{"action":"opened","issue":{"url":"https://api.github.com/repos/spring-cloud/spring-cloud-dataflow/issues/963","repository_url":"https://api.github.com/repos/spring-cloud/spring-cloud-dataflow","labels_url":"https://api.github.com/repos/spring-cloud/spring-cloud-dataflow/issues/963/labels{/name}","comments_url":"https://api.github.com/repos/spring-cloud/spring-cloud-dataflow/issues/963/comments","events_url":"https://api.github.com/repos/spring-cloud/spring-cloud-dataflow/issues/963/events","html_url":"https://github.com/spring-cloud/spring-cloud-dataflow/issues/963","id":184100276,"number":963,"title":"LDAP Integration - Add support for StartTLS","user":{"login":"ghillert","id":685363,"avatar_url":"https://avatars.githubusercontent.com/u/685363?v=3","gravatar_id":"","url":"https://api.github.com/users/ghillert","html_url":"https://github.com/ghillert","followers_url":"https://api.github.com/users/ghillert/followers","following_url":"https://api.github.com/users/ghillert/following{/other_user}","gists_url":"https://api.github.com/users/ghillert/gists{/gist_id}","starred_url":"https://api.github.com/users/ghillert/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ghillert/subscriptions","organizations_url":"https://api.github.com/users/ghillert/orgs","repos_url":"https://api.github.com/users/ghillert/repos","events_url":"https://api.github.com/users/ghillert/events{/privacy}","received_events_url":"https://api.github.com/users/ghillert/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/spring-cloud/spring-cloud-dataflow/labels/enhancement","name":"enhancement","color":"84b6eb"}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2016-10-19T23:33:22Z","updated_at":"2016-10-19T23:33:22Z","closed_at":null,"body":"While SSL over LDAP (LDAPs) is supported, we don't currently support StartTLS out of the box.\n\nIn to to use StartTLS we have to configure Spring LDAP with a `DirContextAuthenticationStrategy`, e.g. `DefaultTlsDirContextAuthenticationStrategy`.\n\nAs such we have to add an additional YAML property:\n\n`dataflow.security.authentication.ldap.starttls-enabled`\n\nWe probably also need to support the ability to switch between the relevant `DirContextAuthenticationStrategy`:\n\n* DefaultTlsDirContextAuthenticationStrategy\n* ExternalTlsDirContextAuthenticationStrategy\n\nTesting is a bit of an issue as only ApacheDS seems to support StartTLS."}}
{"actor":{"display_login":"ghillert"}}