From: Glen Holcomb Date: 2008-10-24T22:26:49+09:00 Subject: Re: LDAP authentication in Windows 2003 AD ------=_Part_43551_26487971.1224854807403 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline On Fri, Oct 24, 2008 at 6:15 AM, F. Senault wrote: > Le 24 octobre =E0 13:53, Damjan Rems a =E9crit : > > > Brian Candler wrote: > >> Suggestion: first eliminate Ruby from the equation, by getting an > >> "ldapsearch" command line to bind successfully to your Windows LDAP > >> server. > > > > Could you post some simple quick query how to do it. Net is full of ver= y > > complicated examples. > > Well, it's not always simple. With an OpenLDAP setup : > > ldapsearch -x # simple bind > -W # ask for pwd > -P3 # LDAPv3 > -H'ldap://vodka/' # ldap url > -b'dc=3Dmims,dc=3Dbe' # root > -D'cn=3Dfred,ou=3Dusers,ou=3Dliege,dc=3Dmims,dc=3Dbe' # bind us= er > -s'subtree' # scope > cn=3Dfred # search string > cn # attributes > > You may have to tweak the authentification options, though. > > (I believe you can install OpenLDAP ldapsearch on windows boxen, > probably with cygwin.) > > Fred > -- > I remember when everybody posted to Usenet with their real, deliverable > e-mail address. Of all the sins committed by the spammers, destroying > the viability of the open Internet was the worst. > (Shmuel (Seymour J.) Metz in NANAE) > > I was having trouble authenticating against 2003 in the past. I fixed it b= y submitting the full email address for the account as the login. I believe it has to be in the form of username@full.dc.list --=20 "Hey brother Christian with your high and mighty errand, Your actions speak so loud, I can't hear a word you're saying." -Greg Graffin (Bad Religion) ------=_Part_43551_26487971.1224854807403--