From: Glen Holcomb <damnbigman@...>
Date: 2007-04-20T00:11:48+09:00
Subject: Re: ruby scripting on microsoft active directory plus exchange

------=_Part_40521_11882671.1176995500711
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

On 4/19/07, Francis Cianfrocca <garbagecat10@gmail.com> wrote:
>
> On 4/19/07, Glen Holcomb <damnbigman@gmail.com> wrote:
> >
> > I would recommend looking at Net::LDAP: gem install ruby-net-ldap
>
>
>
> Glen, while I can do nothing other than warmly second your recommendation
> :-), I know for sure that Botp already knows about Net::LDAP. In fact he's
> already given me feature requests and suggestions.
>
> Since A/D is such a special beast compared to other LDAP servers, and
> since
> many people use it for authorization as well as authentication, I'd like
> to
> know the following:
>
> Can we get a small but specific list of commonly-used operations against
> A/D
> that can be implemented in Net::LDAP and supplied with that library out of
> the box? Botp, your request is quite close, but I don't exactly understand
> the second half of it (querying memberships associated with a particular
> mail address?).
>

You can do some bizarre things with Exchange.  For example, if I remember
correctly, you can create mailbox entities that aren't necessarily tied to a
particular user account.  These can then be treated like any other AD
object/container/whatever Microsoft wants to call them.  Hence group
membership would allow multiple user accounts access to the mailbox.  I
personally don't like it at all although I don't like brussel sprouts either
but occasionally find I have to eat them.  Also my only experience with
Exchange it's self was recovering a mailbox that had been synced with empty
data by the head admin.  That was no fun and has possibly tainted my views.

I'm not sure exactly how these appear in the AD structure though.  I never
had to go that low to fix the problem.

Francis, is there a place where you would like to address/discuss/collect
the commonly-used operations you mentioned?  I don't know that I would have
much to add as I haven't done anything too involved with AD but I would be
happy to provide my input.

-- 
"Hey brother christian with your high and mighty errand, Your actions speak
so loud, I can't hear a word you're saying."

-Greg Graffin (Bad Religion)

------=_Part_40521_11882671.1176995500711--