Bug 32317 - uldap.access: use_ldaps is broken
Summary: uldap.access: use_ldaps is broken
Status: CLOSED DUPLICATE of bug 40041
Alias: None
Product: UCS
Classification: Unclassified
Component: LDAP
Version: UCS 3.1
Hardware: Other Linux
: P5 normal
Target Milestone: UCS 3.x
Assignee: Philipp Hahn
QA Contact: Florian Best
URL:
Keywords:
: 34132 (view as bug list)
Depends on:
Blocks:
 
Reported: 2013-08-22 17:02 CEST by Dirk Wiesenthal
Modified: 2016-07-20 10:58 CEST (History)
3 users (show)

See Also:
What kind of report is it?: ---
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional): Cleanup
Customer ID:
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Dirk Wiesenthal univentionstaff 2013-08-22 17:02:42 CEST
univention.uldap.access may use_ldaps. This option is completely broken:

self.port = int(ucr.get('ldap/server/port', 7389))
if use_ldaps and self.port == "7389":
  # can never be reached!

Here is my favorite:

if use_ldaps:
  self.uri = 'ldaps://%s:%s" % (self.host, self.port)'
  # i did not check for a follow-up eval(self.uri). I just hope that this is not done

I found the only usage of this option in
  services/univention-ad-connector/modules/univention/connector/ad/__init__.py

in there it is:
  self.baseConfig.is_true('%s/ad/ldap/ldaps' % self.CONFIGBASENAME, False)
Comment 1 Stefan Gohmann univentionstaff 2013-08-22 17:15:49 CEST
(In reply to Dirk Wiesenthal from comment #0)
> I found the only usage of this option in
>  
> services/univention-ad-connector/modules/univention/connector/ad/__init__.py
> 
> in there it is:
>   self.baseConfig.is_true('%s/ad/ldap/ldaps' % self.CONFIGBASENAME, False)

I think that was for Windows 2000 AD systems. We have dropped the support of Windows 2000 with UCS 3.
Comment 2 Florian Best univentionstaff 2014-03-04 08:37:55 CET
*** Bug 34132 has been marked as a duplicate of this bug. ***
Comment 3 Philipp Hahn univentionstaff 2016-07-20 10:37:07 CEST
Bug #40041: make renaming of multi valued RDNs possible
* use_ldaps was broken

*** This bug has been marked as a duplicate of bug 40041 ***