note 96437 added to function.ldap-bind

To spam[AT]it-blog[DOT]net, Adding "TLS_REQCERT never" to your LDAP config is insecure. Doing so disables the CA signature checks which leaves you open to a man-in-the-middle attack. Instead, put a copy of the certificate on the webserver and configure LDAP to use it as the CACERT. If that doesn't work you might have to create your own CA, and sign the cert for the server with it, then put the CA cert on the webserver. ---- Server IP: 69.147.83.197 Probable Submitter: 128.138.224.33 ---- Manual Page -- http://www.php.net/manual/en/function.ldap-bind.php Edit -- https://master.php.net/note/edit/96437 Del: integrated -- https://master.php.net/note/delete/96437/integrated Del: useless -- https://master.php.net/note/delete/96437/useless Del: bad code -- https://master.php.net/note/delete/96437/bad+code Del: spam -- https://master.php.net/note/delete/96437/spam Del: non-english -- https://master.php.net/note/delete/96437/non-english Del: in docs -- https://master.php.net/note/delete/96437/in+docs Del: other reasons-- https://master.php.net/note/delete/96437 Reject -- https://master.php.net/note/reject/96437 Search -- https://master.php.net/manage/user-notes.php