[phpldapadmin] [ phpldapadmin-Bugs-2693893 ] SSL certificate client and server

Bugs item #2693893, was opened at 2009-03-19 20:00
Message generated for change (Comment added) made by wurley
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=498546&aid=2693893&group_id=61828

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: None
Group: 1.1.x
>Status: Closed
>Resolution: Works For Me
Priority: 5
Private: No
Submitted By: Matthieu Deloffre (mattador35)
Assigned to: Nobody/Anonymous (nobody)
Summary: SSL certificate client and server

Initial Comment:
Hello,

I'm running on a Debian Lenny with PLA 1.1.0.5, openLDAP 2.4.11, Firefox Web Browser and PHP 5.2.6-1.

I have a problem with LPA over SSL. When I use only server certification all works fine but when I use server and client certification PLA don't want to log me into my LDAP server. However, ldap request like ldapsearch, ldapwhoami... and auhtentication of my users works.

I join some parts of configuration files to explain the bug.

In firefox PLA say "Bad username or password. Please try again."

Thanks for your help.

----------------------------------------------------------------------

>Comment By: Deon George (wurley)
Date: 2009-03-20 17:59

Message:
This is not a PLA bug. The SSL protocol is actually being done by php (via
mod_php and apache), so the "user process" that starts an SSL sessions (and
hence reads SSL session configuration files) is the user that your web
server runs as.

The fact that you can do SSL via command line tools (and not via a web
application) means you have the right configuration files for your "user
process" and not for your "web server's process".

You might like to review:
http://phpldapadmin.sourceforge.net/wiki/index.php?title=Ldapserver:server:tls
and
http://phpldapadmin.sourceforge.net/wiki/index.php?title=Ldapserver:server:host
as well as googling for php ssl tls

Also, an obvious problem in your config file, is that your URI doesnt have
the port and it needs to.

----------------------------------------------------------------------

Comment By: Matthieu Deloffre (mattador35)
Date: 2009-03-19 20:13

Message:
Sorry I forget to precise that I don't use /etc/ldap/ldap.conf but
/root/.ldaprc. Nevertheless, I make a static link between /root/.ldaprc and
/etc/ldap/ldap.conf in case of PLA use this file. I'm not sure that is
useful ;).

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=498546&aid=2693893&group_id=61828

------------------------------------------------------------------------------
Apps built with the Adobe(R) Flex(R) framework and Flex Builder(TM) are
powering Web 2.0 with engaging, cross-platform capabilities. Quickly and
easily build your RIAs with Flex Builder, the Eclipse(TM)based development
software that enables intelligent coding and step-through debugging.
Download the free 60 day trial. http://p.sf.net/sfu/www-adobe-com
______________________________________
phpLDAPadmin development mailing list.
To unsbuscribe: https://lists.sourceforge.net/lists/listinfo/phpldapadmin-devel
http://phpldapadmin.sourceforge.net/