Davide Bianchi <davide <at> walterisookeensufferukker.nl> writes: >>>>I don't know what the extra '?cn?sub' at the end of the query string is for >Heeemmmm... sorry (not enough coffee in my bloodstream), that is the >attribute that is returned Hmm, so what Apache does is first of all bind to the directory server, then do a search using the query string which returns the 'cn' (common name). Finally it constructs a distinguished name using this value of 'cn' and the password supplied by the user. Is that so? Is there a way I can test that the Active Directory server allows you to bind giving a DN and password? I had really expected that Apache would just pass through the username entered by the user. That seems much simpler. -- Ed Avis <eda@xxxxxxxxxxxxx> --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx