php ldap questions

[XN85Turbo]

Ok lets see if I don't have to reinvent the wheel this time. I would like to search Windows 2003 ADS (ldap) to see if users are in groups and based on those groups do tasks.

I run;

Red Hat AS 3.4 (linux)
php 4.3.9
apache 1.3.33

Windows 2003 ADS (ldap)

question(s)

I noticed I have the following rpm installed : openldap-clients*

how do I configure --with-ldap do I have to put =dir which I am not sure where I should point it to.

Second some sample code how to connect to ldap and print out the groups and members.

Thanks for the help!

[id10t]

If you compile php from source and do ./configure --with-ldap it should find whatever ldap dev files it needs... assuming they are there.

[XN85Turbo]

Well I have it compiled and my phpinfo says it is enabled. I tried this code without success!

code:

<?php

$ldap_server = "ldap://server.domain.local";
$auth_user = "[e-mail]";
$auth_pass = "password";

// Set the base dn to search the entire directory.

$base_dn = "CN=Users, DC=domain, DC=local";

// Show only user persons
$filter = "(&(objectClass=user)(objectCategory=person)(cn=*))";

// Enable to show only users
// $filter = "(&(objectClass=user)(cn=$*))";

// Enable to show everything
// $filter = "(cn=*)";

// connect to server

if (!($connect=@ldap_connect($ldap_server))) {
die("Could not connect to ldap server");
}

// bind to server

if (!($bind=@ldap_bind($connect, $auth_user, $auth_pass))) {
die("Unable to bind to server");
}

//if (!($bind=@ldap_bind($connect))) {
// die("Unable to bind to server");
//}

// search active directory

if (!($search=@ldap_search($connect, $base_dn, $filter))) {
die("Unable to search ldap server");
}

$number_returned = ldap_count_entries($connect,$search);
$info = ldap_get_entries($connect, $search);

echo "The number of entries returned is ". $number_returned."<p>";

for ($i=0; $i<$info["count"]; $i++) {
echo "Name is: ". $info[$i]["name"][0]."<br>";
echo "Display name is: ". $info[$i]["displayname"][0]."<br>";
echo "Email is: ". $info[$i]["mail"][0]."<br>";
echo "Telephone number is: ". $info[$i]["telephonenumber"][0]."<p>";
}

?>

Now I keep seeing something about Windows 2003 LDAP with this variable:

ldap_set_option( $ldap_conn, LDAP_OPT_PROTOCOL_VERSION, 3 ) or
die ("Could not set LDAP Protocol version");

I am not sure where to place it and on the original code I keep getting "Could not connect to ldap server"

[Frenkieb]

I believe you have to set the option after the bind and before you perform the search.