From: Aldric Giacomoni <aldric@...>
Date: 2008-11-15T08:01:58+09:00
Subject: Re: Active Directory access - not just users, but computers too

Hi Matt,
I pretty much followed the sample ruby-ldap documentation - here's how
it came out:
require 'rubygems'
require 'net/ldap'
ldap = Net::LDAP.new :host => "servername",
	:port => 389,
	:auth => {
		:method => :simple,
		:username => "user",
		:password => "password"
}

The code worked without 'rubygems' for me but I figured I could afford
the RAM in exchange for peace of mind. I also had some issues connecting
properly at first, as the :username string is a lot more complex in the
ruby-ldap documentation.

HTH,

--Aldric

Matt Mencel wrote:
> Aldric,
> 
> Any chance you would be willing to share the code you used to access AD via LDAP?  I've tried the ActiveLdap and ActiveDirectory gems and so far have not had any success.
> 
> Thanks,
> Matt
> 
> 
> ----- Original Message -----
> From: "Aldric Giacomoni" <aldric@trevoke.net>
> To: "ruby-talk ML" <ruby-talk@ruby-lang.org>
> Sent: Friday, November 14, 2008 9:37:15 AM GMT -06:00 US/Canada Central
> Subject: Re: Active Directory access - not just users, but computers too
> 
> Thank you to everyone - it's working like a charm!
> 
> Clifford Heath wrote:
>> brabuhr@gmail.com wrote:
>>> (first hit on google for "ldap active directory query examples")
>>> Filter for computers:
>>>     (objectCategory=computer)
>> You can do this query using either objectClass or objectCategory.
>> objectClass is indexed but objectCategory is not indexed. If you
>> query a large domain using the unindexed attribute, the query
>> interrogates *every* object in the domain. Traps for the unwary ;-)
>>
>> If you want just the users, no computers, you need:
>> (&(objectCategory=person)(objectClass=user)(!objectClass=computer))
>>
>> The rest of brabuhr's advice is good.
>>
>> Clifford Heath.
> 
>