在PHP中利用LDAP通过活动目录（Active Directory）实现域用户登录验证的办法

 

1.代码实现

<?php

$user = $_POST ['name'];

$password = $_POST ['pwd'];

 

//设定域信息

$domain = 'a.com'; //设定域名

$basedn = 'dc=a,dc=com'; //如果域名为“b.a.com”,则此处为“dc=b,dc=a,dc=com”

 

$ad = ldap_connect ( "ldap://{$domain}" ) or die ( 'Could not connect to LDAP server.' );

ldap_set_option ( $ad, LDAP_OPT_PROTOCOL_VERSION, 3 );

ldap_set_option ( $ad, LDAP_OPT_REFERRALS, 0 );

@ldap_bind ( $ad, "{$user}@{$domain}", $password ) or die ( 'Authorization failed! Please check your username or password!' );

echo "Welcome ".$user;

?>

2. 一些有用的网站

adLDAP - LDAP Authentication with PHP for Active Directory

http://adldap.sourceforge.net/

PHP: LDAP Functions – Manual http://php.net/manual/en/ref.ldap.php

LDAP 目录协议函数库 http://etdep.yxnu.net/php_manu/group.php-25.htm

Apache Module mod_auth_ldap http://httpd.apache.org/docs/2.0/mod/mod_auth_ldap.html

LDAP Authentication (PHP) http://code.activestate.com/recipes/101525-ldap-authentication/

LDAP精华文章   http://www.chinaunix.net/jh/49/

转载于:https://blog.51cto.com/zhangchengchong/485403