You are not logged in.

Announcement

 Téléchargez la dernière version stable de GLPI      -     Et vous, que pouvez vous faire pour le projet GLPI ? :  Contribuer
 Download last stable version of GLPI                      -     What can you do for GLPI ? :  Contribute

#1 2024-08-06 10:38:44

simonglashauser
Member
Registered: 2024-08-06
Posts: 3

GLPI 10.0.16 - LDAPS not working

Hello everyone,

We have the following problem.

We are trying to connect to our AD via LDAP. When we use the Microsoft LDAP Explorer, we can log in through our load balancer. From there, we obtained the paths for the Base DN and Root DN. However, when we attempt to log in, we receive the following error message:



Warning: Unable to bind to LDAP server `ldaps://ldap-ka.XX.XX.XX.gad.de:636` with RDN `CN=XXXXX,OU=Benutzer,OU=XXXX,OU=Banken,OU=RZ,DC=pb,DC=rz,DC=in,DC=gad,DC=de` error: Can't contact LDAP server (-1) extended error: error:80000002:system library::No such file or directory err string: error:80000002:system library::No such file or directory in C:\xampp\htdocs\glpi\src\AuthLDAP.php on line 3184

After several days of testing and searching, as well as phone calls with our data center, I have now reached out to you and hope for a solution.

Thank you very much!

2024-08-06-10h20-28.png
2024-08-06-10h22-18.png

Last edited by simonglashauser (2024-08-06 11:10:06)

Offline

#2 2024-08-07 14:28:27

makeijan
Member
From: Pontevedra, Galicia
Registered: 2008-01-29
Posts: 774
Website

Re: GLPI 10.0.16 - LDAPS not working

Hi,
You are using LDAPS; hence, you need to fill in the certificate fields at the Advanced Configuration.
Regards,

Offline

#3 2024-08-07 14:42:17

simonglashauser
Member
Registered: 2024-08-06
Posts: 3

Re: GLPI 10.0.16 - LDAPS not working

Hello and thx, I was afraid of that. What I don't understand, however, is why I can easily connect using the LDAP Explorer. I don't need a certificate for that either.

Offline

#4 2024-08-07 14:45:13

makeijan
Member
From: Pontevedra, Galicia
Registered: 2008-01-29
Posts: 774
Website

Re: GLPI 10.0.16 - LDAPS not working

I don't know the tool, but maybe because you are already authenticated in the AD, or your computer is trusted...

GLPI (PHP) is starting an external connection and cannot verify if the certificate is trustful, and drops it. I guess it makes sense.

Offline

#5 2024-08-07 14:53:14

simonglashauser
Member
Registered: 2024-08-06
Posts: 3

Re: GLPI 10.0.16 - LDAPS not working

I have a small PHP script for testing purposes, and I have now set the option `LDAP_OPT_X_TLS_REQUIRE_CERT => LDAP_OPT_X_TLS_NEVER`. However, a connection is still not possible.

2024-08-07-14h50-31.png

Offline

#6 2024-08-07 15:03:18

makeijan
Member
From: Pontevedra, Galicia
Registered: 2008-01-29
Posts: 774
Website

Re: GLPI 10.0.16 - LDAPS not working

Sorry, maybe I wasn't clear enough. I don't know why it's working on LDAP Explorer.
You don't need to script anything.
I know it works adding the certificate paths. We have several instances working like this.

Regards

Offline

#7 2024-08-08 12:16:25

Kaya84
Member
Registered: 2019-06-13
Posts: 217

Re: GLPI 10.0.16 - LDAPS not working

Check this:
https://github.com/beyondcode/expose/issues/391

I think u need to import certificate inside XAMPP!

Are you sure you are using LDAP Explorer with LDAPS and not LDAP ? Maybe it's a domain machine and there is already a trust between you and AD, not the same for XAMPP...

Offline

Board footer

Powered by FluxBB