Support for LDAP via StartTLS

7 votes

Currently, Checkmk has the option to securely connect to LDAP servers for user sync via “LDAPS”, also known as “LDAP over TLS/SSL”, which can be activated by ticking the “use SSL” checkbox when configuring the LDAP connection.*

Another, officially standardized method to enable TLS for LDAP connections is to use StartTLS, but this method is currently not supported by Checkmk.

See (here)[https://forum.checkmk.com/t/tls-support-in-checkmk/37009/4].

Under consideration User management Suggested by: Malte (23 Feb, '23) • Upvoted: 26 Feb • Comments: 2

Comments: 2

21 May, '23
Thomas Lippert Admin
Title and description updated per customer request
26 Feb
Matthias Speer
It is completely incomprehensible to me why this option is not available, since the basic functionality is already included in the appropriate Python module and could be activated with just a few lines of code, as can seen here:

https://forum.checkmk.com/t/tls-support-in-checkmk-support-for-ldap-with-starttls/37009/4