Active Directory/LDAP :: Get User Groups From Open Ldap Using Vb.net
Apr 1, 2011
I'm trying to get the groups a user is member of from an Open Ldap using vb.net 3.5.
Although so far I have managed to connect to the ldap server and get the user's info like sn, givenname, description, mail, adspath,
I have absolutely no information about the user's groups.
My code is like this:
Dim oEntry as New DirectoryEntry
Dim oSearcher as New DirectorySearcher
oEntry = New DirectoryEntry("LDAP://myServer/ou=test, dc=example, dc=com", username, pwd, AuthenticationTypes.ServerBind)
oSearcher = New DirectorySearcher(oEntry, "(uid=" & uName & ")")
oResult = oSearcher.FindOne()
if not oResult is Nothing then
Dim ADUser as DirectoryEntry
ADUSer = oResult.GetDirectoryEntry()
end if
Well, ADUser has no info on user membership whatsoever.
Am I doing something wrong? Should I use System.DirectoryServices.Protocols as I saw someone mentioning instead
of System.DirectoryServices or is .Protocols just for Framework 2.0?
I've been searching for a solution to get a list of the AD Groups for at specific AD user. I'll need the current user logged in and would like to query by the username. The problem is that all the solutions I find on the web uses System.DirectoryServices - and I can't find the dll in my .Net 4.0 webproject (I only have System.DirectoryServices.AccountManagement) - so I can't use any of the examples that I've found. Is there a difference way to query the AD through 4.0 compared to 2.0? I could really use some examples, articles or just good advise to get moving - I'm kind of stuck at the moment.
I am having trouble using UserPrincipal.GetGroups in System.DirectoryServices.AccountManagement.
When I use the following code:
PrincipalSearchResult<Principal> groups = userPrincipal.GetGroups();
foreach (GroupPrincipal g in groups){ Console.WriteLine(g.DisplayName); }
I get the error "The value for the property AttributeScopeQuery cannot be set" in the foreach loop. I also get the same error when using groups.Count()I have read things that indicate this may be due to having some Windows 2000 domain controllers in the domain and so meaning it does not support ASQ.
What is the best way of doing this? The best I have come up with, since most of the rest of my code is running fine using System.DirectoryServices.AccountManagement is using the GetUnderlyingObject method of the UserPrincipal to get a DirectoryEntry and enumerating the values of the memberOf attribute. Using LINQ the code is quite compact:
var groups = from string groupPath in ((DirectoryEntry)userPrincipal.GetUnderlyingObject()).Properties["memberOf"] select new DirectoryEntry("LDAP://" + groupPath).Name.Replace("CN=", ""); foreach(groupName in groups){ Console.WriteLine(groupName); }
I created one application, and I need to authenticate local user. This user is the user who is login to his/her Personal Computer.. Main thing his that he/she does not in any DOMAIN... I want NON-DOMAIN authentication.
Is it possible to authenticate a user using userDN and password? If so, then tell me the syntax.So far i have tried to authenticate using username and password from my c# code using directoryentry which takes the parameters like domainname,username and password. But i need to authenticate using Userdn and password.
I want to store a X509 certificate to a user store in Novell viathe ".NET C# LDAP Library" that Novell has developed [URL]I can store different entries like givenName, commonName, mail, description etc. etc. Everythings works fine :)But I can't store a certificate correctly because the final encoding of the certificate will be failed.I've tried to send the entire certificate as HEX and Base64 in strings and bytes but the final encoding will still be failed.
[Code]....
So my question is:Anyone who knows how I should encode the certificate before sending it?
I'm working on a portal, and I need to check users conection on the ldap.
And if users are members of a special group then it works.
I've exactly used this link to make it works : http://msdn.microsoft.com/en-us/library/ff649227.aspx (almost work)
My point is : my ldap path seems good, no error anymore, when I log with my username and password.But when I querry it, it returns null, but I'm sure my user is in the group :
// Bind to the native AdsObject to force authentication. Object obj = entry.NativeObject; DirectorySearcher search = new DirectorySearcher(entry); search.Filter = "(SAMAccountName=" + username + ")"; search.PropertiesToLoad.Add("cn"); SearchResult result = search.FindOne(); if(null == result) { return false; }
I'm a normal user, i test with my account. I'm a member of the group that I'm looking for.
I have developed a web application which has LDAP authentication implemented.When I run the application though visual studio it works fine , LDAP works perfectly and allows if login name and password are correct.
If the same application is hosted on IIS server 6.0, LDAP queries fail to work. What could be the reason for the same ?
I am a newbie on a LDAP, now we want to re-deploy a web application that will validate user name and password with AD in a login.aspx
I had success to check the user and password in VS 2008, but when I publish to server it don't work, (they can login even wrong username and password) I had enable the anonymous access and intergrated windows authentication on IIS. we using authentication mode = windows in our web.config
using something like the following to check the AD account
I need to get list of users reporting to a particular manager from the Active directory. In the active directory there is manager property with contains the data in the following way.
I am following [URL] link to authenticate users against "actives directories" and i could successfully login using this method. how exactly can i get details of all the users displayed in my web site application when i am logged in as Administrator. I want to display user details when the user i.e.,Administrator clicks on link say "User Details"
I am new to LDAP so it is a bit confusing for me. I am converting a Legacy application from ASP to ASP.Net. That application is using LDAP so i have to find an alternative/equivalent of this.
My questions are:
1- LDAP is still used or obselete?
2- Equivalent/alternate of this?
3- How it is different from?
4- How can i setup a small test LDAP server if i have to test it locally ?
5- Any examples/source code/tutorials?
I have googled it and i know the basic concept of LDAP but i was unable to get the proper answer for all of the above.
I am trying to add given user to administrators group using LDAP , Have gone through different posts but not able to solve problem also want to add network service to administratos group
How do I create a top level OU in LDAP directory that has no partition created? In the example below, if strPath ="LDAP://localhost:389" , how do I create the top level OU=MyServer using Directory Services such that my base DN becomes "LDAP://localhost:389/OU=MyServer"?
Example code shown below will throw an exception at CommitChanges() method call. Is it illegal to call Children.Add on the directoryEntry instance that has no base DN? // Construct the binding string. strPath = "LDAP://localhost:389"; Console.WriteLine("Bind to: {0}", strPath); // Get AD LDS object. try { objADAM = new DirectoryEntry(strPath); objADAM.RefreshCache(); } catch (Exception e) { Console.WriteLine("Error: Bind failed."); Console.WriteLine(" {0}", e.Message); return; } // Specify Organizational Unit. strOU = "OU=MyServer"; strDescription = "AD LDS Test Organizational Unit"; Console.WriteLine("Create: {0}", strOU); // Create Organizational Unit. try { objOU = objADAM.Children.Add(strOU, "OrganizationalUnit"); objOU.Properties["description"].Add(strDescription); objOU.CommitChanges(); } catch (Exception e) { Console.WriteLine("Error: Create failed."); Console.WriteLine(" {0}", e.Message); return; }
I have a web app, right now we use ADFS for SSO. A client says they have other third-party teams use LDAP to achieve this. How do I begin? What will I need to know from them in order to connect? Will I need to ask the user anything when they log in to get the process started?
Using VB2005 and in my code behing I have following query:
[Code]....Value of my select string is: select sAMAccountName, displayName, title, userAccountControl from 'LDAP://DC=Vecelliogroup,DC=COM' where objectCategory = 'User' and title <> ' ' and (userAccountControl <> '66050' and userAccountControl <> '514') and sAMAccountName like '%vg%'
Getting error:System.Data.OleDb.OleDbException: 'ADSDSOObject' failed with no error message available, result code: DB_E_ERRORSINCOMMAND(0x80040E14).
Now, if I leave out the "title" and the "sAMAccountName" from my select it works fine. I am trying to get records where the "title" is not empty and name matches my prefix.
I would like to get a persons name from their username - a common query on forums i know, but i haven't managed to get mine working yet.
I currently have this code that I found here: http://www.vbforums.com/showthread.php?t=612655 (Thanks Chris128)
I have adapted it from VB into VB.net. The page renders but when i enter my username into the Username textBox and hit the submit button (Which calls IsUser) I just get "The specified domain either does not exist or could not be contacted." I have tried lots of other code but I always get this response...
i am trying to get some properties from ldap for the current user logged on. i have the samAccountname but i want to be able to pull the persons position as well but i am not sure how to pull this from LDAP. i have the foolowing code;
string user = Request.ServerVariables["AUTH_USER"].ToString(); string[] splituser = user.Split( '\' );
DirectorySearcher search = new DirectorySearcher( de );[code]............
but this gives me an arguments out of bound exception,
