#111 LDAP Address Book - start_tls

[Anonymous]

The following tweak enables start_tls on the LDAP
address book connection.

Edit the file “functions/aboot_ldap_server.php”.
Add the following code snippet at line 181.

return
$this->set_error('ldap_set_option failed');
}
}
}

//==== New code starts here
if (!ldap_start_tls($this->linkid)) {
if(function_exists('ldap_error')) {
return
$this->set_error(ldap_error($this->linkid));
} else {
return $this->set_error('ldap start_tls
failed ');
}
}
//==== New code ends here

if(!empty($this->binddn)) {
if(!@ldap_bind($this->linkid,
$this->binddn, $this->bindpw)) {

Ideally this would be enabled via an option in config.php.

Submitted by John Lane john@lane.uk.net
Using Squirrelmail version squirrelmail-1.4.4

[Tomas Kuliavas]

Logged In: YES
user_id=225877

patch is not complete and can cause errors. ldap_start_tls
is present only in php 4.2+ compiled with some ldap
libraries. it needs LDAP_OPT_PROTOCOL_VERSION>=3.

ldap_start_tls function must be prefixed with @ in order to
suppress php warnings.

[Tomas Kuliavas]

Logged In: YES
user_id=225877

Implemented in config/conf.pl v.1.216 and
functions/abook_ldap_server.php v.1.34