Cflogin and cfldap issue with passwords

Question

Hi everyone,
I am using CFlogin and cfldap to authenticate users and I am
having a problem.
my cfldap query runs agains the server and uses the users
username and password,
well some users use special characters and certain special
characters cause this error:
An error has occured while trying to execute query :[LDAP:
error code 1 - 00000000: LdapErr: DSID-0C090627, comment: In order
to perform this operation a successful bind must be completed on
the connection., data 0, vece�].
Any ideas?
Thanks
Luma

Answer 1

=======================================================
SOLUTION / FIX / WORK-AROUND to
ColdFusion <CFLDAP> exception DSID-0C090627
ColdFusion version: "MX7"
Assumption_01: ColdFusion server running on Windows-based
operating system,
(for me particularly, I am currently on a
Windows-XP-Professional machine)
Assumption_02: You are running your ColdFusion server as a
DEVELOPER. Meaning you have logged onto your machine; you are doing
research / development / experimentation ColdFusion as well as
dealing with emails, etc.
This means: LDAP will be dealing with Microsoft's "Active
Directory"
<cfldap
name="ldap_Qry"
action="QUERY"
attributes="cn,department,memberof"
start="dc=uconn,dc=edu"
server="LDAP.MACHINE.ON.YOUR_NETWORK"
username="[email protected]_NETWORK"
password="#var_OperUserPassword#"
filter="(&(objectclass=user)(sAMAccountName=#UCASE(var_target_UserId)#))"
>
note: the filter is whatever you are interested in.
In my scenario, we were trying to figure out whether we could
do away having to keep a USERS_TABLE in our database to do
webApplication authentication and simply let Active_Directory do
the authentication. Why have a seperate userId/Password pair for
each and every webApplication on your intranet in addition to
network security ?
so #var_target_UserId#, for me was the input from a
databasetable:[users.username]
My educated guess on what the error means:
* you have successfully reach the LDAP server
* however before you will be allowed to perform your query,
you need to provide authentication.
* basically, LDAP server wants your username/password.
So, if your MACHINE / NETWORK UserId is [johndoe],
set #var_OperUser# to [johndoe]
set #var_OperUserPassword# to MACHINE / NETWORK PASSWORD
Speculation about PRODUCTION machines using LDAP query:
Probably the PRODUCTION's machine UserId & Password would
be used. This would allow the PRODUCTION machine to log onto the
network, access databases and send out emails.