PHP module ignores ldap.conf
| From: | Keith Lawson | Date: | Mon, 06 Apr 2009 18:17:52 +0000 |
| Subject: | PHP module ignores ldap.conf | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-291137@lists.php.net to get a copy of this message | ||
Hello,
I'm trying to connect to and LDAP server using PHP over SSL. I compiled Openldap from source,
installed it and then compiled PHP against that install. I have a tiny PHP script for testing that I
have been calling from the command line (php scriptname). Before adding "TLS_REQCERT
never" to ldap.conf that script was failing. After I set that setting in ldap.conf ldaps://
connections work from the command line but when I call the exact same code in a browser it fails.
ldd libphp5.so shows that the Apache PHP module is linked to the proper openldap library:
libldap-2.4.so.2 => /opt/lib/libldap-2.4.so.2
ldd
which php shows the same library:
libldap-2.4.so.2 => /opt/lib/libldap-2.4.so.2
Is there any reason the apache loadable module would be ignoring the settings in ldap.conf while the
CLI works fine?
Here is my build command for PHP:
'./configure' '--prefix=/opt' '--with-apxs=/www/apache/bin/apxs'
'--with-libxml-dir=/usr' '--with-oci8=instantclient,/opt/instantclient_10_2'
'--with-mysql=/opt/mysql' '--with-mssql=/opt' '--with-gettext'
'--enable-ftp' '--enable-bcmath' '--disable-debug'
'--enable-shared' '--with-ldap=/opt' '--with-openssl=/opt'
'--enable-sockets' '--with-jpeg-dir=/usr' '--enable-gd-native-ttf'
'--with-freetype-dir=/usr/sfw' '--with-gdbm=/opt'
'--with-png-dir=/usr'
TIA
Keith.
--------------------------------------------------------------------------------
The information transmitted is intended only for the person or entity to which it is addressed and
may contain confidential and/or privileged material. Any review, retransmission, dissemination or
other use of, or taking of any action in reliance upon, this information by persons or entities
other than the intended recipient is prohibited. If you received this in error, please contact the
sender and delete the material from any computer.