Forum

Welcome to ProjeQtOr new Forum. We migrated old forum to the new website.
You will find all your posts here, with your usual account.
Just one point : you’ll have to reinitialize your password. Use “Lost password” feature.

LDAP over SSL
 
Notifications
Clear all

LDAP over SSL

7 Posts
3 Users
0 Reactions
15.3 K Views
Amine BENDAOUD
(@amine-bendaoud)
Posts: 14
Active Member
Topic starter
 
[#1935]

Hello Babynus,

Is there a way to activate LDAP over SSL in projeqtor ?

Thank you


 
Posted : 05 Aug 2014 15H09
babynus
(@babynus)
Posts: 14966
Main Contributor Admin
 

Yes, as default PHP / LDAP.
Just have to enable SSL in your PHP config and define LDAP host as ldaps://hostname/


 
Posted : 05 Aug 2014 15H35
Amine BENDAOUD
(@amine-bendaoud)
Posts: 14
Active Member
Topic starter
 

Thank you for the answer. I checked PHP config and have found that SSL is already enabled. As you said, i defined LDAP host (Global parameters of ProjeQtor) to ldaps://hostname/, but i'm having an error message when trying to connect to ProjeQtor. The same error message is displayed when changing LDAP host to ldap://hostname/

Is there any missed step ?

Thank you


 
Posted : 05 Aug 2014 17H54
babynus
(@babynus)
Posts: 14966
Main Contributor Admin
 

did you replace"hostname" with the host name of your ldap server ?
Did you check the port to connect ot LDAP ?


 
Posted : 05 Aug 2014 18H27
Amine BENDAOUD
(@amine-bendaoud)
Posts: 14
Active Member
Topic starter
 

Yes, i replaced "hostname" with the host name of ldap server and I checked the port, it's working when ldap server contains ldap://hostname/

I guess the company server is not configured to ldaps. I'll contact the responsible to activate ldaps on the company server and i'll update you with the result.

Thank you.


 
Posted : 05 Aug 2014 20H32
(@vlepetit)
Posts: 15
Active Member
 

Hi,
i have the same problem:

ldap side :
ldaps and ldap + starttls is setup
clear connection was forbiden (tested and validated)
firewall authorise 389 and 636 port connection
ldap accept all ssl connection (with good or not certificate)

another remote application who can use ldaps or ldap + starttls succed to authenticate with tls.

projeqtor side:
my projeqtor URL is in HTTPS with a real ssl certificate so i think PHP is setup with SSL parameter enabled
in projeqtor > parameters > Global Parameter
LDAP server : ldaps://IP_LDAP_SERVER/
LDAP port : 636 or 389

but this don't work. i have this log
2016-06-30 14:47:50.192 ** ERROR ** ERROR **
2016-06-30 14:47:50.192
** ERROR ** on file '/var/www/projeqtor/projeqtorV4.2.3/model/User.php' at line (932)
2016-06-30 14:47:50.193
** ERROR ***** cause = ldap_bind(): Unable to bind to server: Can't contact LDAP server

and before force ssl ldap connection the no ssl ldap connections worked

so if you have an idear ?

Regards,


 
Posted : 30 Jun 2016 17H16
(@vlepetit)
Posts: 15
Active Member
 

Ok i have solved my problem :

I had simply put the real hostname and not the ip server who is registerd in my ldap ssl certificate in projeqtor > global parameter >
ldap server = ldaps://hostname/
ldap port = 636

my ldap connection is now crypted and securised.
great
regards,


 
Posted : 30 Jun 2016 18H44
Share:

Scroll to Top