ltb container

[jassherman]

I'm trying to get the container provided here working in EKS. I've used the rpm's to build a working instance and created my own container installing php and ltb so I'm familiar with the product.
I've created a new container based off of the one referenced above, have my custom configs in place. The site is up, my custom backgrounds and images all look good. I'm just having issues connecting to ldap. Previously, I'd need to make some config changes to ldap.conf to ignore self signed cert but i dont see an ldap.conf on the container. I verified i can resolve dns so i know that isnt the issue.

The error in the logs states:

[Tue Jul 15 20:27:31.787990 2025] [php:warn] [pid 2958:tid 2958] [client 100.100.12.229:33521] PHP Warning: ldap_bind(): Unable to bind to server: Can't contact LDAP server in /var/www/vendor/ltb-project/ltb-common/src/Ltb/PhpLDAP.php on line 36, referer: https://redacted.redacted.com/index.php
[Tue Jul 15 20:27:31.788038 2025] [php:notice] [pid 2958:tid 2958] [client 100.100.12.229:33521] LDAP - Bind error -1 (Can't contact LDAP server), referer: https://redacted.redacted.com/index.php

`<?php
// Override config.inc.php parameters below

$debug = true;
$ldap_url = "ldaps://cloudldap.redacted.com";
$ldap_binddn = "cn=passwordtool,dc=redacted,dc=com";
$ldap_bindpw = "changeme";
$ldap_base = "DC=redacted,DC=com";
$ldap_filter = "(&(objectClass=user)(sAMAccountName={login})(!(userAccountControl:1.2.840.113556.1.4.803:=2)))";
$mail_from = "[email protected]";
$mail_smtp_host = "mail.redacted.com";
$background_image = "images/redacted.jpeg";
$header_name_extra_config = "SSP-Extra-Config";
$mail_smtp_secure = '';
$mail_smtp_autotls = false;
$who_change_password = "user";
$reset_url = "redacted.redacted.com";
$ad_mode = true;
$ad_options['force_unlock'] = true;
$pwd_min_length = 14;
$pwd_min_lower = 1;
$pwd_min_upper = 1;
$pwd_min_digit = 1;
$pwd_min_special = 1;
$pwd_complexity = 1;
$pwd_show_policy = "always";
$pwd_show_policy_pos = "above";
$show_extended_error = true;
$keyphrase = "pleasework";
$audit_log_file = "/var/log/ssp/change.log";
$logo = "images/image.png";
$display_footer = false;
$use_sms = false;
$use_questions = false;`

[coudot]

You can try to add in your PHP config file:

putenv("LDAPTLS_REQCERT=allow");

$ldap_url = ...

[jassherman]

That suggestion fixed my issue. Thank you.

[jassherman]

putenv("LDAPTLS_REQCERT=allow");