Central Management - Add Support For Setting Up CCM LDAP Authentication Using LDAPS

[ryanrichter94]

Enhancement Description

Received a ticket asking if CCM can run over LDAPS as a more secure alternative to the current LDAP in place as of CCM 0.6.3

References:

• ZenDesk Ticket
• ZenDesk Ticket 2
• ZenDesk Ticket 3
• ZenDesk Ticket 4
• ZenDesk Ticket 5

┆Issue is synchronized with this Gitlab issue by Unito

[ryanrichter94]

Bumping this another customers request for this feature. Also for context CCM is 0.10.1 as of writing this.

• ZenDesk Ticket 2

[ryanrichter94]

Adding ZenDesk Ticket 3 from duplicate issue to this one.

[mkevenaar]

Sorry for chiming in here. There are two (2) ways of communicating with LDAP securely.

• LDAP with StartTLS (Default port 389, like normal)
  • Uses the same protocol but adds an encryption layer using "Extended Operation" (part of LDAP)
• LDAPS or LDAP over SSL (Default port 636)
  • Basically, the equivalent of HTTP vs HTTPS.

Both are very different and have different implementations. Some configurations support both, and some only the StartTLS version.

I suggest implementing both, increasing the compatibility with different LDAP configurations.

[ryanrichter94]

Added ZenDesk Ticket 5 to issue after having support call with organization. They are currently in the process of phasing out legacy LDAP for LDAPS and Okta as their authentication solutions going forward.