DeveloperNote.com

openssl pkcs12 -in ldaps.pfx -nocerts -nodes -out ldap.key
openssl pkcs12 -in ldaps.pfx -clcerts -nokeys -out ldap.crt

sudo nano /etc/nginx/nginx.conf

stream {

    upstream ldap_backend {
        server 192.168.0.123:389;
    }

    server {
        listen 12345;
        proxy_pass ldap_backend;
    }

    server {
        listen 12346 ssl;

        proxy_pass ldap_backend;

        ssl_certificate     /home/dmitriano/dev/ssl/ldap.crt;
        ssl_certificate_key /home/dmitriano/dev/ssl/ldap.key;

        # Optional:
        ssl_protocols TLSv1.2 TLSv1.3;
        ssl_ciphers HIGH:!aNULL:!MD5;
    }
}

export ad_ip="192.168.0.122"
export ad_user="administrator@my.local"
export ad_password="1234@abc"
 
export LDAPTLS_REQCERT=never
 
ldapsearch -H ldaps://$ad_ip:12346 -x -D $ad_user -w $ad_password -b "DC=my,DC=local" \
    -s sub -a always -z 1000 "(objectClass=user)" "serviceClassName" "serviceDNSName" "objectClass"