From 7042523c544a3cbb2f324ea89b2a5e4db465477f Mon Sep 17 00:00:00 2001 From: Christoph Haas Date: Wed, 21 Apr 2021 11:07:16 +0200 Subject: [PATCH] configurable cert-check for the ldap auth provider (#12) --- internal/authentication/providers/ldap/provider.go | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/internal/authentication/providers/ldap/provider.go b/internal/authentication/providers/ldap/provider.go index 412e807..1ec8fb6 100644 --- a/internal/authentication/providers/ldap/provider.go +++ b/internal/authentication/providers/ldap/provider.go @@ -175,14 +175,15 @@ func (provider Provider) GetUserModel(ctx *authentication.AuthContext) (*authent } func (provider Provider) open() (*ldap.Conn, error) { - conn, err := ldap.DialURL(provider.config.URL) + tlsConfig := &tls.Config{InsecureSkipVerify: !provider.config.CertValidation} + conn, err := ldap.DialURL(provider.config.URL, ldap.DialWithTLSConfig(tlsConfig)) if err != nil { return nil, err } if provider.config.StartTLS { // Reconnect with TLS - err = conn.StartTLS(&tls.Config{InsecureSkipVerify: !provider.config.CertValidation}) + err = conn.StartTLS(tlsConfig) if err != nil { return nil, err }