English 中文(简体)
LDAP Active Directory path
原标题:

I am trying to add a user to Active Directory through an MPS Web Service. I ve been trying a long time to find the correct LDAP-url to use to tell it to add the new user to the Users group. I ve tried things like:

LDAP://XXXX.YYY/OU=Users,DC=XXXX,DC=YYY
LDAP://XXXX.YYY/CN=Users,DC=XXXX,DC=YYY
LDAP://XXXX.YYY/DN=Users,DC=XXXX,DC=YYY

It seems the "farthest" I ve gotten is an error that says I have given it an invalid Customer.

I really don t have a lot of experience with LDAP (pretty much none at all), so even just a good LDAP and Active Directory tutorial would be extremely useful (even that is eluding me right now). Thanks!

I ve since lookup up the actual distinguished name in ADSI Edit, which was LDAP://XXXX.YYY/CN=Users,DC=XXXX,DC=YYY, but still have no luck.

最佳回答
问题回答

You have error in your LDAP string. Let s have examle: user with account name User1 in organization unit Office1 where contoso.com is domain.

Object:

contoso.com/Users/Office1/User1

LDAP Path is:

LDAP://CN=User1,OU=Office1,OU=Users,DC=contoso,DC=com

Note that there is no slash in path itself

  • CN = Common Name
  • OU = Organizational Unit
  • DC = Domain Component

if your domain is xxxx.yyyy.zzzz and you are search for all users; your path is:
LDAP://CN=Users,DC=xxxx,DC=yyyy,DC=zzzz
means every dot in domain replace with dc=

More directly, the default Users container (not a group) in a default Active Directory install would be CN=Users,dc=domain,dc=com

You are not clear if you are having trouble adding a user to a group, or if you are having trouble creating a user in a specific location.





相关问题
Using JavaScript to get an LDAP multi-valued string attribute

I am trying to retrieve an object attribute in Active Directory that appears to be a multi-valued string (See canonicalName). After performing a search: var conn; conn.Open = Provider=ADsDSOObject; ...

Test "User Must Change Password" field in .Net 3.5

I m trying to perform some basic AD User managment tasks in C# using .Net 3.5 I ve got a System.DirectoryServices.AccountManagement.UserPrincipal object that contains the user details. I can call ...

SSIS Script Task connecting to AD

I have written a SSIS 2005 script task that connects to Active Directory and reads user accountnames to store in database. I was able to successfully test this on my local system by executing dtexec....

Update Full Name in Active Directory

I ve been thrust into the deep end with Active Directory (I m a web developer, go fig) I have a user that I ve changed first/last name on but the Full Name hasn t changed which is causing issues with ...

Authenticate against Active Directory/ISA from php [closed]

I have a complicated problem, exacerbated by the fact I don t really know where to start! Over the last few years, I ve developed a number of php web-based systems. When I built them, our network was ...

热门标签