ldap

Enable user account in Active Directory from Perl

How to enable user account in Active Directory from Perl if that account is disabled I am using NET::LDAP . How its not working UserAccountControl Attribute ...

LDAP query using Python: always no result

I am trying to use python to query LDAP server, and it always returns me no result. and anyone help me find what wrong with my python code? it runs fine without excpetions, and it always has no result. i played around with the filter like "cn=partofmyname" but just no luck. thanks for help import ldap try: l = ldap.open("server")...

Ubuntu 10.04 (Lucid) OpenLDAP invalid credentials issue

This won't be a question, but a solution to an infuriating problem on Ubuntu 10.04. If you tried to deploy an LDAP server using this distro following the tutorials below, you'll be on serious trouble. Tutorials: https://help.ubuntu.com/9.10/serverguide/C/openldap-server.html https://help.ubuntu.com/9.10/serverguide/C/samba-ldap.html The...

Semicolon in object variable name

There's a common LDAP attribute called userCertificate;binary. It actually has a semi-colon in the attribute name. In ruby, I turn an LDAP entry into a OpenStruct object called 'struct'. >> struct.class => OpenStruct But of course ruby thinks it's an end-of-line character. ?> struct.userCertificate;binary NameError: undefined loc...

How can I optimize my PowerShell - LDAP Query?

Hey guys, this one is out there for the PS gurus. I've created a script that reads from a CSV (or other dataset, but not posting that side) and creates users in my AD environment. Basically, whatever dataset is passed into the script will be processed, and then a user will be created if they do not exist. If the user exists in the AD al...

C#: Security / user rights for an application suite, ldap suitable?

We are developing a suite of windows applications for a client and need to add a security module. The basic needs are fairly simple: A function to return a list of permissions: string[] AllowedApplications = Security.GetList("Applications"); string[] AllowedMenusAndButtons = Security.GetList("Functions"); //In General: string[] Allowed...

Spring security LDAP compatible implementations

Hi, I've written a web applciation for a client in which authentication/authorization is done by spring security based on the 'internal' database. Now, the client has asked to switch to using their Active Directory instead. I'm a green as can be where LDAP is concerned but looking at the sample code and such it doesn't seem too difficul...

Authenticating from Java (Linux) to Active Directory using LDAP WITHOUT servername

Our developers use Java on Linux for various things (like checking membership of groups etc). It works - no problem with that! I'm not a developer so bare with me. The problem is that they have hardcoded the servernames of our Domain Controllers (LDAP-servers) in their code. So now when we need to replace them with newer DCs, they need ...

How do you query a LDAP from a web application for SSO?

Need to query an LDAP from a .NET app to create a single sign on scenario, is this feasible? ...

end Auth Adapter Ldap in 1.10.6 is not backward compatible

Zend Auth Adapter Ldap in 1.10.6 fails when using the same options ldap.server1.baseDn = "CN=Users,DC=webex,DC=local" (this is just one option) the exact same option works in the previous 1.5 or 1.6 versions if i change the above option to ldap.server1.baseDn = "DC=webex,DC=local" then it works but would always return Invalid Credent...

Django to do its own NTLM Authentication (HTTP Headers & all)

I'm considering moving from Apache to Lighttpd for an internal web application, written with python. The problem is that I'm relying on libapache2-mod-auth-ntlm-winbind ... which doesn't actually seem to be a well support & updated package (though that could be because it really does work well). I'm looking for suggestions and hints ab...

How to use Fast Bind to connect Ldap with Spring

Hello, I managed to connect to an ldap server using spring. I want to create an anonymous session and use fast bind for authentications. I'm not sure which properties I need to change to use fast bind ? (sample code will be great!) Thanks in advance! ...

Changing PHP plugin configuration ( LDAP )

I am running PHP (on Apache/Windows) and I am trying to connect to a LDAP server to authenticate users. PHP's LDAP plugin is just OpenLDAP. While I've been successful in connecting to the LDAP server without SSL, I can't do it WITH SSL. I know I got everything right, except OpenLDAP won't connect to the server without the CA certificate...

Paginate search results in an LDAP MembershipProvider by using the DirectorySearcher class

I have written an LDAP MembershipProvider and an LDAP RoleProvider for .NET, they are written in C# and I make use of the DirectorySearcher class in the System.DirectoryServices namespace. In the FindUsersByName- and FindUsersByEmail-methods in my MembershipProvider-implementation I want to paginate the result directly on the LDAP server...

LDAP Active directory authentication question

I am trying to authenticate users on my site with their LDAP credentials. However the bind to the active directory seems to require my credentials first before I can authenticate any other username/passwords. I don't want to hardcode my credentials in the application. Any suggestions? $self->authen->config( DRIVER => [ 'Authen::Simple...

Rejecting a push based on commiter name.

I've recently set up a mercurial repsoitory. All pusing is done via ssh. Currently only users with an LDAP account can push changes to the repository. However, given that when commiting to a local repository any commiter name can be used using the --user. It is possible to have the situation where a commiter name does not match the LDAP ...

Ruby/LDAP non-ASCII character support

It seems like LDAP requires strings with non-ASCII characters to be Base64 encoded. The way to tell it that a string is to be parsed as a base64 encoded string is to add an extra colon to the attribute name such that "cn: name" becomes "cn:: name" (according to this site). Now, my question is: How do I tell Ruby LDAP to do this? I could...

ldap_sasl_bind_s(GSSAPI) - What should be provided in the credentials BERVAL structure

Hi, I'm trying to use the ldap_sasl_bind_s method from the Microsoft LDAP C SDK, with GSSAPI as the authentication mechanism. ldap_sasl_bind_s expects the credentials as a BERVAL structure, which is opaque. Given a username (or a DN) and a password, how do I get to the BERVAL structure that I'm supposed to pass to ldap_sasl_bind_s? T...

Windows password Authentication with LDAP

I have a desktop application and i can get the domain username with authentication.getPrincipal().toString() code line.If the domain name and the user input matches exactly i granted all access to user .On the other hand , when the user types another username(which doesn't match the domain user name ) ,the programme checks the password i...

using service account as ldapManagerDN

I am using a "service account" for ldapManagerDN to do LDAP authentication for my Grails web app, and I have found the following problem: if the service account is set up (in Active Directory) to be able to log on to any machine, it is working fine, but if the service account is set up to be limited log on to just couple of machines, the...