[Auth_ldap] Can't authenticate against Win2003 Active Directory

[Chris Audley]

I'm trying to get auth_ldap to authenticate against an active directory,
but I'm not having any success.  Using a packet sniffer, I can see that
auth_ldap is binding to the directory with no problem and runs the
initial query to find the users entry.  The query returns one result,
however, when authldap tries to bind as the user, it uses DN=(null).

When I run the query using ldapsearch, I see the entry I'm looking for
with no problem.

Looking at the query result with Ethereal, the response has five
sections

    Lightweight Directory Access Protocol, Search Entry
        Distinguished Name: CN=Chris Audley, ....
    Lightweight Directory Access Protocol, Search Result Reference
    Lightweight Directory Access Protocol, Search Result Reference
    Lightweight Directory Access Protocol, Search Result Reference
    Lightweight Directory Access Protocol, Search Result
        Matched DN: (null)

The 'Search Entry' section of the response contains the correct DN for
the search and all of the attributes requested.  However, the 'Search
Result' contains the 'Matched DN: (null)' that I'm assuming results in
the attempt to bind to 'DN=(null)'.

The ldapsearch tools appears to use only the 'Search Entry' data and
works fine.  Is there anyway to make ldapauth work here?

Thanks
Chris