Re: [phpldapadmin] Can't get TLS connection with certificate validation to work

Seems that PHP was only looking for ldaprc (not the missing dot) in  
the current working directory. So in my case I had to copy the  
information from my .ldaprc to /usr/share/phpldapadmin/htdocs/ldaprc  
and everything works as expected.

(php5-ldap on Debian Lenny)

Am 07.06.2009 um 21:58 schrieb Benjamin Boksa:

> Hi Developers,
>
> I am trying to get phpLDAPadmin to authenticate against slurpd on
> Debian Lenny using mutual certificate authentication. However as soon
> as I set
>
> TLSVerifyClient demand
>
> in my slapd.conf I can't use phpLDAPadmin because the client (PHP)
> does not send a client certificate (ran slurpd with -d ). Here is how
> I configured phpLDAPadmin (according to [1] and [2]):
>
> $ldapservers->SetValue($i,'server','host','ldap.example.com');
> $ldapservers->SetValue($i,'server','tls',true);
>
> To configure the client certificate I use an .ldaprc for user www-data
> (which runs apache for me) as well as for root (just to make sure), I
> also set $HOME for apache using mod_env (as suggested in [3]). When
> calling
>
> su - www-data -c 'ldapsearch -x -ZZ'
>
> everything works as expected… I also found a bug-report describing a
> similar problem ([4]) and a discussion about the topic from 2004 [5].
> As you can see I spend quite a lot time trying to solve the problem -
> you are my last hope :-)
>
> Thanks in advance for you answers
>
> Benjamin
>
>
>
>
> [1] http://phpldapadmin.sourceforge.net/wiki/index.php?title=Ldapserver:server:host
> [2] http://phpldapadmin.sourceforge.net/wiki/index.php?title=Ldapserver:server:tls
> [3] http://www.php.net/manual/fr/function.ldap-connect.php#36156
> [4] http://sourceforge.net/tracker/?func=detail&aid=2693893&group_id=61828&atid=498546
> [5] http://osdir.com/ml/ldap.davedap/2004-03/msg00080.html
> ------------------------------------------------------------------------------
> OpenSolaris 2009.06 is a cutting edge operating system for enterprises
> looking to deploy the next generation of Solaris that includes the  
> latest
> innovations from Sun and the OpenSource community. Download a copy and
> enjoy capabilities such as Networking, Storage and Virtualization.
> Go to: http://p.sf.net/sfu/opensolaris-get
> ______________________________________
> phpLDAPadmin development mailing list.
> To unsbuscribe: https://lists.sourceforge.net/lists/listinfo/phpldapadmin-devel
> http://phpldapadmin.sourceforge.net/


------------------------------------------------------------------------------
Crystal Reports - New Free Runtime and 30 Day Trial
Check out the new simplified licensing option that enables unlimited
royalty-free distribution of the report engine for externally facing 
server and web deployment.
http://p.sf.net/sfu/businessobjects
______________________________________
phpLDAPadmin development mailing list.
To unsbuscribe: https://lists.sourceforge.net/lists/listinfo/phpldapadmin-devel
http://phpldapadmin.sourceforge.net/