From 8d4282cb278c14ff80c2c71a36c24567b9f8f384 Mon Sep 17 00:00:00 2001
From: Adam Goldsmith <adam@adamgoldsmith.name>
Date: Thu, 21 Oct 2021 01:55:27 -0400
Subject: [PATCH] Use SSL for LDAP auth

---
 LocalSettings.php | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/LocalSettings.php b/LocalSettings.php
index 7f974af..133c13d 100644
--- a/LocalSettings.php
+++ b/LocalSettings.php
@@ -172,6 +172,7 @@ $wgScribuntoDefaultEngine = 'luastandalone';
 $wgScribuntoUseCodeEditor = "true";
 
 # LDAP
+putenv('LDAPTLS_REQCERT=never');
 wfLoadExtension( 'PluggableAuth' );
 wfLoadExtension( 'LDAPProvider' );
 wfLoadExtension( 'LDAPUserInfo' );
@@ -181,8 +182,8 @@ $LDAPProviderDomainConfigProvider = function() use ($secrets) {
 		'CMS' => [
 			"connection" => [
 				"server" => "self-service.claremontmakerspace.org",
-				"port" => 7389,
-				"enctype" => "clear",
+				"port" => 7636,
+				"enctype" => "ssl",
 				"user" => "uid=LDAPSearch,cn=users,dc=sawtooth,dc=claremontmakerspace,dc=org",
 				"pass" => $secrets['LDAPPass'],
 				"options" => [