Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Foreman expects LDAP server to follow RFC2307 #3277

Merged
merged 2 commits into from
Sep 17, 2024

Conversation

aneta-petrova
Copy link
Member

What changes are you introducing?

Adding a prerequisite stating that when connecting to an LDAP server as an external authentication source, that LDAP server needs to be RFC2307-compliant.

Why are you introducing these changes? (Explanation, links to references, issues, etc.)

https://issues.redhat.com/browse/SAT-25037 and https://bugzilla.redhat.com/show_bug.cgi?id=2127089

Anything else to add? (Considerations, potential downsides, alternative solutions you have explored, etc.)

I expect a conflict on 3.10 and lower but the change should go into those versions too.

Checklists

  • I am okay with my commits getting squashed when you merge this PR.
  • I am familiar with the contributing guidelines.

Please cherry-pick my commits into:

  • Foreman 3.12/Katello 4.14 (Satellite 6.16)
  • Foreman 3.11/Katello 4.13
  • Foreman 3.10/Katello 4.12
  • Foreman 3.9/Katello 4.11 (Satellite 6.15; orcharhino 6.8/6.9/6.10)
  • Foreman 3.8/Katello 4.10
  • Foreman 3.7/Katello 4.9 (Satellite 6.14)
  • Foreman 3.6/Katello 4.8
  • Foreman 3.5/Katello 4.7 (Satellite 6.13; orcharhino 6.6/6.7)
  • We do not accept PRs for Foreman older than 3.5.

@aneta-petrova aneta-petrova added Needs tech review Requires a review from the technical perspective Needs style review Requires a review from docs style/grammar perspective labels Sep 12, 2024
@maximiliankolb maximiliankolb added style review done No issues from docs style/grammar perspective and removed Needs style review Requires a review from docs style/grammar perspective labels Sep 12, 2024
Copy link
Member

@ekohl ekohl left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Adding a prerequisite stating that when connecting to an LDAP server as an external authentication source, that LDAP server needs to be RFC2307-compliant.

In theforeman/ldap_fluff#78 some work started on supporting this, but for now we should document this limitation.

@maximiliankolb maximiliankolb added tech review done No issues from the technical perspective and removed Needs tech review Requires a review from the technical perspective labels Sep 12, 2024
@aneta-petrova
Copy link
Member Author

Thanks, Maximilian and Ewoud, for the review. I notified my team about this PR too and would like to give them space to review as well if they choose to. Let's keep this PR open until next week.

@aneta-petrova aneta-petrova merged commit 4514b45 into theforeman:master Sep 17, 2024
9 checks passed
aneta-petrova added a commit that referenced this pull request Sep 17, 2024
Co-authored-by: Maximilian Kolb <[email protected]>
(cherry picked from commit 4514b45)
aneta-petrova added a commit that referenced this pull request Sep 17, 2024
Co-authored-by: Maximilian Kolb <[email protected]>
(cherry picked from commit 4514b45)
@aneta-petrova
Copy link
Member Author

Merged to "master" and cherry-picked:

9188124..6d28632 3.12 -> 3.12
544ea92..f62adf1 3.11 -> 3.11

The structure has changed too much between 3.10 and 3.11. Rather than just resolving a conflict, I'll submit a new PR for 3.10 and earlier.

@aneta-petrova aneta-petrova deleted the SAT-25037_ldap_schema branch September 17, 2024 12:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
style review done No issues from docs style/grammar perspective tech review done No issues from the technical perspective
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants