ldap连接本地服务器问题

leave

原帖由 "hxlxsj" 发表：
在php文件中写入：
$ds=ldap_connect("localhost","389";
$r = ldap_bind($ds,"cn=abcd,o=myadmin","secret";
错误报告如下:
ldap_bind(): Unable to bind to server: Protocol error in  ...

难道是密码(s..........

LDAP_v2  _v3的错误

两种办法：
1。在你的php  ldap_bind之前加上下面的一段]
if (ldap_set_option($ds, LDAP_OPT_PROTOCOL_VERSION, 3)) {
    echo "Using LDAPv3"."<br />;";
} else {
    echo "Failed to set protocol version to 3"."<br />;";
}

2。在你的slapd.conf里面加上一句：allow bind_v2

hxlxsj

谢谢leave
我用您介绍的两种方法均试过，但仍有错误报告：
Unable to bind to server: Invalid credentials in ......

NetSnake

Fatal error: Call to undefined function: ldap_connect()
表示你的PHP没有将LDAP支持编译进去。
请检查一下PHP配制。

hxlxsj

谢谢NetSnake
我现在是在win2000下能连接openldap服务器，只是不能绑定，请指教！
我的问题在已经一个星期了，请各位高手帮帮忙！

hxlxsj

我在php ldap_bind之前加上下面的一段：
if (ldap_set_option($ds, LDAP_OPT_PROTOCOL_VERSION, 3)) {
echo "Using LDAPv3"."<br />;";
} else {
echo "Failed to set protocol version to 3"."<br />;";
}
能够通过，显示"Using LDAPv3".
但仍是错误信息：Unable to bind to server: Invalid credentials in...


我在slapd.conf中加入allow bind_v2后，openldap服务器起不来，显示为：
.......
bdb_db_init:Initializing BDB database
.\slapd.conf:line 80:allow line must appear prior to database definitions
.\slapd.conf:line 80:unknown feature bind_v3 in "allow <features>;" line
slapd shutdown:freeing system resources.

请高手们指点。谢谢
slapd stopped.
connections_destroy:nothing to destroy.

NetSnake

我记得PHP 4.x都不可以用LDAP v3的。
还有，很多系统都首先尝试使用匿名用户连接，你要看看slapd.conf里面关于访问权限的配制。

应该是你的slapd.conf配制不太合适，你可以把配制文件贴上来看看。

hxlxsj

谢谢,我的slapd.conf如下：
#
# See slapd.conf(5) for details on configuration options.
# This file should NOT be world readable.
#
ucdata-path        C:/openldap/ucdata
include                C:/openldap/etc/schema/core.schema

# Define global ACLs to disable default read access.

# Do not enable referrals until AFTER you have a working directory
# service AND an understanding of referrals.
#referral        ldap://root.openldap.org

pidfile                C:/openldap/var/run/slapd.pid
argsfile        C:/openldap/var/run/slapd.args

# Load dynamic backend modules:
# modulepath        C:/openldap/libexec/openldap
# moduleload        back_bdb.la
# moduleload        back_ldap.la
# moduleload        back_ldbm.la
# moduleload        back_passwd.la
# moduleload        back_shell.la

# Sample security restrictions
#        Require integrity protection (prevent hijacking)
#        Require 112-bit (3DES or better) encryption for updates
#        Require 63-bit encryption for simple bind
# security ssf=1 update_ssf=112 simple_bind=64

# Sample access control policy:
#        Root DSE: allow anyone to read it
#        Subschema (sub)entry DSE: allow anyone to read it
#        Other DSEs:
#                Allow self write access
#                Allow authenticated users read access
#                Allow anonymous users to authenticate
#        Directives needed to implement policy:
# access to dn.base="" by * read
# access to dn.base="cn=Subschema" by * read
# access to *
#        by self write
#        by users read
#        by anonymous auth
#
# if no access controls are present, the default policy
# allows anyone and everyone to read anything but restricts
# updates to rootdn.  (e.g., "access to * by * read"
#
# rootdn can always read and write EVERYTHING!

#######################################################################
# BDB database definitions
#######################################################################

database        bdb
suffix "dc=my-domain,dc=com"

rootdn "cn=Manager,dc=my-domain,dc=com"

# Cleartext passwords, especially for the rootdn, should
# be avoid.  See slappasswd( and slapd.conf(5) for details.
# Use of strong authentication encouraged.
#
rootpw secret
#
# The database directory MUST exist prior to running slapd AND
# should only be accessible by the slapd and slap tools.
# Mode 700 recommended.
#
directory        C:/openldap/var/openldap-data
#
# Indices to maintain
#
index objectClass eq
#
#index cn,sn,uid
#index default none

allow bind_v2

NetSnake

试试把allow bind_v2 放到args_file后面。
还有，你的错误提示怎么是allow bind_v3 ？

starxing

ldap_bind($ds,"cn=abcd,o=myadmin","secret";
的意思是用cn=adcd,o=myadmin绑定ds,
可是在你的slapd.conf中
是这个
suffix "dc=my-domain,dc=com"

rootdn "cn=Manager,dc=my-domain,dc=com"
你到底使用的那个呀！

pujing

问题解决了吗？如果解决了的话，怎么处理的，发上来看看。