[SOLVED] LDAP Auth to Zimbra from Different Server PHP

[undertoe]

I am looking to authenticate off of zimbra via PHP ldap functions. I am having some issues and not able to authenticate. I am doing this on the same network but from a different server.

server name is : zwm.otelconsulting.com
email: bleto@otelconsulting.com
domain on zimbra for email: otelconsulting.com

Can anyone give me some direction, or maybe ldap search command to test to see if i can do it via command line on the server.

MY CODE:

$ldap['user']      = 'bleto@otelconsulting.com';

$ldap['pass']      = 'test111';

$ldap['host']      = 'zwm.otelconsulting.com';

$ldap['port']      = 389;

$ldap['dn']= 'uid='.$ldap['user'].',ou=people,dc=otelconsulting,dc=com';

$ldap['base']      = '';

// connecting to ldap
$ldap['conn'] = ldap_connect( $ldap['host'], $ldap['port'] );
ldap_set_option($ldap['conn'], LDAP_OPT_PROTOCOL_VERSION, 3);

// binding to ldap
$ldap['bind'] = ldap_bind( $ldap['conn'], $ldap['dn'], $ldap['pass'] );

if ($ldap['bind']) {
  echo "LDAP bind successful...";
} else {
	echo 'no bind';
}

[undertoe]

Anyone? This is driving me insane

[uxbod]

uid should not have the domain name after it eg. uid=bleto,ou=people,dc=otelconsulting,dc=com

[undertoe]

Yeah i tried both, still no go. Does it matter that I am connecting to zimbra from a different server?

Uxbod i knew you would come to my resuce thanks for responding so quickly!

[uxbod]

Try with ldapsearch

ldapsearch -x -H ldap://zimbraserver:389 -D "uid=bleto,ou=people,dc=otelconsulting,dc=com" -W -b "ou=people,dc=otelconsulting,dc=com"

[undertoe]

ldap_bind: Invalid credentials (49)

[uxbod]

Are you only using Zimbra authentication or is Zimbra configured to use say Active Directory ?

[undertoe]

in verbose mode:

ldap_initialize( ldap://zwm.otelconsulting.com:389 )
Enter LDAP Password:
ldap_bind: Invalid credentials (49)

me and ldap are not friends right now

[undertoe]

its configured to auth against an AS400 with fall back auth. Damn i created another domain and authed against it just fine. So is that the problem

Anyway to do the domain that is auth'd against the AS400 through the zimbra server. Cause some users have as400 users names and some don;t and it uses zimbra for the auth cridentianls?

I am retarded when it comes to ldap and how it works.

[uxbod]

Bug 50248 - RFE: GAL Search w/ external authentication