I''m now trying to configure apache 2.2.0 install with xampp under windows 2000. With ldap it''s ok but I ve got some probleme with SSL (again). In the log of apache, I have: LDAP : an attemp to set LDAP_OPT_SSL on failed. Parameter Error. did someone alreday configure apache (win32) with LDAPS??? _________________________________________________________________ Retrouvez tout en un clin d''oeil avec la barre d''outil MSN Search ! http://desktop.msn.fr/
Mickael Besse wrote:> I''m now trying to configure apache 2.2.0 install with xampp under > windows 2000. > > With ldap it''s ok but I ve got some probleme with SSL (again). In the > log of apache, I have: > > LDAP : an attemp to set LDAP_OPT_SSL on failed. Parameter Error. > > > did someone alreday configure apache (win32) with LDAPS??? >I''ve never used Apache on win32 but is APR built with LDAP SSL support? If you set LogLevel to debug in Apache you should see a little blurb about it during startup. rob
>I''ve never used Apache on win32 but is APR built with LDAP SSL support? If >you set LogLevel to debug in Apache you should see a little blurb about it >during startup. > >rob[Wed Jun 28 17:11:16 2006] [info] APR LDAP: Built with Microsoft Corporation. LDAP SDK [Wed Jun 28 17:11:17 2006] [info] LDAP: SSL support unavailable: LDAP: CA certificates cannot be set using this method, as they are stored in the registry instead. I v got this in log when apache start, so SSL is unavailable. Is there something to do for changing this?? _________________________________________________________________ Windows Live Mail : venez tester la version bêta ! http://www.ideas.live.com/programpage.aspx?versionId=5d21c51a-b161-4314-9b0e-4911fb2b2e6d
Mickael Besse wrote:> [Wed Jun 28 17:11:16 2006] [info] APR LDAP: Built with Microsoft > Corporation. LDAP SDK > [Wed Jun 28 17:11:17 2006] [info] LDAP: SSL support unavailable: LDAP: > CA certificates cannot be set using this method, as they are stored in > the registry instead. > > I v got this in log when apache start, so SSL is unavailable. Is there > something to do for changing this??Looks like you have a LDAPTrustedGlobalCert or LDAPTrustedClientCert directive in there somewhere. The Microsoft LDAP SDK reads server, CA and client certificates from the registry, you cannot set these from within Apache, and if you try to, you get the error above. I don''t know where in the registry, the Microsoft LDAP SDK docs should explain this though. (You are falling victim to the annoyingly inconsistent way that SSL and TLS is supported between FDS, OpenLDAP, Novell, MS and Sun LDAP client libraries). Regards, Graham --