active-directory

问题 Everything I've googled just says you can add them as a string array, but doesn't say what the available options are. What are all the different properties that are available from Directory Services? 回答1: You can put any of the valid LDAP attributes into PropertiesToLoad - see a list of all Active Directory attributes here - what you need is the Ldap-Display-Name for each attribute you're interested in. Also: Richard Mueller has a site with lots of good info on AD and LDAP - including Excel

问题 I would like to use the ValidateUser method of the ActiveDirectoryMembershipProvider to validate that a user exists in AD. I am taking in the username and password in a form. I would like to then instantiate the provider and call ValidateUser <add name="AspNetActiveDirectoryMembershipProvider" type="System.Web.Security.ActiveDirectoryMembershipProvider" connectionStringName="ADConnection" attributeMapUsername = "userPrincipalName" /> I just replace real values with test for the post.. <add

问题 I'm trying to search active directory by the username 'admin'. I know for a fact that there is a user with that username in the directory, but the search keeps coming back with nothing. var attributeName = "userPrincipalName"; var searchString = "admin" var ent = new DirectoryEntry("LDAP://"dc=corp,dc=contoso,dc=com") var mySearcher = new DirectorySearcher(ent); mySearcher.Filter = string.Format("(&(objectClass=user)({0}={1}))", attributeName, searchString); var userResult = mySearcher

问题 I am parsing XML, with simplexml_load_string() , and using the data within it to update Active Directory (AD) objects, via LDAP. Example XML (simplified): <?xml version="1.0" encoding="UTF-8"?> <users> <user>Bìlbö Bággįnš</user> <user>Gãńdåłf Thê Gręât</user> <user>Śām Wīšë</user> </users> I firstly run an ldap_search() to find a single user and then proceed to change their attributes. Pumping the above values straight into AD, using LDAP, will result in some pretty mangled characters showing

问题 So, when running: sudo apt-get install krb5-user You are asked to enter the AD/LDAP domain. The problem is that I want this to be able to be run as a startup script for my machines. Is there any way to either pass the domain in as a parameter or disable the interaction and set up krb5-user after? Thanks 回答1: For an unattended installation try setting DEBIAN_FRONTEND variable to noninteractive with: export DEBIAN_FRONTEND=noninteractive And pass the -y flag to apt-get: apt-get install -y krb5

问题 We're experiencing some really strange problems with Integrated Windows Authentication with IIS and I'm not sure if I can see a pattern or not. We have a DNS-Cname record called Fred. We have an IIS website with Fred set as the host header. When I connect to this site I get prompted with a credential challenge. I would expect my credentials to have been passed through. If I enter my credentials I am granted access. I then create a local host entry called Betty and point the host file to the

问题 I have an MVC application that needs to login and verify a user against Active Directory. I am using the PrincipalContext.ValidateCredentials method but always get a authentication of false . Connecting to the Server is fine. The problem seems to occur in the ValidateCredentials . Here is my code: public static bool IsAuthenticated(string domain, string username, string pwd) { bool IsAuthenticated = false; try { PrincipalContext insPrincipalContext = new PrincipalContext(ContextType.Domain,

问题 Is it possible to authorise/deny users of an MVC3 application using AD? My app is secured using Windows authentication at the moment, but that means adding users to groups on the Win2007 server. I'd like to change that so that users were allowed/denied access to the appliction/and controller actions/view based upon their AD roles instead, so they either auto-logged in (like Windows auth) or they get redirected to a "denied" page. Any help very gratefully accepted...everything I find seems to

问题 This question already has answers here : Associate Ldap user to a group with Java (4 answers) Closed 2 years ago . I am trying to add an user into Active Directory. Having in mind: Using SSL Certificate ok Password works fine With out group association, the user is correctly created. When I try to associate the user to a group I get the following error: javax.naming.OperationNotSupportedException: [LDAP: error code 53 - 0000209A: SvcErr: DSID-031A1021, problem 5003 (WILL_NOT_PERFORM), data 0

问题 I'm working on building an android application which requires different levels of authentication, and I would like to do so using Active Directory. From what I've read, using Kerberos is the way Microsoft suggests. How do I do this for Android? I see the javax.security.auth doc, but it doesn't tell me too much. I also saw a note somewhere that Kerberos does not contain user groups - is this true? In that case, would I have to somehow combine LDAP as well? EDIT The main goal here is achieving