active-directory

what are the differences between ldap and active directory?

what are the differences between ldap and active directory? ...

How do I find out where login scripts live?

I am looking for a way (manual or progamatic) to find out where the user's activer directory login script is located. I can parse the results of "net user" to get the script name, but that doesn't tell me what file share the script lives on. ...

What are the minimum permissions for connectionUsername when using ActiveDirectoryMembershipProvider

I am writing an ASP.NET application using ActiveDirectoryMembershipProvider, similar to the scenario outlined here: http://channel9.msdn.com/wiki/securitywiki/aspnet2formsauthtoadrolesinadintranet/ As part of this setup, I configured ASP.NET Membership as follows: <membership defaultProvider="MyADMembershipProvider"> <providers> ...

Detect user logged on a computer using ASP.NET app.

Hi! I want to develop an ASP.NET application that can detect the user logged on a Window Domain. These credentials are going to be used to logging on the ASP.NET application. How can I do this? Thanks! ...

Appication Active Directory Support, what does it exactly mean?

I can check user in active directory, if he exist then I give him permission to open app window, but what if an application has many levels of permission? Do I create special groups of permission in active direcotry and check if user belongs to one of them? . Can application log in automaticaly, or there is always need to enter password?...

What is the best way to select attributes for all members of an AD LDAP group from PHP?

I need to select a number of attributes for all of the users in a particular group from a PHP application. I realize that I could query the 'member' attribute of the group to get the dn of every member and then make a separate LDAP query for the attributes of each member. I am hoping however, that there is a single query that I can perfo...

User editing own Active Directory data

How can I build a web page that allows a logged on user of a Windows 2003 domain change details of his account (probably just First Name, Surname, and Phone number)? ...

LD iisadmpwd - change expired password

Hi guys I need to be able to allow users to change their expired password using \iisadmpwd utility inside IIS It looks as though if your password is expired, you can't authenticate into AD and therefore can not change your password. What are my options? ...

Generic LDAP base for search?

I'm writing some C++/Win32 code to search for a user in an LDAP directory (really I need to validate a username/password is correct, and then verify group membership). I have the username, so I'm hoping something like the following will work: (&(objectCategory=person)(objectClass=user)(uid={username})) When I call ldap_search with thi...

Limit network connection with Active Directory

I have a small home network - several computers, one www/ftp server and active directory controller. Some of the hosts connect via WLAN, other with their ethernet cards. I was wondering if it is possible to limit Internet connectivity only for those computers and users which have AD account. For example when I log in into my local accoun...

Can MOSS 2007 integrate with multiple LDAP/AD stores?

Can MOSS integrate and get user profiles from multiple Active Directory and/or LDAP stores? I have seen from Integrating Microsoft SharePoint Server With Oracle Virtual Directory that there may be intermediary products that can help with this. It looks like Rohati has a solution as well, but is the out of the box without third party pr...

How do you integrate Active Directory into a .NET app using DDD?

How are you integrating Active Directory objects (users, groups, etc) into your DDD .NET app? What do your repositories look like and how are you handling LDAP sessions, transactions, and unit of work? Note that I'm not talking about simple authentication/authorization scenarios but rather when the AD objects are part of the core domain ...

LDAP Modeling Best Practices

I am very in tune with relational modeling but new to LDAP modeling and am looking for best practices for designing LDAP schemas. Would love to know what are the equivalents of third normal form and other practices in the world of LDAP? Links to white papers that expand on this subject are greatly appreciated. ...

Retrieving current Active Directory username from PHP

For a website on the Intranet with all the IE security settings setup. I want to retrieve the current AD username that the user is logged in with. I don't need to authenticate because I am assuming that the person on the computer has already gone through the process. Is this even possible? I've seen a lot of NTLM related stuff that sho...

Get User Account Status (Locked/Unlocked) from Active Directory on C-Sharp / C#

I need to find a way to check if an Active Directory UserAccount has his account locked or not. I've tried userAccountControl property in a Windows 2000 AD but that property does not change a byte when I force an account to get locked (by trying to log on to a workstation providing the wrong password for that specific user) And I can te...

Why aren't companies using LDAP as a central repository for other than users?

In every larger company I worked for they used LDAP as a way to access the central repository of user information, but very few have taken efforts to extend the schema to include objectClasses that aren't derived from inetOrgPerson. Microsoft's Active Directory makes extensive schema extensions but very few commercial products leverage ...

Looking for good FILETIME converter

In question Looking for Good CTIME/Unixtime converter I asked for a good web based CTIME (Seconds since Jan 1, 1970) time converter. (Usually a 32 bit signed integer). I needed a tool where I could enter a date, and get the CTIME equivalent. I was able to find one, once I realized that Unixtime is the other name for the format. Googl...

Detect user logged on a computer using Java

Hi! I want to develop an Java application that can detect the user logged on a Window Domain. These credentials are going to be used to logging on the Java application. How can I do this? Thanks! ...

Detect user logged on a computer using Java web app

Hi! I want to develop an Java application that can detect the user logged on a Window Domain. These credentials are going to be used to logging on the Java application running on Tomcat. How can I do this? I want to know the remote user accessing my web app. This user is logged on a active directory Thanks! ...

User Group and Role Management in .NET with Active Directory

I'm currently researching methods for storing user roles and permissions for .NET based projects. Some of these projects are web based, some are not. I'm currently struggling to find the best method to achieve what I'm looking for in a consistent, portable way across project types. Where I'm at, we're looking to leverage Active Director...