Update:We determined that the "ldap_bind: Strong(er) authentication required (8)" requires a secure connection between client and server. As a result, we abandoned a linux-based OsTicket host as the installation of a certificate outside of Apache exceeded our knowledge of linux. So, we spun up an old license of Windows Server 2008 R2 and reinstalled osTicket on IIS. See attached screenshot of the system specs.To correct the security issue, we generated a private-key certificate from our Domain Controller, as the certificate authority. We installed that certificate onto the client. This installation guarantees a secure connection between the osTicket server and Microsoft AD (LDAP) server. When using a LDAP explorer utility, which is installed in the "Add Server Roles" feature, we were able to successfully bind to the domain controller from the osTicket running box. We confirmed that securely, LDAP is now running on port 636, instead of the default, 389.So now that we cleared that up, it is now time to focus on osTicket. Taking what we learned about ports, we decided to modify the LDAP server string to ***LDAPServer***.actechnical.com.However, when we submit those settings the following error occurs:Unable to connect to ***LDAPSERVER***. Connection refused.Odd, that the osTicket is attempting to still connect to our server over port 389.After much investigation, I decided to check the ldap-auth.phar file. So I used PHP.phar to extract the phar file and I started looking. Lo and behold, when I examined the LDAP2.php file, the port, 389, was hard coded into the configuration.I attempted different variations of the port. Hard-coding 636, and leaving it blank.Ultimately, I decided to leave it blank, which means I need to add the port in the server connection string on osTicket LDAP-Auth plugin configuration. I successfully repacked the PHAR file and deployed it into the plugins directory.I removed the existing plugin from the page, restarted the webserver, re-added the plugin and attempted to configure it.Finally, when I set the configuration on the LDAP-Auth config page, I get an error HTTP 500 error.I'm attempting to check our error logs for more information, but the server doesn't have any entries for HTTP 500 errors. I'm able to see 200 GET entries, but no errors.That's what I've experienced for now - tried lots of things; any help would be greatly appreciated.



