I need to look for an example of a web application, preferably ASP.NET but any otherweb language will do, that lets Mac and Windows users change their AD password.
Any technique, application, or source code will be great.
our Macs are not connected to AD and we also have Windows users.
LDAP - directory entry issue with out user and password using impersonate and windows authentication
View 1 RepliesIs there anyway to change a user password as an administrator in active directory using c# code.
View 1 RepliesI have an asp.net website that requires users to login using their Active Directory credentials. All users of the website have AD accounts. Some of the users are at remote locations and share a common computer login (I know this is not recommended but it is what it is, I have no say in that). Every so often a user will log into my website and click the Remember Passwod box which causes the next person that comes along to not be prompted to log in. All users are on IE 7. I have tried having them go into tools and deleting the cookies, saved passwords, etc but when they go to my website they are still not being prompted to log in. I have recently migrated to IIS 7 and I understand there is a way to have the user enter the site through a custom form but I have not gotten that far yet. How can I make sure the users password is removed from IE?
View 3 RepliesI have an application that does LDAP authentication. The authentication is done on the code behind page of my Login.aspx page. Once the user passes LDAP authentication, a cookie is set and I redirect:
FormsAuthentication.RedirectFromLoginPage(UserName.Text, False)
I would like to setup membership in my application and keep track of some user information. But due to company security requirements, I cannot store user passwords on my application. That must stay on the LDAP server only.Is there a way to store users but disable password storage on the aspnet_membership table?
I want to learn how to add/delete/update account (including adding mail boxes for new users). Can someone point to a good book where I can begin from. I want to start with some real basics and build from there.
View 1 Replieshave a probleme with my search filter, i want to list the users of an organizational unit result.filter =(& (objectClass= user)(ou=dep1)); ====> it didn't work for me
View 1 RepliesI need to list a group of users, their group name is (IRS Group) to a list group. how to do this. I'm very new to asp.net and dont have much knowlegde about acctive directory.
View 1 RepliesIs it possible to authenticate a user using userDN and password? If so, then tell me the syntax.So far i have tried to authenticate using username and password from my c# code using directoryentry which takes the parameters like domainname,username and password. But i need to authenticate using Userdn and password.
View 1 RepliesI'm a complete beginner with Active Directory, never having done anything with it. So here's probably a basic question.
Can I run a simple query from within an application to get all enabled active directory users?
I need to get list of users reporting to a particular manager from the Active directory. In the active directory there is manager property with contains the data in the following way.
CN=Gegore Lid,OU=IT,OU=Sales,OU=XXXXX,OU=XXXX,DC=YYYY,DC=intra
[Code].....
I am following [URL] link to authenticate users against "actives directories" and i could successfully login using this method. how exactly can i get details of all the users displayed in my web site application when i am logged in as Administrator. I want to display user details when the user i.e.,Administrator clicks on link say "User Details"
View 3 RepliesI have a web page that users go to in order to reset their password in two separate domains. The basic code that does this is:
UserEntry.Invoke("ChangePassword", new object[] { txtCurrentPassword.Text, txtNewPassword.Text });
One problem I have is that I'd like to be able to display a message if a user tries to change a password to something not allowed because of password history rules. The exception raised(8007202F) when I try to change to something in the password history is the same one I've seen for other password errors(for example complexity issues). Is there an easy way to tell if there is a problem with changing a password due to password history requirements?
I am trying to retrieve all the users from active directory into a sorted list, but for some reason it does not return all the users like myself for instance. It's on a client's ad and there is probably about 1500+ users in AD.
My code is as follows
[Code]....
What am I doing wrong?
This is the first time I am working with AD...
I m writing a web page to display user name and his contact number.
I m giving user a choice to enter user name once he enter the name i should be able to search in active directory and return all user starting with (inputed name).
DirectorySearcher deSearch = new DirectorySearcher(de);
//set the search filter
deSearch.SearchRoot = de;[CODE]....
Above code needs exact login name like adamjo which is not the purpose.i should be able to display all possible possibilities for example if user enters adam i should give him choice to select whether he want to see adam josef or adam john e.t.c.Is there any property to find first name from active directory?
I have a domain controller on windows 2008 server R2, The users are able to modify their password through a web page. Once it's done, the users are still able tu use the old password as well as the new one at the next logon. The old password is still active only one time after the change, after that it's no more possible to use it...
I invoke the "ChangePassword" function.
Is it a parameter to configure on the server ? Is it cached somewhere on the computer of the users ?
Here is my code:
[Code]....
How to save a user password when creating a user in AD
View 2 RepliesMy requirement is of asmall asp.net application that will reset the AD user password based on the user sAMAccountName. Here is what I am writing:
[Code]....
I am trying to do something that i am sure has been done before. I have a asp.net pagethat changes a password , and it works fine if I use credentials of a user with rights to a OU that holds the users container. However i would like to have the users credentials
userEntry = new DirectoryEntry(adspath,userid,this.oldPasswordtb.Text.ToString(),AuthenticationTypes.Secure);
be used when executing
userEntry.Invoke("SetPassword", new Object[] {passwd});
currently I get System.Reflection.TargetInvocationException: Exception has been thrown by the target of an invocation. ---> System.UnauthorizedAccessException: Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED)) --- End of inner exception stack trace --- at System.DirectoryServices.DirectoryEntry.Invoke(String methodName, Object[] args) at ASP.changepassword_aspx.__Render__control1(HtmlTextWriter __w, Control parameterContainer) in c:usrhtmlexternalChangePasswordchangepassword.aspx:line 128any ideas why that wouldn't work users I assume have right to modify that attribute of their CN right?see code below
<%
string userid = System.Web.HttpContext.Current.User.Identity.Name.ToString();
userid = userid.ToLower();
[code]...
i am using a variant of this [URL]
how do i obtain the correct maxPwdAge = TimeSpan.FromTicks((long)sr.Properties["maxPwdAge"][0]);
when GPO are aplied and i do not know where in the AD tree the user policy is applied.?
I need to get the list of domain usrs. The users not necessorily be on the domain where I am logged in. (e.g. I am logged in on domain "Dom111" but I need the list of users from the domain "Dom222")
I want this information on the basis of following -
1) Name of the Domain
2) A valid User name (of-course with Admin rights for the Target domain) and password
I am trying to use the following code -
DirectoryContext dc = new DirectoryContext(DirectoryContextType.Domain, "Dom222", "Administrator", "password");
Domain domain = Domain.GetDomain(dc);
DirectoryEntry de = domain.GetDirectoryEntry();
FillList(de);
Here is the FillList function
private void FillList(DirectoryEntry de)
{
DirectorySearcher deSearch = new DirectorySearcher(de);
deSearch.Filter = "(&(objectClass=user)(objectCategory=person))";
SearchResultCollection results = deSearch.FindAll();
//checkedListBox1.Items.Clear();
foreach (SearchResult srUser in results)
{
DirectoryEntry deUser = srUser.GetDirectoryEntry();
checkedListBox1.Items.Add(deUser.Properties["sAMAccountName"].Value.ToString());
}
checkedListBox1.Sorted = true;
}
This works fine for the domain where I logged in (i.e. Dom111) but for the other domain (Dom222), while executing the statement - Domain domain = Domain.GetDomain(dc); I am getting the error saying "The specified domain does not exist or cannot be contacted."
Now, For creating the dc if I use following - DirectoryContext dcTemp = new DirectoryContext(DirectoryContextType.DirectoryServer, "Server_dom222", "administrator", "password");
Then everything works fine. But as you can see I need to pass the "Domain Controller (Server) Name"which I want to avoid.
I'm new to directoryServices and im trying to capture all users in the active directory and their organizational units but i'm having abit of trouble here, i've been reading through the forums and searching online but can't seem to find information that is viable to me.
Here is brief overview of what im trying to do. Im trying to create a datatable where i can insert all the usernames and their ou by capturing the values from the AD but i keep getting alot of duplicated usernames BUT in different organizationalUnits. I've checked the AD, and they do not belong so the following are my codes, but i can't seem to figure out what is wrong.
private static DataTable retrieveUsers(string domain, DataTable dt)
{
DirectoryEntry dEntry = new DirectoryEntry("LDAP://" + domain);
DirectorySearcher dSearch = new DirectorySearcher(dEntry);
SearchResultCollection sResultcol;
[Code]....
i have a username and password in my portal... i want to connect to the active directory to verify the username and password of the user? using c# .net
View 1 RepliesI'd like to Authenticate Users without having to use a Membership Provider.
What's the easiest way to do this?
I'm looking at returning a DirectoryEntry.
I'm creating a list of departments as linkbuttons, when clicked these linkbuttons bring up a list of people in that department in a gridview and thanks to some other peoples help this is working great. The next step for me is to get the phone number to display in the column next to their name, it sounds like an easy thing to do as I've pulled phone numbers accross from AD before but just can't get it to work now!The end result
[code]...