active-directory

Oracle ODI / Java - Active Directory connection trouble

Hello ! I want Oracle Data Integrator 10.1.3 to be able to connect to Active Directory running on a Windows 2003. I'm using SnpsLdapDriver but so far I'm dead unable to make it work. I keep getting error 52e : Insufficient Credentials. I tried every possible possible way I could - locking my account numerous times- and just nothing bu...

How to determine if the currently logged-in user has been set to have roaming profile

How to determine if the currently logged-in user has been set to have roaming profile on the Domain Controller/AD machine. Environment = windows2003/2008 ...

Set Active Directory password hash to a SHA1 value?

I'm syncing users from an external system into ours. I need to set the user's password in our Active Directory. I am only provided SHA1's of the external user's passwords and setPassword will hash whatever I is input. Is setting the User's unicodePwd the actual hash field? If so, can I just set it to the provided hash? If not, how/...

Unexpected exception thrown when looking up user information

I have some code that is looking up group memberships from local groups on a machine. For each member, it tries to load some information about the user (eg. find a group and get the names of each of its members). The code: using (DirectoryEntry machine = new DirectoryEntry("WinNT://" + Environment.MachineName + ", Computer")) { usi...

How to obtain users from Active Directory using the Contact Selector control of InfoPath 2007?

We have a SharePoint2007 web site. There is an InfoPath form with the Contact Selector control (ActiveX) on it. When I open the control I see a list of Sharepoint users and groups. Is it possible to populate the control with users from Active Directory? Or maybe there is another control/solution to solve this issue? Thank you in advance...

websphere, 100% when authenticating against Active Directory.

Hi, I've got Websphere 6.0.29 setup to authenticate against Active Directory, but when I log in to my Webapp with a valid user the CPU goes to 100% and doesn't recover, if I log in with an invalid user, then I get a 403 as expected. There is no clues in the websphere logs. And I'm stumped as to what the next step should be. Can anyon...

Active Directory Login Problem

I have 2 users in my AD installation with the same CN CN=jack,CN=Users,DC=xyz,DC=com and CN=jack,OU=abc,DC=xyz,DC=com When I try to authenticate to the AD Server using the Apache Directory Studio client and give the following credentials User: jack Password: <password> the authentication fails. The following credentials work...

Creating user in active directory

I'm gonna build a webpart for creating user in active directory . For creating user account i use method like this : public string CreateUserAccount(string ldapPath, string userName, string userPassword) { try { string oGUID = string.Empty; string connectionPrefix = "LDAP://" + ldapPath; DirectoryEn...

LDAP: Enumerate Organizational Unit users

I'm trying to list all users located in an Organizational Unit within a domain using LDAP (DirectorySearcher class). The domain I'm connecting to isn't the current domain, and the OU I'm trying to look at is in a very deep path with some of the OU names repeated elsewhere, e.g.: MyDomain.LOCAL/MyCompany/Clients/Contoso/Financial Sit...

Where can I find some MVC User Administration Helpers for AD Users?

So I have an MVC 2 app that uses the Active Directory Membership Provider. Authentication works like a charm! Now I need to add some additional screens to allow the users to: Change their password Reset forgotten passwords (email a super secret link or something?) Conditionally add additional users (of course users of a certain role, a...

LDAP ModifyAttributes by email

I need to modify the attributes on an existing record in LDAP. It seems like the only way tI can get the record is by using a lookup with: ctx.modifyAttributes(CN=Joe blue,cn=user,DC=foo,DC=com" , mods); But I need to get it by email (or login for that matter). I have tried several variations but get a naming exception, for example: ...

Programmatically Lookup a User in SharePoint

I’ve encountered a situation where I need to be able to lookup a user by their active directory name. I’ve tried looking for the user in the SPSite.Users, SPSite.AllUsers and SPSite.SiteUsers properties, but the user isn’t guaranteed to be in any of those lists. For users who gain permission to the site via an active directory group th...

ActiveDirectoryMembershipProvider not accepting FQDN

We are trying to set up the ActiveDirectoryMemebershipProvider for an ASP.NET intranet application that is supposed to automatically sign the users into the application when it is accessed in the browser. However the browser is sending the FQDN (MYDOMAIN\some.user) to the server and the ActiveDirectoryMemebershipProvider seems not to b...

Username according to ASP.NET Windows auth doesn't match logon name in Active Directory

My colleague changed his user logon name in Active Directory today in order to match a new company policy for logon names. On his machine, the %username% environment variable now shows the new logon name. Our intranet, which uses Windows Authentication (NTLM) is still reporting his the old username (through Page.User.Identity.Name). I...

Create a user in Active Directory from an Infopath form.

Hi There, I've been searching the web for a while now and still can't seem to find anything useful on this topic. What I am trying to create is a button in my Infopath form that will create a user account in Active Directory. The code will need to pull through information stored in the fields of the Infopath form. I have chosen to us...

ldap_add: Invalid syntax

I'm trying to add an Active Directory record via PHP. The CN contains a apostrophe (single quote), and I'm trying to find the correct way to escape it. Things I've tried: $dn = "CN=Conan O'Brien,OU=test,DC=test"; ldap_add($link_id, $dn, $attributes); ldap_add($link_id, addslashes($dn), $attributes); ldap_add($link_id, str_replace("'", ...

Store Application Data in Active Directory

We're going to be moving lots of computers round in the fairly near future, and I thought I'd get all prepared by migrating all my application connection strings into one central location, so that I can update them in one fell swoop when the time comes. I thought: "I know, I'll store them in the Active Directory" Unfortunately, my know...

ldap: how to get a list of all domain names

I am a newbie with LDAP. I am trying to list all the NT Domain names. By NT Domain names I mean, the names of domains you would find on the LAN Network. You can observe this on windows xp machines when you try to log-on to that machine (i.e. the log-on dialog you get after hitting ctrl+alt+del). Usually we select the domain name in the l...

Windows authentication in Flex application

Hi, does anyone have an idea or developed before windows authentication through flex application. I know this maybe sounds silly, but could be very handy. :) I have a semi solution when user enters his/her AD username and password, and application send this data to web service which handles AD authentication, but this is one extra step...

DirectoryEntry.Invoke() throws error on "ChangePassword" call

DirectoryEntryObject.Invoke("ChangePassword", new object[] { oldPassword, newPassword } ); throws the following error: "System.Reflection.TargetInvocationException: Exception has been thrown by the target of an invocation. ---> System.Runtime.InteropServices.COMException (0x80020005): Type mismatch. (Exception from HRESULT:...