PHP导出ldap,如何使用PHP从LDAP目录获取用户列表？

$ldaphost = "my_host_name";

$ds=ldap_connect($ldaphost) or die("Could not connect to $ldaphost");

ldap_set_option ($ds, LDAP_OPT_REFERRALS, 0);

ldap_set_option ($ds, LDAP_OPT_PROTOCOL_VERSION, 3);

if ($ds)

{

$basedn = 'my_dc_string';

$samaccountname = 'my_user_name';

$filters = "(samaccountname={$samaccountname})";

$result = ldap_search($ds, $basedn, $filters);

}

如何使用PHP从LDAP获取所有用户的列表？上面的代码在ldap_search函数上失败,发出此警告

“警告：ldap_search()：搜索：操作错误”

我的用户名,ldaphost等是正确的.我不确定过滤器.

/**

* Get a list of users from Active Directory.

*/

$ldap_password = 'PASSWORD';

$ldap_username = 'USERNAME@DOMAIN';

$ldap_connection = ldap_connect(HOSTNAME);

if (FALSE === $ldap_connection){

// Uh-oh, something is wrong...

}

// We have to set this option for the version of Active Directory we are using.

ldap_set_option($ldap_connection, LDAP_OPT_PROTOCOL_VERSION, 3) or die('Unable to set LDAP protocol version');

ldap_set_option($ldap_connection, LDAP_OPT_REFERRALS, 0); // We need this for doing an LDAP search.

if (TRUE === ldap_bind($ldap_connection, $ldap_username, $ldap_password)){

$ldap_base_dn = 'DC=XXXX,DC=XXXX';

$search_filter = '(&(objectCategory=person)(samaccountname=*))';

$attributes = array();

$attributes[] = 'givenname';

$attributes[] = 'mail';

$attributes[] = 'samaccountname';

$attributes[] = 'sn';

$result = ldap_search($ldap_connection, $ldap_base_dn, $search_filter, $attributes);

if (FALSE !== $result){

$entries = ldap_get_entries($ldap_connection, $result);

for ($x=0; $x

if (!empty($entries[$x]['givenname'][0]) &&

!empty($entries[$x]['mail'][0]) &&

!empty($entries[$x]['samaccountname'][0]) &&

!empty($entries[$x]['sn'][0]) &&

'Shop' !== $entries[$x]['sn'][0] &&

'Account' !== $entries[$x]['sn'][0]){

$ad_users[strtoupper(trim($entries[$x]['samaccountname'][0]))] = array('email' => strtolower(trim($entries[$x]['mail'][0])),'first_name' => trim($entries[$x]['givenname'][0]),'last_name' => trim($entries[$x]['sn'][0]));

}

}

}

ldap_unbind($ldap_connection); // Clean up after ourselves.

}

$message .= "Retrieved ". count($ad_users) ." Active Directory users\n";