From:	Graham Barr	Date:	Fri Aug 29 11:11:08 2008
Subject:	Re: Problem using LDAP

On Aug 28, 2008, at 2:26 PM, pierre.ayotte@desjardins.com wrote:
> We are currently using Perl::LDAP for many years now and it was  
> working really fine until a couple of days. We have 5 Windows 2000  
> active directory wich we acess with Perl::LDAP using bind. Now in  
> three of those environnement we have the following error message  
> when we try to bind to the AD :
>
>
> "LDAP_STRONG_AUTH_REQUIRED
> The server requires authentication be performed with a SASL mechanism"
>
> Here is the perl code:
>
> use Net::LDAP;
> use Net::LDAP::Util('ldap_error_name','ldap_error_text');
>
> $ldap = Net::LDAP->new(@ARGV[0]) or die "$@";
> $mesg = $ldap->bind( dn       =>  
> "cn=XXXXX,ou=XXXXX,DC=XXX,DC=XXX,DC=XXX", password => 'PWD',  
> version  => "3");

You are performing a simple bind, but it seems your AD now has a  
requirement that you use SASL binding.

you will need to change you bind to

   $mesg = $ldap->bind( dn       =>  
"cn=XXXXX,ou=XXXXX,DC=XXX,DC=XXX,DC=XXX",, sasl => $sasl, version => 3);

where $sasl is an Authen::SASL object.

Graham.