392212 - LDAP parameters descriptions should mention how to use SSL connection

Status: RESOLVED FIXED

(Bugzilla :: Documentation, defect)

Description

[Tiago Mello [:timello]]

When trying to use LDAP with SSL (636 port) Bugzilla has returned 84 LDAP error which is LDAP_DECODING_ERROR. After changing the used module from Net::LDAP to Net::LDAPS in Bugzilla/Auth/Verify/LDAP.pm it became to work correctly.

The Net::LDAPS documentation says that all methods from Net::LDAP can be used with this module, so I would suggest to change that module for Net::LDAPS.

Comment 1

[Tiago Mello [:timello]]

Attachment: Changes the module from Net::LDAP to Net::LDAPS

Comment 2

[Tiago Mello [:timello]]

Attachment: Missing some changes.

Comment 3

[Max Kanat-Alexander]

Did you test that this still works without SSL?

I'm pretty sure that Net::LDAP automatically uses SSL if you specify an ldaps:// URL. Perhaps that should be mentioned in the parameter description, though.

Comment 4

[Tiago Mello [:timello]]

(In reply to comment #3)
> Did you test that this still works without SSL?
> 
> I'm pretty sure that Net::LDAP automatically uses SSL if you specify an
> ldaps:// URL. Perhaps that should be mentioned in the parameter description,
> though.
> 
You are right. ldaps:// works. So, changing the bug summary.

Comment 5

[Frédéric Buclin]

Comment on attachment 276656 [details] [diff] [review]
Missing some changes.

r- per previous comments.

Comment 6

[Sam Folk-Williams]

The doc sort of mentions this, but I agree it could be more clear in regards to SSL specifically:

--
You can also specify a LDAP URI, so as to use other protocols, such as LDAPS or LDAPI. If port was not specified in the URI, the default is either 389 or 636 for 'LDAP' and 'LDAPS' schemes respectively.

Ex. "ldap://ldap.company.com", "ldaps://ldap.company.com" or "ldapi://%2fvar%2flib%2fldap_sock" 
--

Comment 7

[Sam Folk-Williams]

Attachment: docs patch for lpaps and lsapi

Docs patch - explain lpadi, ldaps and add a <tip> for ldaps

Comment 8

[Vlad Dascalu]

Comment on attachment 303904 [details] [diff] [review]
docs patch for lpaps and lsapi

-                schemes respectively.
+                schemes respectively. 

This adds a space at the end of the sentence, right after the period. Could it be removed?

Comment 9

[Sam Folk-Williams]

(In reply to comment #8)
> (From update of attachment 303904 [details] [diff] [review])
> -                schemes respectively.
> +                schemes respectively. 
> 
> This adds a space at the end of the sentence, right after the period. Could it
> be removed?
> 

This can be removed on checkin i'd imagine 

Comment 10

[Frédéric Buclin]

Comment on attachment 303904 [details] [diff] [review]
docs patch for lpaps and lsapi

Looks good to me. r=LpSolit

Comment 11

[Frédéric Buclin]

tip:

Checking in docs/en/xml/administration.xml;
/cvsroot/mozilla/webtools/bugzilla/docs/en/xml/administration.xml,v  <--  administration.xml
new revision: 1.90; previous revision: 1.89
done

3.0.4:

Checking in docs/xml/administration.xml;
/cvsroot/mozilla/webtools/bugzilla/docs/xml/Attic/administration.xml,v  <--  administration.xml
new revision: 1.70.2.13; previous revision: 1.70.2.12
done