RE: [ActiveDir] AD Error Message

[Murray-Smith Tony CF CH]

Title: AD Error Message

Hi Guoben

 

By default anonymous access to Active Directory information is restricted.  It may be that you need to bind as an authenticated user.  If you want to allow anonymus access you need to grant READ permissions to the "Everyone" group on the relevant container(s).  You must grant it from the root of the directory down to the container(s) of interest.

 

I'm not familiar with Perl, but your ldap search seems to contain the right elements.  The only thing I can't see is the "attributes to return" element, but perhaps you have this somewhere else in your script?

 

Tony

www.activedir.org

-----Original Message-----
From: Guoben Li [mailto:[EMAIL PROTECTED]]
Sent: Donnerstag, 16. Mai 2002 01:51
To: [EMAIL PROTECTED]
Cc: Guoben Li
Subject: [ActiveDir] AD Error Message

Hi everybody,

  I am new to AD but have some experience in Perl LDAP programming.
Recently I wrote a Perl script using Net::LDAP module to access an AD
server.

  When running it passed the connection and anonymous bind successfully.
But when executing:

  $msg=$ldap->search(base => "OU=xxxxxx users,DC=win,DC=mycfo,DC=com",
                scope => 'sub',
                filter => "CN=guoben");
  $msg->code && die $msg->error;

  it printed out: 0000202B: RefErr: DSID-031006A4, data 0, 1 access points
                     ref 1: 'win.mycfo.com'
  and died.

  I searched quite a few web sites including support.microsoft.com but was unable
to find what the above message means.  In one web site I saw another developer
got the same message from running a Java/LDAP code with AD.  So I don't think
it is Perl LDAP specific.

  Thank you for any advice or suggestion.

Guoben Li
P.S.  1. Our AD admin gave me my
        dn: CN=guoben,OU=xxxxxx users,DC=win,DC=mycfo,DC=com
         2. My Perl script was running on a Unix rather than Windows box.