LDAP: Allow setting minimum TLS version and accepted ciphers (#63646)
* update ldap library and use go module path * add TLS min version and accepted min TLS version * set default min ver to library default * set default min ver to library default * add cipher list to toml * Update pkg/services/ldap/settings.go Co-authored-by: Karl Persson <kalle.persson@grafana.com> * Apply suggestions from code review Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com> * lint --------- Co-authored-by: Karl Persson <kalle.persson@grafana.com> Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com>
This commit is contained in:
co-authored by
Karl Persson
Christopher Moyer
parent
2ee73ad7f9
commit
7e97dbde65
Vendored
+2
-1
@@ -4,6 +4,8 @@ port = 389
|
||||
use_ssl = false
|
||||
start_tls = false
|
||||
ssl_skip_verify = false
|
||||
tls_ciphers = ["TLS_CHACHA20_POLY1305_SHA256", "TLS_AES_128_GCM_SHA256"]
|
||||
min_tls_version = "tls1.3"
|
||||
bind_dn = "cn=admin,dc=grafana,dc=org"
|
||||
bind_password = '${ENV_PASSWORD}'
|
||||
search_filter = "(cn=%s)"
|
||||
@@ -24,4 +26,3 @@ grafana_admin = true
|
||||
[[servers.group_mappings]]
|
||||
group_dn = "cn=users,ou=groups,dc=grafana,dc=org"
|
||||
org_role = "Editor"
|
||||
|
||||
|
||||
Reference in New Issue
Block a user