MS Ldap - swinog

21 Feb 2008


      Hello Mailinglist
I have a small question I could not find out how to solve yet.
I am writing a small app which is build on PHP.
Goals are:
1) Authentication by Kerberos, on W2k3 attached.
This part works fine
2) I will be able to select Users from a LDAP query and Put it onto a 
separate table on a mysql db which makes these users to Administrators
3) Be able to delete the users from that database.
this part works
the rest of the app is not important here, but if someone interested I 
can show some stuff
now my problem is:
I want to do this following bind (partially censored)
################### CODE ##################
function getadusers()
{
    $krbuser=explode('@',$_SERVER[REMOTE_USER]);
    $ds = ldap_connect("domain.local");  // must be a valid LDAP server!
ldap_set_option($ds, LDAP_OPT_PROTOCOL_VERSION, 3);
     ldap_set_option($ad, LDAP_OPT_REFERRALS, 0);
     if ($ds) {
$r=ldap_bind($ds,"CN=Administrator,CN=Users,dc=Domain,dc=local","password");
$searchvalue=$_SERVER[REMOTE_USER];
    $sr=ldap_list($ds,"OU=Normale Benutzer,dc=Domain,dc=local","(CN=*)");
    $info = ldap_get_entries($ds, $sr);
    //echo ("<pre>".var_dump($info)."</pre>");
        //echo $entries[$i]["displayname"][0]."<br />";
ldap_close($ds);
    return($info);
} else {                                                          
    echo "<h4>Unable to connect to LDAP server</h4>";
}
}
################### End COde #################
This query is sometimes sooo slow i just give up and hit reload and even 
this does not work normally.
can someone help me by either optimizing this query, which should just 
give out a list of the sAMAccount names, within others? Or is it a 
setting on the LDAP Server? This is a standard LDAP Server from Active 
Directory, and the userlist is also small (10, 15 users)
Thank you if anyone has a clue
Silvan