Feature #5244: LDAP Authenticator with AD should use SRV query to discover authentication sources - Foreman

Actions

Copy link

Feature #5244

open

LDAP Authenticator with AD should use SRV query to discover authentication sources

Added by Martin Jackson about 10 years ago. Updated about 9 years ago.

Status:

New

Priority:

Normal

Assignee:

Category:

Authentication

Target version:

Difficulty:

Triaged:

Bugzilla link:

1090019

Pull request:

Fixed in Releases:

Found in Releases:

1.4.2

Red Hat JIRA:

Description

The LDAP/AD authenticator currently (as of 1.4.2) requires that authentication be pinned to a single server. AD itself uses a DNS SRV mechanism (SRV query for _ldap._tcp.<domain>) to discover servers to authenticate against. It would be beneficial for large AD installations (with multiple servers) for Foreman to use this DNS query method. Perhaps a checkbox in the UI, which would disable the text entry box for the server?