Pete McDonnell wrote:
Please do pardon my ignorace... TLS? I'm no expert at LDAP... That code segment was taken from searching through posts on the lists.otrs.org server.
- Pete McDonnell Manager, Technical Services Hip Interactive
That looks very similar to what I have for a non-TLS connection to an LDAP server. I need to know how to enable the TLS part. Where is that in your config?
Jason =================================
I edited Kernel/System/Auth/LDAP.pm and added a few lines: # ldap connect and bind (maybe with SearchUserDN and SearchUserPw) my $LDAP = Net::LDAP->new($Self->{Host}, %{$Self->{Params}}) or die "$@"; # START of addition... our $ADSERVER_CA = "/usr/share/ssl/certs/thawte.pem" ; $LDAP->start_tls( verify => 'require', cafile => $ADSERVER_CA, ) ; # END of addition This allows me to connect to an Active Directory. You need to save the certificate of the certificate authority who signed the certificate of the ActiveDirectory domain controller in a file.