/srv/phabricator/libphutil/src/auth/PhutilLDAPAuthAdapter.php
if ($this->shouldBindWithoutIdentity()) {
$distinguished_name = null; $search_query = null; foreach ($this->searchAttributes as $attribute) { $search_query = $this->formatLDAPAttributeSearch( $attribute, $login_user); $record = $this->searchLDAPForRecord($search_query); if ($record) { ** /*there should be return $record;*/** $distinguished_name = $this->readLDAPData($record, 'dn'); break; } } if ($distinguished_name === null) { throw new PhutilAuthCredentialException(); } } else { $search_query = $this->formatLDAPAttributeSearch( head($this->searchAttributes), $login_user); if ($this->activeDirectoryDomain) { $distinguished_name = ldap_sprintf( '%s@%Q', $login_user, $this->activeDirectoryDomain); } else { $distinguished_name = ldap_sprintf( '%Q,%Q', $search_query, $this->baseDistinguishedName); } } $this->bindLDAP($conn, $distinguished_name, $login_pass); $result = $this->searchLDAPForRecord($search_query); ** /*why search again*/**