I have spent a week try to search AD with Net::LDAP, if I use simple authentication,it 
seems work fine.But I found this method sends the user's password over the network in 
plaintext, which is not secure enough for my needs.
Then I download the Authen::SASL::Cyrus module.But it don't work!

when my client send BIND request,the AD response with SASL_BIND_IN_PROGRESS,but the 
client don't continue the authentication.

By debug the scrpits,I found if I remove Net::LDAP::Bind::decode func's following 
statement:
      Net::LDAP::Bind
    43   $self->set_error(LDAP_DECODING_ERROR,"LDAP decode error"), return
    44        unless defined $resp;

Then the client restart the BIND request,AD response SASL_BIND_IN_PROGRESS, the client 
send BIND request,then AD response SUCCESS.

But when the Net::LDAP::bind call compelete, the connection was closed imediately.

Can anyone help me?

All the module I use:
 perl 5.8.0 for win32
 SASL 2.02
 Authen-SASL-Cyrus-0.07
 Cryus-sasl-2.15
 krb5-1.3.1


Reply via email to