Jan Graichen
Jan Graichen
> either way you might want to try [goauthentik.io/docs/installation/configuration#authentik_ldap__tls__ciphers](https://goauthentik.io/docs/installation/configuration#authentik_ldap__tls__ciphers) to adjust the ciphers, and/or adding the Root CA to authentik, I think by default ldap3 (which is the LDAP library...
@BeryJu The issue is still present, and as shown with the standalone test script, directly related to authentik only. The standalone script can successfully connect to a modern, secured LDAP...
Tested with 2024.2: ``` { "event": "Task authentik.sources.ldap.tasks.ldap_sync_single[b870f9f2-6216-4e0a-8683-e62009243a39] raised unexpected: LDAPSocketOpenError(\"('socket ssl wrapping error: [SSL: UNEXPECTED_EOF_WHILE_READING] EOF occurred in violation of protocol (_ssl.c:1000)',)\")", "exception": [ { "exc_type": "Exception", "exc_value": "('socket...
Disabling the SNI option works (on `main` branch). The reason for that is, when giving an `ldaps://server` address, the code fails to extract a correct SNI: ```py # authentik/sources/ldap/models.py:149 if...
@BeryJu I am working on a fix for SNI, but how is it expected to work with multiple LDAP servers? To what should e.g. `ldaps://a,b,c` be expanded? * `ldaps://a`, `ldaps://b`,...
The issue that full URLs are passed to SNI is still present at https://github.com/goauthentik/authentik/blob/main/authentik/sources/ldap/models.py#L151?
The code appears to still pass the full URL, including protocol and port as the SNI host, and will pass the first host in the list to all connections: https://github.com/goauthentik/authentik/blob/main/authentik/sources/ldap/models.py#L155
Unless you have a parent project containing all projects, and opening the dashboard there, that is not possible yet. The only available scope to open a dashboard currently is a...
Hello @paul09253336, These are your issue statuses defined by your administrator. The values are custom:  Only the last column is translated because it groups all issue statuses marked as...
@cvzi I'll see if I can remove the older parser and reassign it the new source.