Article View: fj.net.ldap
Article #121LDAP authentication fails
From: Jörg Ellermann
Date: Thu, 02 Sep 2004 19:00
Date: Thu, 02 Sep 2004 19:00
63 lines
3145 bytes
3145 bytes
Hi
I'm trying to authenticate users via an OpenLDAP-Server (that I do not manage
myself). It's a simple PHP-script:
<?
$ldap_server = 'ldap.server.de';
$ldaprdn = 'uid=12345,ou=People,dc=server,dc=de';
$ldappass = 'passwort';
$ds = ldap_connect($ldap_server);
if ($ds) {
$r = ldap_bind($ds, $ldaprdn, $ldappass);
echo "Bind result is ".$r."<p>";
ldap_close($ds);
} else {
echo "<h4>Unable to connect to LDAP server</h4>";
}
?>
I'm always getting "Unable to bind to server: Invalid credentials" as a result.
ldap_search works perfectly, though.
The LDAP server gets its user's passwords from a Kerberos5 server.
But: if I am logged in as user 12345 on the same machine (Unix), I can
authenticate at the LDAP server with ldapwhoami:
OpenLDAP-Logfile (Login with ldapwhoami -W)
slapd[14320]: conn=1 fd=8 ACCEPT from IP=(Adresse) (IP=0.0.0.0:389)
slapd[14320]: conn=1 op=0 SRCH base="" scope=0 filter="(objectClass=*)"
slapd[14320]: conn=1 op=0 SRCH attr=supportedSASLMechanisms
slapd[14320]: conn=1 op=0 ENTRY dn=""
slapd[14320]: conn=1 op=0 RESULT tag=101 err=0 text=
slapd[14320]: conn=1 op=1 BIND dn="" method=163
slapd[14320]: conn=1 op=2 BIND dn="" method=163
slapd[14320]: conn=1 op=3 BIND dn="" method=163
slapd[14320]: SASL [conn=1] Error: unable to open Berkeley db /etc/sasldb2: No
such file or
directory
slapd[14320]: conn=1 op=3 BIND authcid="12345@SERVER.DE"
slapd[14320]: conn=1 op=3 BIND
dn="uid=12345,cn=server.de,ou=people,dc=server,dc=de" mech=G
SSAPI ssf=56
Login attempt with my Skript (from a different machine):
slapd[14320]: conn=3 fd=8 ACCEPT from IP=(Adresse) (IP=0.0.0.0:389)
slapd[14320]: conn=3 op=0 BIND dn="uid=12345,ou=People,dc=server,dc=de" method=128
slapd[14320]: conn=3 op=0 RESULT tag=97 err=49 text=
slapd[14320]: conn=3 op=1 SRCH base="ou=People,dc=server,dc=de" scope=2
filter="(uid=12345)"
slapd[14320]: conn=3 op=1 ENTRY dn="uid=12345,ou=People,dc=server,dc=de"
slapd[14320]: conn=3 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text=
slapd[14320]: conn=3 op=2 UNBIND
slapd[14320]: conn=3 fd=8 closed
Any ideas?
Thanks,
J�rg
Technical Details
Message-ID:
<ch7qj5$6ti$00$1@news.t-online.com>Path:
arc1-ca.pugleaf.net!g2news1.google.com!news2.google.com!news.maxwell.syr.edu!newsfeed.icl.net!newsfeed.freenet.de!newsfeed00.sul.t-online.de!newsmm00.sul.t-online.de!t-online.de!news.t-online.com!not-for-mailShow Full Headers
Complete Article Headers
X-Google-Thread: 103627,e32e9563de714062,start X-Google-Attributes: gid103627,public X-Google-Language: ENGLISH,ASCII Path: arc1-ca.pugleaf.net!g2news1.google.com!news2.google.com!news.maxwell.syr.edu!newsfeed.icl.net!newsfeed.freenet.de!newsfeed00.sul.t-online.de!newsmm00.sul.t-online.de!t-online.de!news.t-online.com!not-for-mail From: Jörg Ellermann <j.ellermann@tu-bs.de> Newsgroups: fj.net.ldap Subject: LDAP authentication fails Date: Thu, 02 Sep 2004 21:00:42 +0200 Organization: T-Online Lines: 63 Message-ID: <ch7qj5$6ti$00$1@news.t-online.com> Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 8bit X-Trace: news.t-online.com 1094151590 00 7090 FJiaX8ClH1h18Y3 040902 18:59:50 X-Complaints-To: usenet-abuse@t-online.de X-ID: ZN9NVUZE8eGZuP+rpWFpi5yU4k93JTfHYqWlcwTgZ-xJktvwr1JVE- User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.7.1) Gecko/20040707 X-Accept-Language: en, de