Re: Bind() question for users in different OU's

[Chris R. <chr...@me...>]

Padraig Ryan <rya...@it...> wrote:
> Hi,
> 
> We're using MS AD to authenticate users for some of our web based apps
> using bind() where we get the user to enter their UID and Password on a
> web form and then perl uses this info coupled with the search base info
> from a config file to actually do the bind and authenticate the user.
> 
> Q. Is it possible to bind without knowing the particular ou that a user
> belongs to ?
> 
> For example we have one ou for staff and another for students yet we won;t
> know whether it's a staff member or a student logging in and so in our
> Perl we have to do 2 binds, one for each ou to actually authenticate.
> This slows up the whole process.
> 
> Any help appreciated. Thanks.

The usual procedure is for the app to connect to the directory, do a single
subtree search for the user (ie from some highish point in the directory),
and then do the bind.

Cheers,

Chris