AS1024/Kanboard-Prod
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add option to disable SSL certificate verification for LDAP.

Browse Source
This commit is contained in:
Francois Ferrand
2014-07-03 10:25:25 +02:00
parent 98bd694e2b
commit 0a3049c172
3 changed files with 9 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
app/Model/Ldap.php
View File

@@ -24,6 +24,11 @@ class Ldap extends Base
die('The PHP LDAP extension is required'); die('The PHP LDAP extension is required');
} }
if (!LDAP_SSL_VERIFY) {
//Skip SSL certificate verification
putenv('LDAPTLS_REQCERT=never');
}
$ldap = ldap_connect(LDAP_SERVER, LDAP_PORT); $ldap = ldap_connect(LDAP_SERVER, LDAP_PORT);
if (! is_resource($ldap)) { if (! is_resource($ldap)) {

1
app/common.php
View File

@@ -44,6 +44,7 @@ defined('DB_NAME') or define('DB_NAME', 'kanboard');
defined('LDAP_AUTH') or define('LDAP_AUTH', false); defined('LDAP_AUTH') or define('LDAP_AUTH', false);
defined('LDAP_SERVER') or define('LDAP_SERVER', ''); defined('LDAP_SERVER') or define('LDAP_SERVER', '');
defined('LDAP_PORT') or define('LDAP_PORT', 389); defined('LDAP_PORT') or define('LDAP_PORT', 389);
defined('LDAP_SSL_VERIFY') or define('LDAP_SSL_VERIFY', true);
defined('LDAP_ACCOUNT_FULLNAME') or define('LDAP_ACCOUNT_FULLNAME', 'displayname'); defined('LDAP_ACCOUNT_FULLNAME') or define('LDAP_ACCOUNT_FULLNAME', 'displayname');
defined('LDAP_ACCOUNT_EMAIL') or define('LDAP_ACCOUNT_EMAIL', 'mail'); defined('LDAP_ACCOUNT_EMAIL') or define('LDAP_ACCOUNT_EMAIL', 'mail');

3
config.default.php
View File

@@ -30,6 +30,9 @@ define('LDAP_SERVER', '');
// LDAP server port (389 by default) // LDAP server port (389 by default)
define('LDAP_PORT', 389); define('LDAP_PORT', 389);
// By default, require certificate to be verified for ldaps:// style URL. Set to false to skip the verification.
define('LDAP_SSL_VERIFY', true);
// LDAP username to connect with. NULL for anonymous bind (by default). // LDAP username to connect with. NULL for anonymous bind (by default).
define('LDAP_USERNAME', null); define('LDAP_USERNAME', null);