iaorekhov-1980 opened a new issue, #60236:
URL: https://github.com/apache/doris/issues/60236

   ### Search before asking
   
   - [x] I had searched in the 
[issues](https://github.com/apache/doris/issues?q=is%3Aissue) and found no 
similar issues.
   
   
   ### Description
   
   In current configuration insecure version of protocol LDAP is used by 
default and there is no option to switch to secured LDAPS.
   This causes problem while deploying DORIS in environments where only LDAPS 
is available as no authentication is possible.
   To prevent such situation I'll introduce the change that will support 
existing behavior by default, but will allow to switch to LDAPS if needed.
   
   ### Solution
   
   The proposed solution is to introduce into configuration new 
**non-mandatory** property **ldap_use_ssl** with default value **false**.
   The default value or explicitly specified **false** will support existing 
behavior and use **LDAP** to create connection string.
   But if **true** will be specified - the **LDAPS** protocol will be used for 
connection.
   
   The logic to prepare string with URL connection will be moved to separate 
method to avoid duplication and allow unit testing of introduced feature.
   
   ### Are you willing to submit PR?
   
   - [x] Yes I am willing to submit a PR!
   
   ### Code of Conduct
   
   - [x] I agree to follow this project's [Code of 
Conduct](https://www.apache.org/foundation/policies/conduct)
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to