the user in active directory can not bind to the domain using ldp.

we are running a win2003 domain. Using the ldp.exe tool, some users can be
bind, and some users can not be bind.The followwing is error message
"
domain = 'csclc.com'.}
Error <49>: ldap_bind_s() failed:invalid credential.
Server error: 80090304: LdapErr: DSID-0C090419, comment:
AcceptSecurityContext error, data 0, vece
". The username and password is correct.
Are there some configration in AD influnce user bind to the domain?
thanks

If you're working purely in LDAP, you're not going to have the benefit of the
kerberos integration, which means that you're going to have to supply BIND
credentials upon your request. By default, AD does not permit anonymous bind.


"Jame" wrote:

> we are running a win2003 domain. Using the ldp.exe tool, some users can be
> bind, and some users can not be bind.The followwing is error message
> "
> domain = 'csclc.com'.}
> Error <49>: ldap_bind_s() failed:invalid credential.
> Server error: 80090304: LdapErr: DSID-0C090419, comment:
> AcceptSecurityContext error, data 0, vece
> ". The username and password is correct.
> Are there some configration in AD influnce user bind to the domain?
> thanks
>

When using ldp.exe, did they specify credentials or use defaults (null)?

If they specified, what did they use for username? Did they specify the
domain checkbox? When the domain checkbox is checked, ldp.exe will do a
SASL bind which should do Kerberos or NTLM over the LDAP port.

If their account works in AD, you should be able to bind in ldp.exe.

Joe K.

"Jame" <Jame@discussions.microsoft.com> wrote in message
news:2063BD5D-4F9C-4AAE-9760-0638B9E20C29@microsoft.com...
> we are running a win2003 domain. Using the ldp.exe tool, some users can be
> bind, and some users can not be bind.The followwing is error message
> "
> domain = 'csclc.com'.}
> Error <49>: ldap_bind_s() failed:invalid credential.
> Server error: 80090304: LdapErr: DSID-0C090419, comment:
> AcceptSecurityContext error, data 0, vece
> ". The username and password is correct.
> Are there some configration in AD influnce user bind to the domain?
> thanks
>