Adding user via PHP:LDAP

Question

I have this code:

function makeUser() {
    $info['cn'] = "Test User";
    $info['sn'] = "User";
    $info['mail'] = "test@localhost";
    $info['objectclass'][0] = "Person";
    $info['objectclass'][1] = "User";

    $info['userpassword'] = "{MD5}".base64_encode(pack("H*",md5('Password1!')));
    $info['useraccountcontrol'] = 512;

    var_dump(ldap_add($this->connection, "CN=Test User,OU=Users,DC=domain,DC=local", $info));
}

Which gives me this error:

Warning: ldap_add() [function.ldap-add]: Add: Server is unwilling to perform

When I leave out the $info['useraccountcontrol'] = 512; part, It adds the account, but it is disabled..

I get this from the logging on both servers:

Internal event: The LDAP server returned an error.

Additional Data Error value: 0000052D: SvcErr: DSID-031A11E5, problem 5003 (WILL_NOT_PERFORM), data 0

I work on:

Windows Server 2008 Active Directory (not R2) & Windows Server 2003
PHP 5.3.5
Normal LDAP connection, not LDAPS since I've given up on trying to get that work..

How can I get it like so, that the user is not disabled and does not have to change password when first logging in?

What does the LDAP server say in its logs about why it rejected your action? — Wrikken
– Wrikken, Commented Jul 17, 2011 at 20:46

BW67 · Accepted Answer · 2012-12-11 22:40:37Z

5

I had this problem too (even connecting over LDAPS). When I did it in three steps (first add the account, then set the password, then enable the account), it worked.

It may be that you can combine the first two or last two steps, but I didn't test this.

edited Dec 11, 2012 at 22:40

answered Dec 11, 2012 at 22:16

BW67

511 silver badge3 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Community · Accepted Answer · 2017-05-23 11:59:25Z

2

As far Active-directory is concerned the password is not in 'userpassword' but in 'unicodePwd', you've got an example in this other Stckoverflow question. And I think that you need to use LDAPS.

edited May 23, 2017 at 11:59

CommunityBot

11 silver badge

answered Jul 18, 2011 at 7:09

JPBlanc

73k17 gold badges137 silver badges180 bronze badges

2 Comments

Sander Over a year ago

It's indeed about using LDAPS, but setting up SSL was not a option. Figured a way around it by using the Windows COM function that sets the passwords and re-enables the account for me.

JPBlanc Over a year ago

You can add an answer whith the COM solution. I think you will have success, because the question regulary come back.

Collectives™ on Stack Overflow

Adding user via PHP:LDAP

2 Answers 2

Comments

2 Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

2 Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related