Howto LDAP Access from external (public) Services

[friedrich]

Alternative to Daniels nginx approach (depending on your usecase):

[HowTo] Use letsencrypt certificates for LDAPS connections (via stunnel)

Problem We want to access the UCS LDAP(S) connection with an external service, but with a valid certificate. This example was created during the LDAPS-connection of WebUntis. Ideas Letsencrypt provides certificates which should be accepted by all external LDAP connections replacing the internally used LDAP certificates is a bad idea, things might break completely it’s possible to use a SSL proxy like nginx but we already have stunnel running Prerequisities Warning: the following p…