[Setup] LDAP User Folder Certificate Configuration
Alberto Lopes
alberto at alopes.com
Wed Jan 7 18:22:01 UTC 2009
Dear friends,
I am trying to set up an LDAP configuration for Plone, using the PloneLDAP
product.
I need to connect to an LDAP over SSL port, but to do that, I need Plone to
validate the server certificate.
I was not able to find out where to configure Plone to know which is the CA
certificate to validate the server certificate; however, a guy in the
python-ldap list gave me a hint to do a
"ldap.set_option(ldap.OPT_X_TLS_CACERTFILE,'/etc/httpd/ssl.crt/myCA-cacerts.pem')"
command to set a "global" CA Cert file.
I put that as the last command in site-packages/ldap/__init__.py file
(stripping the "ldap." prefixes), and Plone was able to connect to the LDAP
server (I was able to search users, etc.)
My question is: is there a better or cleaner way or place to configure such
a thing? Messing with the source code for a python library seem a little
wrong to me...
Regards,
Alberto
--
View this message in context: http://n2.nabble.com/LDAP-User-Folder-Certificate-Configuration-tp2123979p2123979.html
Sent from the Installation, Setup, Upgrades mailing list archive at Nabble.com.
More information about the Setup
mailing list