ldap

Active Directory - Check username / password

I'm using the following code on Windows Vista Ultimate SP1 to query our active directory server to check the user name and password of a user on a domain. public Object IsAuthenticated() { String domainAndUsername = strDomain + "\\" + strUser; DirectoryEntry entry = new DirectoryEntry(_path, domainAndUsername, strPass); Sear...

How do I get a real name stored in Active Directory from an username with C#?

I want to create a quick application for people to resolve the name of a user stored in Active Directory from a set of credentials. Some applications only provide the user id and it is too much to expect an end user to fire up the Active Directory Users and Groups MMC snap-in. Input would be something like "MYCORP\a_user" and output wou...

Query AD from sql server 2005

I am attempting to query AD via ldap from within SQL Server 2005 but get the following error: Msg 7321, Level 16, State 2, Line 1 An error occurred while preparing the query "SELECT NAME,MAIL FROM "LDAP:///CN=foo,CN=Users,DC=bar,DC=com"" for execution against OLE DB provider "ADsDSOObject" for linked server "ADSI". This is after execut...

Using AD as authentication for Django

I'm working on a Django-based application in a corporate environment and would like to use the existing Active Directory system for authentication of users (so they don't get yet another login/password combo). I would also like to continue to use Django's user authorization / permission system to manage user capabilities. Does anyone h...

ldap vbscript : msExchOmaAdminWirelessEnable is randomly missing on different accounts

In my script: Function getDescript (strname, uname) Set MyUser = GetObject ("LDAP://cn=" & uname & ",ou=" & strname & ",DC=tms-1,DC=net") getDescript = myUser.Get("msExchOmaAdminWirelessEnable") End Function uname = "Bob Gardner" strname = "bgConsultants" WScript.Echo "wireless enable: " & getDescript(strname, uname) I have n...

Getting description field from Active Directory in MSSQL2005 (LDAP)

The only field i cannot grab is the 'description' field from our AD. The error is: Cannot get the data of the row from the OLE DB provider "ADsDSOObject" for linked server "ADSI". Could not convert the data value due to reasons other than sign mismatch or overflow. Is their some datatype i can use to handle the object it is trying to r...

LDAP won't update if cached data exists

We have an SELinux client that authenticates network users using LDAP connecting to an Active Directory server. Since our machines have to operate "untethered," we have to use nscd to cache group and passwd info. Here's the issue. If we change group information on the Active Directory server, then log in on the client, if a cache exists...

Why am I getting 'System.__ComObject' from my LDAP property?

I'll be the first to admit that this is cut and past programming. I've never looked at AD before, and really don't understand it. I suppose that's my next study... Anyways, This is some test code, which should display the expiry date -- either as something readable, or in ticks -- it doesn't matter. (It's a web form, which is running ...

How can I download a list of users from an LDAP server using Perl?

I want to upload a list of users from my work's LDAP server to upload into our wiki as a company directory. How can I download a list of users from an LDAP server using Perl? Thanks. ...

Apache/Tomcat - LDAP Authentication based on AD Group Membership

We currently have an Apache/Tomcat (5.5) application running and we're using the LDAP authentication feature (by configuring the realm) against a multi domain structure and it's working great. One thing we would like to do is limit access to users based on their membership on a specific group in AD. Basically, only users of GroupA will...

In Slapd, how do I deal with the "connection table full (64/64)" error?

I'm working on an application running on Windows servers which requires heavy use of LDAP. For now we are stuck with the slapd LDAP server on a Windows platform - it's not great but for various reasons we are stuck with this architecture. Our system scales with demand, so at peak times there will be more application servers. Each applic...

Reading ldap group member from c#

Hi I have this code to connect to Active Directory and get all the groups that exist, it works and returns all the groups in results : DirectoryEntry dirEnt = new DirectoryEntry(); using (DirectorySearcher srch = new DirectorySearcher(dirEnt, "(objectClass=Group)")) { srch.PageSize = 1000; S...

How can I work with Novell eDirectory services in J2SE?

How can I work with Novell eDirectory services in J2SE? Will JNDI work with eDirectory? What are some resources I can use to learn about whatever library or libraries you suggest? I just want to play around with retrieving information via LDAP for right now, and if I get things working the way I want, I will probably need to be able t...

How do I reset my LDAP password from Perl?

Hi all, My company, like everyone else's, requires password resets from time to time. This is all good and well for security's sake, but I'd like to explore the challenge of resetting it through a script (notably because we can't use our previous 25 passwords; Perl is much quicker about cycling through a list two-dozen deep than my fing...

c# against Active Directory over LDAP

I'm coding some c# against Active Directory and have tried endlessly to get this to work to no avail. The following code works and the code that follows it does not: The code below is using "WinNT://" + Environment.MachineName + ",Computer" to make the connection and works fine. DirectoryEntry localMachine = new DirectoryEntry ...

LDAP Query Distinct

Hi, is it possible to only list distinct values with an LDAP query? I am getting duplicates of users for some reason but I only want them to be reported once, thank you for your help. ...

What does the LDAP response tuple (97, []) mean?

I am using python-ldap to try to authenticate against an existing Active Directory, and when I use the following code: import ldap l = ldap.initialize('LDAP://example.com') m = l.simple_bind_s([email protected],password) I get the following back: print m (97, []) What does the 97 and empty list signify coming from a Microsoft Ac...

How do I restrict Apache/SVN access to specific users (ldap/file-based authentication)?

I have Apache/SVN running on Windows 2003 with authentication via LDAP/Active Directory and a flat-file. It's working great except that any LDAP user can access everything. I'd like to be able to limit SVN repos by user or group. Ideally, I'd get to something like this: <Location /svn/repo1> # restricted to ldap-user1, file-user1, o...

LDAP Query Failure due to single quote

Hi, I'm trying to find an employee in Active Directory using the following c# code: "Select userPrincipalName, ADsPath, Department, Mail, HomeMDB, cn, ssn FROM 'LDAP://" + DomainName + "' WHERE objectCategory = 'person' and sAMAccountName = '" + UserName.Replace("'", "''") + "'"; When I run this for an employee with a single quote...

Can Adobe AIR applications achieve SSO authentication against Active Directory?

I don't know much about AIR apps, but I like what I'm seeing so far. So now, I'm wondering if this type of app would make sense in the intranet at work. Before I invest time and effort into ramping up on AIR development, I would like to know: is it possible for an AIR app on Windows to do single sign-on authentication against Active...