HUE-8170 [useradmin] Fix LDAP sync (ldap_access.py) certificate validation logic

Review Request #12774 - Created April 4, 2018 and submitted

Ying Chen
hue
origin/master
HUE-8170
hue
enricoberti, jgauthier, johan, ranade, romain, weixia
commit 561ec4710e6df909a1b07a1698f2762d47b5ffb2
Author: Ben Gooley <bgooley@cloudera.com>
Date:   Wed Apr 4 12:25:13 2018 -0700

    HUE-8170 [useradmin] Fix LDAP sync (ldap_access.py) certificate validation logic

:100644 100644 5e53932d4e... c6c3387d8f... M    apps/useradmin/src/useradmin/ldap_access.py
Test done by Ben Gooley

(1)

URL: ldaps://hostname.domain.com (hostname is in subjectAltName of server cert)
No ldap_cert configured
auth and ldap group sync both worked as expected
SUCCESS (expected)

(2)

URL: ldaps://alias.domain.com (alias is not in subjectAltName of server cert)
No ldap_cert configured
auth and ldap group sync both worked as expected
SUCCESS (expected)

(3)
URL: ldaps://alias.domain.com (alias is not in subjectAltName of server cert)
ldap_cert configured
auth and ldap group sync both worked as expected
SUCCESS (expected)

(4)

URL: ldaps://hostname.domain.com (hostname is in subjectAltName of server cert)
ldap_cert configured
auth and ldap group sync both worked as expected
SUCCESS (expected)
  1. 
      
  2. 
      
Review request changed

Status: Closed (submitted)

Loading...