Active Directory fails on user validation

[ardico]

WITH THIS SCRIPT I'M ABLE TO CONNECT

---

PHP
function authenticate($user, $password) {
if(empty($user) || empty($password)) return false;

// active directory server
$ldap_host = "ldap.org.pt";

// active directory DN (base location of ldap search)
$ldap_dn = "DC=org,DC=pt";

// active directory user group name
$ldap_user_group = "Domain Users";

// active directory manager group name
$ldap_manager_group = "Domain Admins";

// domain, for purposes of constructing $user
$ldap_usr_dom = '@org.pt';

// connect to active directory
$ldap = ldap_connect($ldap_host);

// configure ldap params
ldap_set_option($ldap,LDAP_OPT_PROTOCOL_VERSION,3);
ldap_set_option($ldap,LDAP_OPT_REFERRALS,0);

// verify user and password
if($bind = @ldap_bind($ldap, $user.$ldap_usr_dom, $password)) {
    // valid
    // check presence in groups
    $filter = "(sAMAccountName=".$user.")";

    $attr = array("memberof","displayname", "mail", "telephonenumber", "thumbnailphoto");
    $result = ldap_search($ldap, $ldap_dn, $filter, $attr) or exit("Unable to search LDAP server");
    $entries = ldap_get_entries($ldap, $result);
    
    $displayName = $entries[0]['displayname'][0];

    if (!isset($entries[0]['mail'][0])) {
        $email = "";
    } else {
        $email = $entries[0]['mail'][0];
    }

    if (!isset($entries[0]['telephonenumber'][0])) {
        $telefone = "";
    } else {
        $telefone = $entries[0]['telephonenumber'][0];
    }
    //$telefone = $entries[0]['telephonenumber'][0];

    if (!isset($entries[0]['thumbnailphoto'][0])) {
        $thumbnailPhoto = "";
    } else {
        $thumbnailPhoto = $entries[0]['thumbnailphoto'][0];
    }

    ldap_unbind($ldap);

    // check groups
    $access = 0;

    foreach($entries[0]['memberof'] as $grps) {
        // is manager, break loop
        if(strpos($grps, $ldap_manager_group)) { $access = 2; break; }

        // is user
        if(strpos($grps, $ldap_user_group)) $access = 1;
    }

    $_SESSION['user'] = $user;
    $_SESSION['access'] = $access;
    $_SESSION['displayName'] = $displayName;
    $_SESSION['email'] = $email;
    $_SESSION['telefone'] = $telefone;
    $_SESSION['thumbnailPhoto'] = $thumbnailPhoto;

    return true;
         
} else {
    // invalid name or password
    return false;
}

}

authenticate('username','correct pw');

echo $_SESSION['email'] ;

ENDPHP

---

MY .ENV FILE:

LDAP_LOGGING=true
LDAP_OPT_PROTOCOL_VERSION=3
LDAP_OPT_REFERRALS=0
LDAP_HOST=ldap.org.pt
LDAP_USER_ATTRIBUTE=samaccountname
LDAP_USERNAME="cn=username,dc=org,dc=pt"
LDAP_PASSWORD=
LDAP_PORT=389
LDAP_BASE_DN="DC=org,DC=pt"
LDAP_SSL=false
LDAP_TLS=false

---

MY AUTH:

'providers' => [
    'ldap' => [
        'driver' => 'ldap',
        'model' => LdapRecord\Models\ActiveDirectory\User::class,
        'database' => [
            'model' => App\Models\User::class,
            'sync_passwords' => false,
            'sync_attributes' => [
                'name' => 'displayname',
                'username' => 'samaccountname',
                'email' => 'mail',
            ],
        ],
    ],
],

---

IN MY LOGIN CONTROLLER:

protected function credentials(Request $request)
{
    return [
        'samaccountname' => $request->username,
        'password' => $request->password,
    ];
}

public function username()
{
    return 'username';
}

---

I'M ASKING THE username AND password IN THE LOGIN BLADE

?????????????????

I'M NOT ABLE TO VALIDATE USER, WHY? WHAT IS WRONG?

---

LOG FILE:

[2022-02-18 10:19:08] local.ERROR: ldap_search(): Search: Operations error {"exception":"[object] (LdapRecord\LdapRecordException(code: 2): ldap_search(): Search: Operations error at D:\xampp\htdocs\asipxx\vendor\directorytree\ldaprecord\src\LdapRecordException.php:26)
[stacktrace]
#0 D:\xampp\htdocs\asipxx\vendor\directorytree\ldaprecord\src\HandlesConnection.php(184): LdapRecord\LdapRecordException::withDetailedError(Object(ErrorException), Object(LdapRecord\DetailedError))
#1 D:\xampp\htdocs\asipxx\vendor\directorytree\ldaprecord\src\Ldap.php(237): LdapRecord\Ldap->executeFailableOperation(Object(Closure))
#2 D:\xampp\htdocs\asipxx\vendor\directorytree\ldaprecord\src\Query\Builder.php(656): LdapRecord\Ldap->search('DC=org,DC=p...', '(&(objectclass=...', Array, false, 1)
#3 D:\xampp\htdocs\asipxx\vendor\directorytree\ldaprecord\src\Connection.php(394): LdapRecord\Query\Builder->LdapRecord\Query\{closure}(Object(LdapRecord\Ldap))
#4 D:\xampp\htdocs\asipxx\vendor\directorytree\ldaprecord\src\Connection.php(477): LdapRecord\Connection->runOperationCallback(Object(Closure))
#5 D:\xampp\htdocs\asipxx\vendor\directorytree\ldaprecord\src\Connection.php(455): LdapRecord\Connection->retry(Object(Closure))

[hrodrig1]

@ardico How did you figure this out? Could you share code?