Debian Bug report logs - #427849
php5-ldap: doesn't support ldaps?

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Danai SAE-HAN (韓達耐) <danai.sae-han@edpnet.be>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: openldap2: Not built with SSL libraries?

Date: Wed, 06 Jun 2007 23:32:01 +0200

Package: openldap2
Severity: normal

Hi!

I have originally reported a bug against #419516, but the Debian PHP
packager Sean has pointed me to the openldap2 package, and more
specifically libldap2-dev.  libldap2-dev isn't built with SSL libraries,
so php5-ldap doesn't support ldaps:// connections.  (He also mentioned
a possible tweak using stunnels, but that's pretty awkward).

According to
http://article.gmane.org/gmane.mail.squirrelmail.user/23753/match=ldaps
I should be able to get LDAPS support in SquirrelMail.  But for some
reason, I can't.

I have tried the test-ldap.php script that is provided on that page, but
it fails to connect with ldaps://localhost or ldaps://localhost:686.  I
can however connect to my LDAPS just fine with Mozilla Icedove.

I'm running slapd on an AMD64 Debian/unstable machine, and it listens
only to ldaps://localhost ATM.  I don't use TLS or startTLS.  The latest
php5-ldap (5.2.2-2) and libldap2 (2.1.30-13.4) are installed.

In openldap2's debian/control file I see that it Build-Depends on gnutls,
but that is only for TLS and not for SSL connections, I assume.

So I would like to see libdlap2-dev built against the OpenSSL library,
if that's possible.  That way php5-ldap can have ldaps:// support.


Best regards



Danai SAE-HAN (韓達耐)
--
題目:《落花》
作者:宋祁（９９８－１０６２）

墜素翻紅各自傷，青樓煙雨忍相忘。
將飛更作回風舞，已落猶成半面妝。
滄海客歸珠有淚，章台人去骨遺香。
可能無意傳雙蝶，盡付芳心與蜜房。

-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.20-1-amd64 (SMP w/1 CPU core)
Locale: LANG=nl_BE.UTF-8, LC_CTYPE=nl_BE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Message #10 received at 427849@bugs.debian.org (full text, mbox, reply):

From: Steve Langasek <vorlon@debian.org>

To: 427849@bugs.debian.org

Subject: Re: openldap2: Not built with SSL libraries?

Date: Thu, 20 Dec 2007 19:01:38 -0800

reassign 427849 php5-ldap
retitle 427849 php5-ldap: doesn't support ldaps?
thanks

> I have originally reported a bug against #419516, but the Debian PHP
> packager Sean has pointed me to the openldap2 package, and more
> specifically libldap2-dev.  libldap2-dev isn't built with SSL libraries,
> so php5-ldap doesn't support ldaps:// connections.

That's not true, libldap2-dev is built with SSL libraries.  If php5-ldap is
failing to recognize this and not supporting ldaps://, that's a php5-ldap
bug.  If php5-ldap is trying to use ldaps and the connection is failing,
that may be a libldap bug, but in that case we would need more information.

-- 
Steve Langasek                   Give me a lever long enough and a Free OS
Debian Developer                   to set it on, and I can move the world.
Ubuntu Developer                                    http://www.debian.org/
slangasek@ubuntu.com                                     vorlon@debian.org

Message #19 received at 427849-submitter@bugs.debian.org (full text, mbox, reply):

From: Raphael Geissert <geissert@debian.org>

To: "Clement Hermann (nodens)" <clement.hermann@free.fr>, 560161@bugs.debian.org

Cc: 427849-submitter@bugs.debian.org

Subject: Re: [php-maint] Bug#560161: php5-ldap: LDAPS and LDAP+TLS return error on valid wildcard certificate check

Date: Wed, 9 Dec 2009 20:34:07 -0600

Hi,

2009/12/9 Clement Hermann (nodens) <clement.hermann@free.fr>:
> Package: php5-ldap
> Severity: normal
>
> Hi,
>
> php5-ldap return error on bind when server is using a wildcard
> SSL certificate, even when the certificate is valid. ldapsearch works
> OK on the same certificate.
>
> Workaround : add TLS_REQCERT never in ldap.conf (but then you cannot
> verify that you are connecting to the right server), or use a simple
> (non-wildcard) certificate.
>
> This is probably an upstream bug (see
> http://bugs.php.net/bug.php?id=17738), but the relevant bug is
> currently in "no feedback" state so maybe it could be re-opened as a new bug.
> (I don't have any php version supported upstream readily available that
> can connect to a ldaps server with a wildcard cert, so I did not report
> it upstream).
>

Please do report it to upstream as this is not a Debian-specific bug
and chances are that it is going to be fixed sooner if reported there.

CC'ing 427849 as it might be the same problem (and explain why when I
tested it worked).

Cheers,
-- 
Raphael Geissert - Debian Developer
www.debian.org - get.debian.net

Message #24 received at 427849-done@bugs.debian.org (full text, mbox, reply):

From: "Thijs Kinkhorst" <thijs@debian.org>

To: 427849-done@bugs.debian.org

Subject: Re: php5-ldap: doesn't support ldaps?

Date: Mon, 10 Mar 2014 11:35:44 +0100

Hi,

I'm using php5-ldap with ldaps in production. Since this bug has been
marked as moreinfo for 6 years, I think we can safely close it.


Cheers,
Thijs

Message #29 received at 427849@bugs.debian.org (full text, mbox, reply):

From: Danai SAE-HAN (韓達耐) <danai.sae-han@edpnet.be>

To: 427849@bugs.debian.org

Subject: Re: Bug#427849 closed by "Thijs Kinkhorst" <thijs@debian.org> (Re: php5-ldap: doesn't support ldaps?)

Date: Tue, 11 Mar 2014 07:05:23 +0800

Dag Thijs

Wow, that was a ride through memory lane!
Sure, I have no way of checking or replicating this issue anymore so I
don't mind having this bug closed.

Groeten

-- 
Danai

On 10 March 2014 18:36, Debian Bug Tracking System
<owner@bugs.debian.org> wrote:
> This is an automatic notification regarding your Bug report
> which was filed against the php5-ldap package:
>
> #427849: php5-ldap: doesn't support ldaps?
>
> It has been closed by "Thijs Kinkhorst" <thijs@debian.org>.
>
> Their explanation is attached below along with your original report.
> If this explanation is unsatisfactory and you have not received a
> better one in a separate message then please contact "Thijs Kinkhorst" <thijs@debian.org> by
> replying to this email.
>
>
> --
> 427849: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=427849
> Debian Bug Tracking System
> Contact owner@bugs.debian.org with problems
>
>
> ---------- Forwarded message ----------
> From: "Thijs Kinkhorst" <thijs@debian.org>
> To: 427849-done@bugs.debian.org
> Cc:
> Date: Mon, 10 Mar 2014 11:35:44 +0100
> Subject: Re: php5-ldap: doesn't support ldaps?
> Hi,
>
> I'm using php5-ldap with ldaps in production. Since this bug has been
> marked as moreinfo for 6 years, I think we can safely close it.
>
>
> Cheers,
> Thijs
>
> ---------- Forwarded message ----------
> From: "Danai SAE-HAN (韓達耐)" <danai.sae-han@edpnet.be>
> To: Debian Bug Tracking System <submit@bugs.debian.org>
> Cc:
> Date: Wed, 06 Jun 2007 23:32:01 +0200
> Subject: openldap2: Not built with SSL libraries?
> Package: openldap2
> Severity: normal
>
> Hi!
>
> I have originally reported a bug against #419516, but the Debian PHP
> packager Sean has pointed me to the openldap2 package, and more
> specifically libldap2-dev.  libldap2-dev isn't built with SSL libraries,
> so php5-ldap doesn't support ldaps:// connections.  (He also mentioned
> a possible tweak using stunnels, but that's pretty awkward).
>
> According to
> http://article.gmane.org/gmane.mail.squirrelmail.user/23753/match=ldaps
> I should be able to get LDAPS support in SquirrelMail.  But for some
> reason, I can't.
>
> I have tried the test-ldap.php script that is provided on that page, but
> it fails to connect with ldaps://localhost or ldaps://localhost:686.  I
> can however connect to my LDAPS just fine with Mozilla Icedove.
>
> I'm running slapd on an AMD64 Debian/unstable machine, and it listens
> only to ldaps://localhost ATM.  I don't use TLS or startTLS.  The latest
> php5-ldap (5.2.2-2) and libldap2 (2.1.30-13.4) are installed.
>
> In openldap2's debian/control file I see that it Build-Depends on gnutls,
> but that is only for TLS and not for SSL connections, I assume.
>
> So I would like to see libdlap2-dev built against the OpenSSL library,
> if that's possible.  That way php5-ldap can have ldaps:// support.
>
>
> Best regards
>
>
>
> Danai SAE-HAN (韓達耐)
> --
> 題目:《落花》
> 作者:宋祁（９９８－１０６２）
>
> 墜素翻紅各自傷，青樓煙雨忍相忘。
> 將飛更作回風舞，已落猶成半面妝。
> 滄海客歸珠有淚，章台人去骨遺香。
> 可能無意傳雙蝶，盡付芳心與蜜房。
>
> -- System Information:
> Debian Release: lenny/sid
>   APT prefers unstable
>   APT policy: (500, 'unstable')
> Architecture: amd64 (x86_64)
>
> Kernel: Linux 2.6.20-1-amd64 (SMP w/1 CPU core)
> Locale: LANG=nl_BE.UTF-8, LC_CTYPE=nl_BE.UTF-8 (charmap=UTF-8)
> Shell: /bin/sh linked to /bin/bash
>

Send a report that this bug log contains spam.