Hello Babynus,
Is there a way to activate LDAP over SSL in projeqtor ?
Thank you
Yes, as default PHP / LDAP.
Just have to enable SSL in your PHP config and define LDAP host as ldaps://hostname/
Thank you for the answer. I checked PHP config and have found that SSL is already enabled. As you said, i defined LDAP host (Global parameters of ProjeQtor) to ldaps://hostname/, but i'm having an error message when trying to connect to ProjeQtor. The same error message is displayed when changing LDAP host to ldap://hostname/
Is there any missed step ?
Thank you
did you replace"hostname" with the host name of your ldap server ?
Did you check the port to connect ot LDAP ?
Yes, i replaced "hostname" with the host name of ldap server and I checked the port, it's working when ldap server contains ldap://hostname/
I guess the company server is not configured to ldaps. I'll contact the responsible to activate ldaps on the company server and i'll update you with the result.
Thank you.
Hi,
i have the same problem:
ldap side :
ldaps and ldap + starttls is setup
clear connection was forbiden (tested and validated)
firewall authorise 389 and 636 port connection
ldap accept all ssl connection (with good or not certificate)
another remote application who can use ldaps or ldap + starttls succed to authenticate with tls.
projeqtor side:
my projeqtor URL is in HTTPS with a real ssl certificate so i think PHP is setup with SSL parameter enabled
in projeqtor > parameters > Global Parameter
LDAP server : ldaps://IP_LDAP_SERVER/
LDAP port : 636 or 389
but this don't work. i have this log
2016-06-30 14:47:50.192 ** ERROR ** ERROR **
2016-06-30 14:47:50.192 ** ERROR ** on file '/var/www/projeqtor/projeqtorV4.2.3/model/User.php' at line (932)
2016-06-30 14:47:50.193 ** ERROR ***** cause = ldap_bind(): Unable to bind to server: Can't contact LDAP server
and before force ssl ldap connection the no ssl ldap connections worked
so if you have an idear ?
Regards,
Ok i have solved my problem :
I had simply put the real hostname and not the ip server who is registerd in my ldap ssl certificate in projeqtor > global parameter >
ldap server = ldaps://hostname/
ldap port = 636
my ldap connection is now crypted and securised.
great
regards,