shot 2020-07-30 at 1.28.07 PM.png [ 102692 ] |
The first three attached screenshots show how it should look as the UI states change.
Build couchbase-server-6.6.0-7902 contains ns_server commit d2c4685 with commit message:
MB-40708: add note that LDAP client certs only work with ...
Build couchbase-server-7.0.0-2738 contains ns_server commit d2c4685 with commit message:
MB-40708: add note that LDAP client certs only work with ...
Verified and closed for 6.6.0-7902. Warning message in UI only appears when Client Cert is selected.
| Status | Resolved [ 5 ] | Closed [ 6 ] |
| Attachment | Screenshot 2020-07-31 at 10.39.23 AM.png [ 102755 ] |
The issue here was that there are 2 somewhat competing messages for Client Cert: the disabled because of no encryption msg and this new one for when client cert is selected.
The existing msg should have been conditional on the encryption thing; the new msg is conditional on the selection of client cert which can’t happen until the first condition is met anyhow – so no collision.