Cannot connect to LDAPS Active Directory server

[frog28437]

Hi everyone,

I was able to test locally on my machine the connection between my Laravel app and a self-hosted OpenLdap server.

The problem is, when testing on the client's machine (which is using an Active Directory server), the ldap:test command returns "unsuccessful". Their server uses SSL and has the certificate installed.

The environment variables are set up like this:

LDAP_HOST=xxx.yyy-zzzzzzz.ww
LDAP_PORT=636
LDAP_BASE_DN=dc=XXX,dc=yyy-zzzzzzz,dc=ww
LDAP_USERNAME=adminusername@xxx.yyy-zzzzzzz.ww
LDAP_PASSWORD=adminpassword
LDAP_USE_SSL=true
LDAP_USE_TLS=false

They can successfully connect to the LDAP server through telnet by running telnet xxx.yyy-zzzzzzz.ww 636 so the problem might not be in the server itself.

Some additional information that might help:

• The LDAP server is running on Windows and the Laravel app's system is running CentOS
• The providers configuration in auth.php:

    'providers' => [
        'users' => [
            'driver' => 'ldap',
            'model' => LdapRecord\Models\ActiveDirectory\User::class,
            'database' => [
                'model' => App\Models\User::class,
                'sync_passwords' => false,
                'sync_attributes' => [
                    'name' => 'cn',
                    'username' => 'uid',
                    'email' => 'mail',
                ],
            ],
        ],
    ],

Since I have no access to the shell, I can't quite easily test any changes so I haven't tried the TLS_REQCERT never test in the https://ldaprecord.com/docs/core/v3/configuration/#debugging. Additionally, in the documentation, the only example for this test is directed towards OpenLDAP while my client is running Active Directory so I feel a bit lost.

What seems to be the issue here? I can give additional details if needed.

Any help is welcome!

[stevebauman]

Hi @frog28437,

The documentation for TLS_REQCERT never is relevant for any LDAP connection. This is definitely something I'd try if possible before debugging further. I can fix this in the documentation so it's clear.

I've personlly had to do this on Windows computers in an Active Directory environment.

[frog28437]

Hi @frog28437,

The documentation for TLS_REQCERT never is relevant for any LDAP connection. This is definitely something I'd try if possible before debugging further. I can fix this in the documentation so it's clear.

I've personlly had to do this on Windows computers in an Active Directory environment.

Thank you so much for the quick reply @stevebauman !

After a lot of trial and error we figured that the LDAP_BASE_DN was missing some parts and that was the cause for not being able to connect to the server.

Still, thank you for the help!

[stevebauman]

Ah perfect, glad you got it working! Happy to help 🙏