Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ldap over SSL working in docker image? #9

Open
WaaZaa666 opened this issue Mar 22, 2021 · 1 comment
Open

ldap over SSL working in docker image? #9

WaaZaa666 opened this issue Mar 22, 2021 · 1 comment

Comments

@WaaZaa666
Copy link

I would like to doublecheck that the LDAP over SSL configuration should be working in these docker images. Everything else seems to work great! The exact ldap configuration does work with other software, so I suspect something is missing/unconfigured in the docker image. I have also installed openssl in the idoit container, to validate certs and connectivity, output in logs below does show it should work.

Expected behavior

I would expect the ldap over SSL to work, after configuring.

Actual behavior

ldap debug windows says:

Error!
LDAP Bind failed (Can't contact LDAP server). Host: ldaps.domain.com

Steps to reproduce the behavior

Configure ldap server, enable LDAPS in de TLS field

Environment

Question Answer
i-doit version 1.16
i-doit edition open
PHP version 7.4
Service fpm

Server logs

[2021-03-22T11:31:18.259787+01:00] ldap.DEBUG: Testing connection to ldaps.domain.com:636 (CN=<SNIPPED>) [] []

openssl s_client -connect ldaps.domain.com:636
CONNECTED(00000003)
..
SSL handshake has read 3812 bytes and written 487 bytes
Verification: OK

Verify return code: 0 (ok)

@MichaelOv
Copy link

Hello @WaaZaa666

i have testet it with the actual docker-compose-fpm.yml.
It installs 4 docker container with i-doit Version 1.17.1

I have copied the ca-certificate.crt to the idoit container into the folder /usr/local/share/ca-certificates/
At the idoit container
execute update-ca-certificates
create a folder /etc/ldap/
and a file /etc/ldap/ldap.conf
with the following content TLS_CACERT /etc/ssl/certs/ca-certificate.pem you may have to alter the certificate.pem part.
restart the idoit container

Use LDAPS :>

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants