Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Cannot connect to LDAP servers with certificate with only CN #389

Closed
ibotty opened this issue Dec 15, 2020 · 1 comment
Closed

Cannot connect to LDAP servers with certificate with only CN #389

ibotty opened this issue Dec 15, 2020 · 1 comment

Comments

@ibotty
Copy link

ibotty commented Dec 15, 2020

I get the following error after updating to OKD 4.6.0-0.okd-2020-12-12-135354.

E1215 13:41:23.520778       1 login.go:171] Error authenticating "tf" with provider "ldap": LDAP Result Code 200 "Network Error": x509: certificate relies on legacy Common Name field, use SANs or temporarily enable Common Name matching with GODEBUG=x509ignoreCN=0                                                                           

It looks like golang/go#39568 is the culprit. It used to work before and I assume the new oauth-openshift deployment was compiled with newer go.

@stlaz
Copy link
Member

stlaz commented Jan 18, 2021

Hello,
Indeed the oauth-server is compiled with the newer golang. You will need to fix your certificate.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants