PHP/LDAP and MS-Exchange

[Anon]

I've just built a clean Redhat 7.1 server with the stock Apache/PHP/MySQL/OpenLDAP. I'm trying to get my PHP to talk to our Exchange Server - and it doesn't work. It seems I can connect/bind okay, but the search fails.

When I tried using ldapsearch(1) to prove that my server could talk to the Exchange server I discovered that I need to specify the -x (disable SASL authentication) option.

My question is: how do I do the same thing via PHP? Here's the code I've been using:

$linkid = ldap_connect("ldap://flowers.aethos.co.uk/");
if (!$linkid) {
echo "ldap_connect() failed<br>";
}
else {
echo "ldap_connect() OK<br>";
}

if (!ldap_bind($linkid)) {
echo "ldap_bind() failed<br>";
}
else {
echo "ldap_bind() OK<br>";
}

$lres = ldap_search($linkid, "", "(sn=green)", array("sn", "dn"));
if ($lres) {
echo "No of entries found: " . ldap_count_entries($linkid, $lres) . "<br>";
}
else {
echo "ldap_search() failed<br>";
}

ldap_close($linkid);

The script output looks like this:
ldap_connect() OK
ldap_bind() OK

Warning: LDAP: Unable to perform the search: Protocol error in /var/www/html/licenses.php on line 39
ldap_search() failed

I expect its me being dumb, but I'm blowed if I can see where. Please help!

Thanks

-Bob

[Anon]

I think your problem is that you have null ("") as the base dn. Try a space (" ").

In your code, change the ldap_search line to look like this;

$lres = ldap_search($linkid, " ", "(sn=green)", array("sn", "dn"));

Here is some test code that worked for me on Exchange 5.5

<?php
$ds=ldap_connect("myserver.com");

if ($ds) {
$r=@ldap_bind($ds); // this is an anonymous bind
print ("Bind Status : ".ldap_error($ds)."<br>");
$sr=ldap_search($ds," ","attribute=value"); // eg> "sn=DeSilva"
$entry = ldap_first_entry($ds, $sr);

$attrs = ldap_get_attributes($ds, $entry);
for ($i=0; $i<$attrs["count"]; $i++){
$values = ldap_get_values($ds, $entry,$attrs[$i]);
echo $attrs[$i]." : ".$values[0]."<br>";
}
}

?>

[Anon]

Yup, that did it. Thanks. Why a space ? It must be something strangely Microsoft!!!

Thanks again.

-Bob

[Anon]

Yes this worked for me also Exchange Server 5.5 - wonder if this would work with Exchange 2000?

Thanks,

Dave