You are not logged in.
Pages: 1
Hello everyone,
We have the following problem.
We are trying to connect to our AD via LDAP. When we use the Microsoft LDAP Explorer, we can log in through our load balancer. From there, we obtained the paths for the Base DN and Root DN. However, when we attempt to log in, we receive the following error message:
Warning: Unable to bind to LDAP server `ldaps://ldap-ka.XX.XX.XX.gad.de:636` with RDN `CN=XXXXX,OU=Benutzer,OU=XXXX,OU=Banken,OU=RZ,DC=pb,DC=rz,DC=in,DC=gad,DC=de` error: Can't contact LDAP server (-1) extended error: error:80000002:system library::No such file or directory err string: error:80000002:system library::No such file or directory in C:\xampp\htdocs\glpi\src\AuthLDAP.php on line 3184
After several days of testing and searching, as well as phone calls with our data center, I have now reached out to you and hope for a solution.
Thank you very much!
Last edited by simonglashauser (2024-08-06 11:10:06)
Offline
Hi,
You are using LDAPS; hence, you need to fill in the certificate fields at the Advanced Configuration.
Regards,
Offline
Hello and thx, I was afraid of that. What I don't understand, however, is why I can easily connect using the LDAP Explorer. I don't need a certificate for that either.
Offline
I don't know the tool, but maybe because you are already authenticated in the AD, or your computer is trusted...
GLPI (PHP) is starting an external connection and cannot verify if the certificate is trustful, and drops it. I guess it makes sense.
Offline
I have a small PHP script for testing purposes, and I have now set the option `LDAP_OPT_X_TLS_REQUIRE_CERT => LDAP_OPT_X_TLS_NEVER`. However, a connection is still not possible.
Offline
Sorry, maybe I wasn't clear enough. I don't know why it's working on LDAP Explorer.
You don't need to script anything.
I know it works adding the certificate paths. We have several instances working like this.
Regards
Offline
Check this:
https://github.com/beyondcode/expose/issues/391
I think u need to import certificate inside XAMPP!
Are you sure you are using LDAP Explorer with LDAPS and not LDAP ? Maybe it's a domain machine and there is already a trust between you and AD, not the same for XAMPP...
Offline
Pages: 1