Edit report at https://bugs.php.net/bug.php?id=48866&edit=1
ID: 48866 Comment by: mo at dgi dot no Reported by: dev at lechat dot org Summary: ldap.conf TLS_REQCERT directive fails for ldaps Status: Feedback Type: Bug Package: LDAP related Operating System: win32 only - windows server 2003 PHP Version: 5.3.0 Assigned To: pajoye Block user comment: N Private report: N New Comment: Hello! I'm still experiencing this issue in PHP 5.3.8 on IIS 7, Win 2008 R2. The most peculiar thing is that this issue also arises even though the server has installed the trusted root CA cert which have issued the LDAP-server cert. I also use the LDAP-servers FQDN which matches the cert. It strikes me as almost funny to have to disable cert-cheking on a cert i know is valid. Any one else been experiencing this? Previous Comments: ------------------------------------------------------------------------ [2011-03-28 21:00:38] ocala at udistrital dot edu dot co OS: Windows 7 64 Bit. PHP Version 5.3.0 Apache Version 2.2.11 Blunded Like Wamp Wamp installed in C:\wamp Script running in G:\www\test.php LDAP Configuration file in C:\ldap.conf This settings allows a working ldaps:// connection to a Windows 2008 R2 ------------------------------------------------------------------------ [2011-03-21 14:26:51] lorenz dot ulrich at phz dot ch In my Windows 7 machine with PHP 5.3.1, "TLS_REQCERT never" in a file "C:\ldap.conf" (was C:\openldap\sysconf\ldap.conf for PHP < 5.3) works fine for establishing StartTLS LDAP connections using port 389. ------------------------------------------------------------------------ [2011-01-27 12:10:46] julien dot moisan at agrostar dot fr Same trouble with PHP 5.3.0 with Windows when i move ldap.conf to c:/ that's work fine. ------------------------------------------------------------------------ [2010-11-10 16:53:06] tegwe002 at umn dot edu Based on other people's comments I did a little testing. Here's what I found out. System: PHP 5.3.3 Win32 vc6 x86 Windows server 2008 R2 Enterprise (no service pack) Apache 2.2.15 We too have our web-root (e) on a different drive than the system root (c). Since this machine is in production, I put one copy of the file in each location. I tried without reboot and had no joy. After reboot I was able to connect to ldap over ssl with no errors. Then I did a little testing to see which file was being used. I tried moving the test script between the c: and e: drives. The file must be in the root of the drive that the script is run from. So if you run scripts from more than one drive you'll need to copy the file to the root of each drive. I hope this helps someone else. ------------------------------------------------------------------------ [2010-06-18 09:40:25] paj...@php.net Please try 5.3.3RC1 ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at https://bugs.php.net/bug.php?id=48866 -- Edit this bug report at https://bugs.php.net/bug.php?id=48866&edit=1