I created one application, and I need to authenticate local user. This user is the user who is login to his/her Personal Computer.. Main thing his that he/she does not in any DOMAIN... I want NON-DOMAIN authentication.
View 4 RepliesLDAP - directory entry issue with out user and password using impersonate and windows authentication
View 1 RepliesIs it possible to authenticate a user using userDN and password? If so, then tell me the syntax.So far i have tried to authenticate using username and password from my c# code using directoryentry which takes the parameters like domainname,username and password. But i need to authenticate using Userdn and password.
View 1 RepliesI am a newbie on a LDAP, now we want to re-deploy a web application that will validate user name and password with AD in a login.aspx
I had success to check the user and password in VS 2008, but when I publish to server it don't work, (they can login even wrong username and password) I had enable the anonymous access and intergrated windows authentication on IIS. we using authentication mode = windows in our web.config
using something like the following to check the AD account
System.DirectoryServices.DirectoryEntry entry = null;
bool isOpened = false;
bool isSuccess = false;
try
{
string dom = System.Configuration.ConfigurationManager.AppSettings["domain"];
entry =
new System.DirectoryServices.DirectoryEntry("WinNT://" + dom, tb_username.Text.Trim(), tb_password.Text.Trim());
isOpened = true;
Object obj = entry.NativeObject;
but still no luck on IIS server. Would you mind to give me a hand to solve this issue, I had google for a week and still can't solve :(
How to authenticate an user against a particular OU in Active Directory. If the AD holds 50 OUs I don't want to look into all 50 OUs , instead it should look into a particular OU( for eg: OU=dotnet users) to authenticate the user.
View 1 Repliesmy website need a function to allow domain users jump over the login page and directly access the contents of the site. but for other users which there are not in the domain or they are not the member of the domain then they have to login the website through the login page.
this is different with ask user login to the domain through a login page. the website must distinguish is the user a domain user and the user name in the domain or not when the user first time access website.
I want to store a X509 certificate to a user store in Novell viathe ".NET C# LDAP Library" that Novell has developed [URL]I can store different entries like givenName, commonName, mail, description etc. etc. Everythings works fine :)But I can't store a certificate correctly because the final encoding of the certificate will be failed.I've tried to send the entire certificate as HEX and Base64 in strings and bytes but the final encoding will still be failed.
[Code]....
So my question is:Anyone who knows how I should encode the certificate before sending it?
I'm trying to get the groups a user is member of from an Open Ldap using vb.net 3.5.
Although so far I have managed to connect to the ldap server and get the user's info like sn, givenname, description, mail, adspath,
I have absolutely no information about the user's groups.
My code is like this:
Dim oEntry as New DirectoryEntry
Dim oSearcher as New DirectorySearcher
oEntry = New DirectoryEntry("LDAP://myServer/ou=test, dc=example, dc=com", username, pwd, AuthenticationTypes.ServerBind)
oSearcher = New DirectorySearcher(oEntry, "(uid=" & uName & ")")
oResult = oSearcher.FindOne()
if not oResult is Nothing then
Dim ADUser as DirectoryEntry
ADUSer = oResult.GetDirectoryEntry()
end if
Well, ADUser has no info on user membership whatsoever.
Am I doing something wrong? Should I use System.DirectoryServices.Protocols as I saw someone mentioning instead
of System.DirectoryServices or is .Protocols just for Framework 2.0?
I have used the following article to create N local users:
[url]http://www.codeproject.com/KB/system/everythingInAD.aspx?msg=3448333#xx3448333xx[/url]
How do I set some batch file ,that I have wrote ,to be executed right when each user logs-in?
(Include it in the statup functions to be executed).
I tried to use Authentication form with LDAP but when I run my web application I received error: Invalid dn syntax specified. This is my code:
public bool IsAuthenticated(string domain, string username, string password)
{
// string domainAndUsername = domain + @"" + username;
string domainAndUsername = "http://localhost:389
jsmith";
// DirectoryEntry entry = new DirectoryEntry(_path, domainAndUsername, password);// _path = LDAP://localhost:389/dc=example,dc=com
DirectoryEntry entry = new DirectoryEntry("LDAP://localhost:389",domainAndUsername,"rJsmitH");
try
{
Object obj = entry.NativeObject;
DirectorySearcher search = new DirectorySearcher(entry);
search.Filter = "(SAMAccountName=" + username + ")";
search.PropertiesToLoad.Add("cn");
SearchResult result = search.FindOne();
if(null == result)
{
return false;
}
_path = result.Path;
_filterAttribute = (String)result.Properties["cn"][0];
}
catch (System.Exception ex)
{
throw new Exception("Error authenticating user. " + ex.Message);
}
return true;
}
I got exception at line Object obj = entry.NativeObject; and error message is: Invalid dn syntax specified. how can i take a right dn syntax? I tried some domain name such as: LDAP://localhost:389, [URL], ... but I still get this error
I'd like to Authenticate Users without having to use a Membership Provider.
What's the easiest way to do this?
I'm looking at returning a DirectoryEntry.
How to provide authentication based on a Active directory security group for a ASP.net webpage. I am using c# laungauge and .Net framework2.
View 3 RepliesI'm working on a portal, and I need to check users conection on the ldap.
And if users are members of a special group then it works.
I've exactly used this link to make it works : http://msdn.microsoft.com/en-us/library/ff649227.aspx (almost work)
My point is : my ldap path seems good, no error anymore, when I log with my username and password.But when I querry it, it returns null, but I'm sure my user is in the group :
// Bind to the native AdsObject to force authentication. Object obj = entry.NativeObject; DirectorySearcher search = new DirectorySearcher(entry); search.Filter = "(SAMAccountName=" + username + ")"; search.PropertiesToLoad.Add("cn"); SearchResult result = search.FindOne(); if(null == result) { return false; }
I'm a normal user, i test with my account. I'm a member of the group that I'm looking for.
I need to get the list of domain usrs. The users not necessorily be on the domain where I am logged in. (e.g. I am logged in on domain "Dom111" but I need the list of users from the domain "Dom222")
I want this information on the basis of following -
1) Name of the Domain
2) A valid User name (of-course with Admin rights for the Target domain) and password
I am trying to use the following code -
DirectoryContext dc = new DirectoryContext(DirectoryContextType.Domain, "Dom222", "Administrator", "password");
Domain domain = Domain.GetDomain(dc);
DirectoryEntry de = domain.GetDirectoryEntry();
FillList(de);
Here is the FillList function
private void FillList(DirectoryEntry de)
{
DirectorySearcher deSearch = new DirectorySearcher(de);
deSearch.Filter = "(&(objectClass=user)(objectCategory=person))";
SearchResultCollection results = deSearch.FindAll();
//checkedListBox1.Items.Clear();
foreach (SearchResult srUser in results)
{
DirectoryEntry deUser = srUser.GetDirectoryEntry();
checkedListBox1.Items.Add(deUser.Properties["sAMAccountName"].Value.ToString());
}
checkedListBox1.Sorted = true;
}
This works fine for the domain where I logged in (i.e. Dom111) but for the other domain (Dom222), while executing the statement - Domain domain = Domain.GetDomain(dc); I am getting the error saying "The specified domain does not exist or cannot be contacted."
Now, For creating the dc if I use following - DirectoryContext dcTemp = new DirectoryContext(DirectoryContextType.DirectoryServer, "Server_dom222", "administrator", "password");
Then everything works fine. But as you can see I need to pass the "Domain Controller (Server) Name"which I want to avoid.
I have developed a web application which has LDAP authentication implemented.When I run the application though visual studio it works fine , LDAP works perfectly and allows if login name and password are correct.
If the same application is hosted on IIS server 6.0, LDAP queries fail to work. What could be the reason for the same ?
I am using the following LDAP string:
(&(objectCategory=person)(objectClass=user)(!userAccountControl:1.2.840.113556.1.4.803:=2)(!description=Generic*)(!cn=*-))
is it possible to modify this string to also include security groups that are located within a particular OU?
I need to get list of users reporting to a particular manager from the Active directory. In the active directory there is manager property with contains the data in the following way.
CN=Gegore Lid,OU=IT,OU=Sales,OU=XXXXX,OU=XXXX,DC=YYYY,DC=intra
[Code].....
I am following [URL] link to authenticate users against "actives directories" and i could successfully login using this method. how exactly can i get details of all the users displayed in my web site application when i am logged in as Administrator. I want to display user details when the user i.e.,Administrator clicks on link say "User Details"
View 3 Repliestell me valid link for downloding ldap c# libraries ...?
I am trying to download it but it needs long time to respond.
I am new to LDAP so it is a bit confusing for me. I am converting a Legacy application from ASP to ASP.Net. That application is using LDAP so i have to find an alternative/equivalent of this.
My questions are:
1- LDAP is still used or obselete?
2- Equivalent/alternate of this?
3- How it is different from?
4- How can i setup a small test LDAP server if i have to test it locally ?
5- Any examples/source code/tutorials?
I have googled it and i know the basic concept of LDAP but i was unable to get the proper answer for all of the above.
I am trying to add given user to administrators group using LDAP , Have gone through different posts but not able to solve problem also want to add network service to administratos group
View 3 RepliesI need an idea please, i have the task of disabling the Domain Administrator account, but we have a very messed up AC and im practilly new employee here. The administrator account has been used on several services, servers, print servers, etc. Across the network and sites. All our intersite communication is perfect.So what i want is a way to know in which devices this account is configured.Is there a way or tool, where i can input the account, and the output should be a list of servers, ip adresses or devices where the account is configured?
View 1 RepliesHow do I create a top level OU in LDAP directory that has no partition created? In the example below, if strPath ="LDAP://localhost:389" , how do I create the top level OU=MyServer using Directory Services such that my base DN becomes "LDAP://localhost:389/OU=MyServer"?
Example code shown below will throw an exception at CommitChanges() method call. Is it illegal to call Children.Add on the directoryEntry instance that has no base DN? // Construct the binding string. strPath = "LDAP://localhost:389"; Console.WriteLine("Bind to: {0}", strPath); // Get AD LDS object. try { objADAM = new DirectoryEntry(strPath); objADAM.RefreshCache(); } catch (Exception e) { Console.WriteLine("Error: Bind failed."); Console.WriteLine(" {0}", e.Message); return; } // Specify Organizational Unit.
strOU = "OU=MyServer"; strDescription = "AD LDS Test Organizational Unit"; Console.WriteLine("Create: {0}", strOU); // Create Organizational Unit. try { objOU = objADAM.Children.Add(strOU, "OrganizationalUnit"); objOU.Properties["description"].Add(strDescription); objOU.CommitChanges(); } catch (Exception e) { Console.WriteLine("Error: Create failed."); Console.WriteLine(" {0}", e.Message); return; }
I have a web app, right now we use ADFS for SSO. A client says they have other third-party teams use LDAP to achieve this. How do I begin? What will I need to know from them in order to connect? Will I need to ask the user anything when they log in to get the process started?
View 1 RepliesUsing VB2005 and in my code behing I have following query:
[Code]....Value of my select string is: select sAMAccountName, displayName, title, userAccountControl from 'LDAP://DC=Vecelliogroup,DC=COM' where objectCategory = 'User' and title <> ' ' and (userAccountControl <> '66050' and userAccountControl <> '514') and sAMAccountName
like '%vg%'
Getting error:System.Data.OleDb.OleDbException: 'ADSDSOObject' failed with no error message available, result code: DB_E_ERRORSINCOMMAND(0x80040E14).
Now, if I leave out the "title" and the "sAMAccountName" from my select it works fine. I am trying to get records where the "title" is not empty and name matches my prefix.