AD/LDAP Authentication Issues & Solutions

I'm setting up this Topic to provide a place to share experience and practice in configuring XoT to work with Active Directory using LDAP. In practice I have found that no two Institutions share exactly the same solutions, so please share your configuration issues and solutions with others using this Topic.

Background
A Learning Provider had recently upgraded their version of XoT and this had resulted in the AD authentication failing. They were unable to authenticate users and the old Bind credentials no longer worked. I believe they had overlaid XoT 2.0 onto XoT 1.9 but am not sure of this, and neither were they. The new install had detected the previous one and had accurately replicated the username and other credentials in the MySQL Database and also in the updated Management pages.
Solution
The solution in this case was to prefix the original Bind DN with the Domain Name (i.e. DOMAIN\user-name)
Resources
I have attached a test script which I use to test AD/LDAP configuration parameters. I'm sure it would be helpful if those more proficient than I with php could improve this, e.g. by adding additional diagnostics or improving the comments.
Notes

1. There used to be some functionality with XoT for testing LDAP/AD installations. If it's still available it would be helpful to have some documentation for that here as well. The script provided here can be run straight from the htdocs area without needing to run XoT, so it will not pick up issues with the XoT Code.


2. It would be good to hear of any cases where the test script runs OK but authentication still fails (e.g. because of local security settings)

Also have a look at this post:

www.xerte.org.uk/index.php?option=com_ku...emid=759&lang=en#112

Csn you rename the script to .txt and try to attach again?