สอบถามเรื่อง Login โดยการใช้ LDAP บาง Users ไม่สามารถ bind ได้

<?php
ob_start();
session_start();
//error_reporting(0);
?>

<?php

function ddd() {

    date_default_timezone_set("Asia/Bangkok");
    $currentdate = date('j/M/Y H:i:s');

    $user = $_REQUEST['username']; 
    $password = $_REQUEST['password'];

    $ldap_dn = "OU=xx, OU=xx, DC=xx, DC=xx, DC=local";
    $ldap_con = ldap_connect("xxxxxxxxxxxxxxxxxxxx");
    $ldap_user = $user.'@xxxxxxxxx';
    $ldap_password = $password;
    $ldap_bind = @ldap_bind($ldap_con, $ldap_user, $ldap_password);
    ldap_set_option($ldap_con, LDAP_OPT_PROTOCOL_VERSION, 3);
    ldap_set_option($ldap_con, LDAP_OPT_REFERRALS, 0 );

    if (!$ldap_bind){
        echo '<script language="javascript">';
        echo 'alert("Wrong username or password!! Please try again.")';
        echo '</script>';
        ldap_errno( $ldap_con );
        include("database_connect.php");
        $query = "INSERT INTO LoginLog (username, name, timelogin, status) VALUES (?, ?, ?, ?)";
        $params = array($user, 'unknow', $currentdate, 'failed, wrong password');
        if (sqlsrv_query($conn, $query, $params)) {  
           // echo "Statement executed.\n";  
            echo "<meta http-equiv='refresh' content='0;URL=pcipatching.php' />";
        } else {  
            echo "Error in statement execution.\n";  
            die(print_r(sqlsrv_errors(), true));  
            echo "<meta http-equiv='refresh' content='0;URL=pcipatching.php' />";
        }   
                //return $ldap;
        //echo "<meta http-equiv='refresh' content='0;URL=login_form.php?username=".$_REQUEST['username']."' />";
    //echo "invalid credential!!!";
        //die("<br><br>");
    }else if ($ldap_bind) {
        $filter = "(sAMAccountName=$user)";
        $result = ldap_search($ldap_con, $ldap_dn, $filter);
        $entries = ldap_get_entries($ldap_con, $result);

        for ($i=0; $i<$entries["count"]; $i++) {
            //echo "Authenticated<br>";
            //echo "<p>Welcome <strong> ". $entries[$i]["cn"][0] ."</strong><br /> Username: " . $entries[$i]["samaccountname"][0] ."<br>".$entries[$i]["memberof"][0]."</p>\n";
            $mail = $entries[$i]["mail"][0];
            $realname = $entries[$i]["cn"][0];

            foreach($entries[0]['memberof'] as $grps) {
              // is user
                if(strpos($grps, "group1") ) $access = 0;
                if(strpos($grps, "group2") ) $access = 1;
                if(strpos($grps, "group3") ) $access = 2;
                echo '<pre>';
                //var_dump($grps);
                echo '</pre>';
            }
        }

        if($access == 1) {
            echo "Access done<br>";
                // establish session variables
            $_SESSION['realname'] = $realname;
            $_SESSION['mail'] = $mail;
            $_SESSION['username'] = $user;
            $_SESSION['access'] = $access;
            echo $user."<br>";
            //echo $_SESSION['mail']; 
            //echo $_SESSION['access'];
            echo $realname."<br>";
            echo $currentdate."<br>";
            include("database_connect.php");
            $query = "INSERT INTO LoginLog (username, name, timelogin, status) VALUES (?, ?, ?, ?)";
            $params = array($user, $realname, $currentdate, 'success');

            if (sqlsrv_query($conn, $query, $params)) {  
                echo "Statement executed.\n";  
               // echo "<meta http-equiv='refresh' content='0;URL=pcipatching.php' />";
            } else {  
                echo "Error in statement execution.\n";  
                die(print_r(sqlsrv_errors(), true));  
            }   
            header("location: homepage.php");
                //return $ldap;
        }
        if($access == 2) {
            echo "Access done<br>";
                // establish session variables
            $_SESSION['realname'] = $realname;
            $_SESSION['mail'] = $mail;
            $_SESSION['username'] = $user;
            $_SESSION['access'] = $access;
            echo $user."<br>";
            //echo $_SESSION['mail']; 
            echo $_SESSION['access'];
            echo $realname."<br>";
            echo $currentdate."<br>";
            include("database_connect.php");
            $query = "INSERT INTO LoginLog (username, name, timelogin, status) VALUES (?, ?, ?, ?)";
            $params = array($user, $realname, $currentdate, 'success');

            if (sqlsrv_query($conn, $query, $params)) {  
                echo "Statement executed.\n";  
               // echo "<meta http-equiv='refresh' content='0;URL=pcipatching.php' />";
            } else {  
                echo "Error in statement execution.\n";  
                die(print_r(sqlsrv_errors(), true));  
            }   
            header("location: homepage.php");
                //return $ldap;
        } 
        if ($access <= 0) {
            echo '<script language="javascript">';
            echo 'alert("You have no permission to access this website!")';
            echo '</script>';
            include("database_connect.php");
            $query = "INSERT INTO LoginLog (username, name, timelogin, status) VALUES (?, ?, ?, ?)";
            $params = array($user, 'unknow', $currentdate, 'failed, no permission');

            if (sqlsrv_query($conn, $query, $params)) {  
                echo "Statement executed.\n";  
               // echo "<meta http-equiv='refresh' content='0;URL=pcipatching.php' />";
            } else {  
                echo "Error in statement execution.\n";  
                die(print_r(sqlsrv_errors(), true));  
            }   
                //return $ldap;
            echo "<meta http-equiv='refresh' content='0;URL=login_form.php?username=".$_REQUEST['username']."' />";

            //return false;
        }
    //ldap_close($ldap_con);

    }
}




ddd();


?>