Question

I am having a little trouble with my PHP LDAP login. My first bind is successful, but my second bind is not even if the credentials are correct. I tried using the credentials I use to the second bind in the first one to make sure it worked, and sure enough it can bind it at the first one. Why am I not being able to bind the second time?

<?php
// Define $myusername and $mypassword
$username=$_POST['username'];
$password=$_POST['password'];

// using ldap bind
$ldaprdn  = 'uid=MYUID,ou=special,ou=people,o=myo.com,dc=mydc,dc=com';     // ldap rdn or dn
$ldappass = 'PASSWORD';  // associated password

// connect to ldap server
$ldapconn = ldap_connect("ldaps://MYLDAPSERVER", ###)
    or die("Could not connect to LDAP server.");

if ($ldapconn) 
{
    // binding to ldap server
    $ldapbind = ldap_bind($ldapconn, $ldaprdn, $ldappass);

    // verify binding
    if ($ldapbind) 
    {
        $result = ldap_search($ldapconn, "ou=people,o=myo.com,dc=mydc,dc=com", "uid=$username");
        $info = ldap_get_entries($ldapconn, $result);
        $userdn = $info[0]["dn"];
        $count = $info["count"]; 
        ldap_unbind($ldapconn);

        if ($count == 1)
        {
            $ldapbinduser = ldap_bind($ldapconn, $userdn, $password);
            if ($ldapbinduser) 
            {
                echo "Sucess you made it all the way<br />";
            }
            else
            {
                echo "Invalid Login Details, please try again(1001)";
            }
        }
        else
        {
            echo "Invalid Login Details, please try again(1002)";
        }
    } 
    else 
    {
        echo "LDAP bind failed(1000)";
    }
}

Answer 1

Although its name might implicate something different, ldap_unbind() actually kills the connection handle so that the connection is not usable any more after an unbind. Remove the ldap_unbind() call from your code and everything should work as expected.