ldap

How to set user's privileges from LDAP via OpenDS

Hi, I have setup a simple LDAP server using OpenDS. I would like to set the user privileges and I have no idea how to do it. Am I supposed to achieved this by modifying the ACL? If yes, how do I go about doing it? Or is there any options in OpenDS that allows me to set the privileges?? Anyone advice or guide would be greatly appreciate...

InitialDirContext throws sometimes no AuthenticationException

This code snippet works for correct user/password combinations with the values I use to configure the properties, i.e. no exceptions are thrown/catched. When i provide an invalid user/password combination, I get an AuthenticationException as expected. However, on two other machines, I don't get any Exception for a wrong password combin...

LDAP or VBscript to list all real users in AD

Good morning all, Please can you help me with a LDAP query or VBscript to list all current users; real, flesh and blood people so it must exclude service accounts, administrator accounts and shared mailboxes. If you can help with this, it would be greatly appriciated. Kind regards, Justin ...

Mac OS Directory Services/LDAP user with local admin rights

I've have several network based users (Mac OS X Directory Services). Some of them need local admin rights on their Mac OS X Workstations (10.6.4). They should be able to install software and to change system settings. I added the users (i.e. /LDAPv3/server.domain.com/Users/harry) to the local (workstation's) admin group /Local/Default/G...

Manage special roles in ldap

I have a web-app configured with spring security which gets users and roles from an ldap tree. I have a dn ou=User,dc=application for users and, for role, ou=Groups,dc=application . Every role is an entry in the second subtree and the association is made by attribute member in role entry. Actually i have 5 different role access (ROLE_...

Perl function for negative integers using the 2's complement

I am trying to convert AD maxpwdAge (a 64-bit integer) into a number of days. According to Microsoft: Uses the IADs interface's Get method to retrieve the value of the domain's maxPwdAge attribute (line 5). Notice we use the Set keyword in VBScript to initialize the variable named objMaxPwdAge—the variable used to store the val...

What happens on the wire when a TLS / LDAP or TLS / HTTP connection is set up?

I'm rewording my question so hopefully I can get a better response. I asked a similar question on serverfault here, and think that a proper and valid TLS server is one that expects the "STARTTLS" command. Is it true that STARTTLS can be issued to a properly configured LDAP or HTTP TLS server without needing an extra port? I know tha...

doctrine2 ldap DBAL driver

Are there any plans for an LDAP DBAL driver for doctrine2? driver docs ...

AD LDS Context password Intermittently resetting

Using the DirectoryServices.AccountManagement library in C#, I am establishing a PrincipalContext, then using that context to validate users. It seems that the username with which I am establishing the context is being intermittently corrupted/reset or something else is going on causing the establishing of context to fail. After manu...

Do you need to be running under IIS to query Active Directory with PHP LDAP

Using PHP's LDAP support, I was curious if you need to be running under IIS in order to query the local Active Directory. Would you be able to query it if the server is running Apache instead? Also, could I query an Active Directory setup on another machine than the code is running on, or does it need to be done on that machine? ...

Intercepting an LDAP in order to gather statistics

We are looking at building an application that either proxies a standalone LDAP server or delegates to an embedded Java LDAP instance (ie: ApacheDS, OpenDS) in order to log requests and determine who is accessing which applications on our very large corporate network. My question is is there a good way to intercept an LDAP request and "...

How to find an user on a LDAP server

When trying to find an User on a LDAP Server, I get the following error "Unknown error (0x8000500c)" This is the code I'm using: PrincipalContext domainContext = new PrincipalContext(ContextType.Domain, "gandalf.intrafg"); UserPrincipal p = UserPrincipal.FindByIdentity(domainContext, IdentityType.SamAccountName, "Consultor1"); Indide...

openldap data files, what do they look like

from my slapd.conf file, i see where my data is stored. when I look into that data directory i see two kinds of files, one type are .bdb files which appear to be the data files as that is the extension defined in the config file. But, I also have a bunch of log files, which appear to be binary when I try to read them in vi. I'm not sure ...

Ruby Net:LDAP- NoMethodError for attributes that don't exist

I'm doing a simple Net:LDAP search and when I'm outputting an entry's attribute that may not exist for every entry, I get an error "NoMethodError: undefined method 'some_attribute'" Here is the code: require 'rubygems' require 'net/ldap' ldap = Net::LDAP.new ldap.host = 'ldap.example.com' ldap.port = 389 if ldap.bind filter = Net::L...

Configure OpenLDAP inside Unbuntu 10.04 server for svn user and group administration

After configuring apache2 and svn inside ubuntu 10.04 serve I'm pretending to install OpenLDAP to use LDAP protocol to configure and administrate users and groups with the svn repositories. However it seems that OpenLDAP recently went through some modifications and the Ubuntu offical documentation about OpenLDAP is out of date. I foun...

.Net's Directory Services throws a strange exception

Hi there, I have a small C# solution used to check users credentials. It works fine for two of my teammates, but on my PC I get an exception. The relevant code: PrincipalContext context = new PrincipalContext(ContextType.Domain); if (context.ValidateCredentials(System.Environment.UserDomainName + "\\" + usr, pwd)) return true; el...

Adding \000 to each char in a password string

Why would one do this. for ($i = 0; $i < $len; $i++) { $unicodepassword .= "{$passwd{$i}}\000"; } Context: This is a password set when creating or modifying a user in Active directory. We are rewriting some ancient code and nothing works without this. Making changes in our LDAP does not require this kind of "encoding". Also the r...

Setting LDAP authentication in IIS7 and Vista

Hello guys, I am quite new with IIS7 and still confuse on some configuration. Also, I am new with LDAP authentication. I have this ASP.Net project that needs LDAP authentication. The project and LDAP authentication are both currently running fine on a debug mode with VS2008, however, when I tried to deploy it on IIS7, the LDAP authent...

Connecting to OpenDS using System.DirectoryService

I have been trying to find some tutorials on how to connect to OpenDS using .NET's LDAP types to no avail. Can anyone point me to some articles/tutorials that have good samples on using OpenDS as a directory service and accessing and working with it using C#. This is what I have tried so far, but always get an invalid username/password ...

LDAP authentication via web.xml in Tomcat

Can someone show me a very simple example on implementing LDAP security on Tomcat 6, please? I know not much beyond deploying a war file and bouncing Tomcat server. Thanks in advance! ...