[php-maint] Secure LDAPS support for php-ldap?

[sean finney]

hi,

On Friday 01 June 2007 15:02:06 Danai SAE-HAN (韓達耐) wrote:
> Perhaps SSL support hasn't been switched on when building php5-ldap?

if i recall correctly, the problem is that the openldap development libraries 
are what needs to provide the SSL support, not PHP.  in otherwords, we only 
get the features offered/provided by libldap2-dev.  i believe there's a 
similar problem with apache modules in debian using ldap such as 
mod_auth_ldap.

in case it's helpful, i've had to deal with this problem myself, and got 
around it by using  the stunnel package to tunnel/forward a connection from
localhost:ldap -> ldaphost:ldaps, and then configured my apache/php app to 
talk to locahlhost:ldap.  then you just have to make sure that the stunnel 
stays up, which i did by placing it in a "respawn" entry in /etc/inittab.


	sean
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part.
Url : http://lists.alioth.debian.org/pipermail/pkg-php-maint/attachments/20070606/4e9588e2/attachment.pgp