Differences
This shows you the differences between two versions of the page.
| Next revision | Previous revision | ||
| apache_ldap [2019/02/07 17:52] – created admin | apache_ldap [2019/02/07 17:55] (current) – [Prefered possiblilty] admin | ||
|---|---|---|---|
| Line 10: | Line 10: | ||
| Apache needs following settings to work with LDAPS authentication. You must edit '' | Apache needs following settings to work with LDAPS authentication. You must edit '' | ||
| - | < | + | < |
| # | # | ||
| # LDAP Defaults | # LDAP Defaults | ||
| Line 38: | Line 38: | ||
| You must create a configuration file in '' | You must create a configuration file in '' | ||
| - | < | + | < |
| LDAPVerifyServerCert On | LDAPVerifyServerCert On | ||
| LDAPTrustedMode SSL | LDAPTrustedMode SSL | ||
| Line 54: | Line 54: | ||
| Just create a configuration file ('' | Just create a configuration file ('' | ||
| - | < | + | < |
| LDAPVerifyServerCert Off | LDAPVerifyServerCert Off | ||
| LDAPTrustedMode SSL | LDAPTrustedMode SSL | ||
| Line 76: | Line 76: | ||
| Get the certificate from official certification reseller and put it into / | Get the certificate from official certification reseller and put it into / | ||
| - | < | + | < |
| / | / | ||
| </ | </ | ||
| Line 86: | Line 86: | ||
| First, you must get the certificate using this small script from LDAP server: | First, you must get the certificate using this small script from LDAP server: | ||
| - | < | + | < |
| #!/bin/sh | #!/bin/sh | ||
| # | # | ||
| Line 100: | Line 100: | ||
| An example for ad.example.com on port 636: | An example for ad.example.com on port 636: | ||
| - | < | + | < |
| - | /opt/jobs/get-ssl-cert.sh ad.example.com 636 | + | get-ssl-cert.sh ad.example.com 636 |
| </ | </ | ||
| - | |||
| - | You can get it [[https:// | ||
| Now, you must configure (add the certificat in) openldap to use this certification chain file. Just add this line into'' | Now, you must configure (add the certificat in) openldap to use this certification chain file. Just add this line into'' | ||