ldap_simple_bind_s

Syntax

  #include <ldap.h>
  
  int ldap_simple_bind_s (
     LDAP         *ld,
     const char   *dn,
     const char   *passwd);
  
  

Parameters

ld

(IN) Points to the handle for the LDAP session.

dn

(IN) Points to the distinguished name of the entry who is authenticating. For an anonymous authentication, set this parameter to NULL.

passwd

(IN) Points to the client's password. For an anonymous authentication, set this parameter to NULL.

Return Values

Remarks

By default, eDirectory does not accept clear text passwords. Make sure that the parameter for encrypted passwords is set to allow unencrypted passwords.

An anonymous bind to an eDirectory directory allows clients to access whatever the [Public] user has been granted access to. By default, this is just enough to allow the user to find an eDirectory server, match a distinguished name, and authenticate.

The LDAP_OPT_NETWORK_TIMEOUT option (set by calling ldap_set_option) enables you to set a timeout for the initial connection to a server. If no timeout is set, timeout depends upon the underlying socket timeout setting of the operating system.

Using the connection timeout, you can also specify multiple hosts separated by spaces in a bind call, then use a timeout to determine how long your application will wait for an initial response before attempting a connection to the next host in the list.

Passing NULL for the ld parameter of ldap_set_option sets this timeout as the default connection timeout for subsequent session handles created with ldap_init or ldapssl_init. To clear the timeout pass NULL for the invalue parameter of ldap_set_option.

A connection timeout will cause an LDAP_SERVER_DOWN error (81) "Can't contact LDAP server".

For sample code, see bind.c.

See Also

ldap_simple_bind, ldap_unbind, ldap_unbind_s, ldap_bind, ldap_bind_s