Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update radcli gem with latest adcli code #23

Open
wiad opened this issue Jan 16, 2020 · 8 comments
Open

Update radcli gem with latest adcli code #23

wiad opened this issue Jan 16, 2020 · 8 comments

Comments

@wiad
Copy link

wiad commented Jan 16, 2020

New Microsoft patches for Active Directory will prohibit the use of unsigned and simple binds. The use of GSSAPI, which radcli/adcli uses, is registered as an unsigned auth request. There is a discussion about this regarding SSSD which uses adcli for renewing machine account passwords.
https://www.mail-archive.com/[email protected]&q=subject:%22%5C%5BSSSD%5C-users%5C%5D+Re%5C%3A+How+do+new+LDAP+security+recommendations+from+MS+affect+sssd+clients%5C%3F%22&o=oldest

Long story short, using SPNEGO instead of GSSAPI fixes this and adcli is patched to try SPNEGO since a couple of weeks back:
https://gitlab.freedesktop.org/realmd/adcli/commit/a6f795ba3d6048b32d7863468688bf7f42b2cafd

So it would be nice if the rubygem-radcli was rebuilt with the latest adcli code. There is also other stuff from radcli which would be nice to get (for example #20).

@martencassel
Copy link
Contributor

martencassel commented Jan 18, 2020

Hi @wiad
Could i add you as a an additional maintainer for radcli and smart_proxy_realm_ad_plugin at rubygems.org ?

@wiad
Copy link
Author

wiad commented Jan 18, 2020

I am actually pretty rubbish at ruby and much prefer to install and use pre-packaged (rpm) rubygems, so I don't feel really comfortable with it. I will check with a colleague of mine who is much better versed in ruby.

@martencassel
Copy link
Contributor

martencassel commented Dec 4, 2020

The radcli library has been updated with the latest adcli release, version 0.9.0 from September 3, 2019.
Its available here:

rubgem: https://rubygems.org/gems/radcli/versions/1.1.0
github release: https://github.com/martencassel/radcli/releases/tag/v1.1.0

@evgeni
Copy link
Member

evgeni commented Jul 24, 2024

This happened in nightly now -- would y'all mind testing it if possible?

@martencassel
Copy link
Contributor

martencassel commented Jul 25, 2024

Sure, i can.
You nightly in https://docs.theforeman.org/release/nightly/ ?

@evgeni
Copy link
Member

evgeni commented Jul 25, 2024

Yes.

You should also be able to just use the rpm directly on any install: https://yum.theforeman.org/plugins/nightly/el8/x86_64/rubygem-radcli-1.1.0-1.el8.x86_64.rpm

@martencassel
Copy link
Contributor

Yes.

You should also be able to just use the rpm directly on any install: https://yum.theforeman.org/plugins/nightly/el8/x86_64/rubygem-radcli-1.1.0-1.el8.x86_64.rpm
Couldn't find one for debian nightly ? Do you build that ?

@martencassel
Copy link
Contributor

martencassel commented Oct 13, 2024

martencassel/radcli#11

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants