cockroachdb / cockroachdb/cockroach
ldapccl: support updating of ldap server URI/port and TLS params for reconnection
Open
backport-24.3.x
branch-master
C-enhancement
P-3
T-product-security
- Dominant language
- Go
- Stars
- 32.5k
- Forks
- 4.1k
- PR merge metrics
- PR metrics pending
Description
Currently if ldap server URI is made to point to different ldap server/multiple ldap servers in HBA configuration, we are not able to establish the connection as previous connection is persisted as long as it is active. This is also the case if server CA is updated via the cluster setting `server.ldap_authentication.domain.custom_ca`. We need to support re-establishment of ldap connections once a change is detected for ldap URI/port/TLS params.
Proposal: support re-establishment of ldap connections once a change is detected for ldap URI/port/TLS params.
Jira issue: CRDB-44887
Epic CRDB-54682
Contributor guide
Assessment
This issue has not been assessed yet.