LDAP config

[BeckeBauer]

Since my server does not support php8.1, I tried to run Kimai with Docker. My problem is that authentication fails. When I set up ldap (by mapping a local.yaml file) without ssl, I get the following error

app.ERROR: Laminas\Ldap\Exception\LdapException: 0x8 (Strong(er) authentication required; BindSimple: Transport encryption required.)

With ssl, the error is

app.ERROR: Laminas\Ldap\Exception\LdapException: 0x51 (Can't contact LDAP server; error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed (unable to get local issuer certificate))

I noticed these two lines in the docker-compose.yml

      # - ./ldap.conf:/etc/openldap/ldap.conf:z
      # - ./ROOT-CA.pem:/etc/ssl/certs/ROOT-CA.pem:z

I assume that I can map a certificate which might overcome the issue above - is there any documentation / example configuration (in particular, do I need to create a separate ldap.conf in addition to the local.yaml and which certificate should I map - I have a certificate from let's encrypt for the ldap-server but are not sure if this is meant as "root-ca")?

Any help / configuration example is appreciated

[BeckeBauer]

I found a workaround: After copying the root and chain certificate (as .crt) for my ldap-server to the container under /usr/local/share/ca-certificates, logging into the container as root docker exec -u root -t -i kimai2_kimai_1 /bin/bash and updating the ca certificates with update-ca-certificates, the error is gone and authentication works.