niota

Prerequisitions

Configuration file ldap.conf must be created as a simple text file in the following folder

“c:\openldap\sysconf\ldap.conf”

This file path is hardcoded in the ldap related dll file of the php installation, therefore there is no soultion to place the ldap.conf file in any other place.

In the file ldap.conf the certificate-folder and certificate-file path can be set. The client certificate checking method can be specified as well. These can be set with the next three directives what you can define in the ldap.conf file:

TLS_REQCERT
This directive specifies which checks to perform on client certificates in an incoming TLS session, if any.

Accepted values are:

• never
• allow
• try
• demand

In the case of self-signed certificates it is recommended to use the never or the allow setting.

E.g.:

TLS_REQCERT allow

Important Even if the setting is set to never the certificate must exist and the path must be set correctly! The setting does not mean that you do not have to own the certificate.