#78 LDAP over SSL/TLS

[Szymon Kochanski]

Hi,

Is there a possibility to connect to a LDAP server over SSL/TLS?

Please let me know.

Best regards,
Szymon Kochanski
szymon@colosa.com

[BatMat]

Hello,

In fact it is possible, if you are using Linux (Debian 7.3 in my case), you may follow the guidelines below:

OpenUpload
Change your LDAP server url in the OpenUpload config file to:

$CONFIG['ldap']['host'] = 'ldaps://IpAdress or HostName/';

LDAP
Retrieve your LDAP server certificate, you will find it's path in your LDAP server config file (/etc/ldap/slapd.conf), look at the line:

TLSCertificateFile /etc/ssl/openldap/ldap_cert.pem

Now, copy this .pem file to your OpenUpload server.

On your OpenUpload server, change your LDAP client config by editing the file /etc/ldap/ldap.cfg
Add the lines:

TLS_CACERT      /path/to/yourldap/cert/ldapserver.pem
TLS_REQCERT     never

Note: I know it is an old post, but it may help someone anyway...