note 130607 added to ldap.installation

From: Date: Sun, 11 Jan 2026 20:50:54 +0000
Subject: note 130607 added to ldap.installation
Groups: php.notes 
Request: Send a blank email to php-notes+get-222496@lists.php.net to get a copy of this message
For Windows Platform/LDAPS/Active Directory, aside from enabling php_ldap.dll in PHP.ini, you will also have to add trusted RootCA file reference. That's because OpenLDAP, by default, is looking for "C:\openldap\sysconf\ldap.conf", which doesn't exists. Create the missing patch/file and inside the file: TLS_CACERT <explicit file path to RootCA of Active Directory issuer>. If you do not like default C:\ path above, create an environment variable, LDAPCONF=<file path>. Restart IIS for change to take effect. [Example] - assume PHP is under D:\PHP 1. create new, empty file D:\PHP\ldap.conf 2. add inside file: TLS_CACERT D:\PHP\rootCA.pem 3. copy your Active Directory's Root CA cert file (rootCA.pem) to D:\PHP 4. add Environment Variable: LDAPCONF=D:\PHP\ldap.conf 5. Restart IIS: iisreset /restart ---- Server IP: 206.189.2.9 Probable Submitter: 170.85.100.173 ---- Manual Page -- https://php.net/manual/en/ldap.installation.php Edit -- https://main.php.net/note/edit/130607 Del: integrated -- https://main.php.net/note/delete/130607/integrated Del: useless -- https://main.php.net/note/delete/130607/useless Del: bad code -- https://main.php.net/note/delete/130607/bad+code Del: spam -- https://main.php.net/note/delete/130607/spam Del: non-english -- https://main.php.net/note/delete/130607/non-english Del: in docs -- https://main.php.net/note/delete/130607/in+docs Del: other reasons-- https://main.php.net/note/delete/130607 Reject -- https://main.php.net/note/reject/130607 Search -- https://main.php.net/manage/user-notes.php

« previous php.notes (#222496) next »