Missing information about tls option in wekan.help

[hever]

wekan.help:

ldap-encryption: If using LDAPS
Current value set to: 'false', (default value: 'false')

But there's also option 'tls' for non LDAPS but StartTLS only.

[xet7]

@imkwx

Have you fixed this already?

[imkwx]

In my case, we are using LDAPS, yes. Setting LDAP_ENCRYPTION to 'tls' did work for us. I'm not sure I fully understand what's the issue here ?

[hever]

@imkwx

Issue is here because of documentation, wekan.help, etc. There is no information, that you could use 'tls' option. I know it, because i want tls and studying code.

[imkwx]

Actually I don't see where the 'wekan.help' you mention, is. Can you provide me a link or anything else? Thanks !
In wekan/wekan#13 I added the precision about 'tls'. It was only merged recently.

[xet7]

@imkwx

Help does not have any info about all different settings like false ssl etc.

https://github.com/wekan/wekan/blob/edge/snap-src/bin/wekan-help#L167

https://github.com/wekan/wekan/blob/edge/snap-src/bin/config#L181

[hever]

Some more words to this issue.

@imkwx In LDAP world, there is three options how to transport data

1. ldap:// on port 389 without any encryption (means plaintext password in network)
2. ldap:// on port 389 with StartTLS, that means it start non encrypted and then make encrypted channel
3. ldaps:// on port 636 that is starts encrypted from the begining.

But non encrypted ldap is suppressed now (windows won't talk without encryption in default) and ldaps is deprecated too (http://www.openldap.org/faq/data/cache/605.html). So, there is only one method for the future - ldap on port 389 with StartTLS.

If you setup your LDAP server like that and than you want to work with wekan, you don't know how. Because in manual (= help page), there is no word about StartTLS option.

You have to look at source code to discover existing of LDAP_ENCRYPTION = 'tls' option. It's time to make changes in manual for future.

[xet7]

@hever

Please add PRs that adds missing docs to here:

• https://github.com/wekan/wekan/blob/devel/snap-src/bin/wekan-help
• https://github.com/wekan/wekan/blob/devel/docker-compose.yml
• https://github.com/wekan/wekan-ldap/blob/master/README.md

Also please edit directly these wiki pages:

• https://github.com/wekan/wekan-snap/wiki/Supported-settings-keys
• https://github.com/wekan/wekan/wiki/LDAP

There is also new Wekan docs efforts where new contributors are very welcome, I can add anyone interested to these repos:

• https://github.com/wekan/wekan-doc
• https://github.com/wekan/wekanhow