Bug 2010658 - AAA LDAP extension is querying DNS with ANY request
Summary: AAA LDAP extension is querying DNS with ANY request
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: ovirt-engine-extension-aaa-ldap
Classification: oVirt
Component: Extension
Version: 1.4.4
Hardware: Unspecified
OS: Unspecified
high
high
Target Milestone: ovirt-4.4.9
: 1.4.5
Assignee: Martin Perina
QA Contact: Petr Kubica
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2021-10-05 09:55 UTC by Petr Kubica
Modified: 2021-11-20 07:49 UTC (History)
1 user (show)

Fixed In Version: ovirt-engine-extension-aaa-ldap-1.4.5
Clone Of:
Environment:
Last Closed: 2021-11-20 07:49:09 UTC
oVirt Team: Infra
Embargoed:
mperina: ovirt-4.4+
gdeolive: testing_ack+

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Issue Tracker RHV-43759 0 None None None 2021-10-05 10:02:52 UTC
oVirt gerrit 116967 0 None MERGED Don't use DNS ANY query type 2021-10-06 05:58:48 UTC
oVirt gerrit 116971 0 None NEW Don't use DNS ANY query type 2021-10-06 05:58:48 UTC

Description Petr Kubica 2021-10-05 09:55:32 UTC 
Description of problem:

[org.ovirt.engine.core.aaa.servlet.SsoPostLoginServlet] (default task-3) [] server_error: An error occurred while attempting to connect to server <ldap_fqdn>:389:  IOException(LDAPException(resultCode=91 (connect error), errorMessage='An error occurred while attempting to establish a connection to server <ldap_fqdn>/<ldap_ip>:389:  UnknownHostException(<ldap_fqdn>), ldapSDKVersion=4.0.14, revision=b2272901fd62ad978017ff1aeb049cafc1999b12'))


Sending ANY request is deprecated in RFC8482
https://tools.ietf.org/html/rfc8482

more info at:
https://blog.cloudflare.com/rfc8482-saying-goodbye-to-any/


Version-Release number of selected component (if applicable):
ovirt-engine-extension-aaa-ldap-1.4.4-1.el8ev.noarch

How reproducible:
always

Steps to Reproduce:
1. have LDAP integration
Comment 1 Petr Kubica 2021-10-27 11:23:22 UTC 
Verified in
ovirt-engine-extension-aaa-ldap-1.4.5-1.el8ev.noarch
Comment 2 Sandro Bonazzola 2021-11-20 07:49:09 UTC 
This bugzilla is included in oVirt 4.4.9 release, published on October 20th 2021.

Since the problem described in this bug report should be resolved in oVirt 4.4.9 release, it has been closed with a resolution of CURRENT RELEASE.

If the solution does not work for you, please open a new bug report.
Note You need to log in before you can comment on or make changes to this bug.