ldap

Any examples of using Ruby net/ldap with sasl?

I am trying to bind to an Active Directoy server using Ruby Net::LDAP, like so: Net::LDAP.new(:host => "...", :port => "...", :encryption => :simple_tls, :auth => {:method => :sasl, ... But I'm not sure how to specify they username and password. I can't seem to find any examples of using sasl. How do I specify my credent...

OpenLDAP and SSL

I am having trouble trying to connect to a secure OpenLDAP server which I have set up. On running my LDAP client code java -Djavax.net.debug=ssl LDAPConnector I get the following exception trace (java version 1.6.0_17) trigger seeding of SecureRandom done seeding SecureRandom %% No cached client session *** ClientHello, TLSv1 RandomC...

Active Directoy LDAP - Lock User Account

What is the prefered way to lock an Active Directory account? int val = (int)directoryentry.Properties["userAccountControl"].Value; directoryentry.Properties["userAccountControl"].Value = val | 0x0010; vs. directoryentry.InvokeSet("IsAccountLocked", true); Is there a better way? ...

How do I use LDAP proxy user authentication from .net?

I have a .net web application that uses simple bind to query the LDAP. The application uses integrated windows authentication. Do you have any recommendations on which option to use to authenticate against the LDAP: 1. simple LDAP bind using the logged in user's credentials 2. simple LDAP bind using a service account created for the appl...

Best advice on which of these limited options might work on Google Chrome/Firefox Extensions

Sorry, I know it sounds subjective, but it's quite technical and specific. But any brainstorming is quite welcome and there may not be one right answer. So, I'm working on a new project that will involve various tools for Exchange Server 2007/2010, most of these tools would ideally be Firefox add-ons and now with Google Chrome having ...

LDAP bind error codes using ADSI in C#

I am binding to an ADAM instance from a C# client using the ADSI provider. When the bind fails I get a generic error condition back that indicates a failure. If I look at a network trace of the traffic I can see that the ADAM instance itself send extended error information back to my client indicating why this authentication has failed, ...

Active Directory on local server and intranet on external server.

I have a local Active Directory server and a external web server where my intranet is located. $ad = ldap_connect("ldap://ip-address") or die("Couldn't connect to AD!"); ldap_set_option($ad, LDAP_OPT_PROTOCOL_VERSION, 3); $bd = ldap_bind( $ad, "user@domain", "password") or die("Can't bind to server."); When I run this on a local web ...

How can I use active directory to assign permissions to a web application?

I have several web applications developed using PHP and would like to set these up to allow user authentication through active directory (specifically so that users can authenticate using their domain credentials). I am able to use LDAP to authenticate the user to a group that I have created, but am unsure how I can assign user permissi...

How to add an self defined attribute to ldap user?

Hi, I have created an attribute in LDAP using the following code. attrs.put("NUMERICOID", "1.3.6.1.4.1.42.2.27.4.2.3.1.1.9"); attrs.put("NAME", "myattribute"); attrs.put("DESC", "for JNDITutorial example only"); attrs.put("SYNTAX", "1.3.6.1.4.1.1466.115.121.1.15"); DirContext schema = cont...

Help choosing authentication method

I need to choose an authentication method for an application installed and integrated in customers environment. There are two types of environments - windows and linux/unix. Application is user based, no web stuff, pure Java. The requirement is to authenticate users which will use my application against customer provided user base. Meani...

check username and password vie ldap php

Hi all, I'm trying to connect to my AD server and check if username and password is correct when I'm trying to do that, It always tells me: Unable to bind to server: Invalid credentials My code is: $ldapconn = ldap_connect($adserver,$adport); $ldapbind = @ldap_bind($ldapconn,"$username","$password"); when I tried to set a username w...

Ldap query returns null result when deployed.

I'm using a very simple Ldap query in my asp.net mvc 2.0 site: String ldapPath = ConfigReader.LdapPath; String emailAddress = null; try { DirectorySearcher search = new DirectorySearcher(ConfigReader.LdapPath); search.Filter = String.Format("(&(objectClass=user)(objectCategory=perso...

Converting LDAP from Tomcat to GlassFish

Hi, I have a simple web-app that is developed in Netbeans(6.8) and works fine in Tomcat(6) using LDAP(Active Directory). I need to convert this to an EE (JSF2), so I am moving from Tomcat to GlassFish(v3). I have changed the web files to xhtml and configured the xml files. However, I cannot get the GlassFish LDAP configuration to a...

Good LDAP library for BlackBerry?

I am looking for nice Java LDAP library suitable for using on BlackBerry. There is some basic support for LDAP in BlackBerry Java SDK, however it is too basic and I would like to use direct TCP connections instead of MDS (MDS is the only transport option when using LDAP classes from standard BB SDK). Regarding features I basically want ...

C# and ldaps other than MSAD

Hi, is there a way for a c# application to interact via LDAP with Directory Servers like SUN's or Tivoli's ? If it's possible, any hints you can give me ? Thanks ...

Active Directory login - DirectoryEntry inconsistent exception

I need to validate the LDAP user by checking if there exists such a user name in the specified domain. For this I am using this code - DirectoryEntry entry = new DirectoryEntry("LDAP://" + strDomainController); DirectorySearcher searcher = new DirectorySearcher(entry); searcher.Filter = "SAMAccountName=" + strUserName; SearchResult res...

ldap query for group members

Hi Gods, I try to make an ldap query, to get a list from all my groups/members. I can't figure out how can i do this. All my try unsuccesfull. My "AD tree": mydomain.local/Mybusiness/Distribution Groups/ here are my groups I tried with somethin' like this: (objectCategory=user)(memberOf=CN=Distribution Groups,OU=Mybusiness,DC=mydomai...

Why does Spring Security's BindAuthenticator require read permissions for users?

Hi all, I'm currently implementing/configuring the LDAP authentication of a Java web application using Spring Security 3.0. I'm using Microsoft AD LDS as LDAP server and chose the Spring's BindAuthenticator. I found out that the authentication only works if the authenticated user is a member of the partition's Readers role. The BindAuth...

keeping OpenLDAP and Active Directory in sync (windows server 08R2)

I've got a Windows Server box running AD, and a CentOS box running OpenLDAP in a mixed windows Linux network and I want to keep the two in sync. Preferably using free software/just some configuration changes. anyone know how to make these 2 authentication systems play nice? any syncing would have to be done over SSL for security reasons....

How to setup a development Active Directory

Does anyone have any suggestions on how to setup a development environment for active directory? We are thinking of using development.contoso.com or something along those lines that is a completely separate envnironment from our production. This will be used for things like Dev SharePoint and possibly a Dev exchange server. Maybe even...