I have now strugled a lot with encrypted connection setup from Projeqtor to our LDAP servers. And after studying your code which handles login and ldap queries on file called UserMain.php (at folder Model) I'm starting to think that your code is not supporting TLS encryption at all, which should be now a days a standard encryption for all sensitive data transfers. I believe your code is supporting on the moment non-encrypted (in port 389) and SSL encrypted (in port 646) connections, but TLS (in port 389, yes this the same than non-encrypted)encrypted connections are not covered.

So question now to you is how should I modify your code to handle TLS encryption as well? I believe there should be some kind of check to test diffrent connections modes and place to put certificate path for TLS somewhere.

Also it would be nice that if there would be place holder for back-up LDAP server address if main server is not for some reason able to answer for the queries.

I believe you are also aware that non-encrypted and SSL encrypted transfers between web apps and LDAP servers are not recommended anymore and only recommended solution is to use TLS?

Basically on projeqtor LDAP settings area (in administration area), theres should be more fields to handle LDAP connections properly, I will attach a "school book examle" from software called webmin so you can see how they created it, so please take a look attached picture.