Clarification of the ldap_read command syntax:
If you just want to pull certain attributes from an object and you already know it's dn, the ldap_read command can do this as illustrated below. It will be less overhead than ldap_search.
The string base_dn which is normally used to set the top context for a recursive ldap_search is used slightly differently with this command. It is used to specify the actual object with the full dn. (Hopefully this saves someone else a couple hours trying this command out.)
$ds = ldap.myserver.com $dn = "cn=username,o=My Company, c=US"; $filter="(objectclass=*)"; $justthese = array("ou", "sn", "givenname", "mail"); $sr=ldap_read($ds, $dn, $filter, $justthese);
$entry = ldap_get_entries($ds, $sr);
echo $entry["mail"] . "is the email address of the cn your requested";
echo $entry["sn"] . "is the sn of the cn your requested";
This prints out the specified users mail and surname for example.