I am working on the issue from the VMware end,
Let's see if I can get them to understand that their current OpenLDAP solution is unusable and needs to be updated.
______________________________________________________________________________________________
Daniel E. White
daniel.e.white@nasa.gov
NICS Linux Engineer
NASA Goddard Space Flight Center
8800 Greenbelt Road
Building 14, Room E175
Greenbelt, MD 20771
Office: (301) 286-6919
Mobile: (240) 513-5290
From:
Christopher Young <mexigabacho@gmail.com>
Date: Tuesday, February 4, 2020 at 21:12
To: FreeIPA users list <freeipa-users@lists.fedorahosted.org>
Cc: Daniel White <daniel.e.white@nasa.gov>
Subject: [EXTERNAL] Re: [Freeipa-users] VMware vCenter Single Sign-On
I gotta say, the unwillingness of large organizations like RedHat to
even consider this functionality is pretty amazing to see since there
was a bug filed 12 years ago to add properly support for RFC 4530
entryUUID. At some point, it should be a matter of pride for the
directory services to add functionality that clearly there is a demand
for. I understand a lack of resources, but this looks more like a
lack of overall desire when you look at the completely lack of
attention this type of stuff gets in Bugzilla.
Having said that, it is pretty strange for vCenter to have LDAP
requirements and lack of instructions/testing with hardly any
third-party LDAP solutions. That kinda defeats the purpose of
supporting an open standard.
In any case, at least there is a solid answer. This would be one
worth just putting in the FAQ or on pages referencing vCenter that is
basically unsupported and will not be worked.
-- Chris