Home/ Questions/Q 35683
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-10T14:16:28+00:00

I have the following code: $bind = new COM(LDAP://CN=GroupName,OU=Groups,OU=Division,DC=company,DC=local); When I execute it from

  • 0

I have the following code:

$bind = new COM('LDAP://CN=GroupName,OU=Groups,OU=Division,DC=company,DC=local');

When I execute it from a command-prompt, it runs fine. When it runs under IIS/PHP/ISAPI, it barfs.

Fatal error: Uncaught exception 'com_exception' with message 'Failed to create COM object `LDAP://CN=...[cut]...,DC=local': An operations error occurred. ' in index.php Stack trace:   #0 index.php: com->com('LDAP://CN=...')   #1 {main} thrown

IIS is configured for Windows Authentication (no anonymous, no basic, no digest) and I am connecting as the same user as the command prompt. I cannot find any specific errors in the IIS logfiles or the eventlog.

The main purpose of this exercise is to refrain from keeping user credentials in my script and relying on IIS authentication to pass them through to the active directory. I understand that you can use LDAP to accomplish the same thing, but as far as I know credentials cannot be passed through.

Perhaps it is in some way related to the error I get when I try to port it to ASP. I get error 80072020 (which I’m currently looking up).

The event logs show nothing out of the ordinary. No warnings, no errors. Full security auditing is enabled (success and failure on every item in the security policy), and it shows successful Windows logons for every user I authenticate against the web page (which is expected.)

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Since you’re using Windows Authentication in IIS, you may have some security events in the Windows Event log. I would check the Event log for Security Events as well as Application Events and see if you’re hitting any sort of permissions issues.

    Also, since you’re basically just communicating to AD via LDAP…you might look into using the a native LDAP library for PHP rather than a COM.

    You’ll have to enable the extension probably in your php.ini. Worth looking at probably.

    • 0