Configuring Secure LDAP (LADPS) Support

To configure LDAPS support, follow these steps:

Follow the instructions given in Configuring Apache for Authenticating with LDAP Service before executing the following steps to configure LDAPS:
  1. Copy the CA certificate from the LDAP server and place it in a directory other than / root.
    /opt/certs/<CA Certificate>
  2. Assign permissions for the directory which has the CA certificate.
    chmod -R 777 /opt/certs
  3. Modify the /etc/hosts file with a fully qualified DNS.
    <DNS-IP> <Host Name> <Fully Qualified Host Name>
  4. Modify /etc/httpd/conf.d/pld.conf to have the following line after CustomLog:
    LDAPTrustedGlobalCert CA_BASE64 </opt/certs/<CA Certificate>
  5. Modify the AuthLDAPURL URL from ldap to ldaps.
    AuthLDAPURL ""ldaps ://ldap-server/dc=example,dc=org?uid?one""