You searched for the word(s): userid:14176

More Search Options

RSS Available

• Re: update preperty with encoded format

  Sorry, I thought I replied to this earlier. Looking at the syntax, there is nothing special about it. It is your standard unicode, case-ignore-string. When you put the Base64 string in this field - which should work without error- what are you seeing by the app? I would assume you would actually see just the Base64 string again. This seems to simple to ask, but have you just tried storing the string without encoding it first? The LDIF file encodes unicode text in Base64 for the LDIF app, not the

  Posted to Active Directory and LDAP (Forum) by dunnry on 9/28/2006

• Re: Active Directory Permissions

  I am assuming you are talking about doing this programmatically. If you are using .NET 2.0, this is much easier using the MACL and the ObjectSecurity property on the particular objects you want. If you are using .NET 1.1, it is more difficult. The easiest way I have found of doing this is to essentially first inspect the ACL before the change, then make the change in the UI, then inspect the object again and see the differences. We have some sample code listed at the top of this forum that shows

  Posted to Active Directory and LDAP (Forum) by dunnry on 9/27/2006
  Filed under: Security, ADSI, Directory Services, LDAP

• Re: ldap connection string

  The only times you really need to specify this is when you are doing things from either a non-domain security context or from another domain. If you are in the same domain and with a domain security context, then serverless binding (DN alone) is a good choice. What can occasionally bite you is unrecognized custom schema from one domain to another needs the netbios or FQDN domain name in the server position - what happens is that the trusted domain does not know where to go to download the abstract

  Posted to Active Directory and LDAP (Forum) by dunnry on 9/26/2006
  Filed under: ADSI, Directory Services, LDAP

• Re: How to query LDAP using LIKE statement

  bdesmond: Patrik- I would check to see if your firstName textbox is empty before I added that to the search filter. Yep. I agree. An easy thing to do is put your text boxes into a panel on the form. Then at query submit time, just loop through all the controls inside the panel. If you were clever enough to either name the control or an attribute on the control with the AD attribute name, you can easily perform a dynamic filter building without hardcoding the names of attributes in your code. This

  Posted to Active Directory and LDAP (Forum) by dunnry on 9/25/2006
  Filed under: ADSI, Directory Services, LDAP

• Re: LDAP path

  Are you asking what the LDAP path for a student is? I am not sure what you are asking. If 12345 is the name of a student user object, it would be "LDAP://CN=12345,OU=Student Users,OU=Lake Spring,OU=Elementary Schools,OU=Schools,DC=mydomain,DC=org".

  Posted to Active Directory and LDAP (Forum) by dunnry on 9/22/2006
  Filed under: ADSI, Directory Services, LDAP

• Re: Authenticating against LDAP

  I don't actually offhand. I have to imagine someone has thought of this however. It would be a good product :)

  Posted to Active Directory and LDAP (Forum) by dunnry on 9/22/2006

• Re: Return users in an OU and filter out certain accounts

  Interesting... If I have time, I might try to replicate what you are seeing. I don't believe it should be doing that (the group's location should be irrelevant). I wonder if something else is not at play there. At least it is working for you now... good luck.

  Posted to Active Directory and LDAP (Forum) by dunnry on 9/22/2006
  Filed under: ADSI, Directory Services, LDAP

• Re: How to check User Enabled or Locked with LDAP Server ?

  If you download the sample code (highly recommended and linked at top of this forum), you will see it is divided into Chapters. That is all I meant.

  Posted to Active Directory and LDAP (Forum) by dunnry on 9/22/2006

• Re: How to check User Enabled or Locked with LDAP Server ?

  (sAMAccountName=passedloginname) Essentially, yes. Your IIS server should have permission to read the AD if you run your app pool as domain service account - see FAQ. If you are trying to authenticate users, you should view Ch. 12 code from samples.

  Posted to Active Directory and LDAP (Forum) by dunnry on 9/21/2006

• Re: How to check User Enabled or Locked with LDAP Server ?

  No. If you simply use a service account you will know all three. First, you search, then if you find you check lockout/disabled.

  Posted to Active Directory and LDAP (Forum) by dunnry on 9/21/2006