Feature #8775: Use SRV record for LDAP Authentication - pfSense - pfSense bugtracker

Actions

Copy link

Feature #8775

open

Use SRV record for LDAP Authentication

Added by fw admin over 6 years ago. Updated over 4 years ago.

Status:

New

Priority:

Very Low

Assignee:

Category:

Authentication

Target version:

Future

Start date:

08/09/2018

Due date:

% Done:

Estimated time:

Plus Target Version:

Release Notes:

Description

Maybe it is me, but, using an SRV record to resolve to either SSL or TLS LDAP server doesn't work. IMO, this would provide elegant failover for authentication.

Keep up the great work.

Actions

Copy link

Updated by Jim Pingle over 6 years ago

pfSense is at the mercy of the PHP LDAP module here, which itself uses OpenLDAP.

There isn't a way I could see to trigger the use of SRV records through PHP. From the CLI you can use `-H ldap://<dn>` and it will attempt to find an SRV record for the DN (not a hostname!) so even that doesn't seem optimal. Maybe this will improve in the future, but your best bet is to lobby to PHP to have support for this added to the LDAP module first.

Actions

Copy link