Forum

LDAP over SSL
 
Notifications
Retirer tout

LDAP over SSL

7 Posts
3 Utilisateurs
0 Reactions
15.2 {numéro}K Vu
Amine BENDAOUD
(@amine-bendaoud)
Posts: 14
Active Member
Début du sujet
 
[#1935]

Hello Babynus,

Is there a way to activate LDAP over SSL in projeqtor ?

Thank you


 
Posté : 5 Août PM 15:088
(@babynus)
Posts: 14952
Membre Admin
 

Yes, as default PHP / LDAP.
Just have to enable SSL in your PHP config and define LDAP host as ldaps://hostname/


 
Posté : 5 Août PM 15:088
Amine BENDAOUD
(@amine-bendaoud)
Posts: 14
Active Member
Début du sujet
 

Thank you for the answer. I checked PHP config and have found that SSL is already enabled. As you said, i defined LDAP host (Global parameters of ProjeQtor) to ldaps://hostname/, but i'm having an error message when trying to connect to ProjeQtor. The same error message is displayed when changing LDAP host to ldap://hostname/

Is there any missed step ?

Thank you


 
Posté : 5 Août PM 17:088
(@babynus)
Posts: 14952
Membre Admin
 

did you replace"hostname" with the host name of your ldap server ?
Did you check the port to connect ot LDAP ?


 
Posté : 5 Août PM 18:088
Amine BENDAOUD
(@amine-bendaoud)
Posts: 14
Active Member
Début du sujet
 

Yes, i replaced "hostname" with the host name of ldap server and I checked the port, it's working when ldap server contains ldap://hostname/

I guess the company server is not configured to ldaps. I'll contact the responsible to activate ldaps on the company server and i'll update you with the result.

Thank you.


 
Posté : 5 Août PM 20:088
(@vlepetit)
Posts: 15
Active Member
 

Hi,
i have the same problem:

ldap side :
ldaps and ldap + starttls is setup
clear connection was forbiden (tested and validated)
firewall authorise 389 and 636 port connection
ldap accept all ssl connection (with good or not certificate)

another remote application who can use ldaps or ldap + starttls succed to authenticate with tls.

projeqtor side:
my projeqtor URL is in HTTPS with a real ssl certificate so i think PHP is setup with SSL parameter enabled
in projeqtor > parameters > Global Parameter
LDAP server : ldaps://IP_LDAP_SERVER/
LDAP port : 636 or 389

but this don't work. i have this log
2016-06-30 14:47:50.192 ** ERROR ** ERROR **
2016-06-30 14:47:50.192
** ERROR ** on file '/var/www/projeqtor/projeqtorV4.2.3/model/User.php' at line (932)
2016-06-30 14:47:50.193
** ERROR ***** cause = ldap_bind(): Unable to bind to server: Can't contact LDAP server

and before force ssl ldap connection the no ssl ldap connections worked

so if you have an idear ?

Regards,


 
Posté : 30 Juin PM 17:066
(@vlepetit)
Posts: 15
Active Member
 

Ok i have solved my problem :

I had simply put the real hostname and not the ip server who is registerd in my ldap ssl certificate in projeqtor > global parameter >
ldap server = ldaps://hostname/
ldap port = 636

my ldap connection is now crypted and securised.
great
regards,


 
Posté : 30 Juin PM 18:066
Share:
Retour en haut