Forum GLPI-Project

tmuukkon

Member

Registered: 2025-02-25

Posts: 5

LDAPS integration

Hello,

I am desperate to get assistance with this.

I have read dozens of forum topics and GitHub issues etc. regarding this but still haven't been able to resolve this issue.

I am trying to add LDAPS login to GLPI.

I have tried numerous things. TLS on, TLS off, ldaps://<server name> and just <servername> bind on, bind off...

Nothing has worked. The documentation is not specific enough.

I have not configured any service with LDAPS before.

Windows Server 2025
IIS
PHP 8.3.17
MySQL 8.4.4 LTS
GLPI 10.0.18

Domain controller server is also WinServer 2025.

GLPI is on HTTPS. I have imported the RootCA to the web server.

Has anyone had a similar problem before? I have gotten all kinds of PHP errors/warnings. Unknown scheme, unable to bind, unable to establish TLS connection...
One time I managed to get the test to run successfully, but logging in with an AD account didn't work, got an error.

If anyone knows how to help, don't assume that I know ANYTHING. Please list all configurations I have to do.

If I missed any important detail please do let me know.

Thanks in advance.

eLBruto

Member

Registered: 2025-01-16

Posts: 23

Re: LDAPS integration

I'd need a bit more details regarding to this.
Replace every company related detail with Contoso or Example and provide us with how your configuration looks like.

---

eLBruto
GLPI version 10.0.17 , Server : Ubuntu LTS 24.04
Total beginner.

tmuukkon

Member

Registered: 2025-02-25

Posts: 5

Re: LDAPS integration

LDAP configuration in GLPI:

Server: ldaps://DC1
Port: 636
Filter: (&(objectClass=user)(objectCategory=person)(!(userAccountControl:1.2.840.113556.1.4.803:=2)))
Base DN: DC=ad,DC=contoso,DC=com
Use bind: Yes
Root DN: CONTOSO\Management

Currently, TLS off.

cconard96

Moderator

Registered: 2018-07-31

Posts: 3,290

Website

Re: LDAPS integration

Trying enabling TLS, Disabling Bind, adding ldaps:// to beginning of the server field, and making sure your GLPI server knows and trusts the Root CA (and restart the web server after importing the certificate)
https://github.com/glpi-project/glpi/issues/15941

---

GLPI Collaborator and Plugin Developer.
My non-English comments are automated translations. Sorry for any confusion that causes.
Mes commentaires non anglais sont des traductions automatiques. Désolé pour toute confusion qui cause.
Mis comentarios que no están en inglés son traducciones automáticas. Perdón por cualquier confusión que cause.

tmuukkon

Member

Registered: 2025-02-25

Posts: 5

Re: LDAPS integration

Hello Curtis,

thank you for the reply.

That GitHub topic was one of those that I have read.

Here's what I did:

Use TLS > Yes
Use bind > No
Server: ldaps://DC1

The GLPI server has the root CA imported.
On the CA, I exported the Root CA, moved it to the GLPI server, and pressed Install Certificate.

When trying to run the test, I get following:

PHP Warning:  Unable to start TLS connection to LDAP server `ldaps://DC1:636`
error: Can't contact LDAP server (-1)
extended error: error:16000069:STORE routines::unregistered scheme
err string: error:16000069:STORE routines::unregistered scheme in C:\inetpub\wwwroot\src\AuthLDAP.php on line 3156

eLBruto

Member

Registered: 2025-01-16

Posts: 23

Re: LDAPS integration

use bind : yes

---

eLBruto
GLPI version 10.0.17 , Server : Ubuntu LTS 24.04
Total beginner.

tmuukkon

Member

Registered: 2025-02-25

Posts: 5

Re: LDAPS integration

Even with bind on, I get the same error: unregistered scheme.

cconard96

Moderator

Registered: 2018-07-31

Posts: 3,290

Website

Re: LDAPS integration

While this was reported as an issue while using XAMPP, it wouldn't surprise me if it is a Windows issue in general.
https://stackoverflow.com/a/58844013/5870394

---

GLPI Collaborator and Plugin Developer.
My non-English comments are automated translations. Sorry for any confusion that causes.
Mes commentaires non anglais sont des traductions automatiques. Désolé pour toute confusion qui cause.
Mis comentarios que no están en inglés son traducciones automáticas. Perdón por cualquier confusión que cause.

tmuukkon

Member

Registered: 2025-02-25

Posts: 5

Re: LDAPS integration

I am not on XAMPP though. I will try that method on there.