[SOLVED] LDAP over SSL

[markinct]

I have successfully configured LDAP for customer authentication. I want to secure the connection between my OTRS server (Ubuntu 12.04, OTRS 3.2.4) and the Active Directory server. All of my attempts to configure ldaps fail miserably. As in service apache2 restart fails with errors about syntax near the port parameter in the apache error.log


Here's the ldap part of Config.pm:

Code: Select all

# CustomerUser
# (customer ldap backend and settings)
$Self->{CustomerUser} = {
    Name => 'LDAP Data Source',
    Module => 'Kernel::System::CustomerUser::LDAP',
    Params => {
        # ldap host
        Host => 'ldaps://ad.host.com',
        # ldap base dn
        BaseDN => 'blah...blah...',
        # search scope (one|sub)
        SSCOPE => 'sub',
        # The following is valid but would only be necessary if the
        # anonymous user does NOT have permission to read from the LDAP tree
        UserDN => 'CN=blah....',
        UserPw => 'Password Goes Here',
        # in case you want to add always one filter to each ldap query, use
        # this option. e. g. AlwaysFilter => '(mail=*)' or AlwaysFilter => '(objectclass=user)'
        AlwaysFilter => '',
            # if both your frontend and your LDAP are unicode, use this:
            SourceCharset => 'utf-8',
            DestCharset   => 'utf-8',
            # if your frontend is unicode and the charset of your
            # ldap server is iso-8859-1, use these options.
            # SourceCharset => 'iso-8859-1',
            # Net::LDAP new params (if needed - for more info see perldoc Net::LDAP)
            Params => {
                verify => 'none'
                port => 636,
                timeout => 120,
                async => 0,
                version => 3,
                cafile => '/usr/local/cacerts/DOIT-DC016_SLDAP_SSL.cer'
            },
    },

As an OTRS newb any help would be greatly appreciated.

[reneeb]

Code: Select all

                verify => 'none'

should be

Code: Select all

                verify => 'none', # note the trailing comma

[markinct]

Thank you! I looked at this for a couple of hours and missed that!!