Background
A Learning Provider had recently upgraded their version of XoT and this had resulted in the AD authentication failing. They were unable to authenticate users and the old Bind credentials no longer worked. I believe they had overlaid XoT 2.0 onto XoT 1.9 but am not sure of this, and neither were they. The new install had detected the previous one and had accurately replicated the username and other credentials in the MySQL Database and also in the updated Management pages.
Solution
The solution in this case was to prefix the original Bind DN with the Domain Name (i.e. DOMAIN\user-name)
Resources
I have attached a test script which I use to test AD/LDAP configuration parameters. I'm sure it would be helpful if those more proficient than I with php could improve this, e.g. by adding additional diagnostics or improving the comments.
Notes
- There used to be some functionality with XoT for testing LDAP/AD installations. If it's still available it would be helpful to have some documentation for that here as well. The script provided here can be run straight from the htdocs area without needing to run XoT, so it will not pick up issues with the XoT Code.
- It would be good to hear of any cases where the test script runs OK but authentication still fails (e.g. because of local security settings)