libldap-common missing in beanbag/reviewboard:6.0 and above

Review Request #13614 — Created March 5, 2024 and submitted — Latest diff uploaded

Information

Review Board
release-6.x

Reviewers

libldap-common is missing in beanbag/reviewboard:6.0 and above. This has a nasty consequence: Verification of LDAPS servers with non-public certificates is not possible anymore! Instead, RB will just report the very unspecific error:
Error authenticating with LDAP: {'result': -1, 'desc': "Can't contact LDAP server", 'ctrls': [], 'info': '(unknown error code)'}

Solution proposal:
Add apt-get install libldap-common to Dockerfile, so the package gets installed explicitly and LDAP client uses system-wide certificate store again.

  1. Built a docker image derived from beanbag/reviewboard:6.0, installed the missing package libldap-common and add appropriate non-public certificate to system-wide certificate store
  2. Run container based on derived image
  3. RB UI: Configure LDAP auth to a server that uses a non-public certificate
  4. RB UI: Try to login with LDAP-based user account
    -> No error message seen anymore and login succeeded.
    Loading...