Re: PHP LDAP over SSL problems
| From: | Chris | Date: | Thu, 02 Apr 2009 21:51:00 +0000 |
| Subject: | Re: PHP LDAP over SSL problems | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-290989@lists.php.net to get a copy of this message | ||
Keith Lawson wrote:
Hello,
I have been working on this problem for some time now and I can't seem to resolve it. Everything I have found on google and php.net says I can connect to an LDAP server with SSL by setting "TLS_REQCERT never" in ldap.conf. I want to eliminate certs from the picture for now just to confirm I can make the connection which is why I have "TLS_REQCERT never" set.
I added that setting to my ldap.conf and my test code now works from the command line but it does not work when I call it from a browser. Here is my test:
<?php
$ldaphost = "ldaps://my.ldap.server";
//ldap_set_option(NULL, LDAP_OPT_DEBUG_LEVEL, 7);
// Connecting to LDAP
$ldapconn = ldap_connect($ldaphost)
or die("Could not connect to {$ldaphost}");
ldap_set_option($ldapconn, LDAP_OPT_PROTOCOL_VERSION, 3);
ldap_set_option($ldapconn, LDAP_OPT_REFERRALS, 0);
echo var_dump(@ldap_bind($ldapconn, "cn=Keithl, ou=Users, o=LH"));
It's hard to know - you're suppressing errors.
Add these 2 lines to your script:
error_reporting(E_ALL);
ini_set('display_errors', true);
Then get rid of the @ in front of ldap_bind.
Use http://www.php.net/manual/en/function.ldap-error.php to capture the error message and search for it.
--
Postgresql & php tutorials
http://www.designmagick.com/