active-directory

How to access Active Directory using C++Builder?

I need to get a list of user names from Active Directory using C++Builder. I know I could shell out to batch file and run the csvde.exe command but surely there is a nicer way using a library or something, right? Are there any C++ libraries? (hopefully with examples?) Many thanks! -Dan ...

JNDI Add Users to Groups with ADS

We have been trying to add users to groups using JNDI. Our directory server is Active Directory on Windows 2003. We were able to create users and groups just fine. However, making these users part of any group is a problem. Here is what the code looks like (inspired by this): ModificationItem mod[] = new ModificationItem[1]; mod[0] = n...

DsMakeSpn Always Fails on Windows Server 2008

What could be the reason for consistent failure when calling DsMakeSpn? The error code is 87. Thanks in advance!! ...

WCF SSPI Failure with External Trust - Selective versus Domain wide

I'm having a problem at work in that our app which uses WCF for SSO is failing when using selective authentication for a domain trust when communicating with the other domain. This is on Server 2k8R2 machines, at a full 2k8R2 functional level for both of their domains (this is a test system, because we have a customer that wants to depl...

How to get list of groups the user is associated with in Azman?

Hi, I'm able to get the roles associated with the authenticated user but not the groups. Is there a way to get the groups WindowsIdentity userIdentity = HttpContext.Current.User.Identity as WindowsIdentity; AzAuthorizationStoreClass azManStore = new AzAuthorizationStoreClass(); string storeConnectionString = ConfigurationManager.Conn...

Get Active Directory connection through glassfish jndi resource

Hello, I'm trying to get an LDAP-Connection with the attributes provided by a glassfish custom-resource. My jndi settings: Resourcetype: javax.naming.directory.Directory Factory-Class: com.sun.jndi.ldap.LdapCtxFactory Parameters: java.naming.security.credentials = myPassword java.naming.security.principal = cn=ldapUser,ou=myOrganizat...

Are Rollbacks possible with Active Directory?

I have read a few articles about how to programmatically interacting with Active Directory. One question remains though, is it possible to rollback a transaction of some sort with Active Directory? I have read that it is not possible in a context which you have several domain controllers as they seem to update each other with an update ...

Is there a way in Java or a command-line util to obtain a Kerberos ticket for a service using the native SSPI API?

Hi there, I want to implement Single Sign On with Kerberos in Java and have successfully managed to create a ticket for the Service using the ticket from the Windows logon. Unfortunately, I can only create that ticket when the Registry Key "allowtgtsessionkey" is enabled. I am receiving an exception with the message "Identifier doesn't ...

Can Active Directory Authenticate a User Using an MD5 Hashed Password

Hi, Under normal circumstances to authenticate a user in AD, one sends AD the user's clear text password (using SSL, hopefully). For reasons that are out of my control, I only have an MD5 hash of the user's password. Is it possible to configure AD to authenticate users using this hash instead of the original password? Thank you ...

How to determine if a machine is running Active Directory

I would like to know from Java code if the machine that I'm on is running active directory or that it has active directory installed (e.g. service may be stopped). Is there a reliable registry key to inspect? This is specifically for Windows 2008. I found info on the web that mentions HKLM\SOFTWARE\Microsoft\MSDTC\Security\DomainControl...

Symfony user authentication using Active Directory

Is there a way to authenticate users in symfony apps using Active Directory? Can you please point out some documentation? edit What i need is to have a transparent login in my application. The user authenticates once at windows logon, then all applications should be accessed with the same credentials without being asked for the domain\...

Can I get the current user from Active Directory LDAP using a VBA ADO Connection?

Is there any way to retrieve the user ID of the currently logged in user from Active Directory services using LDAP over an ADODB connection in VBA? I have only seen examples of how to query additional information about a user by specifying the user name and password. In those examples the user name is generally retrieved using Environ("...

VBscript - Add list of computers to domain group

Hi, this is probably pretty simple, but I've got this text file containing a bunch of computernames that I want to add as members of a certain AD Group. Thing is, I don't know the CN or full path of the computer names, because the computers may lie on three different OUs in the Domain structure. So, I the code I've got so far is this (...

Active Directory integration for remove asp.net website

We provide a hosted web application for multiple companies. Now we see the need to provide the ability for uses to 'auto login' if the are already logged into/identified by their individual local domains. What would be the best solutions for this? Would it be to have a certificate associated to their local AD account that our web applica...

Certificate altered on import to current user store?

ENVIRONMENT: In an active directory environment we are using ActivClient to copy a digital signing certificate from a smart card to the current user store upon smart card insertion. The smart card certificate is equipped only with digital signature, non-repudiation purposes. PROBLEM: After the certificate is copied from the smart car...

How to set property value through an attribute tag name using reflection ?

I wish to write a reusable library for querying against AD with LDAP. I'm using both ActiveDs COM objects and System.DirectoryServices. Greatly inspired by Bart de Smet LINQ to AD, I have written a SchemaAttribute and an DirectoryAttributeAttribute classes to use with a DirectorySource(Of T) class (Yes, it's VBNET, but any C# code will ...

How To Resolve ForeignSecrityPrincipals in your Active Directory to Obtain LDAP Information from Another Domain?

I am enumerating members of groups in our Active Directory. This goes well until I come across users from another domain, who are referenced with DNs like CN=S-1-5-21-3579272529-3368358661-2280984729-14762,CN=ForeignSecrityPrincipals, DC=example,DC=com. Typically, I look for a solution in VBscript and then translate that into the appro...

How to use a logged in person's credentials to search Active Directory?

I have a web app (.NET 3.5) which is sending notifications by email to users. In order to do this, I search Active Directory to find each person's email. At the moment, I am hardcoding my own username and password like so in order to search AD: Dim entry As New DirectoryEntry("LDAP://companyad", "myUsername", "myPassword", Authenti...

Recommend a local LDAP store for development

Our project uses an LDAP repository for storing users. In production this will be Active Directory. For development, we seem to have a couple of options: Install an AD LDS instance that everyone uses Install an AD LDS instance on every developer machine We're trying to keep the 'F5' experience as lightweight as possible, so installin...

No Environ("password") for Active Directory User Binding?

I want to reuse the Windows authentication to bind to the Active Directory user and check group membership. I can get the Windows username with Environ("username"), but how do I get the password? I don't want to have to require the user to reenter their password, but there is no Environ("password"). How do I make this code work? Thank...