I tried to put host=&quot;srvLDAP&quot; but it still doesn&#39;t work<div><br></div><div>Actually the problem is configuring my APACHE server to make it considerate theses certificate.</div><div>I know there is a ldap.conf in the openLDAP directory (on openLDAP server) where to have to put :</div>

<div><br></div><div><div>TLS_CACERT      ./ssl2/cacert.cer</div><div>TLS_REQCERT     demand</div></div><div><br></div><div>but how can we specify it on apache server ?</div><div>Thanks</div><div><br><br><div class="gmail_quote">

2010/6/10 Thierry Lacoste <span dir="ltr">&lt;<a href="mailto:lacoste@u-pec.fr">lacoste@u-pec.fr</a>&gt;</span><br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;"><div style="word-wrap:break-word">

Seems to me that the $host variable is incorrect :  should be $host=&quot;srvLDAP&quot;<div><br></div><div>HTH,</div><div>Thierry</div><div><div></div><div class="h5"><div><br><div><div>On 10 juin 10, at 10:57, Jérémy ESCOLANO wrote:</div>

<br><blockquote type="cite"><span style="font-family:Verdana, Tahoma, Arial, Helvetica, sans-serif;font-size:11px;border-collapse:collapse;color:rgb(51, 51, 51)"><div>Hi</div><div><br></div><div>I&#39;m writing from france cuz i&#39;m having a big problem with apache and ldap. let me explain :</div>

 <div><br></div><div>I would like to make an Apache server communicate in php with en openLDAP server (both servers are under win srv 2003), using LDAPS protocol.</div><div><br></div><div>In order to activate LDAPS on my openLDAP srv (srvLDAP), I created self signed certificates with openSSL. I got 3 files:</div>

 <div><br></div><div><br></div><div>cacert.pem</div><div>srvLDAP.pem</div><div>srvLDAP.key</div><div><br></div><div><br></div><div>I configured my slapd.con file and ldap.conf fil (openLDAP side) like this:</div><div><br>

 </div> <div>slapd.conf</div><div><br></div><div>TLSCertificateFile      ./ssl/srvLDAP.pem</div><div>TLSCertificateKeyFile   ./ssl/srvLDAP.key</div><div>TLSCACertificateFile    ./ssl/cacert.pem</div><div><br></div><div><br>

</div> <div>ldap.conf</div><div>BASE    &lt;ma branche&gt;</div><div>URI     ldaps://srvLDAP/</div><div>TLS_CACERT      ./ssl/cacert.pem</div><div>TLS_REQCERT     demand</div><div><br></div><div><br></div><div><br></div>
<div>
I launched my openLDAP service, and checked ldaps protocol was okay, using this command :</div> <div><br></div><div><br></div><div><br></div><div>C:\Program Files\OpenLDAP&gt;ldapsearch -b o=exemple,dc=fr -s sub -x -w pass-D</div>

<div>cn=admin,o=exemple,dc=fr -H ldaps://srvLDAP/</div><div><br></div><div><br></div><div> Now I would like, from the remote apache server, communicate with the openLDAP server using [b]LDAPS[/b] Protocol.</div><div><br>
</div>
<div>Here is my simplified PHP code</div><div><br></div><div>&lt;h2&gt;LDAP OPENLDAP LDAPS&lt;/h2&gt;</div> <div>&lt;?php</div><div><br></div><div><br></div><div>$host=&quot;ldaps://srvldap&quot;;</div></span></blockquote>

<blockquote type="cite"><span style="font-family:Verdana, Tahoma, Arial, Helvetica, sans-serif;font-size:11px;border-collapse:collapse;color:rgb(51, 51, 51)"><div>$port=&quot;636&quot;;</div><div>$ds=ldap_connect($host,$port);</div>

<div>ldap_set_option($ds,LDAP_OPT_PROTOCOL_VERSION,3);</div> <div>$r=ldap_bind($ds,&quot;cn=admin,o=exemple,dc=fr&quot;,&quot;pass&quot; );</div><div>$sr=ldap_search($ds,&quot;o=exemplec,dc=fr&quot;,(&quot;objectClass=maclasse&quot; ));</div>

<div>$info=ldap_get_entries($ds,$sr);</div> <div>print $info[&quot;count&quot;].&quot; enregistrements trouvés.&quot;;</div><div>   ?&gt;</div><div><br></div><div>I get this errror:</div><div><br></div><div><br></div><div>

Unable to bind to server: Can&#39;t contact LDAP server</div> <div><br></div><div><br></div><div>I know i have to configure certificates in the Apache server configuration, I tried to to this according several internet ressources but didn&#39;t succeed. I also read this link [URL=&quot;<a href="http://forum.hardware.fr/hfr/OSAlternatifs/Logiciels-2/certificats-securisee-connexion-sujet_65365_1.htm" style="color:rgb(53, 66, 88)" target="_blank">http://forum.hardware.fr/hfr/OSAlternatifs/Logiciels-2/certificats-securisee-connexion-sujet_65365_1.htm</a>&quot;]Here[/URL] which is a french link which speak about an ldap.con and ldaprc files to put in the apache server. I did it but nothing happened.</div>

 <div><br></div><div>Well, i&#39;m lost in all this stuff, that is why i&#39;m asking for help to configure my servers to use ldaps with php.</div><div><br></div><div>Do you have information that could help me ? </div><div>

 <br></div><div>I thank you in advance</div></span></blockquote></div><br></div></div></div></div></blockquote></div><br></div>