Uploaded image for project: 'Core Server'
  1. Core Server
  2. SERVER-59048

Add support for SRV and SRV raw to LDAPDNSResolverCache

    • Type: Icon: Task Task
    • Resolution: Fixed
    • Priority: Icon: Major - P3 Major - P3
    • 5.1.0-rc0
    • Affects Version/s: None
    • Component/s: None
    • Labels:
      None
    • Fully Compatible
    • Security 2021-08-23, Security 2021-09-06

      Add the ability for users to prefix LDAP servers with "srv:" and "srv_raw:" so that the code automatically does the DNS lookups for SRV records.

      Enhance mongoldap to advise users when they make mistakes around srv vs srv_raw.

      When a user specifies "srv:<DNS NAME>", mongoldap will check and verify "_ldap._tcp.<DNS NAME>" exists for SRV. If an SRV record cannot be found, it will check "<DNS NAME>" for SRV, and warn the user they should use "srv_raw:<DNS_NAME>" instead. MongoLDAP will do the reverse check for "srv_raw:<DNS_NAME>" by checking for "_ldap._tcp.<DNS NAME>". When a user specifies "multi:<DNS_NAME>", mongoldap will check for "SRV" and suggest the user should use "srv_raw:<DNS_NAME>" instead.

            Assignee:
            mark.benvenuto@mongodb.com Mark Benvenuto
            Reporter:
            mark.benvenuto@mongodb.com Mark Benvenuto
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved: