Uploaded image for project: 'Directory Studio'
  1. Directory Studio
  2. DIRSTUDIO-1219

Directory Studio doesn't StartTLS before authenticating

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Closed
    • Blocker
    • Resolution: Fixed
    • 2.0.0-M16
    • 2.0.0-M17
    • studio-connection
    • None
    • Apache Directory Studio is running on Mac OS 10.14 with jdk1.8.0_201.

    Description

      There is an issue connecting to an OpenLDAP server configured with olcSaslSecProps: noplain,noanonymous,minssf=1

      i.e. The server requires some form of transport encryption. I have chosen StartTLS and SASL GSSAPI authentication, but Directory Studio doesn't actually do StartTLS before binding - I can see this by looking at the network traffic using Wireshark. I would have expected it to start TLS before attempting to bind.

      Attachments

        Issue Links

          is related to

          Bug - A problem which impairs or prevents the functions of the product. DIRSTUDIO-761 GSSAPI Authentication fails when using ADS LDAP Client API

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed
          relates to

          Improvement - An improvement or enhancement to an existing feature or task. DIRAPI-374 Consistify LdapConnectionConfig useTls and useSsl flags

          • Major - Major loss of function.
          • Resolved

          Activity

            People

              seelmann Stefan Seelmann
              hughcb Hugh Cole-Baker
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: