CommitterGitHub (1)
AuthorAndrew (1)
BranchesQE-NAS-103191 (1)


FreeNAS/freenas c1d31ab — docs/api/resources directoryservice.rst, gui/directoryservice models.py forms.py

by Andrew via GitHub on ⎇
NAS-103051 / 11.3 / Fix ldaps configuration in AD and LDAP enviornments (#3544)

Affects python ldap config, nslcd.conf, and ldap.conf.
Ensure ca-root-nss.crt is included in ldap CACERTFILE if no custom CAs are on system, otherwise use user-provided ones.
Use cert provided in 'Certificate' dropdown for certificate-based authentication.
Add new parameter "validate_certificates" to Active Directory and LDAP.
Default to using GSSAPI bind in AD environments to meet Samba DC requirement of "strong auth".
Remove unused fields from LDAP model.
Raise validation error in crypto plugin if deleting cert used by AD or LDAP services.
Clean up API documentation
DeltaFile
+232-76src/middlewared/middlewared/plugins/activedirectory.py
+93-14src/middlewared/middlewared/plugins/ldap.py
+23-48gui/directoryservice/models.py
+57-0gui/directoryservice/migrations/0015_add_ldaps_validation.py
+26-17src/middlewared/middlewared/etc_files/local/openldap/ldap.conf
+19-3src/middlewared/middlewared/etc_files/generate_ssl_certs.py
+2-14src/freenas/usr/local/libexec/freenas-debug/ldap/ldap.sh
+0-14docs/api/resources/directoryservice.rst
+9-5src/middlewared/middlewared/etc_files/local/nslcd.conf
+2-5gui/directoryservice/forms.py
+2-2src/middlewared/middlewared/etc_files/afpd.py
+3-1src/middlewared/middlewared/plugins/crypto.py
+0-3src/middlewared/middlewared/etc_files/local/smb4.conf
+1-1src/middlewared/middlewared/etc_files/krb5.conf
+469-20314 files

UnifiedSplitRaw