title: Does LDAP provide a token after binding, so I don't have to send credentials every time?
body: <p>I have a web application (PHP, but doesn't matter).  It uses LDAP for authentication (already working), and it allows users to search LDAP (already working).  </p>
  
  <p>But when searching, I use a generic process account to bind() and then run the search().  </p>
  
  <p>What I would like is to use the LDAP account that logs in to be the same account that binds for the searching.  But the only way I see to do that is to store the user's credentials in the sessions (bad!).</p>
  
  <p>Nutshell: can I get a "state/session/??" token from LDAP, to bind() and then search() on subsequent http requests?</p>
  
  <p>(btw, using Active Directory.)</p>