Merge pull request ltb-project#1052 from Worteks/1044-peer-cert-untrusted

Document how use env to configure LDAP TLS/SSL options

Author: coudot

docs/config_ldap.rst

@@ -56,6 +56,13 @@ the requirements of your server. For example:
 
    TLS_CIPHER_SUITE TLSv1+RSA
 
+Alternatively these configurations can be overriden directly in the
+``config.inc.local.php`` using the following configurations:
+
+::
+
+   putenv("LDAPTLS_REQCERT=allow");
+   putenv("LDAPTLS_CACERT=/etc/ssl/ca.crt");
 
 You can also define the ldap connection timeout:
 

docs/installation.rst

@@ -138,6 +138,15 @@ Prepare a local configuration file, for example ``ssp.conf.php``.
     <?php // My SSP configuration
     $keyphrase = "mysecret";
     $debug = true;
+    $ldap_url = "ldap://localhost";
+    # Uncomment if LDAPS is required
+    #$ldap_starttls = true;
+    #putenv("LDAPTLS_REQCERT=allow");
+    #putenv("LDAPTLS_CACERT=/etc/ssl/certs/ca-certificates.crt");
+    $ldap_binddn = "cn=manager,dc=example,dc=com";
+    $ldap_bindpw = 'secret';
+    $ldap_base = "dc=example,dc=com";
+    $ldap_login_attribute = "uid";
     ?>
 
 Start container, mounting that configuration file: