I'm trying to convert this PHP code to query a Lotus Notes Ldap directory in Microsoft ASP $ldap_serveur = "ldapserver"; // Nom ou IP du serveur LDAP $ldap_port = 389; // Port de communications ldap (389 en standard) $ldap_base = "O=SI"; // Base de l'annuaire LDAP $conn_ldap=ldap_connect($ldap_serveur, $ldap_port); if ($conn...
Basically what I'm trying to do is, I have an ASP.Net web application that's using Forms Authentication with some custom code to link it to ActiveDirectory (very similar to how this works). However, whenever I query the domain controller for the users groups it only returns the groups that they're explicitly in and not subgroups (id est...
I'm trying to come up with a plan to allow users to auth with a MySQL database (many, actually) using LDAP. More specifically, ActiveDirectory. Database will likely be accessed through applications, not web. What are my options? EDIT: Okay. It seems that there is no "official" way to allow authentication on MySQL using LDAP. What othe...
How do you transform a upn name like "[email protected]" to the corresponding NT account name, which is frequently "EXAMPLE\user"? In the domains I'm familiar with, I can take the first part after the '@' sign, but I'm concerned that this is not guaranteed to be correct. Do I have to run an ldap query? Would it be a property on the use...
I was demonstrating my WPF application to a customer and he asked me if I have LDAP or can integrated with Active Directory (AD). My application has its own in-build user security and data access security. I use my security framework to authenticate and give rights on screen and data access. The client asked me if I could add or integra...
I've been asked to provide support for authenticating users against an Active Directory in our existing client server application. At the moment a user supplies a user name and password from a client machine, passed over the wire (encrypted) to our server process and matched against a user name/password stored in a database. Initiall...
I cannot query AD via SQL Server. I add the linked server referencing the active directory both via SQL (see below) and through the SSMS GUI but I cannot figure out the security issues. EXEC sp_addlinkedserver @server = 'ADSI', @srvproduct = 'Active Directory Services 2.5', @provider = 'ADSDSOObject', @datasrc = 'adsdatasource' ...
I am building a self-service group management web-app that will allow users to create and manage groups in our Active Directory under a particular OU. I have successfully written a PHP application that accomplishes most of this by binding as an admin user and creating new group objects in the appropriate OU, then adding and removing 'm...
Hi, I have this senario. We have an application server that contains a few web based applications that our users use. Our users and the groups are stored in an OpenLDAP database. Access to these applications are restricted depending on group. Now what I would like to do is that when the user hits the server (http://server/), a basic...
I want only a (faculty) group of users to be able to access a certain web page on my website. This page is only meant to be seen by faculty. Within active directory, we have a group called "faculty" Here is a snippet of code I have to authenticate users via ldap/active directory, but I want to only authenicate users that are within th...
I'm trying to programatically find out which distribution lists an address entry is a member of. I can do this using LDAP by accessing the memberof property. However, this requires administrative access. Outlook manages to display this information in its GAL view without having admin access. Is there a publicly exposed way of doing this?...
Given a username, how would I go about writing an LDAP query that will return all groups that the user is a member of? ...
adding more info on @serialhobbyist's request hi all. we're (= me and my colleagues) using PrincipalContext from System.DirectoryServices.AccountManagement to retrieve some authentication info (make sure a user belongs to a group etc). Important: our client is a service running as LocalSystem. this does not happen when we run in a normal...
Currently I authenticate users against some AD using the following code: DirectoryEntry entry = new DirectoryEntry(_path, username, pwd); try { // Bind to the native AdsObject to force authentication. Object obj = entry.NativeObject; DirectorySearcher search = new DirectorySearcher(entry) { Filter = "(sAMAccountName=" + us...
I have a good connection to AD. I can authenticate and check error messages from failed auths. The issue I'm having comes from trying to change the password. I have an LDAPContext established at this point (yes it is an SSL connection). The issue comes from not knowing what value to use in the "username" parameter. I've tried all varia...
I'm working on a CakePHP project and am currently building the user authentication part of it. The problem is that my authentication information (ie: the passwords) are not stored in my database -- the authentication source is LDAP but my question applies equally to any non-database source. It appears as though Cake only handles passwor...
HI, I am using LDAP which is installed in a solaris machine. To check the version of LDAP i go to /ldap and check the version installed as if it is version 5 then there is a directory of the name v5.0 and so on. After getting into the directory i check the directory structure. Can anybody tell me is there any shortest way or one liner t...
I'm using the search filter "(objectClass=user)" to find user objects, but of course it also returns computers because a computer also has user in its objectClass. How can I create a filter to only return objects users and not objects whos type inherits from user? ...
hi I want to be able to authenticate a user by using their domain UserId and Password. How can I do this, the default ASP.Net MVC application allows the user to register a userId and password and then log in. I dont want the user to be able to register, however he should be able to enter his windows domain userId and password and be au...
Hi Guys. I have the following code (C#): (Tweaked from: http://www.eggheadcafe.com/conversation.aspx?messageid=31766061&threadid=31766050) DirectorySearcher dseSearcher = new DirectorySearcher(); string rootDSE = dseSearcher.SearchRoot.Path; DirectoryEntry rootDE = new DirectoryEntry(rootDSE); stri...