From: "F. Senault" <fred@...>
Date: 2008-10-24T21:15:06+09:00
Subject: Re: LDAP authentication in Windows 2003 AD

Le 24 octobre � 13:53, Damjan Rems a �crit :

> Brian Candler wrote:
>> Suggestion: first eliminate Ruby from the equation, by getting an 
>> "ldapsearch" command line to bind successfully to your Windows LDAP 
>> server.
> 
> Could you post some simple quick query how to do it. Net is full of very 
> complicated examples.

Well, it's not always simple.  With an OpenLDAP setup :

ldapsearch -x                                          # simple bind 
           -W                                          # ask for pwd
           -P3                                         # LDAPv3 
           -H'ldap://vodka/'                           # ldap url
           -b'dc=mims,dc=be'                           # root
           -D'cn=fred,ou=users,ou=liege,dc=mims,dc=be' # bind user
           -s'subtree'                                 # scope
           cn=fred                                     # search string
           cn                                          # attributes

You may have to tweak the authentification options, though.

(I believe you can install OpenLDAP ldapsearch on windows boxen,
probably with cygwin.)

Fred
-- 
I remember when everybody posted to Usenet with their real, deliverable
e-mail address. Of all the sins committed by the spammers, destroying
the viability of the open Internet was the worst.
                                     (Shmuel (Seymour J.) Metz in NANAE)