Connection to directory service is insecure

[viharm]

Currently the library uses clear unencrypted connection to the directory service.

Enable functionality to connect to LDAP directories using TLS.

ldap over SSL (ldaps) on port 636 is deprecated, so will not be implemented.

[viharm]

Use ldap_start_tls

AD example from the same page:

<?php  
   $ldap-link=ldap_connect($ldap-host); 
   $ldapbind=false;
   if(ldap_set_option($ldap-link, LDAP_OPT_PROTOCOL_VERSION, 3))
      if(ldap_set_option($ldap-link, LDAP_OPT_REFERRALS, 0))
         if(ldap_start_tls($ldap-link))
               $ldapbind = @ldap_bind($ldap-link, $ldap-usr, $ldap-pwd);   
   ldap_close($ldap-link);

   if(!$ldapbind)
      echo "ERROR";
   else
      echo "OK";
?>

[viharm]

Secure LDAP connection is a crucial feature to ensure best practices and security standards are implemented.

[viharm]

Will be addressed by PR #6

[viharm]

Fixed by PR #6