Using LDAP in PHP to get Active Directory info always returns Invalid credentials

Let me preface this question with, I am not a sys admin by any means.  I am a LAMP developer attempting to use PHP's LDAP extension to authenticate users of a PHP application against my client's Active Directory accounts.

Setup:
    Box 1:
        Windows 2003 running Apache 2.2 and PHP 5.2
    Box 2:
        Windows box running Active Directory

The sys admin send me a screenshot of the Active Directory tree.  My account was located on:
domain: area1.area2.local
ad host machine: box2

My account is in the Our Users -> Our Department -> Our Team folder.

$connection = ldap_connect('box2');    <------- works
ldap_bind($connection,'cn=billybob,ou=Our Users,ou=Our Department,ou=Our Team,dc=area1,dc=area2,dc=local','mypassword');    <------- throws 'Unable to bind to server: Invalid credentials'

Any ideas?  

mhmservicesAsked:
Who is Participating?

Improve company productivity with a Business Account.Sign Up

x
Advertise Here
 
Richard QuadlingConnect With a Mentor Senior Software DeveloperCommented:
I've only done a little playing with LDAP.

Here is the code I used as my first test.

I'm using this from the command line.


Usage :

ldap_search <username> <password> <searchElement> <seachValue>

e.g.

ldap_search RQuadling blahblahblah sn Q*

will use my credentials to look for all entities that have a SN (surname) element that starts with Q.




If you change LDAP_Server to the server name and DOMAIN to the domain.





<?php
$ds=ldap_connect('LDAP_Server.DOMAIN');  // must be a valid LDAP server!
$dn="DC=DOMAIN";
 
if ($ds)
	{ 
	$r=ldap_bind($ds, 'DOMAIN\\' . $argv[1], $argv[2]);
	$sr = ldap_search($ds, $dn, $argv[3] . '=' . $argv[4]);
 
	if (0 == $sr)
		{
		echo ldap_errno($ds), ':', ldap_error($ds), ':';
		}
	else
		{
		$info = ldap_get_entries($ds, $sr);
		print_r($info);
		}
 
	ldap_close($ds);
	var_dump($ds);
	}

Open in new window

0
 
Richard QuadlingSenior Software DeveloperCommented:
Can you take a look through the user notes on http://docs.php.net/ldap_bind

The code ...

if (ldap_set_option($ldapLink,LDAP_OPT_PROTOCOL_VERSION,3))
{
    echo "Using LDAP v3";
}else{
    echo "Failed to set version to protocol 3";
}

May be required for you as well as other settings.
0
 
mhmservicesAuthor Commented:
Thanks for the idea, but unfortunately that piece is already in our code.
0
 
Richard QuadlingSenior Software DeveloperCommented:
Are you sure the password is correct? Case sensitivity and all that.
0
 
mhmservicesAuthor Commented:
I am sure the info is correct because I am using it to login to the VPN.  Thanks for the shot though.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.