Bug 1884170

Summary:	Satellite 6.7 is not able to connect to the LDAP using the CN if the certificate has alternative name set
Product:	Red Hat Satellite	Reporter:	Ahmed Eladawy <aeladawy>
Component:	LDAP	Assignee:	satellite6-bugs <satellite6-bugs>
Status:	CLOSED WONTFIX	QA Contact:	Vladimír Sedmík <vsedmik>
Severity:	medium	Docs Contact:
Priority:	unspecified
Version:	6.7.0	CC:	javier.leonperis, oezr
Target Milestone:	Unspecified	Keywords:	Triaged
Target Release:	Unused
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2022-10-28 18:01:59 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Ahmed Eladawy 2020-10-01 09:05:20 UTC

Description of problem:

Satellite 6.7 is not able to connect to the LDAP using the CN if the certificate has alternative name set

The customer used the alternative name from the certificate to make the connection works.

Version-Release number of selected component (if applicable):
Satellite 6.7

How reproducible:

Can not reproduced as we do not have LDAP test environment.

Steps to Reproduce:
1. The LDAP certificate has an alternative name set.
2. Create Create LDAP Auth Source with Server name set to the certificate CN


Actual results:

ERF50-1006 [Foreman::WrappedException]: Unable to connect to LDAP server ([Net::LDAP::Error]: hostname "LDAP-CN" does not match the server certificate)"

Expected results:

The connection should work without issues

Additional info:

Comment 1 Ondřej Ezr 2020-10-06 07:50:22 UTC

Hi Ahmed,

does this work if they use the main LDAP server name?

Comment 2 Ahmed Eladawy 2020-10-06 08:18:17 UTC

(In reply to Ondřej Ezr from comment #1)
> Hi Ahmed,
> 
> does this work if they use the main LDAP server name?

Hi Ondřej,

When using the main LDAP server name , it gives the same error :

ERF50-1006 [Foreman::WrappedException]: Unable to connect to LDAP server ([Net::LDAP::Error]: hostname "LDAP-CN" does not match the server certificate)"

It works only when the alternative name on the certificate is used.

Comment 3 Brad Buckingham 2022-09-02 20:25:18 UTC

Upon review of our valid but aging backlog the Satellite Team has concluded that this Bugzilla does not meet the criteria for a resolution in the near term, and are planning to close in a month. This message may be a repeat of a previous update and the bug is again being considered to be closed. If you have any concerns about this, please contact your Red Hat Account team.  Thank you.

Comment 4 Brad Buckingham 2022-09-02 20:31:26 UTC

Upon review of our valid but aging backlog the Satellite Team has concluded that this Bugzilla does not meet the criteria for a resolution in the near term, and are planning to close in a month. This message may be a repeat of a previous update and the bug is again being considered to be closed. If you have any concerns about this, please contact your Red Hat Account team.  Thank you.

Comment 5 Brad Buckingham 2022-10-28 18:01:59 UTC

Thank you for your interest in Red Hat Satellite. We have evaluated this request, and while we recognize that it is a valid request, we do not expect this to be implemented in the product in the foreseeable future. This is due to other priorities for the product, and not a reflection on the request itself. We are therefore closing this out as WONTFIX. If you have any concerns about this feel free to contact your Red Hat Account Team. Thank you.