active-directory

quick way to retrieve user information active directory

Can anybody show me how to query user information from the active directory? I have code that works, but it's really slow. I'm using C#. This is the code i currently use: static void Main(string[] args) { SearchResultCollection sResults = null; try { //modify this line to include your domai...

Weird behaviour in IIS 7.0 - System.DirectoryServices

I am facing a weird issue in IIS 7.0: I have the following virtual directory in IIS: and only Windows Authentication mode is enabled on the virtual directory in IIS Now if I try to get associated DirectoryEntry for TestV/Folder/file.aspx in this manner: string vDir = @"/TestV/folder/file.aspx"; DirectoryEntry dir = new ...

c# against Active Directory over LDAP

I'm coding some c# against Active Directory and have tried endlessly to get this to work to no avail. The following code works and the code that follows it does not: The code below is using "WinNT://" + Environment.MachineName + ",Computer" to make the connection and works fine. DirectoryEntry localMachine = new DirectoryEntry ...

Microsoft Studio TFS proxy problems in a trusted domain

I have two domains. TFS 2008 is installed on DEV domain, proxy on PROD. There is two-way trust and both servers can authenticate users from both domains. TFS was working fine, and suddenly stopped. Looking at the logs there was a great deal of AD noise (Can't load global catalog, etc.). The trust between the domains (DEV and PROD) was ...

What does the LDAP response tuple (97, []) mean?

I am using python-ldap to try to authenticate against an existing Active Directory, and when I use the following code: import ldap l = ldap.initialize('LDAP://example.com') m = l.simple_bind_s([email protected],password) I get the following back: print m (97, []) What does the 97 and empty list signify coming from a Microsoft Ac...

How do I restrict Apache/SVN access to specific users (ldap/file-based authentication)?

I have Apache/SVN running on Windows 2003 with authentication via LDAP/Active Directory and a flat-file. It's working great except that any LDAP user can access everything. I'd like to be able to limit SVN repos by user or group. Ideally, I'd get to something like this: <Location /svn/repo1> # restricted to ldap-user1, file-user1, o...

Porting Active Directory Authentication to use SQL Membership Provider

I'm looking at moving my application from using active directory membership provider to using sql server provider. The main hiccup we are looking at is no being able to retrieve the user passwords from AD. Does anybody have any ideas? Anybody think I should just leave AD alone? ...

SQL 2005 Linked Server Query Periodically Failing

We have a database running on SQL 2005. One of the store procedure looks up a user's email address from Active Directory using a linked server. The call to the linked server occurs in a database function. I'm able to call is successfully from my Asp.Net application the first time, but periodically after that, it fails with the followi...

Integrated Windows Authentication

We're experiencing some really strange problems with Integrated Windows Authentication with IIS and I'm not sure if I can see a pattern or not. We have a DNS-Cname record called Fred. We have an IIS website with Fred set as the host header. When I connect to this site I get prompted with a credential challenge. I would expect my credent...

Extend LDAP Membership to append a prefix/sufix to the username

Our web applications are using LDAP Membership Provider to authenticate and register users in Active Directory. In order to allow users to provide usernames that exist in other applications, we need to add a prefix in its username and it should be as transparent and painless as possible. What I need is a way to extend the LDAP Membershi...

Can Adobe AIR applications achieve SSO authentication against Active Directory?

I don't know much about AIR apps, but I like what I'm seeing so far. So now, I'm wondering if this type of app would make sense in the intranet at work. Before I invest time and effort into ramping up on AIR development, I would like to know: is it possible for an AIR app on Windows to do single sign-on authentication against Active...

In active directory, what is mailNickname used for?

In active directory, should mailNickname always equal samaccountname? Or, should it always be equal to the mail property (minus the "@domain")? My reason for asking is that we have recently changed everyone's primary email address to the first.last form and we set the mail property to the same. But, do we also need to modify the mailNi...

Websphere single sign on from PHP site?

I need to provide SSO for a Webpshere portal. The authentication process needs to be handled by a PHP site (which itself should authenticate a user against an Active Directory via LDAP - think I have this bit covered though). I have been told I need to create an LTPA cookie. How would I go about doing this? What information need to be se...

Active Directory LDAP Query by sAMAccountName and Domain

How do you do a query of an LDAP store by sAMAccountName and Domain? What is the "domain" property named in Active Directory or LDAP terms? This is what I have for the filter so far. I'd like to be able to add in the domain: (&(objectCategory=Person)(sAMAccountName=BTYNDALL)) ...

Request a user's roles in AD when caller is not in domain

I would like to get a user's group memberships in an ActiveDirectory, without being in the domain. When I run this inside the domain, all is well. var context = new PrincipalContext(ContextType.Domain); var principal = UserPrincipal.FindByIdentity(context, IdentityType.Name, "administrator"); foreach (var authorizationGroup in principa...

Accessing active directory through a SSH tunnel?

I'm able to use putty to tunnel into my University network and connect to all the local servers in my university. I can also the university proxy to browse internet. I was wondering if there is any software that I can use, which will enable me to access the active directory files through the SSH tunnel remotely. ...

What's a good way to get started integrating ADFS with AzMan?

Does anyone know of any good screenscasts or documentation covering the integration Active Directory Federation Services (ADFS) with Authorization Manager (AzMan)? ...

Synchronize InterAction Distribution lists with AD Distribution Lists

We have a need to allow users to be email directly to a mailing list defined in InterAction. It seems that InterAction provides the ability to create these mailing lists, but you are only able to mail to them from within the InterAction client (web and windows). What we really need is for there to be a way to send an email to "inte...

Domain Users Can't Use Remote Desktop to Access Domain Controller

I have a room with (4) Windows 2003 x86_64 systems running over a LAN. The domain controller is running Active Directory, which is enforcing a global security policy. Admins are able to remote into the domain server. Domain users are not. Domain users are members of one group, the Domain Users group. Under the global policy the foll...

Get List of Users From Active Directory In A Given AD Group

I have code that searches for all users in a department: string Department = "Billing"; DirectorySearcher LdapSearcher = new DirectorySearcher(); LdapSearcher.PropertiesToLoad.Add("displayName"); LdapSearcher.PropertiesToLoad.Add("cn"); LdapSearcher.PropertiesToLoad.Add("department"); LdapSearcher.PropertiesToLoad.Add("title"); LdapSear...