From: Francis Cianfrocca <garbagecat10@...>
Date: 2007-04-20T01:39:41+09:00
Subject: Re: ruby scripting on microsoft active directory plus exchange

------=_Part_121510_3582215.1177000779416
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

On 4/19/07, Glen Holcomb <damnbigman@gmail.com> wrote:
>
>  You can do some bizarre things with Exchange.  For example, if I remember
> correctly, you can create mailbox entities that aren't necessarily tied to
> a
> particular user account.  These can then be treated like any other AD
> object/container/whatever Microsoft wants to call them.  Hence group
> membership would allow multiple user accounts access to the mailbox.  I
> personally don't like it at all although I don't like brussel sprouts
> either
> but occasionally find I have to eat them.  Also my only experience with
> Exchange it's self was recovering a mailbox that had been synced with
> empty
> data by the head admin.  That was no fun and has possibly tainted my
> views.
>
> I'm not sure exactly how these appear in the AD structure though.  I never
> had to go that low to fix the problem.
>
> Francis, is there a place where you would like to address/discuss/collect
> the commonly-used operations you mentioned?  I don't know that I would
> have
> much to add as I haven't done anything too involved with AD but I would be
> happy to provide my input.



Let's attach it to this thread for the time being. That will give others the
opportunity to show interest as well. There is no Net::LDAP wiki as far as I
know but that would be easy enough to fix.

There's another thing I and some others have been working on for some years
now: a network-service that would provide fine-grained authorization to any
application (including Rails of course) through the XACML protocol. The goal
would be to permit access-control policies to be defined *in isolation* from
specific applications, and managed centrally. We'd like to release this as
an open-source project, probably as part of the Net::XACML project on
Ruyforge. Anyone interested?

------=_Part_121510_3582215.1177000779416--