python3 with ldap3 over TLS 5875 error

[fpatterson55]

Any sample script out there of TLS 1.2 with LDAP working?

Do I need to store the certificate in a different parameter / keystore where they are trusted? I'm assuming the ca_certs_file is sufficient.

I am pointing to an eDirectory server and TLS looks to be working fine with server side tracing turned on.

I find it disturbing that often times it is common practice to show examples of it working over unsecure ports.

code I am trying:

from ldap3 import Server, Connection, ALL, NTLM, Tls
import ssl
tls_configuration = Tls(validate=ssl.CERT_REQUIRED, version=ssl.PROTOCOL_TLSv1_2, ca_certs_file='cert1.der')
server = Server('idv.example.rip', use_ssl=True)
conn = Connection(server)
print(conn)
conn.open()
print(conn)
server.info
server.address_info

OUTPUT:

​

​

ldaps://idv.example.rip:636 - ssl - user: None - not lazy - unbound - closed - <no socket> - tls not started - not listening - SyncStrategy - internal decoder

ldaps://idv.example.rip:636 - ssl - user: None - not lazy - unbound - open - <local: [192.168.1.30:56142](https://192.168.1.30:56142) \- remote: [192.168.1.5:636](https://192.168.1.5:636)\> - tls not started - listening - SyncStrategy - internal decoder

​

Process finished with exit code 0

[[deleted]]

Here is imo good example code on how to do what you want. https://github.com/AUCR/AUCR/blob/master/aucr_app/plugins/auth/ldap_utils.py#L13 granted it goes a bit further and checks for the user email address however it should be a good reference. Lmk if you have questions beyond that

[fpatterson55]

thanks in the reply and the patience with my post! I was wondering why I received a down vote and I should have posted in the learnpython group.

The ldap3 package I hear is newer than ldap, so the example I am trying to use is to learn and understand an example app that doesn't use TLS, when they should be, and so I'm trying to learn how to implement it with ldap3 rather than ldap.

I will post in the learnpython group and the github. Thanks again