samba - Feb 2020 - samba AD directory and PHP

Am 27.02.20 um 11:32 schrieb L.P.H. van Belle via samba:
> But your missing the important part. 
> 
> How ? 
> 
> Kerberos ? NTLM ? LDAP ? 
> 
> ;-) 
Ah ok

Actually I want to use secure LDAP from a PHP docker container.

So far no Kerberos involved as far as I see.

(I have to dockerize a php app which is badly written ... and I want to
clean up a bit, and let it bind encrypted. But it should stay as small
as possible.)

additional info:

I have a pfsense firewall already bound to the AD ... ;-)

and trying to mimic that setup for that other php app

I currently get messages like:

PHP Warning:  ldap_bind(): Unable to bind to server: Strong(er)
authentication required in /var/www/html/ldaptest.php on line 22

which tells me that I have the crypto stuff wrong.

I assume I have to maybe edit /etc/ldap/ldap.conf in the docker
container? Add some cert or CA?



I show you the start of my test script ... ->

<?php

$ldap_password = 'pfXXXXXXmTxCBs';
$ldap_username = 'pfsense at arbeitsgruppe.customer.at';
$ldap_connection = ldap_connect("arbeitsgruppe.customer.at");

echo 'Debug message';

if (FALSE === $ldap_connection){
    // Uh-oh, something is wrong...
 echo 'Unable to connect to the ldap server';
}

// We have to set this option for the version of Active Directory we are
using.
ldap_set_option($ldap_connection, LDAP_OPT_PROTOCOL_VERSION, 3) or
die('Unable to set LDAP protocol version');
ldap_set_option($ldap_connection, LDAP_OPT_REFERRALS, 0); // We need
this for doing an LDAP search.

if (TRUE === ldap_bind($ldap_connection, $ldap_username, $ldap_password)){



----- thx

Am 27.02.20 um 11:51 schrieb Stefan G. Weichinger via
samba:
> 
> additional info:
> 
> I have a pfsense firewall already bound to the AD ... ;-)
> 
> and trying to mimic that setup for that other php app
> 
> I currently get messages like:
> 
> PHP Warning:  ldap_bind(): Unable to bind to server: Strong(er)
> authentication required in /var/www/html/ldaptest.php on line 22
> 
> which tells me that I have the crypto stuff wrong.
> 
> I assume I have to maybe edit /etc/ldap/ldap.conf in the docker
> container? Add some cert or CA?
I assume I have to add the certificates of the DCs or the CA of the AD to

container:
/usr/local/share/ca-certificates/

?

Which files to transfer here?