ldap

LDAP: Enumerate Organizational Unit users

I'm trying to list all users located in an Organizational Unit within a domain using LDAP (DirectorySearcher class). The domain I'm connecting to isn't the current domain, and the OU I'm trying to look at is in a very deep path with some of the OU names repeated elsewhere, e.g.: MyDomain.LOCAL/MyCompany/Clients/Contoso/Financial Sit...

DirContext Search for non - ascii value using wildcard .

Hi All , I am trying to validate a object in LDAP(IBM TDS) which has some attribute defined with non-ascii value , with wildcard search . The following piece of code fails . String[] attrIDs = {"emailid"}; SearchControls ctls = new SearchControls(); ctls.setReturningObjFlag(true); ctls.setSearchScope(SearchControls.O...

LDAP ModifyAttributes by email

I need to modify the attributes on an existing record in LDAP. It seems like the only way tI can get the record is by using a lookup with: ctx.modifyAttributes(CN=Joe blue,cn=user,DC=foo,DC=com" , mods); But I need to get it by email (or login for that matter). I have tried several variations but get a naming exception, for example: ...

Using LDAP Server on top of our database to allow iPhone / Blackberry Access

We have ASP.NET contact database running on SQL Server. We're not interested in syncing contacts (for a variety of reasons), but exploring using the LDAP connectors in the iPhone/Blackberry to allow users to see their database contacts on their mobile devices. Is this idea feasible? I've never played around with LDAP before... Are ther...

LDAP vs SQL database for user authentication/user data storage

Hello SO, I am starting to use cakePHP for the first time with a hobby project. It looks like cakePHP supports LDAP easily enough as well as any DB. If the project goes well, I am thinking of letting the general public use the site, which means that there will (potentially) be a lot of users (a lot is relative, I guess, I'd be shocked...

ActiveDirectoryMembershipProvider not accepting FQDN

We are trying to set up the ActiveDirectoryMemebershipProvider for an ASP.NET intranet application that is supposed to automatically sign the users into the application when it is accessed in the browser. However the browser is sending the FQDN (MYDOMAIN\some.user) to the server and the ActiveDirectoryMemebershipProvider seems not to b...

Spring LDAP 1.3.0 clarify

I have this error, what does it mean? org.springframework.ldap.NameNotFoundException: [LDAP: error code 32 - 0000208D: NameErr: DSID-031001A8, problem 2001 (NO_OBJECT), data 0, best match of: '' ]; nested exception is javax.naming.NameNotFoundException: [LDAP: error code 32 - 0000208D: NameErr: DSID-031001A8, problem 2001 (NO_OBJECT...

LDAP for Application Access Control, how much should it control?

A precursor: I've worked now in two enviroments with conflicting principals on this. I am outlining the competing ideas and would like to know which is 'correct' given the scenario described. Scenario: Multiple applications exist on our intranet. We are implementing OpenSSO with LDAP as our authentication control and user directory. The...

LDAP: Can't Bind for successful connection

I am trying to test a connection to AD using OpenLDAP and this is what I try on the commandline: /usr/bin/ldapsearch -h names.myorg.com \ -p 389 \ -D "cn=conapps readonly,cn=users,dc=myorg,dc=com" \ -LLL \ -x \ -b "ou=MyOrg Staff,ou=People,dc=myorg,dc=com" \ -s sub "(objectClass=*)" DN sn givenName mail userPrinc...

ldap_add: Invalid syntax

I'm trying to add an Active Directory record via PHP. The CN contains a apostrophe (single quote), and I'm trying to find the correct way to escape it. Things I've tried: $dn = "CN=Conan O'Brien,OU=test,DC=test"; ldap_add($link_id, $dn, $attributes); ldap_add($link_id, addslashes($dn), $attributes); ldap_add($link_id, str_replace("'", ...

ldap: how to get a list of all domain names

I am a newbie with LDAP. I am trying to list all the NT Domain names. By NT Domain names I mean, the names of domains you would find on the LAN Network. You can observe this on windows xp machines when you try to log-on to that machine (i.e. the log-on dialog you get after hitting ctrl+alt+del). Usually we select the domain name in the l...

Using Web Service to authenticate on LDAP

Hi there, Since it' apparently not possible to authenticate with LDAP on my BlackBerry App, I'm trying to use a kind of workaround. Instead of authenticate directly on the LDAP Server, I want to use a Web Service in between. So it looks like this App --calls--> Web Service --calls--> LDAP Server So the Web Service should take th...

LDAP: ldap.SIZELIMIT_EXCEEDED

I am getting an ldap.SIZELIMIT_EXCEEDED error when I run this code: import ldap url = 'ldap://<domain>:389' binddn = 'cn=<username> readonly,cn=users,dc=tnc,dc=org' password = '<password>' conn = ldap.initialize(url) conn.simple_bind_s(binddn,password) base_dn = "ou=People,dc=tnc,dc=org" filter = '(objectClass=*)' attrs = ['sn'] con...

LDAP Authentication using DirectoryEntry

We use to authenticate user on AD using the following DirectoryEntry constructor: new DirectoryEntry(path, domainName + "\\" + UserName, Password); It use to work fine until the Domain Controller was changed. Now to make it work we have to use: new DirectoryEntry(path, UserName, Password); Can anyone please explain difference and...

secure web application questions

I am implementing a web application which is powered on the backend via a soap server/client interaction. The web site is running over https and authentication is being provided by LDAP. As of now I push all users without a cookie, call it 'userHash' for reference to the login page. The login page accepts a username, pass and checks...

Use of DC in ldap queries

I've inherited some code that queries AD for an AD group's "subgroups". I've added a subgroup and am testing the code. The following query results in a record with my account's info even though I am not in the subgroup, along with the 4 records of the group's 4 subgroups. Can anyone tell my why the following query would include the resul...

spring ldap pooling oracle (OID-Ldap) not supported?

i try to do pooling through PoolingContextSource http://static.springsource.org/spring-ldap/site/reference/html/pooling.html and get below error? does oracle(oid) ldap support pooling? java.lang.UnsupportedOperationException: Not supported for this implementation at org.springframework.ldap.pool.factory.PoolingContextSource.getCon...

How to configure OpenLDAP Proxy/Cache to cache all queries

Ok, this is an OpenLDAP newby question so bear with me. I haven't been able to find a straight answer on the webinets, so here we go: Note: The ultimate goal is to have an OpenLDAP server set up as a proxy/cache for a "single" query to get all of the results in a master LDAP (if you're familiar with .Net's DirectoryServices dll, the app...

How to add a new field to an open ldap schema

What would be the easiest way to add a new field to a list of potential fields on an existing ldap schema? How would this affect existing records? The field would be added at the deepest level of the dn (each user account). ...

LDAP test environment

Hi folks, what's the best way to develop with ldap without having the connection to the productive ldap server. Can you recommend some software? Thanks ...