jupyterhub ldap auth using certificate - how to

JupyterHub
1

We are doing POC to setup the jupyterhub with ldapauthenticator. Currently, our SSL enabled openLDAP only accepts certificate like this below example

ldap_uri = ldap://ldap:389
ldap_default_bind_dn = cn=serviceaccount,dc=example,dc=com
ldap_default_authtok_type = password
ldap_default_authtok = 0hdsvmofnvp
ldap_search_base = dc=example,dc=com
ldap_id_use_start_tls = true
ldap_tls_reqcert = hard
ldap_tls_cacert = /etc/pki/tls/CA/ldap.ca

How do we define above lines in jupyter_config.py with below starting line ?
c.JupyterHub.authenticator_class = ‘ldapauthenticator.LDAPAuthenticator’

2

The docs for the LDAPAuthenticator are here:

What have you tried so far?

3

yes tried as well, the document never mentioned about including the certificate. If i am wrong, please share the line for using certificate to access openldap server.

4

I think you’ll need to add the certificate to your system certificate store
https://ldap3.readthedocs.io/en/latest/ssltls.html

There’s an open PR to make the certificate configurable in LDAPAuthenticator but it’s ready yet, it needs some tests added.