Bug 1677587 - Could not handle invalid LDAP IDP configuration
Summary: Could not handle invalid LDAP IDP configuration
Keywords:
Status: CLOSED DUPLICATE of bug 1696115
Alias: None
Product: OpenShift Container Platform
Classification: Red Hat
Component: apiserver-auth
Version: 4.1.0
Hardware: Unspecified
OS: Unspecified
unspecified
high
Target Milestone: ---
: 4.1.0
Assignee: Sally
QA Contact: scheng
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2019-02-15 10:04 UTC by Chuan Yu
Modified: 2023-09-14 05:23 UTC (History)
5 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2019-04-05 13:43:14 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)

Description Chuan Yu 2019-02-15 10:04:43 UTC
Description of problem:
When configure invalid LDAP IDP, the authentication pods still could start successfully

Version-Release number of selected component (if applicable):
RHCOS build: Build 47.315
OCP: release:4.0.0-0.nightly-2019-02-13-204401

How reproducible:
always

Steps to Reproduce:
1.configure LDAP IDP with invalid configuration, such as
  identityProviders:
  - challenge: true
    ldap:
      attributes:
        id:
        - dn
        name:
        - cn
        preferredUsername:
        - uid
      ca: {}
      insecure: true
      url: ldaps://ldap.forumsys.com/dc=example,dc=com?uid
    login: true
    mappingMethod: claim
    name: testldap
    type: LDAP
2.
3.

Actual results:
The authentication pods start successfully

Expected results:
Error report and the authentication pods could not start successfully.

Additional info:

Comment 1 Standa Laznicka 2019-02-15 11:23:49 UTC
I agree that the missing validation is a problem that we know of and is currently tracked in https://jira.coreos.com/browse/AUTH-201.

However, please do specify why the config is invalid so that anyone looking at the BZ knows what's happening.

Comment 4 Mo 2019-04-05 13:43:14 UTC

*** This bug has been marked as a duplicate of bug 1696115 ***

Comment 5 Red Hat Bugzilla 2023-09-14 05:23:43 UTC
The needinfo request[s] on this closed bug have been removed as they have been unresolved for 1000 days


Note You need to log in before you can comment on or make changes to this bug.