AD LDAP via SSL

[puppy]

I spent three hours working on this and finally got it to work. Please note that my server environment is Windows Server 2003, IIS 6, and PHP 5.

1. You can download pre-compiled PHP Windows package from www.php.net. It comes with LDAP & OpenSSL support. If you have troubles getting PHP to work with IIS, check this site out.
   
   
2. This is a very important step. Download ldap.conf.txt, rename it to ldap.conf and copy it to C:\OpenLDAP\sysconf (create the folder if necessary).
   
   It took me many hours to figure this out. I actually opened php_ldap.dll file to get the full path. “TLS_REQCERT never” will disable SSL certificate checking.
   
   
3. This is another very important step. Download activedirectory.login.php.txt, rename it to activedirectory.login.php, and overwrite it to <SS_Install_Path>\includes\LoginShare.
   
   
4. Go to SupportSuite Admin CP – Templates – Manage Groups. Click Settings and change loginshare to Microsoft Active Directory.
   
   
5. Go to SupportSuite Admin CP – Templates – LoginShare and click on Microsoft Active Directory.
   
   
6. Enter your Active Directory host, base DN, RDN, and password. Change port number to 636. This will trigger my version of activedirectory.login.php to use SSL for LDAP connections.