Hi,
The "basic" code I'm using is as follows.:
// Username used to connect to the server
$username = "administrator";
// Password of the user.
$password = "p@ssw0rd";
// Domain used to connect to.
$domain = "testdomain.com";
// Proper username to connect with.
$domain_username = "$username" . "@" . $domain;
// User directory. Such as all users are placed in
// the Users directory by default.
$user_dir = "CN=Users,DC=testdomain,DC=com";
// Either an IP or a domain.
$ldap_server = "192.168.1.100";
// Get a connection
$ldap_conn = ldap_connect($ldap_server);
// Set LDAP_OPT_PROTOCOL_VERSION to 3
ldap_set_option($ldap_conn, LDAP_OPT_PROTOCOL_VERSION, 3) or die ("Could not set LDAP Protocol version");
// Authenticate the user and link the resource_id with
// the authentication.
if($ldapbind = ldap_bind($ldap_conn, $domain_username, $password) == true)
{
// Setup the data that will be used to create the user
// This is in the form of a multi-dimensional
// array that will be passed to AD to insert.
$adduserAD["cn"] = "testuser";
$adduserAD["sn"] = "User";
$adduserAD["samaccountname"] = "testuser";
$adduserAD["objectClass"] = "user";
$adduserAD["displayname"] = "Test User";
$adduserAD["userPassword"] = "p@ssw0rd";
$adduserAD["userAccountControl"] = "512";
$base_dn = "cn=testuser,cn=Users,DC=testdomain,DC=com";
// Display some "waiting" text.
echo "Trying to add the user to the system ...<br>";
// Attempt to add the user with ldap_add()
if(ldap_add($ldap_conn, $base_dn, $adduserAD) == true)
{
// The user is added and should be ready to be logged
// in to the domain.
echo "User added!<br>";
}else{
// This error message will be displayed if the user
// was not able to be added to the AD structure.
echo "Sorry, the user was not added.<br>Error Number: ";
echo ldap_errno($ldap_conn) . "<br />Error Description: ";
echo ldap_error($ldap_conn) . "<br />";
}
}else{
echo "Could not bind to the server. Check the username/password.<br />";
echo "Server Response:"
// Error number.
. "<br />Error Number: " . ldap_errno($ldap_conn)
// Error description.
. "<br />Description: " . ldap_error($ldap_conn);
}
// Always make sure you close the server after
// your script is finished.
ldap_close($ldap_conn);
It doesn't seem to matter where I place the UAC code line, be it before or after account creation, or even if I try and make another script to modify the entry. I always get the same error.
