Hi, We are currently using Perl::LDAP for many years now and it was working really fine until a couple of days. We have 5 Windows 2000 active directory wich we acess with Perl::LDAP using bind. Now in three of those environnement we have the following error message when we try to bind to the AD :
"LDAP_STRONG_AUTH_REQUIRED
The server requires authentication be performed with a SASL mechanism"
Here is the perl code:
use Net::LDAP;
use Net::LDAP::Util('ldap_error_name','ldap_error_text');
$ldap = Net::LDAP->new(@ARGV[0]) or die "$@";
$mesg = $ldap->bind( dn => "cn=XXXXX,ou=XXXXX,DC=XXX,DC=XXX,DC=XXX",
password => 'PWD', version => "3");
if ($mesg->code) {
$msg = ldap_error_name($mesg->code)."
\n".ldap_error_text($mesg->code)." ".$mesg->mesg_id;
print $msg;
}
We are pretty sure that it is because of a change made in Active Directory
or on windows DCs but the problem is that we do not know wich change were
made. Sure we had a look at the GPO (Group Policy). We took all the GPO
from the working environnement and apply them on those who where not
working but the probleme persist.
We also had a look on the web but we can only find solution for
implementing SASL authencication wich of course we don't want. We just
want to find out witch configuration change we should make so that "bind"
work again on those environnement.
I would like to know if you have any idea of the problem or any clue to
help us find out.
Regards,
Pierre Ayotte
Conseiller en développement
Service Architecture et Infrastructure des technologies distribuées
Fédération des caisses Desjardins du Québec
Téléphone : 514 281-7000, poste 8095 ou 1 866 866-7000
[EMAIL PROTECTED]
« Faites bonne impression et imprimez seulement au besoin! »
Ce message est confidentiel, peut être protégé par le secret professionnel
et est réservé à l'usage exclusif du destinataire. Toute autre personne
est par les présentes avisée qu'il lui est strictement interdit de
diffuser, distribuer ou reproduire ce message. Si vous avez reçu cette
communication par erreur, veuillez la détruire immédiatement et en aviser
l'expéditeur. Merci.
<<image/gif>>
