[phpldapadmin] Can't get TLS connection with certificate validation to work

Hi Developers,

I am trying to get phpLDAPadmin to authenticate against slurpd on  
Debian Lenny using mutual certificate authentication. However as soon  
as I set

TLSVerifyClient demand

in my slapd.conf I can't use phpLDAPadmin because the client (PHP)  
does not send a client certificate (ran slurpd with -d ). Here is how  
I configured phpLDAPadmin (according to [1] and [2]):

$ldapservers->SetValue($i,'server','host','ldap.example.com');
$ldapservers->SetValue($i,'server','tls',true);

To configure the client certificate I use an .ldaprc for user www-data  
(which runs apache for me) as well as for root (just to make sure), I  
also set $HOME for apache using mod_env (as suggested in [3]). When  
calling

su - www-data -c 'ldapsearch -x -ZZ'

everything works as expected… I also found a bug-report describing a  
similar problem ([4]) and a discussion about the topic from 2004 [5].  
As you can see I spend quite a lot time trying to solve the problem -  
you are my last hope :-)

Thanks in advance for you answers

Benjamin




[1] http://phpldapadmin.sourceforge.net/wiki/index.php?title=Ldapserver:server:host
[2] http://phpldapadmin.sourceforge.net/wiki/index.php?title=Ldapserver:server:tls
[3] http://www.php.net/manual/fr/function.ldap-connect.php#36156
[4] http://sourceforge.net/tracker/?func=detail&aid=2693893&group_id=61828&atid=498546
[5] http://osdir.com/ml/ldap.davedap/2004-03/msg00080.html
------------------------------------------------------------------------------
OpenSolaris 2009.06 is a cutting edge operating system for enterprises 
looking to deploy the next generation of Solaris that includes the latest 
innovations from Sun and the OpenSource community. Download a copy and 
enjoy capabilities such as Networking, Storage and Virtualization. 
Go to: http://p.sf.net/sfu/opensolaris-get
______________________________________
phpLDAPadmin development mailing list.
To unsbuscribe: https://lists.sourceforge.net/lists/listinfo/phpldapadmin-devel
http://phpldapadmin.sourceforge.net/