Loading...
 
Skip to main content

LDAP / Active directory


You are viewing a reply to LDAP Sync Broken in 12.x

Re: LDAP Sync Broken in 12.x

I'm having the same problem going from 9.6 to 12.2 in my development instance. Logging tells me that the LDAP connection is failing to start TLS: "Error: TLS could not be started: Connect error: Unknown Net_LDAP2 Error (-11) at line 236 in /var/www/devtiki/lib/auth/ldap.php". When I uncheck "Use TLS" in Admin > Log in > LDAP, the logins work as expected. I don't want to lose the security of TLS when authenticating to AD, so I'm not sure I can bring this version into production until this bug is fixed.

When I comment out the error checking routine in lib/auth/ldap.php, the logins work and I don't get errors in the log, but I'm not confident that TLS is actually working (haven't tested this yet). I noticed that the Pear library files are no longer included in 12.x as they were in 9.x and earlier versions of Tiki, and that the requirement for these libraries has been removed. When I put the Pear libraries from 9.x back in and replaced the lib/auth/ldap.php file in 12.x with the one from 9.x, logins broke completely, even though these files are virtually identical (with the main exception being the Pear library file requirement). Not sure how to troubleshoot the problem beyond this point.