php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #37041 ldap_start_tls_s not found in iPlanet LDAP C SDK and OpenLDAP
Submitted: 2006-04-11 15:02 UTC Modified: 2006-04-11 17:10 UTC
From: kric0999 at uni-hildesheim dot de Assigned:
Status: Not a bug Package: LDAP related
PHP Version: 5.1.2 OS: Solaris 10
Private report: No CVE-ID: None
 [2006-04-11 15:02 UTC] kric0999 at uni-hildesheim dot de
Description:
------------
When compiling PHP with --with-ldap=/path/to/ldap the configure script does not recognize that LDAP-SSL is possible.

The iPlanet C SDK has a built-in SSL functionality (http://www.sun.com/download/products.xml?id=3ec28dbd).

My OpenLDAP was built against OpenSSL
(http://www.planetmirror.com/pub/openldap/openldap-release/openldap-2.3.21.tgz).
 

Reproduce code:
---------------
export CFLAGS=""
export CPPFLAGS=""
export LDFLAGS=""

# LD_LIBRARY_PATH contains no paths to LDAP directories

./configure --prefix=/foo --disable-cli --without-pear --with-ldap=/data/openldap | grep ldap

or

./configure --prefix=/foo --disable-cli --without-pear --with-ldap=/data/iplanet | grep ldap

Expected result:
----------------
checking for 3 arg ldap_set_rebind_proc... (cached) yes
checking for ldap_parse_result... (cached) yes
checking for ldap_parse_reference... (cached) yes
checking for ldap_start_tls_s... (cached) yes
checking for ldap_bind_s... (cached) yes


Actual result:
--------------
checking for 3 arg ldap_set_rebind_proc... (cached) yes
checking for ldap_parse_result... (cached) yes
checking for ldap_parse_reference... (cached) yes
checking for ldap_start_tls_s... (cached) no
checking for ldap_bind_s... (cached) yes

SEE: ldap_start_tls_s is NO


grep -r "ldap_start_tls_s" /data/openldap
finds many, many results

grep -r "ldap_start_tls_s" /data/iplanet
finds nothing, but there is a /data/iplanet/include/ldap_ssl.h and the /data/iplanet/tools/ldapsearch supports a SSL connection to the LDAP-SSL port 636.


Patches

Add a Patch

Pull Requests

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2006-04-11 15:50 UTC] sniper@php.net
Works fine with proper installations. Check the config.log for the real reason why the test failed.
 [2006-04-11 16:33 UTC] kric0999 at uni-hildesheim dot de
ok, sorry folks.
The OpenLDAP issue was my fault, indeed.

But the iPlanet issue is still active.
ldap_connect("ldaps://a.b.c.d") does not work, when
compiled PHP with iPlanet LDAP SDK.
 [2006-04-11 17:10 UTC] sniper@php.net
Yes, and that's also expected behaviour. Just use openldap, it's much better.
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved.
Last updated: Fri May 03 17:01:32 2024 UTC