SSL error

[vascoferraz]

Hy everyone.

I am using the following helm chart (https://artifacthub.io/packages/helm/cetic/phpldapadmin) to deploy a phpLDAPadmin instance. The latest application version that this helm chart supports is the 1.2.5.

If I enter the LDAP pod (not the phpLDAPadmin pod) I can list all users using the the non-secure and the secure LDAP server.

The command that I use for the TLS server is this one:
ldapsearch -LLL -x -Z -H ldaps://ldap.confluent.svc.cluster.local:636 -b 'dc=test,dc=com' -D "cn=mds,dc=test,dc=com" -w 'Developer!' -d 2

Now, on the phpLDAPadmin interface, I can login using the non-secure LDAP server but when I login using the secure server I get this error message (even though I am getting this SSL error, I can in fact log in).

[vascoferraz]

Update:

When I run the command ldapsearch -LLL -x -Z -H ldaps://ldap.confluent.svc.cluster.local:636 -b 'dc=test,dc=com' -D "cn=mds,dc=test,dc=com" -w 'Developer!' -d 2 on the phpLDAPadmin pod I get the following error:

This error on the phpLDAPadmin pod makes me think that the SSL certificates are not correct configured on this pod.

[vascoferraz]

Update 2:

I deployed an Alpine container, set the correct Certificate Authority, and after using the same exact command that failed on the phpLDAPadmin container, this exact same command did not fail with any TLS error on this Alpine container.

ldapsearch -LLL -x -Z -H ldaps://ldap.confluent.svc.cluster.local:636 -b 'dc=test,dc=com' -D "cn=mds,dc=test,dc=com" -w 'Developer!' -d 2

Any ideas of what is going on here?

Thanks :)

[vascoferraz]

Hi again everyone. I have good and bad news.

The good news is that the TLS error thrown by the ldapsearch command can be solved just by creating a custom image from
osixia/phpldapadmin:0.9.0

FROM osixia/phpldapadmin:0.9.0

USER root

# Fix TLS issue when running the ldapsearch command that throws this error: tls_write: want=31 error=Bad file descriptor
RUN echo "deb http://deb.debian.org/debian buster-backports main" >> /etc/apt/sources.list
RUN apt-key adv --keyserver keyserver.ubuntu.com --recv-keys 0E98404D386FA1D9 6ED0E7B82643E131
RUN apt update
RUN apt install -y ldap-utils -t buster-backports

The bad news is that the error in the phpLDAPadmin GUI is still present.

[williamdes]

This image if full of shit, and security holes. Nobody gives a fuck about it since years...

Here is a lighter one you can use as a drop in replacement
https://github.com/sudo-bot/docker-openldap/
If you find issues of stuff I did not re implement please open issues

[williamdes]

Wrong link for the phpldapadmin one, here it is: https://github.com/sudo-bot/docker-phpldapadmin/

[vascoferraz]

Thanks :)