Uploaded image for project: 'Core Server'
  1. Core Server
  2. SERVER-72482

Add LDAP referral test

    • Type: Icon: Task Task
    • Resolution: Works as Designed
    • Priority: Icon: Major - P3 Major - P3
    • None
    • Affects Version/s: None
    • Component/s: None
    • Labels:
      None
    • Server Security

      SERVER-70912 revealed that a bug was introduced into the server in 5.1 that causes crashes when chasing LDAP referrals. This bug was only discovered via HELP-38838 because we do not currently have any existing tests for LDAP referrals.

      Unfortunately, adding a test for this does not seem trivial. Our existing mock LDAP server and LDAP proxy both use the ldaptor package, which explicitly does not support referrals yet. A cursory investigation of alternative third-party Python libraries did not seem to reveal any promising alternatives.

      To add test coverage for LDAP referrals, we need to do the following:

      1. More thoroughly investigate third-party alternatives for ldaptor that support referrals and use them if possible. This currently seems unlikely.
      2. If 1) is not possible, possibly explore forking ldaptor and contributing to add referral support so we can use it.
      3. Alternatively, work with the Build team to set up an additional LDAP test server that can work with the current one for referrals.

            Assignee:
            backlog-server-security [DO NOT USE] Backlog - Security Team
            Reporter:
            varun.ravichandran@mongodb.com Varun Ravichandran
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved: