Skip to content

Commit 94c7839

Browse files
committed
Fix LDAP URL to use hostname instead of IP address
Use edpm_node_hostname variable instead of IP address to avoid TLS certificate hostname mismatch error when keystone connects to LDAP server. The IP address (192.168.122.100) in the LDAP URL caused: 'ldap.SERVER_DOWN: TLS: hostname does not match name in peer certificate' This fix ensures the LDAP URL uses the hostname (ipa.ooo.test) which matches the certificate CN/SAN. Fixes: OSPRH-6861 Related: PR #970
1 parent 7410e0b commit 94c7839

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

tests/roles/keystone_adoption/tasks/main.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -37,7 +37,7 @@
3737
[identity]
3838
driver = ldap
3939
[ldap]
40-
url = ldaps://{{ standalone_ip | default(edpm_node_ip) }}
40+
url = ldaps://{{ edpm_node_hostname | default('ipa.ooo.test') }}
4141
user = uid=svc-ldap,cn=users,cn=accounts,{{ ipa_basedn }}
4242
password = {{ ipa_admin_password | default('nomoresecrets') }}
4343
suffix = {{ ipa_basedn }}

0 commit comments

Comments
 (0)