note 96437 deleted from function.ldap-bind by danbrown

Note Submitter: no at email dot com ---- To spam[AT]it-blog[DOT]net, Adding "TLS_REQCERT never" to your LDAP config is insecure. Doing so disables the CA signature checks which leaves you open to a man-in-the-middle attack. Instead, put a copy of the certificate on the webserver and configure LDAP to use it as the CACERT. If that doesn't work you might have to create your own CA, and sign the cert for the server with it, then put the CA cert on the webserver.