Details
-
Change Request (Sub-task)
-
Resolution: Won't Do
-
Trivial
-
None
-
None
-
None
-
Team A
-
Sprint 2, Sprint 3, Sprint 4, Sprint 5, Sprint 6, Sprint 90 (Jul 2022), Sprint 91 (Aug 2022), Sprint 92 (Sep 2022), Sprint 93 (Oct 2022), Sprint 94 (Nov 2022), Sprint 95 (Dec 2022), Sprint 96 (Jan 2023)
-
5
Description
Currently Zabbix frontend communicates with LDAP server with no encryption, but fully encrypted - LDAPS - is also reported as working. Some users complain that the third method - LDAP with StartTLS - does not work, although a small change in the frontend PHP code makes it work. In the screen above, the “Use TLS” field is added to support all 3 methods. On the other hand, the StartTLS method is less secure than LDAPS, as it starts unencrypted, then the client (Zabbix frontend) proposes to LDAP server to switch to TLS. It has to be decided - do we add support of StartTLS method.
“Test” button checks “Bind” operation - is it successful.
“Test” button checks “Bind” operation - is it successful.
Attachments
Issue Links
- depends on
-
-
- Closed
-