Changing Encrypted LDAP password in Sonarqube config

Must-share information (formatted with Markdown):

  • Developer Edition Version 9.9.2 (build 77730)
  • deployed: via zip
  • Trying to change LDAP user and password (which is encrypted)
  • Steps tried so far:
    • Updated ldap.bindDn to use the new ldap user
    • Updated ldap.bindPassword with new password in plain text (worked)
    • Updated ldap.bindPassword after encrypting using sonar encryption tool {aes-gcm}… (did not work)
    • Original ldap.bindPassword was encrypted but started with {aes} and not {aes-gcm}. It seems maybe ecryption method has changed since original PW was encrypted from {aes} to {aes-gcm}?

Not sure what I need to do from this point?

  • List item

Do not share screenshots of logs – share the text itself (bonus points for being well-formatted)!

Hey there.

Support for AES-GCM ({aes-gcm}) was added in SONAR-14426 but should keep backward compatibility for decrypting AES-ECB encrypted values ({aes}). We have no other reports of encryption not working as expected.

  • Can you confirm the original encrypted value (the old password) is still working?
  • If you re-encrypt the old password, does that value work (the same decrypted value will have different values each time it’s encrypted)

I want to narrow down whether it’s an issue with the encryption, decryption, or the value itself!

I must have not copied something right in the config. Repeating the steps worked as expected and I was able to change to a new user with a new encrypted password. Appreciate the quick reply!

Ah, that’s great news! I really wasn’t sure where we were going to go from here :laughing:

Glad it’s working now!