ldap

Managed LDAP

Is there a managed API(C#) available for managing users and groups (CRUD operations) on Active Directory (AD) ? (edit) I will give some more info why I asked this here. I am participating in a project where employee data in flat files (multiple .dat files) are written to a folder during 1 night scheduled job. These .dat files must be co...

AD via LDAP - How can I return all ancestor groups from a query?

I am querying Active Directory via LDAP (from Java and PHP) to build a list of all groups that a user is a member of. This list must contain all least all groups (organizational-units optional) that contain groups the user is directly a member of. For example: User1 is a member of GroupA, GroupB, and GroupC. GroupA is a member of Group...

Storing Password Reset Questions in LDAP

I want to store answers to password reset questions in LDAP. I know that the answers should be hashed with a salt. I would like insight into the following: What attributeClass should we use? Is it possible to get the LDAP server to perform the hashing operations? Is there a way to use the LDAP compare operation if the container doesn't...

Communication Between MS 2003 CA Server and Client - Non active directory environment :Design Query

Hello I have a scenerio where the CA and its clients are not in an active directory environment(win2003 enterprise). They are located physically apart(different places). For example, *If the domain name is 'ExampleBank.org'* *The CA name is 'ca.ExampleBank.org' * *CA type is Enterprise Root CA (online) [windows 2003 enterprise ser...

LDAP and PHP

I am trying to connect to a secure LDAP server (using LDAPs) via PHP, but I am having problems with it. I get the following error Warning: ldap_bind() [function.ldap-bind]: Unable to bind to server: Can't contact LDAP server in /var/www/test.php on line 16 I works when I try to connect without LDAPs, but it is required that I use LDAP...

LDAP query for all users in sub OUs within a particular OU

The active directory I have to deal with is laid out as such: the domain contains many OUs. One of these OUs is named "Primary OU". Within this OU are several OUs named with location of global offices (ie "Chicago" "Paris"). Any user account that is an actual flesh and bone person is put into the OU named for the office they work in as...

Expected Loop error on VBScript for adding users into AD via csv

I need to add a bunch of users to an AD domain and obviously don't want to manually enter. I also don't want to use CSVDE because I want to add passwords in. I don't have much of a background with writing VBScripts so i found one on the internet from techrepublic. The problem is when I run the script I get an expected loop error and t...

How to get list of Departments in Active directory using C#

What is the easiest way to query the Active directory to get a strings list of departments names. Example: "Finance", "Marketing", "IT",etc. My case is an active directory for an enterprise with well over 3000 users. ...

How do I create a contact with LDAP and have it show up in the GAL?

I can create a contact that is not mail enabled, but how do I mail enable it and have it show up in the Global Address List? Is it just a matter of setting more attributes or is there something more involved. ...

How to get streetaddress property of an organizational unit in windows active directory with LDAP in C#.Net

Each of our users is assigned to a primary organizational unit (OU) based on which global office they are in. So the "Chicago" OU contains all the associates in our Chicago office. Using c# and .net 3.5, my task is to extract all of these users. Unless the users are in a satellite or home office, their street address, city, state, etc....

LDAP: How to search for a given uid across multiple organization units?

First off, let me start by saying that I am totally new to working with LDAP. I am working on an application that shares an LDAP server with a few legacy applications. All of the user accounts in the legacy application are organized into Organizational Units by IDs. Each entry has a uid that is the users email address. I can find ...

How to know if my DirectoryEntry is really connected to my LDAP directory ?

I'm connecting to a LDAP directory in C#, so I've used the DirectoryEntry class. When you do the "new DirectoryEntry" with address, login, and password it is supposed to connect to the LDAP directory. However, even if the connection didn't work, it returns without problem, and the directoryentry variable is set. So i do i know my conn...

How can I search for a user based on a Certificate in LDAP?

How do I search for a specific user object in LDAP that has an associated x509 certificate? Do I need to encode it in a certain way? It looks like the attribute is userCertificate based on looking at JXplorer. Note: Accessing Active Directory through LDAP ...

Adding LDAP entries using JNDI

I am trying to add an entry to an LDAP server using JNDI. I could successfully read the entries from the LDAP server. But when I try to add a new entry I am getting the errors. I checked various ways but I failed. private String getUserAttribs (String searchAttribValue) throws NamingException{ SearchControls ctls = new SearchContro...

How secure is your password in LDAP?

Is your password more secure in any way if it is stored on LDAP rather than a database or an encrypted file? ...

Ldap_bind() ERROR

Good day! How do we know that a LDAP server allows anonymous connections? When i run my php program: i get this error: Warning: ldap_bind() [function.ldap-bind]: Unable to bind to server: Can't contact LDAP server in /var/www/sue/ldapTest2.php on line 14 This is my simple sample test program: echo "<h3>LDAP query test</h3>"; ...

Anyway to check if a user account is locked via PHP/LDAP?

Hi, We've created an intranet site that requires the same password as the user's network login, so we use LDAP to check the username/password. That's fine, but if they enter it incorrectly three times it locks their account out, and one or two users have found this confusing. Is there anyway at all I could check, using LDAP/PHP whethe...

LDAP C SDK

Hi, I need to write a simple LDAP client in C. The only binary distributions I found are old and also lack SSL tools needed to implement an SLDAP connection. A complete and up to date distribution that I found is that of Mozilla however it is in source code format and I have not been able to compile it into binary form for windows. I ...

Getting all the users from LDAP

How can i get all the users from the LDAP using PHP. function getUsers() { $process = new process(); //ldap->s_Host('domain.com'); //$ldap->s_Domain('domain.com'); $process->s_Host('domain.com'); $process->s_Domain('domain.com'); $process->s_LdapSecure(false); if($process->LdapConn()){ ...

LDAP: using a filter to avoid a sub OU in Active Directory

I have an application that pulls user information from an OU in Active Directory. The parameters it takes are a base for the search and a filter string. I have an OU I want to pull information from, but there is a sub OU I want to avoid: Wanted: users from OU=People,DC=mydomain,DC=com Not Wanted: users from OU=Evil,OU=People,DC=my...