Skip to main content
March 2, 2007
Question

cflogin and cfldap issue with passwords

  • March 2, 2007
  • 1 reply
  • 958 views
Hi everyone,

I am using CFlogin and cfldap to authenticate users and I am having a problem.

my cfldap query runs agains the server and uses the users username and password,

well some users use special characters and certain special characters cause this error:

An error has occured while trying to execute query :[LDAP: error code 1 - 00000000: LdapErr: DSID-0C090627, comment: In order to perform this operation a successful bind must be completed on the connection., data 0, vece�].

Any ideas?

Thanks

Luma
    This topic has been closed for replies.

    1 reply

    Participant
    February 20, 2009
    =======================================================
    SOLUTION / FIX / WORK-AROUND to
    ColdFusion <CFLDAP> exception DSID-0C090627

    ColdFusion version: "MX7"

    Assumption_01: ColdFusion server running on Windows-based operating system,
    (for me particularly, I am currently on a Windows-XP-Professional machine)

    Assumption_02: You are running your ColdFusion server as a DEVELOPER. Meaning you have logged onto your machine; you are doing research / development / experimentation ColdFusion as well as dealing with emails, etc.

    This means: LDAP will be dealing with Microsoft's "Active Directory"

    <cfldap
    name="ldap_Qry"
    action="QUERY"
    attributes="cn,department,memberof"
    start="dc=uconn,dc=edu"
    server="LDAP.MACHINE.ON.YOUR_NETWORK"
    username="#var_OperUser#@LDAP.MACHINE.ON.YOUR_NETWORK"
    password="#var_OperUserPassword#"
    filter="(&(objectclass=user)(sAMAccountName=#UCASE(var_target_UserId)#))"
    >

    note: the filter is whatever you are interested in.
    In my scenario, we were trying to figure out whether we could do away having to keep a USERS_TABLE in our database to do webApplication authentication and simply let Active_Directory do the authentication. Why have a seperate userId/Password pair for each and every webApplication on your intranet in addition to network security ?
    so #var_target_UserId#, for me was the input from a databasetable:[users.username]

    My educated guess on what the error means:
    * you have successfully reach the LDAP server
    * however before you will be allowed to perform your query, you need to provide authentication.
    * basically, LDAP server wants your username/password.

    So, if your MACHINE / NETWORK UserId is [johndoe],
    set #var_OperUser# to [johndoe]
    set #var_OperUserPassword# to MACHINE / NETWORK PASSWORD

    Speculation about PRODUCTION machines using LDAP query:
    Probably the PRODUCTION's machine UserId & Password would be used. This would allow the PRODUCTION machine to log onto the network, access databases and send out emails.