TLS Option

[scholl]

Hi short question about the LDAPS configuration, how is the Root CA for TLS validation imported to the docker contianer? or is there no certificate validation enabled?

I use a ldaps configuration which is working but i don't find the self signed Root CA in the docker image.

Also another question is if there is the option to use mutual authentication? maybe over the /etc/openldap/ldap.conf?

[leenooks]

PLA, and thus php_ldap are LDAP clients, and configuration is controlled by libldap.so.

libldap.so is looking for an configuration file in /etc/openldap/ldap.conf, and as per man ldap.conf, it is there that you specify all the LDAP client communication parameters (including SSL).

(While php_ldap provides some interfaces to connect to an LDAP server - like BIND_DN, BASE_DN, etc, it doesnt provide any to manage SSL.)

[scholl]

i tried to enable mutual authentication or server side certificate check but i was not able to configured it. The Client (phpldpadmin) always stops the tls handshake when checking the server certificate of the ldap. Do you have an experience?

[scholl]

Hi i fixed the issue, there was a probleme with the certificates ip adressee know mutual authentication between docker container with phpldapadmin and openldap is working fine :=)