Re: [otrs] Re: LDAP/TLS

[OTRS main list]

Pete McDonnell wrote:
Please do pardon my ignorace... TLS?  I'm no expert at LDAP... That code
segment was taken from searching through posts on the lists.otrs.org server.
- Pete McDonnell
 Manager, Technical Services
 Hip Interactive
 

	That looks very similar to what I have for a non-TLS 
connection to an LDAP server.  I need to know how to enable 
the TLS part.  Where is that in your config?

Jason
=================================
I edited Kernel/System/Auth/LDAP.pm and added a few lines:
   # ldap connect and bind (maybe with SearchUserDN and SearchUserPw)
   my $LDAP = Net::LDAP->new($Self->{Host}, %{$Self->{Params}}) or die 
"$@";

   # START of addition...
   our $ADSERVER_CA = "/usr/share/ssl/certs/thawte.pem" ;
   $LDAP->start_tls(
                    verify => 'require',
                    cafile => $ADSERVER_CA,
                   ) ;
   # END of addition
This allows me to connect to an Active Directory. You need to save the 
certificate of the certificate authority who signed the certificate of 
the ActiveDirectory domain controller in a file.

_______________________________________________
OTRS mailing list: otrs - Webpage: http://otrs.org/
Archive: http://lists.otrs.org/pipermail/otrs
To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs
Support oder Consulting für Ihr OTRS System?
=> http://www.otrs.de/