Active Directory: ldap_simple_bind_s error codes

bekz

Hi All,

Is there any way to find out the exact error message in case of bind
failure.

After googling a bit i found two sol

1. ==> says to
use ldap_get_option() to get the error string and then parse and
extract the error codes. To my understanding this is an extended error
message
2. ==>
says to analyze few attributes like accountExpires/userAccountControl

which one of these is better? apart from considering that 2nd method
has to do another search and find out the error.

Thanks in advance
becks

Michael Ströder

bekz wrote:
>
> 1. ==> says to
> use ldap_get_option() to get the error string and then parse and
> extract the error codes. To my understanding this is an extended error
> message

You should do this in any case.

> 2. ==>
> says to analyze few attributes like accountExpires/userAccountControl

This could be an additional source for information what went wrong. But
these are proprietary attributes in AD. You may also not have the right
to read the user entry before binding.

Ciao, Michael.