Skip to content

Foreman expects LDAP server to follow RFC2307#3277

Merged
aneta-petrova merged 2 commits intotheforeman:masterfrom
aneta-petrova:SAT-25037_ldap_schema
Sep 17, 2024
Merged

Foreman expects LDAP server to follow RFC2307#3277
aneta-petrova merged 2 commits intotheforeman:masterfrom
aneta-petrova:SAT-25037_ldap_schema

Conversation

@aneta-petrova
Copy link
Member

What changes are you introducing?

Adding a prerequisite stating that when connecting to an LDAP server as an external authentication source, that LDAP server needs to be RFC2307-compliant.

Why are you introducing these changes? (Explanation, links to references, issues, etc.)

https://issues.redhat.com/browse/SAT-25037 and https://bugzilla.redhat.com/show_bug.cgi?id=2127089

Anything else to add? (Considerations, potential downsides, alternative solutions you have explored, etc.)

I expect a conflict on 3.10 and lower but the change should go into those versions too.

Checklists

  • I am okay with my commits getting squashed when you merge this PR.
  • I am familiar with the contributing guidelines.

Please cherry-pick my commits into:

  • Foreman 3.12/Katello 4.14 (Satellite 6.16)
  • Foreman 3.11/Katello 4.13
  • Foreman 3.10/Katello 4.12
  • Foreman 3.9/Katello 4.11 (Satellite 6.15; orcharhino 6.8/6.9/6.10)
  • Foreman 3.8/Katello 4.10
  • Foreman 3.7/Katello 4.9 (Satellite 6.14)
  • Foreman 3.6/Katello 4.8
  • Foreman 3.5/Katello 4.7 (Satellite 6.13; orcharhino 6.6/6.7)
  • We do not accept PRs for Foreman older than 3.5.

@github-actions
Copy link

github-actions bot commented Sep 12, 2024

@aneta-petrova aneta-petrova added Needs tech review Requires a review from the technical perspective Needs style review Requires a review from docs style/grammar perspective labels Sep 12, 2024
@maximiliankolb maximiliankolb added style review done No issues from docs style/grammar perspective and removed Needs style review Requires a review from docs style/grammar perspective labels Sep 12, 2024
Copy link
Member

@ekohl ekohl left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Adding a prerequisite stating that when connecting to an LDAP server as an external authentication source, that LDAP server needs to be RFC2307-compliant.

In theforeman/ldap_fluff#78 some work started on supporting this, but for now we should document this limitation.

@maximiliankolb maximiliankolb added tech review done No issues from the technical perspective and removed Needs tech review Requires a review from the technical perspective labels Sep 12, 2024
Co-authored-by: Maximilian Kolb <mail@maximilian-kolb.de>
@aneta-petrova
Copy link
Member Author

Thanks, Maximilian and Ewoud, for the review. I notified my team about this PR too and would like to give them space to review as well if they choose to. Let's keep this PR open until next week.

@aneta-petrova aneta-petrova merged commit 4514b45 into theforeman:master Sep 17, 2024
aneta-petrova added a commit that referenced this pull request Sep 17, 2024
Co-authored-by: Maximilian Kolb <mail@maximilian-kolb.de>
(cherry picked from commit 4514b45)
aneta-petrova added a commit that referenced this pull request Sep 17, 2024
Co-authored-by: Maximilian Kolb <mail@maximilian-kolb.de>
(cherry picked from commit 4514b45)
@aneta-petrova
Copy link
Member Author

Merged to "master" and cherry-picked:

9188124..6d28632 3.12 -> 3.12
544ea92..f62adf1 3.11 -> 3.11

The structure has changed too much between 3.10 and 3.11. Rather than just resolving a conflict, I'll submit a new PR for 3.10 and earlier.

@aneta-petrova aneta-petrova deleted the SAT-25037_ldap_schema branch September 17, 2024 12:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

style review done No issues from docs style/grammar perspective tech review done No issues from the technical perspective

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants