New patch for LDAP Adoption tests #1189
Conversation
IPA is enabled on OSP17 when testing TLS-E adoption. Since it contains an LDAP server, we can use it to run additional LDAP adoption tests. Depends-On: openstack-k8s-operators/install_yamls#1079
…adoption into ldap-adoption
Use edpm_node_hostname variable instead of IP address to avoid TLS certificate hostname mismatch error when keystone connects to LDAP server. The IP address (192.168.122.100) in the LDAP URL caused: 'ldap.SERVER_DOWN: TLS: hostname does not match name in peer certificate' This fix ensures the LDAP URL uses the hostname (ipa.ooo.test) which matches the certificate CN/SAN. Fixes: OSPRH-6861 Related: PR openstack-k8s-operators#970
|
[APPROVALNOTIFIER] This PR is NOT APPROVED This pull-request has been approved by: The full list of commands accepted by this bot can be found here. DetailsNeeds approval from an approver in each of these files:Approvers can indicate their approval by writing |
|
Build failed (check pipeline). Post https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/a8c5c7344d1e4c5bb9a8e49abc64d0db ✔️ noop SUCCESS in 0s |
3 participants
This patch exists only to debug and possibly to find a way to fix LDAP URL to use hostname instead of IP
Use ipa.ooo.test hostname instead of IP address to avoid
TLS certificate hostname mismatch.