[dev.icinga.com #13539] Improve error handling and validation of multiple LDAP URIs

[icinga-migration]

This issue has been migrated from Redmine: https://dev.icinga.com/issues/13539

Created by TheFlyingCorpse on 2016-12-12 21:47:36 +00:00

Assignee: (none)
Status: New
Target Version: (none)
Last Update: 2016-12-13 22:02:45 +00:00 (in Redmine)

---

Issue

refs #11809

I saw the documentation update and decided to try this out right away. Sadly it does not work.

I've tried the list below (each pre is its own attempt) which yields the following error message:

Validation Log

Connect using LDAPS
ldap_connect(): Could not create session handle: Bad parameter to an ldap routine

Attempted:

ldaps://rygmdc08.labdomain.net

ldaps://rygmdc08.labdomain.net ldaps://rygmdc12.labdomain.net

rygmdc08.labdomain.net rygmdc12.labdomain.net

Works:

rygmdc08.labdomain.net

rygmdc12.labdomain.net

About

Info about setup:
distro: Debian Jessie
icingaweb2 (package) version: 2.3.4+snapshot2016.12.12+1~jessie
php version: 5.6.27+dfsg-0+deb8u1
php5 ldap version: 5.6.27+dfsg-0+deb8u1

This is attempted against AD with the following resource config(which does work when using either of the servers as a single fqdn to ldap server:

[LABDomain-LDAPS]
type = "ldap"
hostname = "rygmdc08.labdomain.net"
port = "636"
encryption = "ldaps"
root_dn = "dc=labdomain,dc=net"
bind_dn = "CN=svcIcingaWeb2,OU=ServiceAccounts,OU=Admins,OU=RYG,DC=labdomain,DC=net"
bind_pw = "xxxx"

---

Relations:

• relates #11809

[icinga-migration]

Updated by mfrosch on 2016-12-13 12:54:00 +00:00

• Relates set to 11809

[icinga-migration]

Updated by elippmann on 2016-12-13 12:56:39 +00:00

Hi Rune,

Please set encryption to none and use the following for the hostname:

ldaps://rygmdc08.labdomain.net ldaps://rygmdc12.labdomain.net

This should work.

Best regards,
Eric

[icinga-migration]

Updated by TheFlyingCorpse on 2016-12-13 22:02:45 +00:00

Setting the encryption type to "none" makes it possible to use multiple ldap hostnames. I did not see that in the documentation :)