CODEWITHSUNDEEP
zend-frameworkauthenticationldap
matt
matt

Reputation: 25

Zend_Auth_Adapter_Ldap account canonical form problem

I've been testing authentication against an LDAP server using Zend's LDAP authentication adapter (Zend_Auth_Adapter_Ldap). I have been able to successfully authenticate with the following options:

"host" => "localhost",
"port" => "389",
"useStartTls" => "false",
"bindRequiresDn" => "false",
"baseDn" => "OU=foo,DC=bar,DC=com",
"accountDomainName" => "foobar.com",
"accountDomainNameShort" => "FOOBAR",
"accountCanonicalForm"   => "4"

However, I have been running into some problems with the accountCanonicalForm option.

Of the 3 different account canonical forms I have been testing with (2, 3, 4), I have only been able to successfully authenticate with a value of 3 or 4. Changing solely the accountCanonicalForm value in the LDAP server options to 2 makes the server spit back an "Invalid Credentials" error.

Here's a link giving a better explanation of what I'm talking about:

Bottom line is that I would like to know why it doesn't successfully authenticate with 2 as the accountCanonicalForm.

Upvotes: 1

Views: 1033

Answers (1)

Phil
Phil

Reputation: 164733

Have a look in the options here

Values are as follows: 2 for traditional username style names (e.g., alice), 3 for backslash-style names (e.g., FOO\alice) or 4 for principal style usernames (e.g., [email protected]).

Your directory obviously does not work with traditional username styles.

Upvotes: 2

Related Questions